Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
File: HcdSIyHCPRae0zL_SYeczCRRcts.mft (raw, json)
Hash identifier: YyUrqVE3nhUzEthrRXZcArjE8cQgzb5fwgoXudLtOOU=
Subject key identifier: 65:41:9F:95:49:5B:55:FA:65:16:62:EE:CF:6C:02:BB:C8:8F:AD:0C
Authority key identifier: 1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
Certificate issuer: /CN=1dc7522321c23d169ed332ff49879ccc245172db
Certificate serial: 019D28F3373E0EF569FEBE70F88C81D349A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 07:02:00 +0000
Manifest this update: Thu 26 Mar 2026 07:02:00 +0000
Manifest next update: Fri 27 Mar 2026 07:02:00 +0000
Files and hashes: 1: D_OxhAnuuRTNuSYfLLf4qxnyedg.roa (hash: eNsD4mdPPE5SYBQqb9AhlfA7vpj4V7d04UlZGKNIFFQ=)
2: HcdSIyHCPRae0zL_SYeczCRRcts.crl (hash: XV0/VrUO+ZQPNWwVPZageBianql8ZBGekUwKRNHEBxo=)
3: byBcOBbLOBCidh1QOz7GfJT3FZU.roa (hash: D1e95NHiiiSAaPtZ17YAiZRde48f5w4oz0Jxp2kjKZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:37:3e:0e:f5:69:fe:be:70:f8:8c:81:d3:49:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc7522321c23d169ed332ff49879ccc245172db
Validity
Not Before: Mar 26 07:02:00 2026 GMT
Not After : Mar 27 07:02:00 2026 GMT
Subject: CN=65419f95495b55fa651662eecf6c02bbc88fad0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fd:b9:2c:ff:b5:fb:e3:1b:bd:f8:02:c6:1f:
a1:1e:bd:fc:af:c9:f8:e1:89:30:5a:ea:6b:66:1e:
4b:8a:e1:a6:1b:08:a6:33:7a:20:e1:03:b3:9d:18:
1b:fc:f6:67:e3:ad:11:be:ef:00:2f:b9:92:75:30:
f3:a7:b4:f8:cd:6e:ac:e3:27:52:db:f3:4d:aa:d0:
01:53:ef:d4:0d:92:6d:32:12:59:e2:8b:a9:ee:e7:
44:70:c5:bf:7d:37:df:5d:48:dc:fc:94:ba:36:a8:
21:4d:45:37:eb:4e:31:ca:60:43:73:4b:3e:43:1c:
ba:d5:ee:14:ee:b8:dd:ef:d4:a8:f7:5f:46:ba:98:
b4:44:7a:30:76:64:bd:1e:0f:e3:28:36:bf:61:ca:
95:6a:13:77:d7:5d:d2:20:ef:14:77:9a:90:27:6d:
49:27:ef:8d:d4:05:7c:93:3e:6c:f1:4b:cc:d3:b3:
a3:0c:5b:f0:26:ff:c5:99:52:4a:af:b6:3b:53:1a:
64:fd:31:8f:46:d1:b4:b8:97:c3:c1:1e:1c:00:77:
e8:1e:70:05:b6:28:f2:9d:c2:81:a9:cc:5e:c5:56:
2c:a7:ad:69:62:a2:68:27:51:75:8d:b4:7b:b1:30:
bd:3e:9e:cc:f3:d5:31:18:8e:aa:16:09:e9:85:ce:
73:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:41:9F:95:49:5B:55:FA:65:16:62:EE:CF:6C:02:BB:C8:8F:AD:0C
X509v3 Authority Key Identifier:
keyid:1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:72:0f:c3:5d:33:08:a8:5b:a5:3b:2a:65:df:ff:f5:55:c2:
21:5c:d6:ab:0e:45:27:2b:84:b6:51:60:9d:ce:b8:b4:f4:d2:
c0:69:f7:67:a9:26:dc:85:d6:05:6c:02:59:18:77:35:f2:f2:
f8:c2:df:de:3b:82:87:c7:69:f1:05:80:37:b4:f5:e3:d4:e7:
1e:5a:a2:6c:58:a9:60:ce:d6:53:0d:8d:2e:de:d1:5a:d7:e5:
bc:a6:ba:c9:16:19:d8:5c:8c:ee:8d:6f:a0:65:e7:4c:3d:78:
3b:32:19:81:33:fa:bf:4d:80:21:3b:4c:cd:d7:8f:53:b0:f3:
1e:84:07:14:9b:9c:60:39:ba:2e:07:a8:4e:4c:7d:46:f6:54:
25:12:16:38:c0:fb:fb:9b:7f:70:7e:ca:96:f7:9e:de:8c:3b:
d3:c3:4c:65:81:8f:69:88:2a:12:48:0b:1a:70:45:e4:9f:8f:
cb:d3:a3:5e:06:7d:53:e5:aa:e1:9b:af:51:e4:37:50:16:2e:
11:3a:6b:f2:b9:dd:70:42:e5:4a:dd:ef:29:b3:55:e0:65:ad:
0b:c8:fe:c6:19:d2:ee:80:b8:fc:dd:b3:bd:25:8e:70:5b:4b:
88:41:12:05:79:72:f8:49:4c:6c:04:57:fc:49:d6:01:f9:23:
52:ba:44:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:05 2026 by rpki-client