Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
File: HcKeV0nukcWjOujjC33J__OV_-Y.mft (raw, json)
Hash identifier: 9QyHthhvSBiU1fmKsTaYVJsGDaEDZxfEldNZVhnP+2M=
Subject key identifier: A6:78:F4:FD:28:5E:A7:1A:2C:C1:7C:28:57:92:AC:A6:5C:14:09:94
Authority key identifier: 1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6
Certificate issuer: /CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6
Certificate serial: 019F95121A86244E3C41E668B203A790C8EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 17:00:19 +0000
Manifest this update: Fri 24 Jul 2026 17:00:19 +0000
Manifest next update: Sat 25 Jul 2026 17:00:19 +0000
Files and hashes: 1: HcKeV0nukcWjOujjC33J__OV_-Y.crl (hash: 9j7AzXS+WEppQmwij/rP2xCpgPKYFQLNPEk+vYyL42Q=)
2: qBp9Go7C5K5PO25VaZfafmJldXo.roa (hash: aZjaPl/cUtUuPNjewiVI2iRit3lb7H1MzhD8WojfNfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:1a:86:24:4e:3c:41:e6:68:b2:03:a7:90:c8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc29e5749ee91c5a33ae8e30b7dc9fff395ffe6
Validity
Not Before: Jul 24 17:00:19 2026 GMT
Not After : Jul 25 17:00:19 2026 GMT
Subject: CN=a678f4fd285ea71a2cc17c285792aca65c140994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:08:af:c6:44:47:a5:8f:20:62:e0:e0:dd:c1:
7f:60:86:05:ff:65:d8:ac:15:6e:bb:4b:b3:63:d9:
bc:c4:a3:f0:c6:65:6a:27:53:24:7a:f7:3b:88:f0:
b0:dd:b6:a7:43:f9:1b:e0:f4:78:a5:3d:a2:c2:25:
d5:34:37:db:5b:48:90:8d:01:76:9e:81:c8:b2:13:
e8:b9:8b:09:19:9d:19:d4:58:7c:2c:a7:99:f1:02:
bf:12:5a:eb:74:3c:47:94:69:e2:32:ab:8f:7a:a7:
46:5c:de:0d:55:73:d2:52:5c:2b:66:90:02:57:39:
3e:04:19:8d:9a:20:38:ff:d0:a4:52:82:b1:93:2b:
3d:76:49:8f:63:71:04:6b:aa:7b:89:8c:26:2a:8b:
ae:fd:ce:85:d2:72:dd:fd:ee:92:ee:ec:03:c7:8e:
11:86:5d:47:5d:f9:c3:59:41:54:0c:80:8f:1c:63:
50:49:4d:f5:0d:6d:6b:a3:12:c4:68:33:fd:8d:f0:
60:85:55:7b:d7:8a:03:9a:f6:58:99:35:48:36:5d:
2d:76:95:e2:40:26:e2:f1:d8:82:e5:e8:77:cd:e1:
8a:fd:ed:56:c0:3a:6d:33:1f:03:cd:f8:66:c7:90:
5f:49:0e:d2:97:67:ca:a1:83:36:a4:03:27:d9:84:
0c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:78:F4:FD:28:5E:A7:1A:2C:C1:7C:28:57:92:AC:A6:5C:14:09:94
X509v3 Authority Key Identifier:
keyid:1D:C2:9E:57:49:EE:91:C5:A3:3A:E8:E3:0B:7D:C9:FF:F3:95:FF:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcKeV0nukcWjOujjC33J__OV_-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1d97a-5b9d-40bb-9b27-53ffa5f9985c/1/HcKeV0nukcWjOujjC33J__OV_-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:49:61:b6:ee:59:cd:06:3b:81:98:9e:3c:c7:46:bd:bd:da:
2e:f6:16:0e:41:4f:63:79:9f:20:c9:e7:08:fb:03:59:68:18:
74:0d:94:e0:fd:2a:48:6c:e2:06:d2:26:2e:90:d0:87:03:4e:
0a:8e:5a:5f:fc:b4:49:03:32:4d:53:a6:54:62:bc:8a:60:53:
c7:af:d0:08:03:8e:7c:52:bd:98:5a:c5:8e:61:5c:26:a1:22:
06:ed:5b:a3:9c:8c:f8:9c:ef:56:74:8b:e0:1e:2e:9d:0a:b2:
2a:38:a4:01:d7:50:70:16:37:52:44:33:e9:82:a7:2d:cb:f9:
08:8e:ed:bf:e6:3c:48:b6:a5:9b:ab:57:72:35:c4:57:b1:95:
6c:6c:1a:21:ce:94:8c:90:a4:26:ab:94:26:b5:22:fc:2d:07:
3e:fb:0c:51:0c:a5:89:3b:e0:6e:78:08:f0:20:25:05:2a:92:
7f:5d:e5:a5:cc:e6:44:bf:df:fc:19:8e:63:c2:03:4c:f4:28:
80:37:9b:46:2e:d1:30:7b:2c:3e:47:85:1a:f9:38:8d:41:6f:
ef:f3:13:f2:d6:cb:ea:27:da:8e:3e:b1:46:c1:21:e2:82:14:
3a:51:a4:a9:e1:48:5a:c5:62:56:6a:f4:7a:7a:b9:fe:88:c1:
bf:05:78:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:34:05 2026 by rpki-client