Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
File: HcKeV0nukcWjOujjC33J__OV_-Y.mft (raw, json)
Hash identifier: R7YSTaBE4k96I+j5vBcGZzdLA4+bFWzSo7jdPmDAWms=
Subject key identifier: D0:37:83:8B:82:26:FF:9D:6E:7C:09:64:DA:B5:7D:32:75:2E:DF:8E
Authority key identifier: 1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6
Certificate issuer: /CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6
Certificate serial: 01A10211845C3A774386EA51C0690515EF9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
Manifest number: 1A88
Signing time: Sat 03 Oct 2026 14:01:04 +0000
Manifest this update: Sat 03 Oct 2026 14:01:04 +0000
Manifest next update: Sun 04 Oct 2026 14:01:04 +0000
Files and hashes: 1: HcKeV0nukcWjOujjC33J__OV_-Y.crl (hash: jROqDWvH5FBTNBXD7V2423/tqZ2Do+fcmwHsB7U5w00=)
2: qBp9Go7C5K5PO25VaZfafmJldXo.roa (hash: aZjaPl/cUtUuPNjewiVI2iRit3lb7H1MzhD8WojfNfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:11:84:5c:3a:77:43:86:ea:51:c0:69:05:15:ef:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6
Validity
Not Before: Oct 3 14:01:04 2026 GMT
Not After : Oct 4 14:01:04 2026 GMT
Subject: CN=d037838b8226ff9d6e7c0964dab57d32752edf8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:12:75:eb:fc:fd:34:ee:4f:6a:fa:4a:00:24:
e2:ec:0b:55:51:0f:e0:d3:c3:49:fa:68:8a:6d:cd:
14:25:33:4d:5b:b2:67:3a:06:9b:ed:91:15:80:6e:
28:fb:f8:7b:11:2f:df:c1:ec:de:cd:9a:e3:cf:3e:
72:78:b9:f4:ca:37:5a:28:14:3f:fe:f2:ca:ca:e1:
ab:7c:10:fd:01:4f:58:95:9c:45:6d:dd:c2:1b:a4:
7a:55:d8:16:85:16:a7:9b:ee:19:cd:63:d5:fb:b3:
4d:83:f1:14:53:21:a6:1a:1d:91:1f:45:80:6b:c2:
01:85:69:4d:61:c2:07:24:5d:62:2e:60:40:76:16:
31:e7:d4:e3:05:fd:a0:a2:8c:b7:08:b9:00:e4:8a:
46:89:4f:7c:98:b9:9e:81:3e:59:43:8a:5c:cb:bd:
a1:b4:a7:6f:dd:21:b0:49:8d:a6:39:df:0d:95:ac:
74:8a:36:a3:08:a4:06:26:cc:9c:32:aa:19:db:11:
09:8d:ec:6f:a2:0d:10:b0:96:88:21:12:c9:00:fe:
08:85:0f:1f:7f:f8:9a:7f:0b:ee:48:9a:f7:45:b2:
16:58:ea:d1:de:58:10:62:d2:bb:44:c0:da:cd:ce:
64:e2:38:41:84:49:62:22:98:fd:d8:ab:f1:5b:c0:
5f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:37:83:8B:82:26:FF:9D:6E:7C:09:64:DA:B5:7D:32:75:2E:DF:8E
X509v3 Authority Key Identifier:
keyid:1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a6:1c:90:94:ea:db:89:84:14:68:8c:07:a8:27:ab:a2:64:
c1:8c:44:aa:98:2d:9c:8b:d8:67:40:65:88:ef:41:32:c4:0c:
1e:ba:1b:53:ab:4d:aa:6a:a5:67:88:76:31:07:38:dd:11:f9:
5e:6e:73:74:9d:15:d4:c5:18:58:48:b0:a2:61:c8:13:3e:e3:
22:1a:de:98:e9:bd:96:3c:7d:66:82:76:ad:9a:59:63:ff:c5:
52:ba:2f:4e:4e:f3:8e:99:4a:c3:d2:0a:a7:76:7e:25:6c:20:
62:84:56:ee:15:a5:f8:f7:bd:72:d0:f1:5c:e5:10:35:d5:c0:
6f:72:dd:42:a6:19:24:21:4c:a7:5c:be:b8:07:4f:26:97:4f:
cc:f6:99:73:f6:0a:68:44:ef:fb:ef:21:64:bf:70:18:d5:6d:
27:05:2f:2b:bb:43:f7:02:8b:57:3e:dd:87:c1:17:fc:92:91:
78:b5:ba:f5:34:18:40:74:5f:45:78:8f:01:43:ac:e5:18:b0:
7b:a7:74:e7:4c:57:8b:02:aa:6a:ae:24:ac:bb:45:32:be:3f:
2e:a6:78:8e:b4:b1:57:a4:ef:f8:21:48:3b:0d:5f:c5:d1:a5:
77:9d:cf:ec:bb:77:8c:63:13:e2:ed:eb:b6:f1:af:45:a4:61:
b8:e1:ed:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 21:10:45 2026 by rpki-client