Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
File: HpICrmewRlNH1t35D2Ri-ubk5kM.mft (raw, json)
Hash identifier: HtrmE2aXL9CEnq0ZdRwNC2+tNeMz5XartPPsN7fzq38=
Subject key identifier: 88:E1:61:BE:53:F5:03:E5:6C:91:F7:9A:DF:05:13:D0:10:0E:30:A8
Authority key identifier: 1E:92:02:AE:67:B0:46:53:47:D6:DD:F9:0F:64:62:FA:E6:E4:E6:43
Certificate issuer: /CN=1e9202ae67b0465347d6ddf90f6462fae6e4e643
Certificate serial: 019D9BBE97F2DF6C77E3611F1A6C327E7977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
Manifest number: 0D6C
Signing time: Fri 17 Apr 2026 14:00:52 +0000
Manifest this update: Fri 17 Apr 2026 14:00:52 +0000
Manifest next update: Sat 18 Apr 2026 14:00:52 +0000
Files and hashes: 1: HpICrmewRlNH1t35D2Ri-ubk5kM.crl (hash: 8f6nLiE93NwQUhIqbFiDE+YyHFnv5p9AOMvZ9qN2h4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:97:f2:df:6c:77:e3:61:1f:1a:6c:32:7e:79:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9202ae67b0465347d6ddf90f6462fae6e4e643
Validity
Not Before: Apr 17 14:00:52 2026 GMT
Not After : Apr 18 14:00:52 2026 GMT
Subject: CN=88e161be53f503e56c91f79adf0513d0100e30a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:d9:25:39:e5:51:a6:c2:07:ff:ec:69:c9:
6b:26:c4:86:d7:af:b6:27:ba:2a:45:9d:b0:c9:4d:
20:25:e4:df:10:68:68:6c:78:b5:49:c9:e3:9e:ec:
fc:db:d3:09:63:7b:6e:54:00:51:5c:79:0c:80:c8:
28:9d:93:00:57:04:a8:d4:98:8e:b9:d0:f0:85:d7:
44:7e:5a:24:25:51:97:ae:e4:18:c8:03:1e:88:26:
bf:82:81:be:dc:53:48:15:76:86:a2:44:35:5f:67:
3f:90:c1:f2:49:3b:d0:4a:3a:86:e5:f1:00:20:ec:
51:07:ad:72:69:7a:4a:1c:ed:92:91:41:2c:45:50:
fa:9f:d9:f9:ef:b0:22:0b:60:28:89:14:cb:67:32:
eb:9f:fa:b8:3e:fe:21:dc:68:e6:06:6d:a1:cf:f6:
7a:7f:1e:7b:d8:da:3f:2d:05:a3:4f:ae:12:86:d1:
d3:96:1f:63:2c:a7:b2:74:eb:0c:83:83:01:bb:67:
dc:1e:e4:bc:4a:a4:ca:a1:f3:10:28:98:c1:5a:b7:
1c:4e:2d:2e:f8:8a:3f:e4:27:f8:f4:a9:82:a3:d3:
c0:ac:02:53:c7:d4:d1:85:29:b8:65:57:42:3f:bb:
fb:c6:01:48:85:1f:ad:ab:ed:de:18:e3:20:a7:ee:
a3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E1:61:BE:53:F5:03:E5:6C:91:F7:9A:DF:05:13:D0:10:0E:30:A8
X509v3 Authority Key Identifier:
keyid:1E:92:02:AE:67:B0:46:53:47:D6:DD:F9:0F:64:62:FA:E6:E4:E6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:7b:64:9d:16:b6:66:f1:a5:d7:0a:aa:c0:59:51:4e:33:7b:
25:38:45:97:f8:56:f4:1d:4b:59:73:75:ea:e9:90:00:7d:8a:
83:e0:65:27:52:33:d6:4f:d5:68:bc:21:1a:0a:c9:9f:9e:0d:
23:c8:63:18:53:e1:5d:0a:ac:ea:4c:07:cc:84:e2:5d:a8:a8:
24:6d:99:63:51:10:2f:f7:31:19:2f:4c:b2:e2:38:58:9f:49:
a1:78:d7:92:22:b1:b9:e4:d5:b3:ec:fd:89:b8:e2:f1:40:58:
dc:2f:d9:d1:62:53:b4:c2:59:c0:c3:f3:a4:ac:09:3e:17:05:
d4:b6:d6:4e:82:fd:81:31:98:d9:b6:4d:b0:ad:db:bf:fa:f2:
3e:a7:5a:d8:60:74:7a:8a:8e:ad:c4:28:8d:a8:ed:6f:c1:03:
92:bd:ab:12:03:df:cf:d5:89:38:fc:b1:28:10:10:cb:d7:a6:
bf:0e:d2:f9:77:0b:33:de:e4:a4:ba:16:69:5a:7d:b8:b1:aa:
ef:61:45:0d:c5:af:4f:66:ef:e6:89:4c:d3:aa:79:9d:3d:e8:
87:da:e4:a8:c2:a3:ea:f6:68:fd:b7:e9:c7:e4:93:1f:2d:92:
33:3e:1e:d0:c6:8d:7b:d3:fc:fb:85:02:d1:05:8e:07:03:12:
5c:9b:2e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:08:15 2026 by rpki-client