Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
File: HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft (raw, json)
Hash identifier: Nicbz3SDBqGaR4We1nDd4AhK8OJ0yaH/OYPocUwgPAc=
Subject key identifier: 53:9B:DC:79:EB:E8:E6:1A:E8:16:1F:92:C6:84:A0:45:D0:54:B5:C0
Authority key identifier: 1E:40:AB:40:E5:38:60:87:12:50:E9:BA:C4:E1:63:33:97:10:59:5D
Certificate issuer: /CN=1e40ab40e53860871250e9bac4e163339710595d
Certificate serial: 019D281685A09D4FFCBEEDBE5DD48C5CF613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
Manifest number: 0F6B
Signing time: Thu 26 Mar 2026 03:00:57 +0000
Manifest this update: Thu 26 Mar 2026 03:00:57 +0000
Manifest next update: Fri 27 Mar 2026 03:00:57 +0000
Files and hashes: 1: HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl (hash: OGor+esTqtAOFg0ghCnBHmDs1TSgf5dSqNb+CJx0AxA=)
2: XWVE8tIi9ZecbOx1vcvWssJ0eCM.roa (hash: o/4/Wc/Ucw5SFFNzfxfWEkMf/RRNr7V23q3xkukethg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:85:a0:9d:4f:fc:be:ed:be:5d:d4:8c:5c:f6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e40ab40e53860871250e9bac4e163339710595d
Validity
Not Before: Mar 26 03:00:57 2026 GMT
Not After : Mar 27 03:00:57 2026 GMT
Subject: CN=539bdc79ebe8e61ae8161f92c684a045d054b5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:99:fc:61:ca:7b:9f:b2:69:79:2f:07:87:9b:
b3:66:99:d3:4a:b1:94:e3:7d:1f:e8:66:26:65:24:
1c:80:22:76:f7:b8:ff:aa:23:2e:5e:46:b7:74:ae:
7e:60:22:f3:0f:7f:2b:17:68:b7:45:f0:0d:9c:a5:
bf:b7:91:a0:18:9f:ac:d8:09:42:ee:ce:8f:29:52:
09:8f:89:09:e3:5b:58:2a:00:1a:10:3d:86:0b:75:
05:91:da:f1:35:18:c0:8f:37:af:44:bf:53:31:55:
83:b9:d9:0e:ed:c2:09:bc:03:24:5a:ca:f5:cf:29:
8f:a7:3d:23:7c:f1:75:85:d0:be:43:96:e5:30:72:
e9:85:41:1b:19:ad:61:01:c2:01:31:1b:4c:0d:25:
aa:b2:61:0b:6e:7d:58:14:90:9b:4a:25:fa:6e:23:
36:01:bd:73:6f:0c:6e:ff:f6:8d:90:e6:a7:24:8f:
f0:86:7a:2d:48:92:4e:16:7c:4f:2e:2f:09:99:ce:
fd:9d:e5:e9:e3:4a:da:f6:f8:24:b5:eb:40:be:f1:
1b:c7:52:f4:df:01:c6:69:11:bc:41:f9:8f:5d:33:
17:cb:73:e6:be:6a:43:bb:ce:4c:31:99:cb:d6:a9:
a6:b6:07:16:a2:13:e4:30:c6:39:63:44:09:eb:f0:
86:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9B:DC:79:EB:E8:E6:1A:E8:16:1F:92:C6:84:A0:45:D0:54:B5:C0
X509v3 Authority Key Identifier:
keyid:1E:40:AB:40:E5:38:60:87:12:50:E9:BA:C4:E1:63:33:97:10:59:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8f:a7:40:69:a6:67:b8:f8:42:20:2b:42:39:b9:e4:e3:63:
