Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft
File: HpUuiDc295y9nFZHBL88NmIbjso.mft (raw, json)
Hash identifier: bDj93CCb5dLH19L1V0PY80G6eqZqgm0XnN2xWQz6ngI=
Subject key identifier: B8:AE:BB:BE:83:F6:36:CD:2D:FC:7A:DB:79:4B:42:5D:A9:A4:EF:B8
Authority key identifier: 1E:95:2E:88:37:36:F7:9C:BD:9C:56:47:04:BF:3C:36:62:1B:8E:CA
Certificate issuer: /CN=1e952e883736f79cbd9c564704bf3c36621b8eca
Certificate serial: 019CABD9D160C4ACD3454B917390B30757C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 00:01:44 +0000
Manifest this update: Mon 02 Mar 2026 00:01:44 +0000
Manifest next update: Tue 03 Mar 2026 00:01:44 +0000
Files and hashes: 1: 1cwCMtAIvTWCxyP_Iez-RNBZ-5I.roa (hash: DIWs3NXNIaM1l1Z4VPA1y0AbQE6IAqLDJXzdXYBdRAU=)
2: HpUuiDc295y9nFZHBL88NmIbjso.crl (hash: L+IwLe2GUPN3I36V5kNijQFN3KPGpQzirNZcR0LwQeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:d1:60:c4:ac:d3:45:4b:91:73:90:b3:07:57:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e952e883736f79cbd9c564704bf3c36621b8eca
Validity
Not Before: Mar 2 00:01:44 2026 GMT
Not After : Mar 3 00:01:44 2026 GMT
Subject: CN=b8aebbbe83f636cd2dfc7adb794b425da9a4efb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:29:a0:68:99:cc:99:58:e1:ff:32:62:0b:07:
b4:42:4c:59:f9:55:61:96:74:69:9a:62:d6:99:ad:
26:52:5a:11:e8:35:41:e5:99:85:92:da:f6:4f:d4:
23:f1:dc:5e:70:9d:aa:64:2d:8b:61:9f:ba:ca:65:
fa:9c:d2:44:81:2b:5b:f3:74:6b:30:73:1e:39:25:
50:f5:ba:af:42:f0:e2:e0:24:a4:5f:13:89:24:9e:
d8:fa:e6:1c:ce:8e:9c:8a:03:48:28:f2:1b:cb:7d:
ff:4b:2f:aa:de:54:1f:c6:41:d5:56:1b:e8:ee:ac:
8a:67:9a:4e:59:18:9f:6b:db:64:8a:0c:9b:91:e7:
63:fb:06:bd:39:5e:39:69:56:32:c8:9b:73:3a:14:
99:fb:af:20:f9:37:c5:95:d2:e0:49:54:70:78:7d:
3c:e1:64:3d:ae:03:81:b7:d6:7f:5f:69:98:92:f5:
fb:9c:f0:7b:2a:d6:29:f8:a7:4f:c6:aa:28:5e:f1:
d6:39:6a:90:4d:a8:33:78:c7:79:4a:6b:75:1d:a2:
86:c0:da:7b:4a:6c:e3:9b:8f:de:91:8c:f4:9d:bb:
4a:2a:9f:da:df:b5:b3:e5:83:8c:36:0a:f7:58:a3:
28:ea:f1:1f:d8:cd:25:6e:b8:e1:46:bc:19:29:8a:
70:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AE:BB:BE:83:F6:36:CD:2D:FC:7A:DB:79:4B:42:5D:A9:A4:EF:B8
X509v3 Authority Key Identifier:
keyid:1E:95:2E:88:37:36:F7:9C:BD:9C:56:47:04:BF:3C:36:62:1B:8E:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:28:25:a2:14:e6:26:b8:29:ae:57:07:b9:24:a2:b0:3f:ca:
91:34:85:fe:f9:6c:14:e9:aa:71:6d:da:e1:40:c2:4d:1f:7b:
39:ed:96:0b:55:56:c2:b0:d1:d6:aa:7f:51:af:aa:f1:9c:31:
c3:65:27:61:10:f3:9e:bf:6f:f6:00:32:e6:17:12:33:98:a8:
38:67:ff:db:3a:3f:b3:01:56:93:a4:17:59:f1:54:43:05:cc:
83:8a:80:51:30:46:e0:b9:5a:54:8e:14:38:8d:f0:a3:a5:34:
8c:25:65:94:73:24:65:c0:2d:10:0a:99:34:40:56:d7:d8:38:
0c:6d:1c:c7:98:15:86:37:98:37:a7:15:86:22:92:25:41:9d:
02:cd:48:54:f2:07:70:83:19:81:48:25:bd:ea:b2:15:bb:1a:
c2:fe:6a:53:80:50:bf:21:f0:c9:df:a3:d9:88:5a:19:5c:fa:
6b:c9:e0:50:c1:60:22:de:86:1b:6c:2d:13:c4:f0:37:01:56:
1d:66:52:19:66:b8:9d:d4:b7:b4:6e:8d:88:0f:36:44:b5:1c:
ea:91:e7:c0:e8:44:44:c0:e1:b4:33:43:e6:3e:56:8c:bb:d6:
cf:c1:4b:5b:b4:ba:97:bc:05:39:a4:4e:61:4d:f5:72:4b:2b:
74:ac:b1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:54 2026 by rpki-client