Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
File: HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft (raw, json)
Hash identifier: TSQJO4w+oSAGWJ+ym+A4mLT50vRimEcAivsB9HgcKhM=
Subject key identifier: 37:CB:C4:73:DA:1F:94:1B:35:2D:93:B8:FF:8A:A1:EA:09:01:16:C4
Authority key identifier: 1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA
Certificate issuer: /CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
Certificate serial: 019CACEB8563D85188051A293475C3627338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
Manifest number: 13DA
Signing time: Mon 02 Mar 2026 05:00:42 +0000
Manifest this update: Mon 02 Mar 2026 05:00:42 +0000
Manifest next update: Tue 03 Mar 2026 05:00:42 +0000
Files and hashes: 1: HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl (hash: x14WToUrkUjlSSYmzY/KzgkfRa3T3iMU5s01EOZuioY=)
2: WrV4ZemJwrw_kjB05-5Id3wYxlE.roa (hash: eepRF61Uwq1JqMLzpuul90ksZb6fVRDXJtYxt1swjFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:85:63:d8:51:88:05:1a:29:34:75:c3:62:73:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
Validity
Not Before: Mar 2 05:00:42 2026 GMT
Not After : Mar 3 05:00:42 2026 GMT
Subject: CN=37cbc473da1f941b352d93b8ff8aa1ea090116c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ba:ed:2c:29:d3:f1:74:e5:12:a4:07:d0:54:
6c:12:ab:e0:6a:00:8a:2a:bb:5e:b2:26:4e:7d:5b:
8d:8d:41:a8:ff:f6:08:63:b1:c2:b8:e0:c1:86:e9:
cf:a2:4a:85:26:0f:77:cd:5c:eb:89:62:09:27:10:
1b:7f:c8:cd:10:3c:52:6b:5a:76:e0:49:a1:4a:73:
94:45:32:af:f7:2d:b2:79:6a:3a:b6:91:59:6f:a5:
fa:e9:cd:9e:39:89:c0:7e:68:10:da:4b:56:4e:7c:
10:b8:02:72:6e:83:88:82:d8:f9:ba:a3:fa:e8:2d:
b4:b1:13:1f:55:df:7d:f6:9b:b2:d6:e8:e9:fc:49:
94:12:08:cc:4a:7e:e2:a7:5a:af:e3:77:f8:19:9a:
7f:c0:bf:cb:54:7b:82:6a:5e:cf:80:3b:ae:7e:01:
d6:de:21:f3:0e:e3:1f:8f:0a:d3:d5:ba:b3:58:a5:
2a:e9:af:7d:76:4b:a2:da:e6:05:12:f1:ab:a0:7d:
cb:44:7d:1b:3a:53:94:c3:b8:bb:54:3e:88:81:f6:
c6:4f:13:ab:d0:1a:c9:10:f5:8f:a8:f0:12:81:a6:
68:6a:69:d3:33:01:74:5e:a3:49:9c:4a:b8:14:ec:
4b:23:ea:aa:31:89:eb:5b:fd:9f:f3:19:a7:70:37:
bd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CB:C4:73:DA:1F:94:1B:35:2D:93:B8:FF:8A:A1:EA:09:01:16:C4
X509v3 Authority Key Identifier:
keyid:1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ca:f9:6e:b5:5e:71:13:3f:ea:85:39:3f:f7:8d:bc:be:5c:
37:77:2c:6e:0f:a8:7a:0c:cb:1a:31:52:d9:96:90:07:b1:84:
8f:94:60:fb:40:29:93:e3:01:84:7f:d5:09:2c:d1:47:0f:57:
1c:b5:4b:76:03:c2:ba:9a:07:94:0d:79:65:d4:36:0e:56:58:
2e:ff:2a:33:b6:fe:bd:0f:83:16:44:78:47:a1:ef:f7:e9:48:
92:96:fb:e2:33:1d:b6:67:7b:41:78:42:be:de:b4:d1:c7:29:
fa:5f:c0:1e:7a:a5:14:92:9b:4b:cc:cd:27:a9:10:0c:c4:86:
95:64:3c:a8:ee:06:a4:7f:b7:e1:04:72:a6:7a:32:0e:1f:60:
0c:8a:de:e2:82:eb:2b:b0:8b:57:ec:17:4c:15:82:a2:24:d3:
0c:9d:ba:5b:15:e8:ac:ff:6c:3e:e0:f9:ba:1a:6f:6b:66:05:
ca:a5:07:89:39:3a:b3:76:11:a2:e0:c5:7f:3e:6a:79:d2:00:
8c:c3:38:ac:1f:0c:1d:18:64:1f:95:0f:3d:09:74:95:a8:f3:
8a:46:b6:2c:d3:cc:81:ae:27:88:0a:5d:ab:c2:4b:82:0c:da:
c8:a1:e9:04:6a:36:27:84:31:45:8d:5b:ff:ad:31:09:ef:07:
ab:28:bd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:26 2026 by rpki-client