Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
File: HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft (raw, json)
Hash identifier: 0qRVKAvWApXTnSMvkGLXhYN5/k1dPwGOd7LS81xvAOM=
Subject key identifier: 1C:A0:44:B5:92:21:19:08:37:03:8C:F9:3C:87:5E:04:B1:A4:3E:FF
Authority key identifier: 1E:40:AB:40:E5:38:60:87:12:50:E9:BA:C4:E1:63:33:97:10:59:5D
Certificate issuer: /CN=1e40ab40e53860871250e9bac4e163339710595d
Certificate serial: 019E1F482CCC6BC7A9AB7633B55C2645EDA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
Manifest number: 0FEB
Signing time: Wed 13 May 2026 03:01:24 +0000
Manifest this update: Wed 13 May 2026 03:01:24 +0000
Manifest next update: Thu 14 May 2026 03:01:24 +0000
Files and hashes: 1: HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl (hash: HxF32SNPOao97sTDERvk0e054bcbXJ9xvTuwbH5lrJc=)
2: XWVE8tIi9ZecbOx1vcvWssJ0eCM.roa (hash: o/4/Wc/Ucw5SFFNzfxfWEkMf/RRNr7V23q3xkukethg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:2c:cc:6b:c7:a9:ab:76:33:b5:5c:26:45:ed:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e40ab40e53860871250e9bac4e163339710595d
Validity
Not Before: May 13 03:01:24 2026 GMT
Not After : May 14 03:01:24 2026 GMT
Subject: CN=1ca044b59221190837038cf93c875e04b1a43eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f1:bf:52:6d:d5:15:2d:1f:4e:47:b2:3b:f7:
31:61:7d:2a:6e:d8:8d:4d:95:1b:23:66:07:3e:d4:
c8:dc:4b:71:eb:21:c9:63:e5:2a:42:a2:6b:83:ed:
f8:f6:38:dc:b6:d9:ce:a4:49:97:17:5a:7c:c9:87:
87:1e:2e:ac:70:d5:2b:39:6c:95:ae:8a:77:6e:4d:
e4:a8:20:88:03:b5:21:e8:6e:28:5d:ce:1b:a8:d8:
45:0f:3c:05:4f:93:67:47:d1:b3:f4:23:fe:bf:b2:
7a:c6:4b:5b:25:fa:a4:99:d8:30:5d:86:f0:a3:58:
3e:11:28:ba:fc:be:ae:6d:70:0f:18:d7:95:98:7b:
95:7b:3c:e9:01:79:df:6b:7c:f3:33:52:3b:bb:0c:
11:e7:6e:00:f3:0d:f8:e8:9e:b8:f5:b9:cd:f0:45:
e9:7a:18:05:f4:0f:af:92:bb:5c:aa:6e:18:1a:97:
33:c3:d4:ac:a4:e2:57:2f:a7:cb:1e:89:5b:61:4d:
53:12:b6:df:14:9d:20:da:c3:e9:23:fd:bf:3c:06:
e3:cf:4b:22:d7:f4:a5:de:0b:67:1a:a0:81:9f:48:
e7:a9:80:fd:62:14:62:f4:4a:a6:43:b2:f6:23:e5:
3d:88:23:ba:2e:a5:7b:8c:b0:ec:38:c3:8c:f6:fc:
8e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A0:44:B5:92:21:19:08:37:03:8C:F9:3C:87:5E:04:B1:A4:3E:FF
X509v3 Authority Key Identifier:
keyid:1E:40:AB:40:E5:38:60:87:12:50:E9:BA:C4:E1:63:33:97:10:59:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkCrQOU4YIcSUOm6xOFjM5cQWV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5594ed-7eb8-431e-930c-7f866daa5464/1/HkCrQOU4YIcSUOm6xOFjM5cQWV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:11:65:8a:e6:16:72:2c:f1:b8:ed:64:a2:10:52:e4:41:e8:
73:6a:4c:b7:2d:ea:f2:10:e1:7b:c7:74:d3:d0:58:2e:f0:84:
49:1c:7f:5f:b2:20:5d:00:45:c6:24:74:7c:0a:34:76:cb:35:
36:90:9f:35:d3:0e:82:a6:55:0b:a9:97:36:fb:17:b1:cf:74:
99:18:07:3a:ce:2c:2f:89:cd:45:90:36:62:8f:2d:3f:8d:f8:
b6:27:74:9a:71:8f:47:db:1a:55:2b:3e:f5:b2:9b:34:26:cc:
d6:97:1f:17:f8:01:a3:a4:49:da:70:d8:af:14:20:f0:43:d2:
eb:2e:9e:e7:90:5e:6f:fa:03:a1:bd:41:11:98:3f:c5:ef:39:
8b:da:64:88:e4:da:8f:0b:16:69:b1:d5:4b:0d:f3:9c:f0:51:
f7:58:2d:03:c9:57:4a:1b:35:50:35:87:a8:de:b5:54:28:aa:
c0:bc:8b:1c:8a:82:1f:f2:24:8c:c8:49:f6:5e:1e:c9:90:37:
8a:16:c2:09:39:2b:09:83:34:fd:26:cc:ba:86:de:a2:5d:4e:
42:38:c3:c8:e4:6c:58:94:f0:a8:65:6c:c3:08:69:a1:4b:2e:
e8:83:17:46:72:b8:15:02:9c:c6:77:73:77:e0:03:5c:69:3c:
6d:2b:68:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:43:37 2026 by rpki-client