Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
File: HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft (raw, json)
Hash identifier: 9cBOHCEG7XWcJH5jjLk9WJuFgot2ttAltrUR0+/lh8k=
Subject key identifier: 71:8A:D1:93:2F:CB:F0:CE:07:08:3D:00:64:42:D6:08:5B:2B:0D:A2
Authority key identifier: 1D:5D:A9:10:9F:61:4C:7C:41:59:B3:23:1A:38:77:70:2A:6F:21:CE
Certificate issuer: /CN=1d5da9109f614c7c4159b3231a3877702a6f21ce
Certificate serial: 019CAD903040BA21E71438C0124531C5772A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
Manifest number: 0E39
Signing time: Mon 02 Mar 2026 08:00:33 +0000
Manifest this update: Mon 02 Mar 2026 08:00:33 +0000
Manifest next update: Tue 03 Mar 2026 08:00:33 +0000
Files and hashes: 1: Fb-jyqS7gtcHMth_3_-fdkPNNS4.roa (hash: JKNr1XkEKzq4CcBobsMmsTnWeHH4vXiT+4g3sr+GOl4=)
2: HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl (hash: pFtwizUzesfFmZL9uJdIDwwGEmVbS178Pp9+yO9ERN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:30:40:ba:21:e7:14:38:c0:12:45:31:c5:77:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d5da9109f614c7c4159b3231a3877702a6f21ce
Validity
Not Before: Mar 2 08:00:33 2026 GMT
Not After : Mar 3 08:00:33 2026 GMT
Subject: CN=718ad1932fcbf0ce07083d006442d6085b2b0da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0a:af:34:1f:0d:84:27:21:f3:5e:ac:4d:c1:
3f:81:d4:da:b2:da:a3:c0:a9:f1:72:8c:0c:02:79:
d2:c8:6e:2b:28:6a:95:6d:a2:a6:8f:9e:ef:e3:63:
d1:e1:05:be:8e:63:84:27:46:a8:92:24:c0:9a:3d:
45:5f:e9:87:5d:0e:ea:cd:90:6d:90:3f:ed:68:0a:
5b:a4:2a:af:85:3a:33:6d:33:27:82:2d:79:a1:df:
3e:b6:ad:4e:bc:1b:b0:d8:88:1c:3b:09:7e:27:90:
78:f6:b1:f7:0e:fb:36:98:da:c5:ba:c6:b5:83:c3:
5f:61:af:16:5a:87:d8:ee:2b:4f:0c:af:7d:10:6c:
4a:55:23:82:fd:83:83:da:8c:fa:4c:17:5f:3e:8c:
38:38:7c:f8:93:be:7e:9e:23:49:c0:fd:30:67:ad:
21:54:2e:c9:fa:cd:29:ca:bf:58:8b:20:f1:4b:f8:
ab:d4:3b:80:6f:75:02:65:5f:e6:d6:15:e8:2b:22:
54:3d:bf:8f:1a:85:7d:1f:bb:2b:d4:b8:b8:fc:6d:
9e:70:4f:ba:6d:9a:32:e0:d0:2b:18:0a:25:4d:15:
93:68:eb:fd:81:d9:55:fd:4d:0b:19:0d:aa:3c:a3:
15:1f:f0:46:d3:4f:54:d5:14:e1:14:cc:48:53:74:
12:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8A:D1:93:2F:CB:F0:CE:07:08:3D:00:64:42:D6:08:5B:2B:0D:A2
X509v3 Authority Key Identifier:
keyid:1D:5D:A9:10:9F:61:4C:7C:41:59:B3:23:1A:38:77:70:2A:6F:21:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ed:74:1f:67:05:15:b4:72:c6:c5:b4:9d:75:7f:71:38:ef:
23:bb:9a:cf:be:2f:46:52:01:64:a1:59:db:89:22:8e:03:15:
33:e1:1f:70:fe:6e:92:28:e1:6a:13:43:89:0d:8b:49:37:60:
7b:65:4e:88:2d:0d:da:8e:77:76:95:4e:e6:b9:85:71:05:78:
db:fd:e5:58:55:e5:ef:54:b2:6c:d5:fd:b7:74:6a:cd:9f:f5:
98:b4:9b:99:dd:05:44:c6:fd:f6:d3:ef:e5:d9:0b:a8:d0:e1:
b0:c5:6d:69:7e:84:2b:4b:39:6b:cb:fb:c3:94:bd:2c:33:d7:
7e:30:a0:df:b1:9b:cd:04:3a:3d:32:69:a5:02:ba:4b:b9:bc:
fb:d5:29:21:f6:64:0b:55:60:32:4b:d4:3b:bc:35:80:79:69:
1b:fd:27:9e:a6:70:02:12:d0:c9:32:25:66:27:69:11:46:24:
dd:4f:48:71:81:ee:42:fb:71:6d:c8:fb:8c:7c:8e:ca:9c:a1:
04:e8:3f:04:07:48:8d:06:b8:c2:55:a9:63:70:70:f0:dd:a7:
b6:4f:87:c3:57:71:0a:64:a4:ce:86:a8:a5:2c:63:4e:22:50:
c8:dc:0a:f2:79:b6:48:b2:f9:30:27:e1:5f:f1:a6:8e:40:08:
95:e1:6b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:40:15 2026 by rpki-client