Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
File: HcKeV0nukcWjOujjC33J__OV_-Y.mft (raw, json)
Hash identifier: pTgZxm90+34cOPi+EHxytXqxttPGNhSKRK85HriZD40=
Subject key identifier: 0C:03:24:02:48:77:DE:E7:BD:6C:E7:0E:D3:03:8D:5F:8B:8A:85:2E
Authority key identifier: 1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6
Certificate issuer: /CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6
Certificate serial: 019E1E6C07CB41E24110571D7A57D23B6FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 23:00:56 +0000
Manifest this update: Tue 12 May 2026 23:00:56 +0000
Manifest next update: Wed 13 May 2026 23:00:56 +0000
Files and hashes: 1: HcKeV0nukcWjOujjC33J__OV_-Y.crl (hash: jQBe1agNcg8mgOyWexUXOMgJmIVMVnjVbJpAiI54Mto=)
2: qBp9Go7C5K5PO25VaZfafmJldXo.roa (hash: aZjaPl/cUtUuPNjewiVI2iRit3lb7H1MzhD8WojfNfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:07:cb:41:e2:41:10:57:1d:7a:57:d2:3b:6f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6
Validity
Not Before: May 12 23:00:56 2026 GMT
Not After : May 13 23:00:56 2026 GMT
Subject: CN=0c0324024877dee7bd6ce70ed3038d5f8b8a852e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ba:03:b3:6f:e6:76:d7:d7:06:95:94:ca:20:
62:55:94:cb:03:49:37:46:3b:ad:71:c6:cb:53:9a:
5c:53:2f:b4:34:d7:2c:88:30:e6:9f:ab:9f:ba:e6:
af:49:a9:e4:2a:31:2b:d4:4b:da:39:74:38:a6:1a:
0d:e5:a5:08:56:ff:34:f9:f0:09:56:46:87:e7:fa:
8f:a1:ff:98:32:4d:d4:6a:1f:35:b9:3e:80:1b:ef:
17:4b:e1:7f:c3:a7:15:08:44:4f:5e:be:2b:91:18:
61:21:27:45:65:c6:20:8f:58:97:88:c6:ee:00:5e:
c1:87:a4:fb:89:0b:b5:06:30:d5:d4:cf:85:70:f5:
5c:59:12:da:81:cd:ff:ad:fa:d6:29:ea:3a:35:5f:
3b:68:42:ab:68:4c:23:68:f4:96:1d:35:f8:2e:dd:
37:fd:96:22:77:fd:9e:ea:a9:e9:cf:93:18:32:e0:
1c:7b:cd:aa:de:7c:d4:28:32:8d:f1:81:8d:f1:54:
20:c9:ce:14:d8:63:85:69:ea:dc:bc:3f:88:16:0c:
42:24:15:8a:4e:90:f4:5c:18:bc:6f:61:9f:39:42:
f9:42:a7:dc:71:25:56:58:15:a4:2c:bc:9d:a8:93:
9a:93:c7:0b:cd:4f:5f:b5:79:cd:64:26:f2:56:64:
5d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:03:24:02:48:77:DE:E7:BD:6C:E7:0E:D3:03:8D:5F:8B:8A:85:2E
X509v3 Authority Key Identifier:
keyid:1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:78:89:07:96:13:ab:f3:82:a9:95:64:2f:7f:b4:1e:32:ce:
c7:82:d5:fb:d8:97:85:a0:66:3b:c8:c0:fe:8d:69:8e:5f:d1:
73:88:41:02:c9:84:ed:bf:21:b0:96:01:5b:b0:fd:d9:76:11:
cb:8f:51:b9:c8:4d:58:a3:10:f1:94:da:9b:05:da:44:b2:f1:
f5:e6:38:96:7f:70:6a:32:80:bb:77:15:32:2a:4b:08:95:51:
2b:e0:66:60:ff:0f:d8:8d:71:c6:51:a7:77:0a:40:e3:bb:ba:
a1:77:14:83:24:e3:b9:e5:ab:4b:7c:b4:ae:05:37:5c:1c:57:
65:5e:3a:1a:f1:a4:7d:02:29:cf:07:1f:9b:a0:8d:a7:c0:bb:
e4:2b:2e:9e:90:cb:64:56:0d:d5:24:70:f1:82:cf:e0:a5:fe:
b5:a3:dd:84:49:2a:24:08:37:c0:5d:0a:91:89:4d:55:e5:87:
42:2f:5d:d5:25:4b:f9:ce:50:d3:7f:2f:96:c9:ae:e1:b4:8f:
a6:bd:f4:f9:d5:88:26:bf:77:c6:a7:b5:a0:b2:0f:3e:5d:9f:
f7:69:f9:92:32:e0:40:f7:ef:70:bb:ea:8e:ac:95:ab:2b:74:
d2:8c:ac:1a:f9:de:64:b5:47:81:11:11:51:b6:bb:9b:ad:53:
9f:ef:26:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:25:04 2026 by rpki-client