Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
File: HCcW7wn65JDMfNvTYJTbXz0KHHI.mft (raw, json)
Hash identifier: zwcW/9/A6SQjrwHuKrVJMSmkHksxA3YYUAwa1dUu1jo=
Subject key identifier: 1B:BE:ED:91:21:26:BF:98:D2:FC:BE:23:3F:BC:AE:33:78:4F:CE:F5
Authority key identifier: 1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
Certificate issuer: /CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Certificate serial: 019E1FB57368B9DE395F71572BCEECB13DE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
Manifest number: 0878
Signing time: Wed 13 May 2026 05:00:45 +0000
Manifest this update: Wed 13 May 2026 05:00:45 +0000
Manifest next update: Thu 14 May 2026 05:00:45 +0000
Files and hashes: 1: HCcW7wn65JDMfNvTYJTbXz0KHHI.crl (hash: MeN+YUKMY44mPLrema70uw90dqUDy7QXKpQGnR0ezH4=)
2: Kl7ksgdkf5mddCaAPgAWOeKhVvg.roa (hash: rOa18GJtuQqpcGIrwGnhcp3m4z08/3Ol4xsmgiWc0ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:73:68:b9:de:39:5f:71:57:2b:ce:ec:b1:3d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Validity
Not Before: May 13 05:00:45 2026 GMT
Not After : May 14 05:00:45 2026 GMT
Subject: CN=1bbeed912126bf98d2fcbe233fbcae33784fcef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6c:81:6d:44:1d:7e:49:50:06:84:60:6b:a7:
ec:36:60:8b:94:83:0b:53:ca:20:ad:b9:a7:88:b4:
39:ed:64:1d:4d:f2:29:b5:d5:ff:b4:f5:20:de:3a:
e3:be:36:c9:b9:0f:2b:79:a7:a8:05:b9:66:b7:a6:
3e:f5:5d:59:6a:d1:6d:e3:71:e1:82:16:24:78:d0:
dc:5c:cf:e4:12:25:d6:6b:67:36:4f:2f:6a:75:c8:
0c:46:00:59:0d:8a:09:f2:3e:b8:7f:b0:1c:26:7c:
39:c4:01:29:3c:a1:57:c2:f4:f0:de:7b:8f:38:68:
ca:f5:ae:cb:f5:f8:cc:d3:e4:41:a3:8d:69:86:cf:
fd:9b:09:97:d5:4e:f4:07:c5:ca:a1:4a:e2:a8:29:
b6:94:a8:96:fd:80:d0:06:5f:43:81:c8:eb:02:16:
b7:65:2e:9b:41:ca:ad:c0:98:92:10:99:4b:46:27:
d3:29:f0:29:4b:31:8a:ca:bd:b9:35:2a:cb:7a:33:
9a:aa:ba:31:aa:dd:28:5f:56:74:5d:b0:ed:8a:98:
7a:a5:ea:21:76:00:b7:44:ff:41:d4:0f:46:11:af:
89:fe:9a:67:d5:6a:f6:c2:11:98:55:62:2c:95:90:
ff:1d:55:91:73:cf:2d:48:88:a7:27:60:92:c8:0d:
4e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BE:ED:91:21:26:BF:98:D2:FC:BE:23:3F:BC:AE:33:78:4F:CE:F5
X509v3 Authority Key Identifier:
keyid:1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:09:05:63:4a:46:62:20:5f:a2:9e:57:c4:3f:a6:7f:d4:17:
b6:3f:69:af:9b:d7:bd:c3:fc:f4:db:78:10:30:8a:d2:81:f0:
97:06:54:aa:99:e3:5b:c5:1a:8b:d2:26:0e:a5:7b:99:7c:8b:
ec:b4:5b:bc:9d:e0:60:ba:31:c3:68:7f:ad:a6:58:9f:62:6c:
cb:91:41:88:8e:9d:11:97:85:ae:be:2e:c1:26:ea:17:22:1e:
ef:da:c9:16:c9:70:ce:30:c5:45:87:20:77:03:16:dc:5e:98:
c1:0f:9a:e9:a4:29:d7:06:f7:2e:71:ce:ad:4b:a4:ee:de:6d:
09:0c:71:bc:3c:d2:d0:f9:c4:33:dd:c9:34:8a:53:53:44:3b:
00:5a:47:61:4f:29:86:80:4e:e4:0f:e0:97:a4:37:d2:d9:04:
e5:42:d0:1b:41:7d:19:20:2c:0f:c1:32:b7:8b:ba:3f:30:c9:
20:2b:8a:4e:0f:dc:a3:f4:d0:78:1d:2b:8f:b0:52:67:6d:fa:
1b:fc:4d:d5:d1:bb:26:05:c1:8b:95:f3:e9:fd:0c:a1:46:9c:
b6:84:c6:f5:cc:7f:28:38:ea:b5:a7:54:98:14:4a:b8:4b:04:
95:48:2b:65:12:52:2a:7c:b1:00:60:0d:ca:e0:9d:d0:51:f0:
42:55:62:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:21:57 2026 by rpki-client