Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
File: hc-RCpREnqI6rGxAmgWEm-2l4ko.mft (raw, json)
Hash identifier: plegem2U9HSHaIwRwSN8rZl0WaTWfIRr8omR7c3lB4o=
Subject key identifier: 38:45:5E:02:7C:02:7D:77:E3:F5:72:54:0A:B4:C0:EE:2C:B1:8F:17
Authority key identifier: 85:CF:91:0A:94:44:9E:A2:3A:AC:6C:40:9A:05:84:9B:ED:A5:E2:4A
Certificate issuer: /CN=85cf910a94449ea23aac6c409a05849beda5e24a
Certificate serial: 019D28F273771F99317B0878CA65401B7BE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 07:01:11 +0000
Manifest this update: Thu 26 Mar 2026 07:01:11 +0000
Manifest next update: Fri 27 Mar 2026 07:01:11 +0000
Files and hashes: 1: hc-RCpREnqI6rGxAmgWEm-2l4ko.crl (hash: l4EvkSNmDe3XaH+ZMSn80hb4XxxXuNtRljnu+tawObE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:73:77:1f:99:31:7b:08:78:ca:65:40:1b:7b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85cf910a94449ea23aac6c409a05849beda5e24a
Validity
Not Before: Mar 26 07:01:11 2026 GMT
Not After : Mar 27 07:01:11 2026 GMT
Subject: CN=38455e027c027d77e3f572540ab4c0ee2cb18f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:20:77:b8:db:11:ac:15:eb:ba:1e:3c:27:39:
d1:7a:18:7b:e6:91:65:e1:78:61:00:88:37:d5:55:
00:3d:6a:3a:55:72:e4:39:9b:2d:47:73:48:8d:b3:
0a:25:b7:1e:c5:b0:ba:86:6e:ba:91:39:41:e2:bb:
f5:90:23:1f:10:c8:ca:35:d3:09:8a:bb:f7:a7:bc:
31:26:d1:bf:53:e5:3a:69:a6:4c:51:23:b5:d6:e1:
8e:2d:2f:21:68:5f:e3:af:89:e8:99:d3:e7:9f:dd:
cd:54:23:fa:62:2a:23:19:33:bf:0e:5c:44:f5:de:
d3:f9:2c:55:83:c0:56:a8:70:8b:3d:e6:cb:a7:a8:
ad:75:70:e1:9f:a4:a5:dd:fe:01:92:d9:9a:8b:28:
56:66:9b:aa:42:c8:0d:e2:9a:ca:d0:50:5c:03:e0:
6f:b5:89:2b:53:18:97:e8:92:e4:da:6f:9f:56:4e:
e8:ed:63:72:00:51:d3:4d:37:7e:df:a3:81:1a:43:
eb:f5:45:a1:7f:57:f7:79:7c:ea:d5:71:e0:48:37:
cb:cb:8e:26:8c:5a:4b:d4:bb:d7:23:97:98:91:fb:
11:1f:23:4b:5d:46:16:1b:bd:b1:91:e0:c8:75:b1:
3a:de:15:54:3d:80:40:6b:30:a0:8d:80:6e:b8:34:
01:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:45:5E:02:7C:02:7D:77:E3:F5:72:54:0A:B4:C0:EE:2C:B1:8F:17
X509v3 Authority Key Identifier:
keyid:85:CF:91:0A:94:44:9E:A2:3A:AC:6C:40:9A:05:84:9B:ED:A5:E2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hc-RCpREnqI6rGxAmgWEm-2l4ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5d3a4c-651f-4498-8c22-552f02cbc00e/1/hc-RCpREnqI6rGxAmgWEm-2l4ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:22:09:96:3b:e3:0e:bf:69:2b:4e:9f:ef:31:51:69:67:03:
