Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft
File: HpUuiDc295y9nFZHBL88NmIbjso.mft (raw, json)
Hash identifier: 3TcnmhsDLATY+eXrYcng+89Gkbs3W5UtwZiw9DJw+oU=
Subject key identifier: 9A:14:4D:B7:F6:91:D1:03:C5:84:14:6B:40:9A:02:CE:33:11:16:6F
Authority key identifier: 1E:95:2E:88:37:36:F7:9C:BD:9C:56:47:04:BF:3C:36:62:1B:8E:CA
Certificate issuer: /CN=1e952e883736f79cbd9c564704bf3c36621b8eca
Certificate serial: 019D99620C39114CEC0794EC4A17C0546634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 03:00:32 +0000
Manifest this update: Fri 17 Apr 2026 03:00:32 +0000
Manifest next update: Sat 18 Apr 2026 03:00:32 +0000
Files and hashes: 1: 1cwCMtAIvTWCxyP_Iez-RNBZ-5I.roa (hash: DIWs3NXNIaM1l1Z4VPA1y0AbQE6IAqLDJXzdXYBdRAU=)
2: HpUuiDc295y9nFZHBL88NmIbjso.crl (hash: wKJieyATwcOey/6VWEb8qpUEG7RPh3XD7Skr+vtNhRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:0c:39:11:4c:ec:07:94:ec:4a:17:c0:54:66:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e952e883736f79cbd9c564704bf3c36621b8eca
Validity
Not Before: Apr 17 03:00:32 2026 GMT
Not After : Apr 18 03:00:32 2026 GMT
Subject: CN=9a144db7f691d103c584146b409a02ce3311166f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f6:f7:ad:1d:78:6a:c7:6c:3e:21:ac:d9:e1:
fa:e6:f1:fb:c6:23:4a:9c:cd:60:b4:f9:a4:75:33:
78:56:47:ba:ee:5d:a3:c2:61:d2:c7:57:9f:cc:77:
c5:ba:53:09:8a:89:76:4e:00:f7:65:98:b9:27:78:
e3:f1:8c:a2:c3:6e:e2:c9:81:5b:a4:44:45:3c:33:
e3:c8:a3:cc:62:07:17:13:c0:be:74:64:cc:ff:29:
4c:9f:b4:26:d3:24:d8:b8:f1:14:f3:6d:b2:d8:f3:
1a:1d:77:46:4a:70:a6:4a:ba:93:6f:0a:46:52:cf:
0b:f6:31:01:ad:46:a2:c5:bc:3e:b1:72:ea:2d:32:
83:e2:15:c5:f6:67:7f:52:25:f0:4c:84:4f:8b:7d:
e8:c8:1a:cc:8f:b7:29:e7:34:47:ff:9f:60:b0:20:
72:db:92:f7:c8:ad:e7:c4:d4:c9:e5:d8:24:15:e0:
15:5a:61:f2:dc:ab:df:dd:48:9f:80:21:71:10:df:
a3:69:36:fb:ba:0e:b0:9c:8e:1c:31:3b:79:0f:3a:
d2:fa:04:f6:ee:15:2d:fc:b0:fa:11:12:14:7f:04:
cc:bb:45:ac:70:82:b1:d8:8c:12:c6:de:1b:dd:c2:
bd:1c:9e:05:45:69:be:00:66:6d:f3:cf:08:ab:93:
f7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:14:4D:B7:F6:91:D1:03:C5:84:14:6B:40:9A:02:CE:33:11:16:6F
X509v3 Authority Key Identifier:
keyid:1E:95:2E:88:37:36:F7:9C:BD:9C:56:47:04:BF:3C:36:62:1B:8E:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:43:79:aa:de:72:3e:de:29:1a:5c:e7:02:a7:c6:0f:5d:3e:
2f:d6:2a:15:ce:7e:ca:2a:48:d3:0d:94:ee:77:0e:71:37:e3:
01:11:d2:16:f7:a7:18:81:d0:df:98:0c:bd:dd:c6:b1:03:7f:
63:6b:93:2c:aa:2f:9a:ea:d4:ed:4e:59:43:d1:af:31:f7:a3:
7f:0e:d9:2d:65:50:4a:ea:96:34:97:ee:3f:6c:1c:af:b4:54:
fe:57:e3:83:ac:3c:ac:d4:cd:53:6a:67:0c:09:ba:e8:99:79:
0f:af:ed:ee:a1:5e:3b:b4:07:0a:0d:f2:ad:9b:2b:f3:28:e5:
ff:52:ad:93:b5:d4:98:65:d1:b1:9b:ae:d1:87:52:bf:29:43:
2d:f4:ff:3c:3b:ab:de:09:0d:0e:54:8f:80:48:2f:46:c0:0e:
38:5d:9e:88:eb:96:87:08:30:90:23:c6:c6:68:7b:08:ff:1b:
aa:66:15:d4:a2:c8:b5:aa:6d:8b:08:d9:fa:33:13:c7:cb:ab:
c7:60:f8:2b:c0:0c:ff:0e:d2:a3:e0:70:c9:24:cf:bf:14:4b:
f3:e0:d8:52:42:b7:cf:51:f3:e2:ce:54:b2:81:dd:5c:25:23:
24:57:ac:30:cd:c9:ee:7a:98:a7:8d:56:d0:b4:3a:a9:19:65:
3c:1d:4e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:46 2026 by rpki-client