Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
File: hpPf7hdoc561l2wkW1rQBbMljsY.mft (raw, json)
Hash identifier: rhmEtvnP5D+ircnJM0k0C2CtQFdqgyxmlWyqkzM8j5k=
Subject key identifier: 12:33:12:92:EF:3D:0D:46:24:F8:1A:05:C8:88:2C:63:4E:9E:B2:3E
Authority key identifier: 86:93:DF:EE:17:68:73:9E:B5:97:6C:24:5B:5A:D0:05:B3:25:8E:C6
Certificate issuer: /CN=8693dfee1768739eb5976c245b5ad005b3258ec6
Certificate serial: 019CADC8352D4145BE8F3C7D2AE40EAE885C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 09:01:45 +0000
Manifest this update: Mon 02 Mar 2026 09:01:45 +0000
Manifest next update: Tue 03 Mar 2026 09:01:45 +0000
Files and hashes: 1: hpPf7hdoc561l2wkW1rQBbMljsY.crl (hash: GOVz2Pt9T8ReWKmWjkPxQgdRDR4ENKJtu6qI/Vg8dyY=)
2: mNaUQzwFX0BqVlBJLpzVszIOnM4.roa (hash: SiNsZYiIVTVZpo2V87H2BrP189PsIRUH34sgwW+FJSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:35:2d:41:45:be:8f:3c:7d:2a:e4:0e:ae:88:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8693dfee1768739eb5976c245b5ad005b3258ec6
Validity
Not Before: Mar 2 09:01:45 2026 GMT
Not After : Mar 3 09:01:45 2026 GMT
Subject: CN=12331292ef3d0d4624f81a05c8882c634e9eb23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c9:a7:71:d8:74:85:eb:81:df:90:19:e4:73:
c9:14:f1:b4:1d:03:20:a0:38:7a:5e:9f:ad:62:e6:
2f:14:11:7c:37:99:37:aa:d3:a4:d8:86:49:76:06:
43:75:cf:e0:ea:aa:16:6c:47:ea:4b:9c:30:9e:bc:
cb:01:91:61:1d:ce:a2:15:93:f4:24:96:e3:a3:ae:
52:70:e2:9d:4f:d8:3a:32:61:94:72:a7:54:0d:6f:
67:b6:3a:b0:b5:7c:20:da:06:6a:6c:0f:36:07:c3:
80:c7:81:f9:42:d9:5c:33:c5:cc:bd:c0:d9:53:e2:
88:a9:8e:bb:67:8f:e5:dd:15:78:d1:9b:58:80:37:
45:03:f0:75:a2:cf:ea:b3:63:ec:b1:b7:6a:13:67:
47:d6:0c:47:46:47:8e:d0:88:ac:90:3f:a8:ee:ce:
42:c9:0a:2c:d3:9a:95:de:47:16:58:b9:22:c3:ad:
3d:0b:6e:28:df:33:e3:70:8a:fe:16:64:d3:da:c3:
4c:df:9c:f1:95:61:82:2b:23:a6:d0:68:97:e8:69:
15:71:31:26:96:9d:01:b8:f6:3a:c8:9f:a2:a7:d4:
89:e0:d6:01:75:ab:1e:cf:12:76:c0:45:38:3b:4b:
cc:db:9a:93:51:5e:ba:79:48:56:66:ba:ab:2f:c6:
18:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:33:12:92:EF:3D:0D:46:24:F8:1A:05:C8:88:2C:63:4E:9E:B2:3E
X509v3 Authority Key Identifier:
keyid:86:93:DF:EE:17:68:73:9E:B5:97:6C:24:5B:5A:D0:05:B3:25:8E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ef:c2:99:b1:14:eb:96:4f:2d:2f:cc:fb:20:11:48:b9:8d:
8f:26:64:ba:eb:d6:a2:05:7c:15:80:a5:d0:3d:6e:8c:18:93:
88:f6:d7:08:11:e0:77:f7:ab:0c:18:bb:37:e1:7b:fd:93:7f:
4a:dc:9b:a4:5e:45:54:aa:a7:ca:58:74:f0:59:74:8c:49:e6:
fd:67:37:0d:72:6f:09:63:56:7d:7b:f7:81:0f:a3:db:d4:46:
5e:28:d5:ce:a5:3b:19:41:d0:b4:3b:59:2b:06:6b:48:10:39:
4a:95:73:79:45:8a:a3:0c:ff:83:4e:e2:70:3f:01:8a:74:1b:
d8:36:88:e8:71:37:60:0d:d3:d1:12:ca:40:b0:43:05:20:87:
f6:63:d9:8d:4d:51:ac:37:b9:19:ed:8b:0c:30:8e:8f:f6:70:
f6:6c:bc:c8:42:13:8e:69:40:7a:49:0b:59:47:cf:61:f5:57:
dc:d3:52:a2:c1:ab:07:58:8a:af:15:99:09:21:77:59:45:41:
c6:25:00:88:20:ef:92:5c:44:7c:bc:26:cd:df:b9:46:b4:51:
28:fd:b7:08:c9:54:70:b7:0b:45:f2:c2:eb:ea:dc:fa:36:09:
8a:88:b9:63:2b:c4:84:a9:c5:d9:27:07:90:73:63:e5:e7:37:
59:4a:cc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:20 2026 by rpki-client