Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
File: HApvbzqa4dpeW-h1L6sY3rKLphQ.mft (raw, json)
Hash identifier: fdz+PIvPnnh3pMXB4VIbL+7/V8APWznS3WmkYqqot3s=
Subject key identifier: BE:E2:CC:EF:90:AE:71:C1:B3:8E:F5:44:24:4E:5B:E7:87:F2:F8:62
Authority key identifier: 1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14
Certificate issuer: /CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
Certificate serial: 019CAB6B5FD0A2ADBAD9AB29F4803BEB4FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
Manifest number: 02FC
Signing time: Sun 01 Mar 2026 22:01:06 +0000
Manifest this update: Sun 01 Mar 2026 22:01:06 +0000
Manifest next update: Mon 02 Mar 2026 22:01:06 +0000
Files and hashes: 1: HApvbzqa4dpeW-h1L6sY3rKLphQ.crl (hash: RrYnxtiLchGODwK3K5uFe6O1QMLngu3/kLiB/6oPmpY=)
2: hVCMHbhbfZIv6_XEgHNxBb1iBTg.roa (hash: +BlQApbHjZb7f8RHAby22GvRQWprbhCIUcnRWldtZiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:5f:d0:a2:ad:ba:d9:ab:29:f4:80:3b:eb:4f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
Validity
Not Before: Mar 1 22:01:06 2026 GMT
Not After : Mar 2 22:01:06 2026 GMT
Subject: CN=bee2ccef90ae71c1b38ef544244e5be787f2f862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:08:1d:6c:db:6e:f5:27:b5:af:58:dd:5f:25:
35:13:e0:7f:5d:b1:30:ec:fd:a4:41:12:77:99:84:
f3:1f:7f:67:57:8c:47:86:77:d4:41:ee:33:29:3c:
3b:73:d7:24:99:75:a8:53:94:7d:6c:e2:9a:cf:c5:
7b:1e:20:a4:ca:79:b7:d0:56:21:70:2a:6e:20:a1:
08:fe:c4:61:81:af:c6:1f:18:1e:e6:d9:87:0b:0a:
57:e2:9f:07:ad:06:c3:d3:9c:40:e1:d8:fb:b2:cf:
87:7d:81:7a:f2:d1:83:03:32:a8:a6:83:94:94:d0:
f3:34:6d:fa:e1:87:2f:f5:20:51:9c:5e:cb:5a:fe:
dc:62:46:32:45:2f:8b:e9:9b:ee:97:06:7f:56:5a:
e1:86:77:b0:9a:5e:aa:2e:2c:9e:f4:01:bd:4c:7e:
e0:8d:40:61:dc:ec:ce:af:e4:92:c8:8a:7c:14:e4:
c4:30:f5:8f:e5:3b:c5:06:8c:51:b4:66:16:c5:87:
c7:d5:ee:07:be:15:1f:73:9d:8f:e2:c5:e5:b3:65:
b1:21:6b:a3:00:be:cf:d5:ad:a2:10:4b:b9:e4:17:
78:79:e4:cd:75:40:d9:45:de:83:93:b6:fe:ff:c9:
d3:c3:fd:94:bb:1f:5d:f1:c0:78:54:10:67:5f:c5:
3f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E2:CC:EF:90:AE:71:C1:B3:8E:F5:44:24:4E:5B:E7:87:F2:F8:62
X509v3 Authority Key Identifier:
keyid:1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:95:b7:3d:aa:94:5a:74:36:4a:55:07:d2:26:67:ab:54:38:
77:f4:a6:be:2f:42:2e:1a:81:af:4d:f7:7f:23:00:8e:2e:42:
fb:de:ba:b2:15:15:25:15:fb:d0:0d:b9:11:37:7d:1d:35:68:
b9:5e:75:8e:65:30:4e:f4:f8:04:ea:05:8d:59:38:37:ee:4b:
42:e1:f3:30:33:73:f0:4e:7c:ca:23:f5:aa:9c:97:8e:98:e8:
12:51:3a:51:dd:11:6d:6b:59:a3:c5:05:17:6a:6f:2f:04:98:
87:f7:34:35:17:11:f7:8d:56:2b:53:ec:c0:a0:8d:5a:c3:e1:
6c:83:31:b9:0a:4a:69:ae:7f:2c:34:91:ab:56:3f:38:77:6e:
b5:8b:45:87:08:5c:86:4f:ac:2e:0a:ca:b7:c6:69:1b:64:8d:
0c:ab:ed:37:e5:f4:13:5a:d6:ad:5b:73:0c:3e:d3:d7:3d:e8:
64:bf:fe:ef:24:e1:59:5e:e6:98:83:fc:14:45:38:0c:ba:bd:
22:97:ae:15:44:25:fb:1d:ee:2d:55:90:62:7f:ec:b8:96:18:
8b:a6:9b:fa:de:e2:ae:40:96:2f:2f:b8:8c:5e:d5:3b:80:a0:
93:72:d9:7b:88:99:c6:6e:16:85:e8:84:b7:83:e4:8e:58:1c:
72:7f:dc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:42 2026 by rpki-client