Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
File: HFSfxdaCmHhMakxbyZrn0wFqGKM.mft (raw, json)
Hash identifier: lwml+yDvQmEouBTpfDssAkhCFv5uWXdYy6qr2zlhJZc=
Subject key identifier: F8:AA:5C:BF:E3:5A:97:D0:31:A9:0A:58:B0:B4:C7:00:C9:50:DA:64
Authority key identifier: 1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
Certificate issuer: /CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Certificate serial: 019E1F7F54E9EC9623A917A952EFA0F61937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
Manifest number: 1295
Signing time: Wed 13 May 2026 04:01:38 +0000
Manifest this update: Wed 13 May 2026 04:01:38 +0000
Manifest next update: Thu 14 May 2026 04:01:38 +0000
Files and hashes: 1: HFSfxdaCmHhMakxbyZrn0wFqGKM.crl (hash: oThrPcj1ku+f0u/UdCcyzY+XH6mkT2LzMIRzJsG9Jkg=)
2: UHpyY7NbwprGP2Xux1Br7Qg2UA4.roa (hash: OnUFEX1JE94qw8lGszNtj2Di00Nt/AvUN+2g8yyjt/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:54:e9:ec:96:23:a9:17:a9:52:ef:a0:f6:19:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Validity
Not Before: May 13 04:01:38 2026 GMT
Not After : May 14 04:01:38 2026 GMT
Subject: CN=f8aa5cbfe35a97d031a90a58b0b4c700c950da64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:bc:c4:92:75:47:6c:9d:1f:d8:14:19:bd:2c:
a3:c9:9c:5d:5a:8a:5f:d5:51:3e:4a:5c:d9:d5:4a:
13:ae:42:08:68:23:ef:b0:55:a3:e5:21:05:b9:83:
1e:aa:c6:57:6b:34:8f:47:57:98:a8:bd:e3:f5:e0:
bc:d0:3f:5e:a7:c7:ad:6f:3d:69:7e:9c:1d:6f:a7:
0b:64:dc:a4:d4:ef:e7:89:80:79:ed:9b:b5:6d:f9:
31:b2:a9:6e:d2:5b:2f:f6:4c:89:cc:40:8e:9c:ca:
c5:d8:77:74:42:21:73:d2:bf:7b:1b:a7:50:b7:67:
1c:33:78:98:7f:be:e0:6d:db:3b:ec:32:5b:68:2f:
b0:68:d4:9c:63:df:73:72:1a:c8:3f:e8:be:d2:b4:
db:a8:6f:6d:38:2b:c9:e5:a1:c1:45:b6:82:a3:4f:
6d:51:07:9b:e6:f9:66:de:1d:df:fb:eb:74:60:dc:
15:34:95:89:7b:ac:1b:25:80:41:3a:79:84:ba:3c:
c3:4f:51:cf:c6:86:66:70:87:b3:c1:da:f8:62:fd:
ac:0e:9e:ae:61:20:05:5e:25:72:75:b0:13:60:1f:
1a:9b:5f:d0:cb:a0:04:a6:9d:03:38:e3:b6:9b:f9:
1c:01:46:eb:af:f6:49:09:09:f8:e3:c1:23:a8:3e:
d7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AA:5C:BF:E3:5A:97:D0:31:A9:0A:58:B0:B4:C7:00:C9:50:DA:64
X509v3 Authority Key Identifier:
keyid:1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e8:97:48:d3:58:f7:b0:cf:99:9a:47:d0:f8:a6:35:fc:bb:
bf:b0:f9:47:51:d7:fa:93:c6:90:47:51:a0:08:1b:ee:66:4e:
ef:68:f1:3a:20:ae:f6:5b:aa:1d:a1:0b:e2:d8:ad:09:ee:99:
6d:0e:02:05:66:98:0c:bd:85:cc:70:d2:1d:1e:16:d9:5f:e0:
7a:3d:61:cc:ea:81:0a:11:f0:ad:76:a9:8a:cd:3b:8d:58:c4:
75:dc:ef:07:26:01:e5:1c:33:68:00:30:0d:7b:8e:0f:82:86:
50:0f:d9:0e:f6:79:ea:58:93:78:cb:df:22:70:77:57:66:d2:
3a:3d:f0:ef:46:7f:60:12:9d:4b:58:24:34:3e:45:48:f3:72:
85:7c:a8:7f:4e:a0:52:b4:97:45:6e:47:ba:2c:46:a8:63:8b:
39:5d:04:cc:44:fb:fa:82:ea:13:50:c2:f3:71:0f:fd:12:ae:
07:4e:ce:91:2c:b7:61:b4:16:8d:94:60:76:b4:1e:81:5e:82:
83:66:53:b1:25:d7:10:02:87:87:2e:93:0c:55:d1:1e:ef:de:
6d:0c:53:32:d6:0b:98:9b:8c:ed:62:74:31:c3:fb:32:68:d4:
50:11:69:a5:72:ac:38:0f:8f:f9:14:8e:9c:68:75:d0:19:07:
58:a5:47:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:06 2026 by rpki-client