Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
File: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft (raw, json)
Hash identifier: t+O0ghM6rglbvy2EweQDHeStW7CSYrDcTVo4RMeHh4w=
Subject key identifier: 37:C6:69:C3:90:B2:C8:8F:D3:97:5E:F7:CA:A3:1F:59:2A:A1:B1:D5
Authority key identifier: 1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
Certificate issuer: /CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Certificate serial: 01A10B148F87F103C3F300DF62CAD2F3400A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
Manifest number: 13F7
Signing time: Mon 05 Oct 2026 08:00:59 +0000
Manifest this update: Mon 05 Oct 2026 08:00:59 +0000
Manifest next update: Tue 06 Oct 2026 08:00:59 +0000
Files and hashes: 1: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl (hash: 4ed9MgP2nDPa8DwcC0pUBYnD7Ls/uHCA/GJPC7SI0qY=)
2: TQDW0DxTU7CzvSKr8TtyPhHtPTc.roa (hash: 1+s5vjQlLwZnrQX0hqnsI0i09wdeDnUbTWGOuKMahfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:14:8f:87:f1:03:c3:f3:00:df:62:ca:d2:f3:40:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Validity
Not Before: Oct 5 08:00:59 2026 GMT
Not After : Oct 6 08:00:59 2026 GMT
Subject: CN=37c669c390b2c88fd3975ef7caa31f592aa1b1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:44:c8:e9:4c:67:42:0f:89:2e:89:38:97:a3:
62:fb:7b:d9:6d:aa:f8:53:10:cc:07:b3:9d:fc:94:
9c:d2:ac:fc:4b:a4:0b:af:c7:84:3d:29:90:64:eb:
9a:5a:7e:2b:90:fd:f2:e0:93:c0:a3:e4:a3:78:98:
59:f4:4c:9f:62:b4:34:80:e9:17:d4:d7:2c:f8:ca:
a0:19:b5:2a:c1:45:c2:69:1c:b8:33:d5:19:2e:b3:
74:74:f0:9c:3d:c5:75:2d:b1:c6:3a:16:89:e7:6e:
a5:30:49:b6:d1:58:79:2f:dd:a3:8d:6c:cf:fa:60:
b1:1f:5e:d5:34:f7:52:ac:68:1a:d3:d4:2e:c1:66:
54:f7:5a:94:a4:99:c2:5b:15:52:6f:79:13:9e:65:
29:d9:10:02:fc:80:ec:2a:83:9d:45:84:ea:5f:99:
ff:1a:4d:fd:7a:59:78:04:75:ba:7f:88:b0:56:8f:
d5:f0:f4:ca:d5:e7:1c:6a:f0:e0:11:9c:ba:39:b9:
b3:88:19:79:06:79:10:2e:cd:64:f6:5a:d9:a1:dd:
02:82:2c:11:4f:dc:d0:88:47:87:3e:a6:27:93:f1:
62:38:22:e1:e4:d9:38:f9:2d:96:97:b1:43:f5:d6:
46:6f:7f:5d:15:36:99:3f:a9:c1:f0:b9:d3:63:f9:
51:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C6:69:C3:90:B2:C8:8F:D3:97:5E:F7:CA:A3:1F:59:2A:A1:B1:D5
X509v3 Authority Key Identifier:
keyid:1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:25:45:81:f2:d9:c2:1f:e8:73:11:8f:b2:f9:46:34:bf:19:
3f:c1:0a:b9:8f:77:05:6e:60:78:5c:ef:c2:4c:98:39:01:26:
f2:58:93:db:6b:84:c2:af:7f:b2:a5:33:1c:7c:73:e9:76:fc:
be:c8:47:dc:e4:05:05:99:28:4d:73:d8:01:0e:8c:58:89:a3:
42:17:88:82:31:40:9c:2c:ea:ab:70:61:6d:f4:88:d2:9d:41:
9b:02:a1:43:4f:89:2b:b4:c0:fc:f5:2d:e8:0b:a7:0d:5a:b8:
0a:77:01:4a:a2:f5:3d:f3:c4:9e:bc:e6:69:1a:7d:44:0e:75:
f4:a3:ec:06:57:b3:4e:e6:23:4c:a2:b1:59:81:51:65:32:c0:
1e:68:ab:8b:fa:37:05:34:4f:e8:c2:71:e0:e5:92:c5:5b:4c:
42:76:28:64:08:a8:aa:30:0d:18:94:11:c2:24:4c:d9:1e:f9:
4c:1a:15:65:85:90:de:65:f7:7e:c0:7a:74:2b:2d:9d:31:1e:
98:01:fb:4b:bf:55:08:fe:f0:4a:b6:ba:2c:cf:9b:51:72:01:
20:c8:d4:94:8c:bb:b6:56:9a:dc:02:70:a1:ac:b7:64:27:4f:
27:ff:55:03:de:16:b6:6f:49:d7:ef:af:f0:7f:5a:a9:f6:6e:
18:04:bf:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:26:24 2026 by rpki-client