Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
File: HcKeV0nukcWjOujjC33J__OV_-Y.mft (raw, json)
Hash identifier: vLiQl4L6nWRQ9SJ4cou8oiBTRXNc5ndIRUv+HuFW9/A=
Subject key identifier: A4:19:2F:A4:30:19:2C:3A:57:1D:81:1C:D5:65:2A:97:10:06:53:43
Authority key identifier: 1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6
Certificate issuer: /CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6
Certificate serial: 019D273ABB1EC7AF0A95B7ACB8E73C50154D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 23:00:53 +0000
Manifest this update: Wed 25 Mar 2026 23:00:53 +0000
Manifest next update: Thu 26 Mar 2026 23:00:53 +0000
Files and hashes: 1: HcKeV0nukcWjOujjC33J__OV_-Y.crl (hash: fnrTcrrRuFcQln69suze0NUBWCg3GxluY9GcF/cc1kQ=)
2: qBp9Go7C5K5PO25VaZfafmJldXo.roa (hash: aZjaPl/cUtUuPNjewiVI2iRit3lb7H1MzhD8WojfNfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:bb:1e:c7:af:0a:95:b7:ac:b8:e7:3c:50:15:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6
Validity
Not Before: Mar 25 23:00:53 2026 GMT
Not After : Mar 26 23:00:53 2026 GMT
Subject: CN=a4192fa430192c3a571d811cd5652a9710065343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e8:94:de:9a:93:ff:ee:4b:46:30:56:30:90:
e6:75:66:be:0e:2b:37:39:d6:2c:ef:29:79:4e:9d:
a5:a4:61:27:d6:8e:c0:cc:30:8d:1b:63:9d:d5:c9:
da:6d:6a:f9:08:e7:63:5b:3b:26:e2:a5:90:c4:a9:
27:e0:4b:57:7a:ab:e3:c6:b6:7a:05:b0:5b:16:31:
7b:d6:c8:03:a0:49:86:e8:ed:35:af:c0:c9:11:79:
d4:02:1b:c4:8f:cd:79:96:f9:de:19:26:5c:43:64:
26:dc:96:8b:73:e3:b7:cd:17:69:c5:bf:ee:b6:28:
f6:7e:30:b4:2e:64:f8:aa:b4:da:13:b3:91:89:3a:
68:37:c9:3d:8a:5b:91:17:40:0b:e6:2a:33:63:6a:
05:fa:59:36:53:bb:38:9f:8b:75:f1:9d:6c:10:9d:
ef:8d:01:3f:c6:0c:a7:66:e6:3d:0d:77:25:b5:f1:
d0:9e:98:5f:da:78:f1:23:bb:39:11:98:d8:87:b1:
0d:45:e2:2b:ab:8b:22:a7:94:42:7a:2e:76:3e:f4:
16:20:77:62:49:06:48:d6:53:22:d9:8a:cd:4a:01:
7e:a4:4d:57:a8:53:6a:d1:fb:fa:1a:e2:bc:55:d5:
39:6b:84:ab:25:8e:ae:f3:15:53:48:1e:dc:ae:7f:
3a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:19:2F:A4:30:19:2C:3A:57:1D:81:1C:D5:65:2A:97:10:06:53:43
X509v3 Authority Key Identifier:
keyid:1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:41:62:a4:2a:8c:e4:d4:c9:92:4a:ec:15:5b:32:22:a1:31:
94:15:7f:6f:9e:e2:fb:b6:47:da:2e:84:0a:07:f2:e3:68:16:
bf:1b:da:f2:ee:86:48:f6:d0:ef:70:a9:35:4f:40:7b:a1:3e:
fd:ac:a0:57:57:20:c1:bc:1c:64:f6:f9:1b:b6:3b:1b:77:ff:
91:b3:cc:62:fb:5e:ce:a7:54:d5:b7:0e:ef:f7:36:e3:7a:22:
47:a1:b9:f7:6a:4d:19:77:c9:d8:e9:73:c1:08:5a:2f:df:82:
63:66:23:73:66:0a:b8:87:80:b4:c9:8b:d7:aa:fc:93:4c:8d:
8f:8d:ef:60:4d:24:21:98:79:75:65:03:62:cf:71:d5:19:ad:
26:dd:4d:08:b0:ba:6e:8d:85:39:49:3d:08:66:50:ba:a3:9a:
21:cb:6c:f7:76:1f:b9:cb:d0:c3:13:a2:09:ac:ce:ab:72:dd:
45:e0:71:b7:74:81:d8:c9:0d:d7:22:f8:29:2f:17:58:7d:81:
ad:6e:81:c6:a3:f0:bb:25:61:00:5b:b5:31:3b:60:1c:dd:15:
64:86:b2:80:09:16:f9:1b:f2:86:eb:c3:b5:5d:0b:77:5a:5b:
82:df:ef:a1:a7:db:ca:3f:dd:17:48:ba:39:af:24:5d:27:62:
d8:73:28:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:57 2026 by rpki-client