Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/87b214-ba8d-4df9-9ec9-1a16ef492034/1/HpPX4oqwueeUSHlGoProzW7VQHE.mft
File: HpPX4oqwueeUSHlGoProzW7VQHE.mft (raw, json)
Hash identifier: GJZLjX5BZsKq+2MFzY6o1zihcJR9Z1Fm/JHyk/y/cYc=
Subject key identifier: 3E:B1:2B:1A:77:87:1F:18:EB:5D:7D:D2:C3:B1:36:93:FC:D1:8F:1D
Authority key identifier: 1E:93:D7:E2:8A:B0:B9:E7:94:48:79:46:A0:FA:E8:CD:6E:D5:40:71
Certificate issuer: /CN=1e93d7e28ab0b9e794487946a0fae8cd6ed54071
Certificate serial: 019CAD597B5F03BDB7D31E234C55ACF9FFFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpPX4oqwueeUSHlGoProzW7VQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87b214-ba8d-4df9-9ec9-1a16ef492034/1/HpPX4oqwueeUSHlGoProzW7VQHE.mft
Manifest number: 01E1
Signing time: Mon 02 Mar 2026 07:00:48 +0000
Manifest this update: Mon 02 Mar 2026 07:00:48 +0000
Manifest next update: Tue 03 Mar 2026 07:00:48 +0000
Files and hashes: 1: 4XefERenMAQ3NiRiLifJbaOh1bI.roa (hash: EBxY06tfLDyTmDSe657Eshz7yBdzhaon1Ky7Pws1MFE=)
2: HpPX4oqwueeUSHlGoProzW7VQHE.crl (hash: JexXOEVW2nD7TAacS8P7169kh/tl77/MLmP9fqzzJUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/87b214-ba8d-4df9-9ec9-1a16ef492034/1/HpPX4oqwueeUSHlGoProzW7VQHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/87b214-ba8d-4df9-9ec9-1a16ef492034/1/HpPX4oqwueeUSHlGoProzW7VQHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpPX4oqwueeUSHlGoProzW7VQHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:7b:5f:03:bd:b7:d3:1e:23:4c:55:ac:f9:ff:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e93d7e28ab0b9e794487946a0fae8cd6ed54071
Validity
Not Before: Mar 2 07:00:48 2026 GMT
Not After : Mar 3 07:00:48 2026 GMT
Subject: CN=3eb12b1a77871f18eb5d7dd2c3b13693fcd18f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:29:b9:33:b5:d1:d2:0b:14:a5:0b:b4:4d:2f:
18:4c:bb:d1:2b:80:48:24:45:94:f8:38:06:2b:4e:
c4:af:41:1d:6c:d2:a5:5d:eb:51:86:87:cd:3e:07:
25:4e:ed:f4:57:84:71:0e:f3:db:ad:4c:bc:91:d7:
5e:80:29:85:04:2e:bb:8b:52:64:47:1a:fd:c6:3a:
c9:31:99:a7:8b:71:d8:40:4f:e3:c8:54:6c:a3:cf:
cc:f7:96:12:18:c8:d9:8a:ac:c9:14:6a:79:2e:94:
a2:46:e6:78:13:2f:89:1e:20:19:3e:05:0b:af:77:
79:52:aa:2a:2c:26:cc:c7:99:69:23:7b:02:19:b1:
8a:87:02:fb:2a:ab:02:2c:22:cf:c5:37:09:27:17:
c1:5f:2f:d6:a0:9f:cd:1a:c5:88:2d:a9:15:9b:56:
fb:59:d4:2b:5f:52:e2:d3:22:cd:bb:2e:8f:6c:52:
50:42:56:3f:9c:d4:f6:25:54:f3:2b:1b:18:a3:89:
ce:13:ef:ab:4d:89:c2:db:b6:9b:cc:35:29:9e:09:
72:60:35:b9:fe:7d:e0:43:d6:d3:c5:ab:a1:b7:e2:
95:90:b9:15:6b:1e:04:e8:83:d8:53:b9:6c:cf:be:
03:fa:e8:d6:b1:40:6d:cc:02:90:2e:12:4c:b6:ab:
38:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B1:2B:1A:77:87:1F:18:EB:5D:7D:D2:C3:B1:36:93:FC:D1:8F:1D
X509v3 Authority Key Identifier:
keyid:1E:93:D7:E2:8A:B0:B9:E7:94:48:79:46:A0:FA:E8:CD:6E:D5:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpPX4oqwueeUSHlGoProzW7VQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87b214-ba8d-4df9-9ec9-1a16ef492034/1/HpPX4oqwueeUSHlGoProzW7VQHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87b214-ba8d-4df9-9ec9-1a16ef492034/1/HpPX4oqwueeUSHlGoProzW7VQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:78:60:ce:f1:2c:73:fc:26:6d:7a:11:30:b3:04:24:66:02:
bd:ea:8f:ab:e3:78:2f:65:e5:e1:08:93:55:03:0c:a4:ff:3c:
07:d3:53:be:85:67:d5:7a:ab:e4:d3:74:51:d6:08:cb:2d:8d:
07:ec:6d:62:bd:33:bf:cb:b6:35:43:3e:96:3c:1a:18:e4:9e:
9f:d4:b0:22:f0:b9:51:39:71:37:1f:80:1c:8e:97:b6:ed:eb:
8f:41:41:81:a1:1a:74:9c:52:e6:ec:5f:27:8f:2d:ea:41:27:
5a:cb:79:b2:6b:e5:4e:36:c2:2d:f4:c3:5d:f9:a5:91:6a:d6:
0b:3f:f3:09:80:05:32:9a:d3:31:5f:9d:3f:98:ed:9f:79:2f:
c9:1d:16:fa:56:25:3a:95:31:11:73:c9:c4:79:c8:f8:70:4a:
90:e8:23:67:54:83:e2:81:20:12:dd:4c:1d:fa:03:e0:0f:7e:
c1:e7:6f:dc:75:2f:e1:bd:01:17:96:45:b5:38:d4:b8:01:27:
4f:1c:14:e9:8b:7a:1f:b9:d9:79:08:20:66:0f:d8:23:2a:73:
06:d8:71:1f:44:6e:59:c6:a0:cc:54:9c:8e:81:31:9f:40:35:
4a:29:bc:97:be:30:b9:65:f0:5a:02:08:ac:c8:70:8c:f6:8a:
ab:5d:e0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:19:58 2026 by rpki-client