Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
File: HvpZajEmrOApxtcNUpJX4Hs4ugY.mft (raw, json)
Hash identifier: ChvfYLRNfYAa/jkjb/1Upqr4Cf033XKqi9aBn/PwMEU=
Subject key identifier: 73:B7:95:61:1D:79:C1:67:61:24:91:1C:40:0B:26:76:E7:B3:13:0D
Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
Certificate issuer: /CN=1efa596a3126ace029c6d70d529257e07b38ba06
Certificate serial: 019CAAFD54A321CCF87D298F903D1E9C8D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
Manifest number: 184E
Signing time: Sun 01 Mar 2026 20:00:54 +0000
Manifest this update: Sun 01 Mar 2026 20:00:54 +0000
Manifest next update: Mon 02 Mar 2026 20:00:54 +0000
Files and hashes: 1: 5bPAfHY71g1tz33WhyemzOl8Afo.roa (hash: TP978Gguy7Dyr8s78cghRC57XCgceUKU/R4E1xx5GXM=)
2: HvpZajEmrOApxtcNUpJX4Hs4ugY.crl (hash: 5GMRUZDaZ16HBvDVWakcYz8OPPOyx7/C0G8x9EYGfo8=)
3: Jgw1Gx1dPclOABYcbQJfITbOPSs.roa (hash: BIdjPDAk2zyiIML1uGPD7J7cytE8YqCkn/DCRcCwXHg=)
4: WmQL_VXpmFEvvoiR5PkxFDta9mk.roa (hash: 17mQDCBUS/Kj6BwRHUdOrAKzENyd7WfmRdfkyMXwsNg=)
5: k0uiX_PSGOLpmHbIawhjH3EL4VU.roa (hash: bIgcQVO40YbjY2beu9BGZjDPrIJm2Cv7wEtLZBhcVvU=)
6: oWfoIebl0vdlosgiWt_PqvTMCvI.roa (hash: sSMkZCHcY8051GIBXnABdJ427F125fjlpin/p+USqXE=)
7: u4N4FwbZU3R4YrPAif2Bhql7uXo.roa (hash: j1Aeh/ewSlpsUAcZ6gs1u3mvHVZZFBD8JqF3ICrH+Og=)
8: ukePksioR9rZ806d8URQYeRLONE.roa (hash: EXhlSdLPcjyLmaBcE0rpgx1b7yqNH2I+X3p7p/NtRc8=)
9: zyxXbI9OnQu5jq-ynP8CkpOvBoY.roa (hash: oCay3sttgXTbZ2VbrlKNbQDyzc/lwZ/odvgbaMZNPfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:54:a3:21:cc:f8:7d:29:8f:90:3d:1e:9c:8d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06
Validity
Not Before: Mar 1 20:00:54 2026 GMT
Not After : Mar 2 20:00:54 2026 GMT
Subject: CN=73b795611d79c1676124911c400b2676e7b3130d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bd:81:9f:5e:bb:a9:52:44:b5:a1:f5:d0:5a:
a5:b9:77:cc:45:6e:11:8a:29:fc:74:f1:09:0f:dc:
c7:76:c1:85:f3:3e:0f:bc:9e:65:75:f6:74:c7:74:
b7:ff:13:ca:16:65:83:94:3a:bc:d2:76:b5:90:22:
b1:0a:7b:a4:e4:87:d3:1c:5c:10:ea:75:d6:ec:62:
ad:33:97:fe:a3:3c:76:63:d9:fb:57:8a:7c:c7:67:
71:f2:18:a9:38:08:19:1f:d9:cd:f9:0a:dc:02:30:
9a:2e:e6:95:dc:bc:df:93:53:08:7c:51:88:ca:a5:
c9:43:02:1c:40:3e:f1:28:83:62:85:d6:35:32:70:
ee:dc:a9:64:9c:6e:51:1d:ba:fb:b5:66:d6:46:87:
4e:2e:6e:1f:d5:ef:20:bb:ad:0f:b6:d4:99:81:c9:
a5:d9:02:79:6d:9a:b5:45:61:04:3c:dc:53:f5:e9:
86:b6:b5:54:a8:90:c4:a6:e7:9b:7b:28:1e:37:ab:
d7:37:87:a9:73:f8:3a:1a:b5:7f:d9:79:7b:8e:3e:
9d:f0:cc:13:f6:98:39:96:48:0f:37:23:0f:f3:05:
0b:b5:3f:29:27:f8:74:85:7b:2c:b5:8f:22:cb:67:
4b:41:44:9e:e9:96:53:d3:90:de:42:f2:02:34:c0:
75:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B7:95:61:1D:79:C1:67:61:24:91:1C:40:0B:26:76:E7:B3:13:0D
X509v3 Authority Key Identifier:
keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ff:08:a6:06:e7:93:74:59:76:1c:4c:06:51:09:98:9d:6c:
0a:5d:ab:c4:df:f2:f6:70:b7:39:21:41:00:30:2d:bc:85:58:
77:fb:db:42:9d:4c:61:af:62:e1:f5:98:c8:76:4b:37:c3:b7:
9b:67:ca:43:dc:17:fe:3f:09:20:70:83:6a:8a:b0:57:97:99:
5d:0a:a4:10:35:41:57:32:66:46:03:d4:b2:f3:54:4f:b5:18:
61:5f:03:cb:bf:02:40:0c:d8:43:45:02:88:44:f3:70:c1:6e:
89:c6:d8:84:95:45:48:d4:02:57:55:92:6c:a8:d2:d2:9d:2a:
cb:37:7b:ac:c4:55:51:09:a9:cd:5c:39:5d:ac:44:de:71:2e:
7d:ac:85:58:27:12:4e:ee:90:cd:e3:c6:d5:f0:b3:75:c3:4a:
86:9e:e3:ad:93:ec:e6:dc:9e:08:58:17:29:5f:05:d7:7b:81:
18:13:8e:d1:4c:c5:39:8a:d8:da:0d:d2:49:c1:b8:f5:6a:9c:
e9:0c:42:44:c8:5a:ca:7d:76:76:52:39:ad:17:dd:d0:9a:d9:
51:fe:ad:97:dd:bd:70:a4:12:6b:f1:26:c5:25:cd:f6:43:ba:
db:88:57:11:6e:4c:eb:38:5a:0f:63:6d:6f:53:e2:9e:f1:09:
cd:a4:43:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:46 2026 by rpki-client