Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
File: HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft (raw, json)
Hash identifier: HxlxA+6NZV37Vc+YpZIipEWeS41/RHd5ClK4MgmSPt4=
Subject key identifier: B4:0B:DD:FB:C3:79:52:48:7D:29:2E:C9:E0:D7:A9:C9:70:79:FF:53
Authority key identifier: 1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA
Certificate issuer: /CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba
Certificate serial: 019CABD960EE38B768E17D56327E11CEE69A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
Manifest number: 0F7D
Signing time: Mon 02 Mar 2026 00:01:15 +0000
Manifest this update: Mon 02 Mar 2026 00:01:15 +0000
Manifest next update: Tue 03 Mar 2026 00:01:15 +0000
Files and hashes: 1: HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl (hash: /hIXAAU7T1sW4wAbXt58Jxqh6dGlrJ2jRr6vsmH2b5k=)
2: nwKbwtoqpnT5gVqh1QUIgDFgOWQ.roa (hash: JOb72Ix/3IvyYR98c/TNjJBo/rc+TguIVe9HFGNgsGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:60:ee:38:b7:68:e1:7d:56:32:7e:11:ce:e6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba
Validity
Not Before: Mar 2 00:01:15 2026 GMT
Not After : Mar 3 00:01:15 2026 GMT
Subject: CN=b40bddfbc37952487d292ec9e0d7a9c97079ff53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:a8:55:74:fd:87:4c:e9:19:40:38:48:2a:
12:a6:1f:c4:79:58:99:6a:b3:cd:f1:a0:2b:bc:99:
1f:67:68:a1:22:83:1b:98:07:ac:6c:83:0b:7e:9f:
3b:45:6e:30:4e:97:2b:fd:df:9e:37:29:c5:ce:80:
34:25:a8:ac:01:e6:a0:1f:b1:0b:13:04:2d:e6:fd:
03:05:66:2f:8f:0f:0b:64:1f:8c:6f:c8:b2:31:ca:
bf:17:06:f4:4c:68:5e:33:4c:77:80:2d:00:a2:85:
36:2f:2c:19:ec:ba:8d:cd:4d:9f:9a:e6:ff:f6:2b:
e3:75:7f:e0:5a:a9:83:29:7b:f2:ce:32:d3:67:b4:
6a:50:51:a6:50:99:38:d3:c2:04:30:14:b1:7c:8a:
48:eb:bb:f1:62:10:1b:05:ca:b8:df:86:35:b1:0a:
08:a9:57:f3:84:dd:92:65:3d:f4:ba:5d:3c:d7:24:
a0:88:e9:e0:70:d0:53:78:67:31:ed:41:90:2c:f6:
2d:53:23:a8:57:9c:57:ab:cd:c6:ac:30:bf:9f:0a:
1d:34:32:cc:1b:2a:cd:e1:e8:a6:b2:e9:48:9b:21:
34:5b:0d:7f:04:9c:d7:dd:cb:12:91:38:b6:7e:a2:
64:59:9e:e1:b6:e1:d2:02:48:ed:4d:c0:30:03:75:
f1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0B:DD:FB:C3:79:52:48:7D:29:2E:C9:E0:D7:A9:C9:70:79:FF:53
X509v3 Authority Key Identifier:
keyid:1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:90:90:2e:19:20:cd:9c:73:7b:48:c5:5b:3f:26:b4:6e:0e:
7b:59:33:0c:2f:6e:da:4e:68:d5:1f:76:69:df:07:d9:6c:eb:
