Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
File: HCtQ2u86DL23KyPKPbvvwVc1g_k.mft (raw, json)
Hash identifier: d0RtIzA3ueTM1YDC0E6p2NDOpz3NFJeBSlIGLMfJ+Fo=
Subject key identifier: 78:46:26:2F:B7:89:24:1B:F7:26:B7:91:F6:A9:74:F2:C9:16:C6:96
Authority key identifier: 1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9
Certificate issuer: /CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9
Certificate serial: 019D28F214C158C8500087D5B23EA2865145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
Manifest number: 0DAD
Signing time: Thu 26 Mar 2026 07:00:46 +0000
Manifest this update: Thu 26 Mar 2026 07:00:46 +0000
Manifest next update: Fri 27 Mar 2026 07:00:46 +0000
Files and hashes: 1: HCtQ2u86DL23KyPKPbvvwVc1g_k.crl (hash: 7lXsMIgRY6VsNbJPMFfweselMcr4AXifiBebkIqsF4w=)
2: Mk8DlpfeRRa1qg1nk0Mvu-YumPw.roa (hash: mUVvW47r5i0R+fZsLAsCtRCsk0x6xVLyquq+qyROV1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:14:c1:58:c8:50:00:87:d5:b2:3e:a2:86:51:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9
Validity
Not Before: Mar 26 07:00:46 2026 GMT
Not After : Mar 27 07:00:46 2026 GMT
Subject: CN=7846262fb789241bf726b791f6a974f2c916c696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:35:81:dc:0d:c3:06:9a:b2:d7:18:0f:4d:a5:
49:4e:e6:01:d3:97:72:15:54:80:fc:a9:ad:29:a0:
11:f2:e0:b1:46:12:94:77:4e:da:b9:b7:b9:6a:54:
1d:2d:64:3e:f7:22:6e:b3:21:a1:7f:f4:de:c5:b1:
32:70:4c:6e:4a:75:54:c6:d2:1f:89:54:08:f1:a3:
89:64:27:72:82:28:fa:6f:36:6f:64:07:ca:45:6e:
83:19:d9:22:d9:c6:b5:45:0b:3b:1e:e3:d9:9a:27:
51:66:f8:3c:fc:5a:e4:ce:76:1a:7c:f8:97:25:4c:
5c:e6:f5:a8:da:5d:23:09:51:58:2c:6b:e5:c9:f0:
6a:e0:79:36:c9:7f:09:26:36:3f:ae:dc:f7:9a:5d:
fa:81:2d:50:c4:5e:b1:ac:fe:eb:cc:cc:a7:35:48:
be:b8:6f:b4:6f:2e:ed:9d:43:b0:cf:c2:6c:b8:d0:
ec:d2:7f:ca:68:ff:45:f8:0b:d7:2e:ce:6a:9a:60:
8a:f5:c7:a1:3c:8f:d1:52:29:9c:74:07:30:78:aa:
04:86:14:d2:e2:18:d5:46:96:b7:fa:dc:ca:31:18:
37:a8:31:c9:63:83:f8:b4:17:80:f7:4f:f2:e8:b7:
60:e4:38:08:89:fc:1b:00:67:a3:59:f8:30:68:eb:
5c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:46:26:2F:B7:89:24:1B:F7:26:B7:91:F6:A9:74:F2:C9:16:C6:96
X509v3 Authority Key Identifier:
keyid:1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:60:6d:aa:7c:36:e2:69:eb:8a:1d:d8:13:c0:99:b7:d0:d9:
12:ed:67:b9:f1:ac:59:c8:6d:4b:50:1d:84:c2:5a:91:31:b2:
72:4c:f3:02:9c:33:08:d7:ee:21:32:27:17:e9:ac:30:22:73:
f9:47:41:44:18:6b:1d:39:1d:37:f2:c9:bc:5a:0d:3e:f0:4e:
b5:59:c6:3b:d4:9b:fc:a0:d7:54:93:4b:5d:72:09:79:d0:95:
13:32:b0:4c:b6:b0:40:28:cb:ba:95:1c:41:d6:6b:23:44:1e:
3e:90:db:91:62:a3:aa:b7:dc:77:dc:9e:d7:ec:58:f6:b4:87:
29:4d:d1:47:01:7e:05:52:8c:2f:6a:6d:88:f0:fb:16:d6:fc:
d0:0c:a5:d3:8e:ed:f5:3b:a6:ac:ab:ac:55:b6:6d:ef:92:2d:
7b:b0:95:f3:6d:0f:aa:d9:22:b9:da:b0:4f:66:80:45:54:81:
5a:03:76:56:74:6a:8a:fe:86:6d:26:5a:52:25:2b:e3:6b:7d:
fb:34:ae:fb:43:52:93:0e:4e:0d:df:07:dc:ef:dc:2e:de:89:
f7:cd:9f:e3:07:c5:d1:e4:ba:b8:54:c3:84:61:da:cc:98:d4:
26:5f:74:35:db:da:5d:41:29:f7:a1:4b:c0:06:ad:f0:f6:59:
98:af:5b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:19:20 2026 by rpki-client