fc:aa:0f:75:d1:66:3c:4d:c3:0a:a7:f4:7b:6c:e5:b9:2a:41:
ad:1c:c5:1d:02:68:6e:85:27:a1:db:c6:5f:0b:8c:6c:ec:26:
af:58:88:27:db:01:4d:c3:ed:a5:25:70:8d:b5:56:10:41:05:
39:58:0d:6b:6a:4f:c9:72:4d:90:1e:22:ee:73:e1:31:c3:9e:
5d:28:ef:7e:58:36:d4:18:00:32:f7:29:21:5c:c4:36:be:cf:
6b:df:43:46:b9:bf:6a:cb:a7:8e:94:4c:c6:c8:1f:55:4e:ba:
f9:b4:47:59:e0:0a:42:52:b1:72:a2:41:17:cf:89:69:8d:85:
08:fe:a2:77:81:81:c2:7a:eb:11:9f:f7:ec:5d:47:52:da:d0:
19:ad:d7:07:2e:da:6a:1c:23:f0:6c:cb:71:9e:fc:07:8e:b0:
2a:55:4c:02:fb:0f:9a:b3:d7:da:5c:4a:08:9c:42:1a:2d:90:
cd:c5:c7:36:97:74:33:c5:05:58:70:67:79:e3:77:aa:8d:e4:
19:d5:d6:56:87:4f:b9:78:68:8c:2d:9d:fe:90:99:c6:d0:73:
8b:e9:e7:d0:59:39:46:39:d0:69:cc:94:e1:53:20:f8:73:a7:
67:d4:fb:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFoWgnU/8vu2+XdSMXPYTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNDBhYjQwZTUzODYwODcxMjUwZTliYWM0ZTE2MzMzOTcx
MDU5NWQwHhcNMjYwMzI2MDMwMDU3WhcNMjYwMzI3MDMwMDU3WjAzMTEwLwYDVQQD
Eyg1MzliZGM3OWViZThlNjFhZTgxNjFmOTJjNjg0YTA0NWQwNTRiNWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Zn8Ycp7n7JpeS8Hh5uzZpnTSrGU
430f6GYmZSQcgCJ297j/qiMuXka3dK5+YCLzD38rF2i3RfANnKW/t5GgGJ+s2AlC
7s6PKVIJj4kJ41tYKgAaED2GC3UFkdrxNRjAjzevRL9TMVWDudkO7cIJvAMkWsr1
zymPpz0jfPF1hdC+Q5blMHLphUEbGa1hAcIBMRtMDSWqsmELbn1YFJCbSiX6biM2
Ab1zbwxu//aNkOanJI/whnotSJJOFnxPLi8Jmc79neXp40ra9vgktetAvvEbx1L0
3wHGaRG8QfmPXTMXy3PmvmpDu85MMZnL1qmmtgcWohPkMMY5Y0QJ6/CG4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOb3Hnr6OYa6BYfksaEoEXQVLXAMB8GA1UdIwQY
MBaAFB5Aq0DlOGCHElDpusThYzOXEFldMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGtDclFPVTRZSWNTVU9tNnhPRmpNNWNRV1YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81NTk0ZWQtN2ViOC00MzFlLTkzMGMt
N2Y4NjZkYWE1NDY0LzEvSGtDclFPVTRZSWNTVU9tNnhPRmpNNWNRV1YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81NTk0ZWQtN2ViOC00MzFlLTkzMGMtN2Y4NjZkYWE1NDY0
LzEvSGtDclFPVTRZSWNTVU9tNnhPRmpNNWNRV1YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJI+nQGmm
Z7j4QiArQjm55ONj/KoPddFmPE3DCqf0e2zluSpBrRzFHQJoboUnodvGXwuMbOwm
r1iIJ9sBTcPtpSVwjbVWEEEFOVgNa2pPyXJNkB4i7nPhMcOeXSjvflg21BgAMvcp
IVzENr7Pa99DRrm/asunjpRMxsgfVU66+bRHWeAKQlKxcqJBF8+JaY2FCP6id4GB
wnrrEZ/37F1HUtrQGa3XBy7aahwj8GzLcZ78B46wKlVMAvsPmrPX2lxKCJxCGi2Q
zcXHNpd0M8UFWHBneeN3qo3kGdXWVodPuXhojC2d/pCZxtBzi+nn0Fk5RjnQacyU
4VMg+HOnZ9T7+A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:46:27 2026 by rpki-client