Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
File: hFPR6GGO-ProB13dWCcNCUAGvpk.mft (raw, json)
Hash identifier: SFbVEI5zdVOEgPO4r16lwXDVv5E5XHBg7ZO3OO6qZ+g=
Subject key identifier: 53:B1:03:BE:75:D0:09:33:D0:7E:34:01:D0:39:C4:6C:25:12:DE:14
Authority key identifier: 84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99
Certificate issuer: /CN=8453d1e8618ef8fae8075ddd58270d094006be99
Certificate serial: 019CAB33D631C58E9373E5C210B1E7D50608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
Manifest number: 04C1
Signing time: Sun 01 Mar 2026 21:00:26 +0000
Manifest this update: Sun 01 Mar 2026 21:00:26 +0000
Manifest next update: Mon 02 Mar 2026 21:00:26 +0000
Files and hashes: 1: H6fEkqVKszpXDZG-GKB24yi6fGA.roa (hash: VZx0qzECb8pJ5sSNI4YrIdOddJh7Fq3Sv2eEUes2jOk=)
2: hFPR6GGO-ProB13dWCcNCUAGvpk.crl (hash: nt8uQXNJr5IlgRrkrNMkM98v2JugXSKsZj1Pph+cPG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:d6:31:c5:8e:93:73:e5:c2:10:b1:e7:d5:06:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8453d1e8618ef8fae8075ddd58270d094006be99
Validity
Not Before: Mar 1 21:00:26 2026 GMT
Not After : Mar 2 21:00:26 2026 GMT
Subject: CN=53b103be75d00933d07e3401d039c46c2512de14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1d:97:03:eb:87:cc:74:01:5e:61:b5:46:04:
55:1f:0e:4b:35:66:be:81:53:77:df:b4:3c:3d:d3:
91:e6:ab:3b:61:47:5d:66:be:72:5f:a3:da:20:6e:
5d:a3:14:08:d8:50:5a:e6:e0:4d:ec:9f:0c:23:f0:
8a:9c:30:16:83:9d:04:4b:c5:b4:49:bc:50:e1:6f:
c3:53:ba:33:58:23:27:60:c8:14:3c:c9:bc:45:c0:
79:63:27:c7:0f:cb:d5:31:bc:59:de:e9:03:72:65:
dc:54:b5:81:cb:62:67:c8:01:2d:bd:6b:9f:2a:9c:
a4:2c:5f:ad:53:a0:1c:53:69:0f:f6:d2:d3:12:fc:
c2:ee:53:a0:21:ee:68:5d:f5:dc:42:79:6b:af:22:
db:c7:69:1a:c3:02:8e:ea:e9:6d:b2:12:17:1b:48:
e5:59:3d:1b:74:ca:e2:57:34:60:84:dc:38:04:f6:
e8:19:5e:8d:1c:c3:e2:ba:5b:16:53:32:14:4c:0e:
d7:33:83:79:cd:33:07:13:e8:ae:d0:bb:d6:93:39:
2c:55:c9:2b:04:07:df:fd:96:7d:95:19:a2:c5:7d:
a3:33:7d:a0:b6:c3:e8:a2:58:49:ee:d9:3d:4c:c2:
e9:1f:d6:2f:d3:12:b4:df:91:d5:66:f0:df:03:5f:
5f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B1:03:BE:75:D0:09:33:D0:7E:34:01:D0:39:C4:6C:25:12:DE:14
X509v3 Authority Key Identifier:
keyid:84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:4d:7d:5c:b7:d7:98:c2:76:88:45:8c:ea:e0:38:37:ad:2e:
0a:aa:c6:27:e0:20:41:fe:dc:22:d2:e2:9c:c5:99:9f:3c:22:
bc:be:b8:cf:37:cb:c6:6d:e9:5e:64:ac:79:c1:d2:f9:73:60:
8b:4f:34:2b:41:c4:b9:fe:83:95:1c:29:bc:82:ca:06:13:4f:
50:1b:52:86:be:cb:4e:9f:46:cb:f3:1d:9e:a3:64:2f:58:70:
37:e0:b2:50:2a:53:e8:d9:0e:97:67:35:d0:14:76:e2:e3:8c:
5b:72:27:d2:6d:22:3b:13:8e:68:51:2b:55:2e:9e:54:e2:b2:
d4:f2:cc:aa:38:56:e6:ab:b3:36:a5:ae:71:64:05:37:32:28:
78:71:66:eb:13:6e:22:52:4c:b3:7f:ec:f4:2f:ab:da:d7:bd:
ff:14:4f:58:8b:6c:cc:7b:41:57:f9:45:56:23:5d:63:0c:f7:
5b:e3:2e:ae:1e:f5:c1:95:9b:0c:25:5c:b1:30:d7:37:48:71:
ab:bf:6f:e2:e2:b8:d1:ac:9f:c8:38:30:ce:0f:ad:2f:54:cc:
b5:80:8f:bd:79:a9:42:be:52:9c:98:e4:1e:31:02:0e:e6:b7:
4e:d7:b3:80:3b:12:46:b0:f7:4d:4d:0a:10:17:21:10:56:3e:
7e:6f:14:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:53 2026 by rpki-client