Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft
File: HNPDCTm5BqRRWhxlwIg2gptqMok.mft (raw, json)
Hash identifier: 0ljcMoBluHq6uDsK8vqLjiCIYYFqt4S1CwyNkX+GlsY=
Subject key identifier: 45:F1:83:EA:9A:C7:43:16:D8:EE:F6:59:90:4B:0F:23:B4:62:FD:78
Authority key identifier: 1C:D3:C3:09:39:B9:06:A4:51:5A:1C:65:C0:88:36:82:9B:6A:32:89
Certificate issuer: /CN=1cd3c30939b906a4515a1c65c08836829b6a3289
Certificate serial: 019CAA8F51715579731E11E3AAF7494ABC54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 18:00:45 +0000
Manifest this update: Sun 01 Mar 2026 18:00:45 +0000
Manifest next update: Mon 02 Mar 2026 18:00:45 +0000
Files and hashes: 1: HNPDCTm5BqRRWhxlwIg2gptqMok.crl (hash: LBdcZXymIgaI+5knv1ecqEkLvxu0UEpbSZ6R1+4JQgk=)
2: qBbPAft3FWUnWh4M6QbA4zR0xig.roa (hash: F60FmMouqBuHf/lcjKBMzLkzhlv6RxJ5MDnmKBuksKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:51:71:55:79:73:1e:11:e3:aa:f7:49:4a:bc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cd3c30939b906a4515a1c65c08836829b6a3289
Validity
Not Before: Mar 1 18:00:45 2026 GMT
Not After : Mar 2 18:00:45 2026 GMT
Subject: CN=45f183ea9ac74316d8eef659904b0f23b462fd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:07:74:64:60:e1:0a:67:be:75:0b:e1:b2:61:
28:e3:05:2d:1d:8a:a4:f2:5c:fd:d6:a8:f7:06:50:
17:0f:22:17:54:22:79:ae:84:a9:6b:9f:c0:a7:b7:
46:d8:8d:87:42:76:e2:8e:96:81:f7:53:5c:1b:3b:
20:94:ee:c1:4d:2e:0a:45:a9:2b:61:0e:65:16:c2:
02:05:a0:3e:2e:1e:6f:72:e9:07:e3:01:c6:07:cc:
bb:12:d1:d6:37:ec:a5:67:4b:56:06:99:49:4a:07:
18:75:77:fc:ba:8a:b3:f7:52:06:9f:23:32:2a:2f:
b7:31:1a:cf:bb:46:42:ce:4d:83:3d:8e:bb:62:a8:
2a:60:83:3b:42:ec:53:c9:33:c4:bd:65:b0:62:9d:
de:05:8c:7d:9a:d7:c1:d8:63:f6:69:ae:30:b0:2b:
63:ab:b4:58:47:05:85:bb:e5:58:59:3c:18:d9:1c:
d9:23:c0:d9:dc:3e:52:11:93:e4:20:da:b0:d3:50:
74:79:45:01:1c:03:64:c2:62:ca:a2:13:6a:c0:19:
e4:31:0f:b6:42:1f:ba:89:68:24:6e:3c:47:7b:59:
5b:01:6a:36:1d:07:9e:79:ef:96:8e:0e:a3:f2:a0:
cc:bf:fe:1f:f3:b8:b2:73:a1:9d:20:fa:fa:cb:b6:
59:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F1:83:EA:9A:C7:43:16:D8:EE:F6:59:90:4B:0F:23:B4:62:FD:78
X509v3 Authority Key Identifier:
keyid:1C:D3:C3:09:39:B9:06:A4:51:5A:1C:65:C0:88:36:82:9B:6A:32:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:66:c4:a7:88:7d:a0:17:e8:c3:99:15:5d:01:28:89:c9:74:
ca:5a:56:1e:11:7f:55:33:ae:39:58:ca:7d:75:7d:27:54:ea:
67:af:74:f3:06:dd:d5:4a:21:0a:42:fe:67:8d:07:a2:65:07:
b3:53:e3:cb:6e:9d:93:7b:89:db:fe:eb:3d:90:94:f4:50:ad:
f1:a3:8e:37:bc:93:2c:b0:5a:c9:25:56:39:84:76:16:dd:e0:
18:94:f4:04:05:3b:88:7d:cd:a9:2f:0e:83:9a:b2:cd:de:39:
04:c5:ab:0a:f8:c5:cd:4f:28:e5:a7:a1:13:4c:db:cc:a3:ce:
ad:c6:a8:fd:26:ff:c5:e9:ea:3d:fb:7e:2a:01:84:91:68:d8:
0a:b6:11:ec:ee:1b:8a:f6:fd:92:8f:f6:fa:c4:fd:0b:d3:57:
17:a4:2a:01:53:48:f2:8b:5e:48:9a:25:33:d2:24:46:a0:6a:
de:92:bd:4a:fa:c1:bf:00:64:db:d7:a9:de:74:78:a0:4c:d1:
13:a6:de:3a:0f:7c:7d:61:ba:e2:81:aa:6e:e1:8b:18:8f:5b:
d1:b5:0c:1b:d9:97:e9:62:7e:6b:7c:8a:f9:18:ea:7b:d2:96:
d2:67:6b:c9:58:5d:79:62:78:b5:50:ff:06:80:6c:95:b1:e1:
84:4e:bc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:57 2026 by rpki-client