Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft
File: HCN7aINpeRKVf40zc3AryQbSZEU.mft (raw, json)
Hash identifier: WqhyGSgPwTOr5EDzHNPifo3mFWXctEK14z1Ot2xAbVc=
Subject key identifier: EF:A7:A1:15:4A:FF:1A:02:EA:6F:7A:54:45:D8:67:73:57:A4:E2:CD
Authority key identifier: 1C:23:7B:68:83:69:79:12:95:7F:8D:33:73:70:2B:C9:06:D2:64:45
Certificate issuer: /CN=1c237b6883697912957f8d3373702bc906d26445
Certificate serial: 019F8F475920FC4179ECC9B8A441C858C028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCN7aINpeRKVf40zc3AryQbSZEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft
Manifest number: 15DD
Signing time: Thu 23 Jul 2026 14:00:45 +0000
Manifest this update: Thu 23 Jul 2026 14:00:45 +0000
Manifest next update: Fri 24 Jul 2026 14:00:45 +0000
Files and hashes: 1: FMHMs5u6nqIr6z09yDsjzYxfks8.roa (hash: cXOK9Ev2UNFSti3Tqnxxgi2cL3wHqDi6S1Qe8D5ON6A=)
2: HCN7aINpeRKVf40zc3AryQbSZEU.crl (hash: oRR224qvLbAU1WbN79xE7Iuy13FmwHpy6HzJ8YXsdaA=)
3: SgzTZO7h0qw0lQtLCLQDxdwtTHc.asa (hash: YpjRapR2fvquPrVNxyf5Ct4ddLeyNJ16sV02TNO6WCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCN7aINpeRKVf40zc3AryQbSZEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:59:20:fc:41:79:ec:c9:b8:a4:41:c8:58:c0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c237b6883697912957f8d3373702bc906d26445
Validity
Not Before: Jul 23 14:00:45 2026 GMT
Not After : Jul 24 14:00:45 2026 GMT
Subject: CN=efa7a1154aff1a02ea6f7a5445d8677357a4e2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1f:ba:c5:c4:f3:bd:ea:e4:d7:f6:f6:2f:ab:
99:a8:55:16:1b:6c:9d:47:87:5e:d1:0a:bf:d7:1c:
e8:fb:31:7b:24:d9:ff:e3:04:ba:2d:be:1d:49:6c:
10:82:09:53:16:0a:10:64:94:38:50:1c:38:fd:e3:
c5:0d:91:96:5e:97:de:4e:be:af:ea:ce:75:39:9e:
4b:ec:c3:63:34:46:d8:73:ed:5e:00:5b:46:53:de:
a6:e5:cc:ea:07:3b:ab:2d:68:e1:7f:3c:3c:a4:33:
6c:a8:32:28:3b:2f:35:82:25:a4:81:cc:71:c8:fc:
0f:17:21:9c:15:f4:51:5f:23:f4:d0:9c:d0:0d:03:
ee:d6:7b:21:c4:2f:e0:f0:4e:07:45:ab:04:87:8a:
84:9b:5b:a7:97:51:63:3d:7b:7c:22:30:05:9e:5b:
08:55:39:85:76:4e:26:f4:47:87:8b:d0:08:78:e5:
e0:35:b6:02:22:21:23:99:1b:7f:13:5d:bb:8a:6c:
ee:be:b6:55:ca:9e:3c:0b:38:50:17:17:55:b1:45:
b1:7c:02:36:d0:24:2c:ca:fc:dc:02:22:5f:2a:1e:
7f:41:98:3e:cb:63:a9:f9:c7:d9:09:96:29:1e:7a:
50:67:71:38:42:f7:fb:8d:f7:bb:15:1a:48:9d:a7:
f0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A7:A1:15:4A:FF:1A:02:EA:6F:7A:54:45:D8:67:73:57:A4:E2:CD
X509v3 Authority Key Identifier:
keyid:1C:23:7B:68:83:69:79:12:95:7F:8D:33:73:70:2B:C9:06:D2:64:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCN7aINpeRKVf40zc3AryQbSZEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:66:07:5c:df:0a:a0:7a:d8:98:05:72:34:f9:be:84:e6:3b:
52:10:0d:ce:de:35:4f:43:07:dc:42:1b:cf:fd:91:fa:3f:fa:
1f:44:45:4e:2f:bd:60:5b:b4:b7:85:c6:ab:c3:6f:84:aa:b7:
24:26:ad:b1:73:87:37:f6:ee:0f:91:54:3a:01:39:70:01:99:
3c:65:54:b0:be:36:b4:c3:2d:ce:3e:30:11:8f:df:c8:c1:f1:
4a:0b:28:00:09:43:64:26:0c:1e:57:62:a1:77:56:dd:60:e2:
30:dd:28:fd:ef:e3:5c:cb:e3:d9:84:73:62:1a:71:b2:8d:23:
a6:01:a3:28:df:ef:9f:4d:b5:2a:8a:a8:30:b8:7f:f9:5b:1f:
72:9c:87:ff:bf:26:50:43:01:bf:56:8a:36:25:18:c2:32:e9:
b7:94:70:e7:eb:a7:64:aa:3d:bd:31:f7:f8:63:9e:12:7d:7d:
8f:c8:ca:2f:ed:2a:3b:61:aa:fa:76:e3:ad:be:a8:e9:d8:22:
d6:d8:33:83:36:65:81:ac:41:ae:4b:72:46:ab:04:10:b7:9d:
0b:bc:2f:b8:9e:b3:96:2b:82:9b:b7:ba:7f:de:3d:2e:d6:e9:
dc:c0:b1:1b:bb:3e:23:66:63:9b:e4:3c:83:f1:2d:d1:84:9d:
b3:d0:84:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:39 2026 by rpki-client