Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
File: HpICrmewRlNH1t35D2Ri-ubk5kM.mft (raw, json)
Hash identifier: OqSsNhDs9mgLic0BVNhS4DDmIVfdBnP4EwWhY/Mr/ig=
Subject key identifier: 5B:16:CF:34:E1:54:92:52:C6:7C:6B:2D:D0:9E:AF:2B:E4:80:A9:EE
Authority key identifier: 1E:92:02:AE:67:B0:46:53:47:D6:DD:F9:0F:64:62:FA:E6:E4:E6:43
Certificate issuer: /CN=1e9202ae67b0465347d6ddf90f6462fae6e4e643
Certificate serial: 019CAE354AADA6C151D7B087B3DA444AB1FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
Manifest number: 0CF1
Signing time: Mon 02 Mar 2026 11:00:53 +0000
Manifest this update: Mon 02 Mar 2026 11:00:53 +0000
Manifest next update: Tue 03 Mar 2026 11:00:53 +0000
Files and hashes: 1: HpICrmewRlNH1t35D2Ri-ubk5kM.crl (hash: VsXI+wrSBQgg/E2csqufqzcIDK8smteph9y7dl+ge1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:4a:ad:a6:c1:51:d7:b0:87:b3:da:44:4a:b1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9202ae67b0465347d6ddf90f6462fae6e4e643
Validity
Not Before: Mar 2 11:00:53 2026 GMT
Not After : Mar 3 11:00:53 2026 GMT
Subject: CN=5b16cf34e1549252c67c6b2dd09eaf2be480a9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:73:5d:35:3a:57:3b:7e:85:8f:14:34:49:15:
3a:54:62:09:ef:58:bf:d5:8f:26:5c:ab:ab:48:ed:
dc:ee:3b:b5:5b:62:2e:e4:23:e8:26:df:b8:72:e1:
05:99:cc:f4:78:ff:e7:35:0b:ef:1c:59:de:2d:45:
0c:44:b6:ee:c9:ef:d6:26:09:24:34:a7:3e:35:58:
db:9c:05:6f:25:38:0a:06:d4:f7:ab:71:7f:a2:19:
35:fa:6a:32:47:93:c6:05:15:7f:c3:86:9f:dd:03:
da:28:e8:2e:ef:b3:b7:e0:de:b1:c9:2b:c2:b4:0c:
e7:51:df:5d:97:49:10:7a:d6:e4:d4:9a:ac:7c:25:
52:30:18:3a:c3:33:5e:de:5f:ba:16:a6:f2:95:db:
fd:3f:82:4c:82:87:86:ad:0a:0d:06:ac:a5:66:70:
09:53:18:98:5e:fa:29:d4:c1:2f:af:20:63:99:63:
87:8c:1e:04:1e:11:61:9b:b4:61:03:5f:f5:bd:e9:
d5:85:49:9b:26:9d:7c:bf:71:44:64:58:aa:b0:c6:
46:bf:e7:ff:95:9a:5d:2c:82:76:13:e0:bb:4e:fd:
4e:5b:ab:07:29:16:8e:01:b8:18:22:8f:9e:9e:43:
05:1f:b3:df:85:4f:0a:c6:42:f6:7c:70:8f:73:06:
b5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:16:CF:34:E1:54:92:52:C6:7C:6B:2D:D0:9E:AF:2B:E4:80:A9:EE
X509v3 Authority Key Identifier:
keyid:1E:92:02:AE:67:B0:46:53:47:D6:DD:F9:0F:64:62:FA:E6:E4:E6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f5:e7:51:2f:4f:5f:f6:9a:4d:16:64:67:e7:59:2a:62:c9:
45:2b:55:f4:77:18:b7:66:dd:b6:6c:0e:42:21:1d:22:18:02:
d2:ea:be:02:08:70:23:82:5b:01:de:94:d2:3a:9a:e3:4f:7e:
10:23:52:cf:80:14:dd:9c:fb:56:d7:f0:c1:69:dc:be:2c:be:
91:ad:74:e1:35:59:de:89:3a:d1:5d:08:43:e1:dd:c8:6e:87:
b1:15:6c:f2:1e:82:df:ac:04:e2:d4:24:19:ac:44:ee:0a:b2:
04:86:a6:24:52:bd:7a:e2:a3:15:97:05:a3:dc:95:7f:39:1d:
b2:41:0f:96:eb:2a:3c:e4:69:1b:c8:57:bc:07:d1:e5:8b:a0:
e4:b3:2e:ba:d6:6a:a9:a6:ce:ca:5d:63:b6:22:97:26:85:c6:
df:b7:1d:d6:10:93:d6:34:41:e8:a4:58:35:2f:3a:93:f3:0f:
ae:e0:5d:4a:1c:bf:04:71:ef:a2:c1:24:c4:dd:15:2f:e0:ad:
d5:2f:66:4b:a2:03:66:1b:a4:91:b6:a7:a4:5e:e4:d6:3a:85:
16:44:c1:99:92:ec:a1:20:8f:95:6a:61:35:69:6c:8c:55:22:
c6:ca:ed:a9:e0:ff:b1:b4:ff:2c:98:a9:b7:cd:60:d7:66:fc:
e7:17:63:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:26:22 2026 by rpki-client