cf:f3:aa:bb:fb:5e:ff:84:b3:71:62:1c:e3:7e:0c:7e:75:5d:
51:7e:61:55:76:0c:c0:0f:29:b2:ed:c9:a7:8a:f7:f1:f4:84:
88:cc:cc:c5:38:0e:4e:49:8b:b0:68:00:40:b4:bb:c8:78:6a:
95:63:f3:34:2e:fc:26:5a:6d:cc:c0:24:e4:5e:87:83:a9:98:
6a:c0:2d:e2:22:78:6d:09:32:3b:c9:ee:44:fb:61:f0:72:cd:
b3:83:af:42:7d:a3:d3:8f:a6:87:b3:31:a5:28:e4:5e:53:ed:
f4:73:0e:48:fe:59:3b:69:11:2d:08:9f:49:d6:01:32:cd:b7:
3d:5e:de:22:b6:e1:70:30:c2:48:8c:fa:ff:31:a7:f4:d9:b7:
b4:9f:78:09:93:c0:d9:a0:fe:87:36:c4:d0:05:f8:e8:39:e2:
9d:b3:1c:89:3b:45:d1:ed:29:7d:00:a2:19:3e:ee:fb:bf:8f:
8d:fe:0e:15:f0:bb:41:82:98:e0:7c:86:c9:ab:89:e4:b9:1d:
e5:73:09:fb:59:59:86:93:1f:bc:21:12:f7:f2:52:2c:27:f2:
05:f8:aa:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2WDuOLdo4X1WMn4RzuaaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOWI4NTYyNjE1ZjUxMTBkMzU1MWY4ZWM1ZGQwNTZmYjBh
NDhhYmEwHhcNMjYwMzAyMDAwMTE1WhcNMjYwMzAzMDAwMTE1WjAzMTEwLwYDVQQD
EyhiNDBiZGRmYmMzNzk1MjQ4N2QyOTJlYzllMGQ3YTljOTcwNzlmZjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH2oVXT9h0zpGUA4SCoSph/EeViZ
arPN8aArvJkfZ2ihIoMbmAesbIMLfp87RW4wTpcr/d+eNynFzoA0JaisAeagH7EL
EwQt5v0DBWYvjw8LZB+Mb8iyMcq/Fwb0TGheM0x3gC0AooU2LywZ7LqNzU2fmub/
9ivjdX/gWqmDKXvyzjLTZ7RqUFGmUJk408IEMBSxfIpI67vxYhAbBcq434Y1sQoI
qVfzhN2SZT30ul081ySgiOngcNBTeGcx7UGQLPYtUyOoV5xXq83GrDC/nwodNDLM
GyrN4eimsulImyE0Ww1/BJzX3csSkTi2fqJkWZ7htuHSAkjtTcAwA3XxmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQL3fvDeVJIfSkuyeDXqclwef9TMB8GA1UdIwQY
MBaAFB6bhWJhX1EQ01UfjsXdBW+wpIq6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHB1RlltRmZVUkRUVlItT3hkMEZiN0NraXJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80NTQ0ZTQtMzVkYi00MDk4LTkwNDAt
NTM5YTBmMjY2ODRkLzEvSHB1RlltRmZVUkRUVlItT3hkMEZiN0NraXJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS80NTQ0ZTQtMzVkYi00MDk4LTkwNDAtNTM5YTBmMjY2ODRk
LzEvSHB1RlltRmZVUkRUVlItT3hkMEZiN0NraXJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJCQLhkg
zZxze0jFWz8mtG4Oe1kzDC9u2k5o1R92ad8H2Wzrz/Oqu/te/4SzcWIc434MfnVd
UX5hVXYMwA8psu3Jp4r38fSEiMzMxTgOTkmLsGgAQLS7yHhqlWPzNC78JlptzMAk
5F6Hg6mYasAt4iJ4bQkyO8nuRPth8HLNs4OvQn2j04+mh7MxpSjkXlPt9HMOSP5Z
O2kRLQifSdYBMs23PV7eIrbhcDDCSIz6/zGn9Nm3tJ94CZPA2aD+hzbE0AX46Dni
nbMciTtF0e0pfQCiGT7u+7+Pjf4OFfC7QYKY4HyGyauJ5Lkd5XMJ+1lZhpMfvCES
9/JSLCfyBfiqZg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:44 2026 by rpki-client