de:c4:64:50:ff:b5:ed:11:dd:92:bc:23:86:85:9d:e5:de:5b:
4e:0f:39:0e:b6:57:cc:61:1d:54:05:dd:4c:06:d9:76:a1:5e:
56:ed:ca:23:61:43:53:3e:f5:76:c2:4c:f8:ea:e1:38:f5:d4:
b4:30:39:bc:09:78:e1:cf:08:40:4d:92:ce:55:22:86:f9:57:
86:ae:8f:be:07:d6:c4:96:cc:ef:61:85:07:6c:fb:87:33:de:
20:a9:95:77:72:4b:e3:01:b2:80:5b:2c:18:ae:79:d6:27:a1:
ce:b6:e5:6d:88:a8:9c:99:10:3d:2b:17:e1:20:a7:19:8a:91:
96:f7:7f:a4:98:88:9f:78:2b:bf:1b:37:08:c9:74:c6:44:9d:
78:27:35:ea:9f:27:cd:fb:81:a1:bf:28:52:42:2d:b8:3e:d1:
1d:dd:c8:83:e4:cc:64:09:48:c3:c5:49:ee:e5:7f:9d:99:06:
63:20:40:c8:15:09:0d:4c:b3:99:87:bc:12:2b:2f:75:f6:96:
2e:fd:e5:6e:ea:e2:52:58:98:a9:b1:b7:89:a2:8a:8c:03:84:
9c:b7:52:ab:5a:1f:6f:77:53:8a:3a:06:e2:02:a6:cf:56:68:
f7:5e:6d:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8nN3H5kxewh4ymVAG3vjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1Y2Y5MTBhOTQ0NDllYTIzYWFjNmM0MDlhMDU4NDliZWRh
NWUyNGEwHhcNMjYwMzI2MDcwMTExWhcNMjYwMzI3MDcwMTExWjAzMTEwLwYDVQQD
EygzODQ1NWUwMjdjMDI3ZDc3ZTNmNTcyNTQwYWI0YzBlZTJjYjE4ZjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyB3uNsRrBXruh48JznRehh75pFl
4XhhAIg31VUAPWo6VXLkOZstR3NIjbMKJbcexbC6hm66kTlB4rv1kCMfEMjKNdMJ
irv3p7wxJtG/U+U6aaZMUSO11uGOLS8haF/jr4nomdPnn93NVCP6YiojGTO/DlxE
9d7T+SxVg8BWqHCLPebLp6itdXDhn6Sl3f4BktmaiyhWZpuqQsgN4prK0FBcA+Bv
tYkrUxiX6JLk2m+fVk7o7WNyAFHTTTd+36OBGkPr9UWhf1f3eXzq1XHgSDfLy44m
jFpL1LvXI5eYkfsRHyNLXUYWG72xkeDIdbE63hVUPYBAazCgjYBuuDQBiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhFXgJ8An134/VyVAq0wO4ssY8XMB8GA1UdIwQY
MBaAFIXPkQqURJ6iOqxsQJoFhJvtpeJKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGMtUkNwUkVucUk2ckd4QW1nV0VtLTJsNGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZDNhNGMtNjUxZi00NDk4LThjMjIt
NTUyZjAyY2JjMDBlLzEvaGMtUkNwUkVucUk2ckd4QW1nV0VtLTJsNGtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81ZDNhNGMtNjUxZi00NDk4LThjMjItNTUyZjAyY2JjMDBl
LzEvaGMtUkNwUkVucUk2ckd4QW1nV0VtLTJsNGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuiIJljvj
Dr9pK06f7zFRaWcD3sRkUP+17RHdkrwjhoWd5d5bTg85DrZXzGEdVAXdTAbZdqFe
Vu3KI2FDUz71dsJM+OrhOPXUtDA5vAl44c8IQE2SzlUihvlXhq6PvgfWxJbM72GF
B2z7hzPeIKmVd3JL4wGygFssGK551iehzrblbYionJkQPSsX4SCnGYqRlvd/pJiI
n3grvxs3CMl0xkSdeCc16p8nzfuBob8oUkItuD7RHd3Ig+TMZAlIw8VJ7uV/nZkG
YyBAyBUJDUyzmYe8EisvdfaWLv3lburiUliYqbG3iaKKjAOEnLdSq1ofb3dTijoG
4gKmz1Zo915tUQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:39:59 2026 by rpki-client