Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
File: hpY9ADE0zNpW_t_rJ496dop_QC8.mft (raw, json)
Hash identifier: 3kMNi0ioBdGV+ChsY9aKm6kUbZUinQ+2iF8BzOfP4Wg=
Subject key identifier: 6F:DF:74:4B:F4:B1:6F:42:BA:75:37:26:32:84:A5:4D:76:65:0F:EE
Authority key identifier: 86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F
Certificate issuer: /CN=86963d003134ccda56fedfeb278f7a768a7f402f
Certificate serial: 019CAA8FB49AC25FCA6393089E724F70AEDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
Manifest number: 09F3
Signing time: Sun 01 Mar 2026 18:01:10 +0000
Manifest this update: Sun 01 Mar 2026 18:01:10 +0000
Manifest next update: Mon 02 Mar 2026 18:01:10 +0000
Files and hashes: 1: hpY9ADE0zNpW_t_rJ496dop_QC8.crl (hash: s3UnvU8jJHyXXXyprxRId69idG6XHO7DGpounVU4KwA=)
2: ykE1MwKYkciApw-UZeYngB_HUNs.roa (hash: SkxpvOB9g0NJAFJu1F10IT/jLtAQ4gxiMRGC76Dncgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:b4:9a:c2:5f:ca:63:93:08:9e:72:4f:70:ae:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86963d003134ccda56fedfeb278f7a768a7f402f
Validity
Not Before: Mar 1 18:01:10 2026 GMT
Not After : Mar 2 18:01:10 2026 GMT
Subject: CN=6fdf744bf4b16f42ba7537263284a54d76650fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:98:4c:a7:7b:bd:01:85:41:89:97:81:d3:47:
25:38:fc:51:a4:02:18:12:e2:d6:f9:07:b0:cd:96:
92:ba:06:12:66:15:a1:0a:2f:ae:1e:92:9b:b1:0d:
dd:1b:11:a5:65:57:cc:ec:a1:7c:e2:cf:36:24:c4:
00:da:3f:07:56:7e:cb:71:32:0c:86:a8:e4:10:7c:
1a:2e:c3:76:58:56:94:64:c9:72:3e:1e:56:fe:4c:
50:2e:45:66:0a:d6:f2:f7:17:51:ac:6a:4f:a1:16:
9a:dc:67:6c:a9:eb:06:46:bc:cd:bd:b2:cd:20:f6:
9a:c8:a2:90:cb:5c:88:64:38:c0:3b:67:36:e0:1d:
a6:3e:36:95:d8:e1:ee:9a:5e:e1:62:21:f2:fa:bd:
c5:86:40:22:a9:59:fc:78:e9:36:e4:3a:e8:3a:5e:
1f:39:e0:62:38:d8:57:88:eb:38:30:94:76:03:c0:
2d:41:5d:43:e1:f9:54:f1:e2:24:b1:03:73:ae:dc:
4e:b5:8d:9c:39:9f:7b:d3:b3:94:fb:c5:f5:96:65:
81:f4:97:b0:80:f3:1a:5c:ee:7b:e3:61:45:ec:69:
03:9f:22:af:21:14:aa:02:1f:2f:c4:ae:6d:d7:be:
b3:28:57:25:76:b1:13:b3:43:54:e3:0d:b5:6a:c4:
62:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DF:74:4B:F4:B1:6F:42:BA:75:37:26:32:84:A5:4D:76:65:0F:EE
X509v3 Authority Key Identifier:
keyid:86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:2d:4a:6e:09:ae:c0:d1:50:00:11:8d:02:43:00:f6:cf:38:
8d:dc:a0:9b:3e:66:ca:6e:73:1a:c9:f8:6f:dd:84:be:8c:f1:
53:f8:94:0c:0c:ad:ee:15:92:ff:2e:83:6b:ba:6f:a5:42:23:
72:b9:65:ab:e8:bf:3b:db:71:62:f6:de:99:34:3d:db:a1:28:
91:7f:c2:2f:63:df:d3:51:21:ce:7f:15:67:d3:93:7b:35:b1:
36:d5:e2:08:6d:8d:21:2f:80:95:6f:d6:df:3e:48:aa:ec:36:
60:31:b3:9b:90:ad:f5:dc:bc:66:9f:ab:70:69:b7:65:f6:3f:
be:1e:c1:c6:47:80:61:79:2e:8a:98:6a:f5:97:32:d2:8b:97:
a7:6d:53:fa:ed:16:8d:04:b0:9d:ec:6e:e7:7c:55:0d:29:33:
e4:ca:a2:e9:f7:4b:9f:0f:f6:7b:9a:0b:b7:5c:e7:d5:01:e6:
55:94:77:09:b9:50:05:ae:7e:ec:72:4f:a7:52:c5:2a:3f:79:
84:3d:78:96:98:6f:25:b1:af:12:54:81:97:ff:f1:04:77:12:
58:bd:a3:89:05:62:5c:43:2a:b3:a5:61:5c:e9:03:71:d5:be:
4d:db:15:35:f1:50:fd:9b:86:37:22:c4:eb:45:91:5a:8a:69:
99:1b:68:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:17 2026 by rpki-client