Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
File: HApvbzqa4dpeW-h1L6sY3rKLphQ.mft (raw, json)
Hash identifier: nnELXdm3n7680suF3gDzbPfNaxl/wJ7IOY/q4Rc5SNc=
Subject key identifier: 3D:2E:29:A0:BB:71:E9:ED:9C:3D:00:A8:64:58:8F:0B:5C:20:0C:05
Authority key identifier: 1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14
Certificate issuer: /CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
Certificate serial: 019D9A06CEC82E57848AA852F09ECB95692C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
Manifest number: 0379
Signing time: Fri 17 Apr 2026 06:00:30 +0000
Manifest this update: Fri 17 Apr 2026 06:00:30 +0000
Manifest next update: Sat 18 Apr 2026 06:00:30 +0000
Files and hashes: 1: HApvbzqa4dpeW-h1L6sY3rKLphQ.crl (hash: vM59PzfgzrGrEYjubXwJI4JmOce7n13MyWE6D9TqKfQ=)
2: fxHBsVKaXsttW_zXOj8FZqtqL7U.roa (hash: J1BSTHyqQv5WDh3XQtbmLEWduZkd0l1Wk4UUhPLMUhY=)
3: sIfcqsxg3WW57k2COZeb4Iarq9c.roa (hash: wIaOvcTZtG+qCBDexHsWNsZh+YEPmUdduOIOWtQaX0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:ce:c8:2e:57:84:8a:a8:52:f0:9e:cb:95:69:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
Validity
Not Before: Apr 17 06:00:30 2026 GMT
Not After : Apr 18 06:00:30 2026 GMT
Subject: CN=3d2e29a0bb71e9ed9c3d00a864588f0b5c200c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:33:94:ef:ff:00:9a:f5:62:51:73:45:90:3e:
ad:1a:06:e5:18:51:b5:55:0b:65:fc:54:1a:f5:ef:
dd:6d:9e:80:e8:24:f2:3f:c2:11:fa:54:6f:1f:94:
45:c9:8b:c7:96:29:69:3c:3d:af:a6:0f:9a:df:39:
b1:26:ef:53:b6:9d:fb:04:3a:85:3c:85:f0:d2:f9:
a4:fe:f2:4d:ba:b7:bb:0b:d1:d4:bb:2f:ce:50:17:
36:c6:59:c0:3c:1c:cc:da:d2:a1:53:44:e1:d4:53:
08:5f:2c:b0:e2:fd:ba:89:56:13:9b:2b:0f:56:38:
55:31:f9:ad:30:a8:48:23:fc:13:76:7e:05:78:b9:
6e:c5:b3:68:c9:16:97:35:09:94:7e:fc:36:56:15:
1d:3f:56:e0:b3:34:6a:c8:95:0d:e3:c5:b2:68:b5:
99:8a:ad:4c:cd:0c:ff:97:5a:2f:7c:6f:ee:5e:07:
a5:de:5c:9a:20:72:b1:0c:bc:49:33:26:7f:1d:72:
fa:67:6c:93:39:a1:5c:70:55:6e:db:23:7d:ad:9f:
df:98:c3:3a:c6:dc:70:b9:d3:c1:5e:a6:8b:d4:62:
c1:34:4c:c0:b4:36:1c:27:e8:98:63:fc:aa:7f:15:
79:68:11:3d:fa:39:c2:32:b7:89:a8:a3:d2:40:61:
c0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2E:29:A0:BB:71:E9:ED:9C:3D:00:A8:64:58:8F:0B:5C:20:0C:05
X509v3 Authority Key Identifier:
keyid:1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f9:21:c9:bc:12:99:97:42:ad:cd:14:aa:eb:74:6c:56:22:
b5:c9:28:dc:4a:d8:27:a8:c2:14:9d:05:ed:c9:9a:c9:7d:89:
9f:63:4c:22:60:49:90:fc:4f:b2:34:6b:37:77:27:3a:cd:33:
1d:79:61:b8:48:95:ec:85:51:4c:8d:50:ca:60:27:f5:57:37:
83:bc:2f:4c:c0:62:8e:e8:63:27:66:41:98:bd:75:af:a1:cc:
6b:25:a3:5d:39:30:00:b3:2a:cd:d2:37:7e:14:80:26:8a:a6:
40:8b:65:5e:bd:42:09:4f:7a:a8:fd:e0:95:ad:1b:12:5e:f1:
17:ee:71:c9:0f:d5:e6:a9:86:c3:57:f3:6f:d8:dd:92:02:86:
96:e1:da:6f:7c:21:5c:15:23:23:80:41:34:27:28:a3:26:77:
74:95:d1:09:f4:31:36:3d:ed:29:40:7f:4d:87:42:2b:89:eb:
cd:88:ae:bf:0d:12:61:6c:60:28:50:f2:33:e5:30:9b:2f:81:
2e:d9:e2:92:35:d9:2a:83:34:e6:59:81:e2:83:af:19:2c:85:
8e:45:39:1e:73:57:35:cb:9b:8c:b3:7b:fe:5d:06:63:37:3a:
82:fc:19:43:f6:a1:37:4b:48:fc:25:e0:87:d6:20:bd:03:5f:
9d:ce:33:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:34:26 2026 by rpki-client