Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
File: HFSfxdaCmHhMakxbyZrn0wFqGKM.mft (raw, json)
Hash identifier: 5IP0gS4BApb2IL/KhGJSkB/7idAu8t2xNA2Eo0o78lA=
Subject key identifier: 38:3A:1E:2F:46:93:C4:A2:2D:00:20:75:8F:8B:F1:EF:F6:57:1E:8E
Authority key identifier: 1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
Certificate issuer: /CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Certificate serial: 019F94364E1B36E4034C79E5C3F5A7A655B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
Manifest number: 1356
Signing time: Fri 24 Jul 2026 13:00:14 +0000
Manifest this update: Fri 24 Jul 2026 13:00:14 +0000
Manifest next update: Sat 25 Jul 2026 13:00:14 +0000
Files and hashes: 1: HFSfxdaCmHhMakxbyZrn0wFqGKM.crl (hash: rLdcoPH/hpzT0ZUB8f+rfVqG0xj1Q+Pn8rUUBsLgD1Y=)
2: UHpyY7NbwprGP2Xux1Br7Qg2UA4.roa (hash: OnUFEX1JE94qw8lGszNtj2Di00Nt/AvUN+2g8yyjt/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:4e:1b:36:e4:03:4c:79:e5:c3:f5:a7:a6:55:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Validity
Not Before: Jul 24 13:00:14 2026 GMT
Not After : Jul 25 13:00:14 2026 GMT
Subject: CN=383a1e2f4693c4a22d0020758f8bf1eff6571e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a6:cd:b6:f1:bf:74:fb:1e:64:56:8b:3a:af:
ac:fe:3e:6a:86:c5:83:e3:8e:aa:bd:57:6c:a1:7c:
f5:ec:c6:92:17:1a:30:60:fe:36:b5:4b:aa:00:c7:
99:80:cf:c8:08:a9:3b:30:92:af:6f:c0:89:47:16:
35:67:44:f2:f9:f2:6d:1a:9e:e1:fc:4c:35:a1:8c:
26:0a:bd:d1:0c:46:d3:aa:b1:f6:74:b7:ec:04:b5:
bf:4c:25:c8:04:ca:82:9b:71:0b:cc:b2:99:ce:6f:
50:6e:02:5c:88:bd:f4:97:8f:93:7e:43:a6:df:54:
df:63:9d:ed:b1:ec:d6:c9:a6:6c:e3:68:b3:60:43:
3c:4e:ae:c1:0b:29:5b:b4:7b:c9:ce:05:20:32:f1:
c8:df:18:f9:9c:05:c1:23:73:e5:20:8b:19:61:5c:
2f:45:9a:35:6a:e1:8a:ad:02:73:16:1f:9d:2b:24:
fd:c2:6c:30:84:0e:2e:03:56:6f:8a:09:9e:2a:3f:
85:07:0e:7e:24:e3:53:8d:de:33:e3:ea:8f:6f:f8:
a3:9c:c6:ec:e8:0d:c1:97:66:fe:30:08:2f:87:34:
e6:39:fc:1e:a1:af:94:b5:99:6f:6a:1f:e9:c6:cf:
31:00:ea:38:49:ac:46:dc:a5:2c:5e:5f:c9:6e:ce:
10:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3A:1E:2F:46:93:C4:A2:2D:00:20:75:8F:8B:F1:EF:F6:57:1E:8E
X509v3 Authority Key Identifier:
keyid:1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:7e:6b:c8:3b:22:2d:46:9f:8d:ea:4f:56:9c:6b:b1:b0:d9:
14:ce:36:15:9d:8f:22:04:0b:e6:85:64:40:d6:99:7d:6e:8e:
65:05:d2:8b:ef:31:2b:e3:5a:ce:b7:08:d5:01:a5:2c:ed:df:
fa:35:ae:bc:eb:4b:b1:a6:a7:69:44:a1:34:c5:73:12:71:d7:
4d:fa:54:e0:2a:fe:6f:30:02:f0:e1:c7:7f:e5:b7:8f:5d:0a:
86:02:78:e6:b0:56:b4:f6:35:1e:fc:fe:7a:da:5e:e7:37:7b:
0b:02:60:4f:61:5e:c5:46:e0:af:3f:30:d5:b8:64:c2:ad:30:
be:ea:bd:c6:6a:43:65:55:e7:15:b3:e3:a8:1b:4f:de:d7:68:
63:67:fe:e9:2d:95:f8:1b:70:d5:97:f1:cf:7d:6f:77:9f:bb:
0a:78:77:5f:7f:b7:5e:5f:93:17:80:9b:a0:5d:0b:8d:30:c2:
c2:b3:9a:64:dc:fc:13:48:68:00:6a:4a:16:80:06:72:59:81:
d1:fd:50:a6:77:08:4b:6f:da:36:07:7c:30:6a:d9:50:ad:b7:
b8:d3:2f:0d:e3:da:07:70:a3:07:ae:07:94:05:5d:16:fe:70:
13:9c:e4:0a:c4:64:db:2d:c5:8a:d2:d2:3e:da:db:45:40:3f:
1e:eb:a6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:47:15 2026 by rpki-client