Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/c1a137-56c9-4149-b47b-94e47253ae81/1/HCjtVcp4H61yd6i_ghgD-y_DgeM.mft
File: HCjtVcp4H61yd6i_ghgD-y_DgeM.mft (raw, json)
Hash identifier: 9TQRPrstCfzU9963OipC1y3PNzV4JNzELbjSEK81BnI=
Subject key identifier: 37:A3:CD:B4:0E:DB:39:F2:60:30:DE:17:E0:CB:5A:A6:0E:8E:98:BA
Authority key identifier: 1C:28:ED:55:CA:78:1F:AD:72:77:A8:BF:82:18:03:FB:2F:C3:81:E3
Certificate issuer: /CN=1c28ed55ca781fad7277a8bf821803fb2fc381e3
Certificate serial: 01A0DE3BE041E9B533BD52094E507191CEE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCjtVcp4H61yd6i_ghgD-y_DgeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c1a137-56c9-4149-b47b-94e47253ae81/1/HCjtVcp4H61yd6i_ghgD-y_DgeM.mft
Manifest number: 7B
Signing time: Sat 26 Sep 2026 15:01:00 +0000
Manifest this update: Sat 26 Sep 2026 15:01:00 +0000
Manifest next update: Sun 27 Sep 2026 15:01:00 +0000
Files and hashes: 1: GrpupAwk8qvALhAYC3ID_c5zGpQ.roa (hash: fz0uUStfb1M9YBMYVTxoO1K/ejQC6qKQPQZ0iBtdjyc=)
2: HCjtVcp4H61yd6i_ghgD-y_DgeM.crl (hash: RrUgvrljNrYSbuR146KJNIVUK4QIodb7X0sFBFItcAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c1a137-56c9-4149-b47b-94e47253ae81/1/HCjtVcp4H61yd6i_ghgD-y_DgeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c1a137-56c9-4149-b47b-94e47253ae81/1/HCjtVcp4H61yd6i_ghgD-y_DgeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCjtVcp4H61yd6i_ghgD-y_DgeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:3b:e0:41:e9:b5:33:bd:52:09:4e:50:71:91:ce:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c28ed55ca781fad7277a8bf821803fb2fc381e3
Validity
Not Before: Sep 26 15:01:00 2026 GMT
Not After : Sep 27 15:01:00 2026 GMT
Subject: CN=37a3cdb40edb39f26030de17e0cb5aa60e8e98ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1b:f9:b2:df:65:3a:ed:f6:5b:88:bb:f0:4e:
ca:a5:4b:ad:44:f9:22:83:49:f6:66:f6:7b:0f:1f:
1b:b6:b2:57:ab:66:ae:44:3d:76:4c:bf:85:1b:f8:
ce:07:a8:3c:d4:f4:01:13:e2:d9:89:20:8f:11:49:
45:61:85:56:13:28:58:b2:d1:9d:4f:6d:bd:4b:ef:
50:22:1b:8c:6f:69:f7:2b:4e:51:24:db:70:b8:b7:
1e:89:3d:dd:d8:f9:75:66:82:40:d0:54:e2:8f:26:
eb:4a:fd:5f:33:f8:35:f2:08:33:c5:6e:ec:5e:88:
b1:8c:d9:e0:62:f8:2f:41:59:ef:f8:a5:1e:9f:3b:
32:35:84:4f:12:a3:11:5f:ad:f5:ec:ef:63:83:b1:
9b:31:cd:bb:1a:3f:e4:98:45:5f:b9:f7:7b:d3:87:
5c:59:57:c8:2b:74:be:fe:df:91:b5:d0:e9:c2:5e:
10:6f:43:4d:dc:9f:28:38:8e:60:c3:21:fc:48:29:
bc:e0:fa:70:0b:f4:21:ab:e8:e7:7b:7a:59:65:9d:
ba:51:35:dc:0b:33:4c:e3:50:3d:d2:78:bd:20:9a:
f4:49:77:a5:b4:20:71:c7:d8:cf:52:5f:22:04:8c:
e1:88:5a:86:33:ca:3a:ce:5e:d8:57:06:d6:76:f3:
8e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A3:CD:B4:0E:DB:39:F2:60:30:DE:17:E0:CB:5A:A6:0E:8E:98:BA
X509v3 Authority Key Identifier:
keyid:1C:28:ED:55:CA:78:1F:AD:72:77:A8:BF:82:18:03:FB:2F:C3:81:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCjtVcp4H61yd6i_ghgD-y_DgeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c1a137-56c9-4149-b47b-94e47253ae81/1/HCjtVcp4H61yd6i_ghgD-y_DgeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c1a137-56c9-4149-b47b-94e47253ae81/1/HCjtVcp4H61yd6i_ghgD-y_DgeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d8:53:da:31:8f:5d:b4:87:5b:16:27:84:59:45:1f:ca:3e:
fd:dd:e2:a6:8f:36:cd:ca:58:3d:bc:10:f9:54:46:b2:43:e9:
91:3e:90:e7:5a:e2:c5:9a:94:db:13:db:cb:ce:a6:10:99:17:
c1:e6:22:aa:87:4c:aa:c7:42:69:9c:ad:ce:ec:f5:45:b7:a5:
b4:6c:bb:7e:dd:cf:80:3e:8e:37:12:d9:97:41:3e:76:f5:81:
d3:a7:c2:c6:86:98:6e:97:72:17:d4:b6:19:af:5f:97:c2:7d:
25:74:9f:8d:83:a3:ee:2d:d1:76:d0:4a:15:45:e0:b9:04:ab:
c6:c8:f0:44:b3:53:3e:f8:ce:b7:08:16:a0:00:7a:ae:62:c4:
77:82:a9:f2:25:cc:65:4e:bf:c3:21:be:7d:26:ae:db:bb:91:
29:79:37:92:dc:a9:e6:26:60:c9:9f:9e:08:6c:7c:a5:ec:5a:
55:bc:9b:36:14:00:4e:98:85:b0:5d:50:5d:13:4b:7f:05:47:
6d:e8:a0:5d:b7:8b:c0:6e:fe:44:34:6b:ab:c4:50:0e:15:b3:
48:39:85:06:de:69:0f:81:2a:6e:15:e9:15:82:56:05:d9:89:
b2:21:5c:80:02:5f:a0:70:5f:14:f5:41:88:30:76:9f:77:96:
e6:5f:3d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:38:08 2026 by rpki-client