Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft
File: HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft (raw, json)
Hash identifier: U84O17OpKJJOcDG4Xd+yoietYyXo4IlER+58Tk5qRV0=
Subject key identifier: DF:1B:A9:42:32:09:04:B0:3C:AE:A6:5D:9A:AD:8B:42:B7:FA:4E:42
Authority key identifier: 1C:FB:6D:F9:33:75:A0:6C:56:82:C0:57:C0:FD:2A:73:06:21:8A:54
Certificate issuer: /CN=1cfb6df93375a06c5682c057c0fd2a7306218a54
Certificate serial: 019DA5667232E065AFBD8477902622BC6487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPtt-TN1oGxWgsBXwP0qcwYhilQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft
Manifest number: 04D1
Signing time: Sun 19 Apr 2026 11:00:47 +0000
Manifest this update: Sun 19 Apr 2026 11:00:47 +0000
Manifest next update: Mon 20 Apr 2026 11:00:47 +0000
Files and hashes: 1: 3uUdC3qqQNH1_dT0n-HK8fBBniQ.roa (hash: UQYOsde53G7aaoc7Sep9TNvii9QGeiprFatc1ldKcwI=)
2: HPtt-TN1oGxWgsBXwP0qcwYhilQ.crl (hash: MHPfYAMw36kGaGnM4WOGlU/gXZpFnEmoTCpuxSQF3ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HPtt-TN1oGxWgsBXwP0qcwYhilQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:66:72:32:e0:65:af:bd:84:77:90:26:22:bc:64:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cfb6df93375a06c5682c057c0fd2a7306218a54
Validity
Not Before: Apr 19 11:00:47 2026 GMT
Not After : Apr 20 11:00:47 2026 GMT
Subject: CN=df1ba942320904b03caea65d9aad8b42b7fa4e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a1:ce:ca:46:d0:10:a9:5d:32:fd:c9:71:a2:
14:a8:04:84:d7:11:aa:87:3e:0c:25:8d:06:34:e8:
e0:62:98:d8:fa:94:12:fd:ed:25:b4:83:dd:c3:07:
64:de:2e:28:e4:a9:4d:c9:07:1d:fb:ca:dc:13:57:
97:f9:32:95:70:35:c3:16:89:9c:1a:8c:42:92:34:
09:a4:b4:a4:f4:83:e0:a0:c8:60:2f:6d:0e:0b:24:
8d:44:65:40:86:ae:88:09:31:5b:8a:1b:3f:22:15:
53:64:34:ce:c9:0a:ac:26:5d:04:ad:88:72:f7:ff:
d3:25:a8:ee:71:e3:75:ac:7a:38:f1:5c:fd:80:d4:
e6:9e:5c:1b:54:04:31:8e:06:f2:9e:80:86:e5:aa:
4d:f0:12:c0:71:fb:69:34:75:bf:30:35:9b:0d:8f:
cd:58:66:e7:fd:68:cf:52:31:eb:bf:2f:ec:f4:14:
3d:9e:c6:d0:cb:32:53:19:40:b4:9c:f7:97:9f:b4:
ab:e2:1d:61:a5:2f:b1:b7:b0:55:1b:6c:19:34:82:
89:a5:eb:14:30:fc:a7:0b:8c:a0:93:25:32:b3:1a:
8b:44:17:17:fe:8d:93:f7:fb:76:c4:7c:d0:c6:5b:
32:fd:6d:45:2b:8a:a9:a9:db:56:27:6f:c9:9f:2d:
96:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1B:A9:42:32:09:04:B0:3C:AE:A6:5D:9A:AD:8B:42:B7:FA:4E:42
X509v3 Authority Key Identifier:
keyid:1C:FB:6D:F9:33:75:A0:6C:56:82:C0:57:C0:FD:2A:73:06:21:8A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPtt-TN1oGxWgsBXwP0qcwYhilQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:8a:40:de:45:07:74:82:07:af:22:00:d0:7a:c4:2e:4f:05:
1c:bd:11:af:03:b2:40:cc:44:71:bc:ac:54:08:29:c3:fa:63:
15:f3:54:dd:3b:45:99:19:0f:2f:ac:29:0e:1f:98:ee:41:37:
07:df:8c:a6:be:a5:26:bf:47:59:1a:c5:76:6e:e1:06:bb:39:
7f:ff:f4:e9:6e:a1:fe:cd:c7:1b:8d:12:1c:04:70:d3:fe:50:
b7:43:c1:7e:8b:f8:71:4b:be:31:28:43:f4:56:76:2b:59:b1:
f5:e5:5e:ec:50:0f:b5:02:1f:0d:9e:3b:06:75:ea:ee:8e:81:
66:b8:da:46:06:d4:89:60:ce:93:2c:9d:a5:f2:29:e0:b1:de:
06:94:ee:80:2c:ba:51:26:a5:d6:4e:c2:5a:6c:e8:e1:6a:f8:
00:89:7b:9d:f4:43:f6:75:9b:4b:3f:36:38:64:4a:61:55:60:
8a:ba:2e:0a:4a:cc:f3:4b:6d:1b:c6:15:25:fa:93:45:33:90:
2a:55:11:bc:e9:81:16:b4:8b:49:a5:cd:0a:d2:3e:70:01:0e:
b2:30:a7:8c:4f:3b:bc:9f:8f:70:0f:78:ba:d3:95:95:36:74:
2b:8f:c1:d2:98:d3:af:b1:0b:d8:8e:c4:7a:26:32:91:3b:38:
e6:a0:0c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:02:35 2026 by rpki-client