Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
File: HDP7O3JSC4FpopKNU4LknWda0GA.mft (raw, json)
Hash identifier: GBLLQAv8GcWh4d5jJAwAeOEst9fYp9PgBuotMqmhITc=
Subject key identifier: 82:45:3D:4B:C3:2C:8B:92:25:56:D8:69:6A:D3:DC:75:E2:95:A6:10
Authority key identifier: 1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60
Certificate issuer: /CN=1c33fb3b72520b8169a2928d5382e49d675ad060
Certificate serial: 019FAC75D05F08AC7C9C25AE09D7D5607C3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
Manifest number: 1782
Signing time: Wed 29 Jul 2026 06:00:29 +0000
Manifest this update: Wed 29 Jul 2026 06:00:29 +0000
Manifest next update: Thu 30 Jul 2026 06:00:29 +0000
Files and hashes: 1: Gy7ZxbulJ_7Y0tx78zpcZAOHO2I.roa (hash: 8PQOWmSZ9/1/Et2ot0KAAdAS2aYMSpPnN0AQzm11bWE=)
2: HDP7O3JSC4FpopKNU4LknWda0GA.crl (hash: ejxJuKDMsJ7oBjbB9rIaGyyaPHLTtLAssejJv9B12r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:d0:5f:08:ac:7c:9c:25:ae:09:d7:d5:60:7c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c33fb3b72520b8169a2928d5382e49d675ad060
Validity
Not Before: Jul 29 06:00:29 2026 GMT
Not After : Jul 30 06:00:29 2026 GMT
Subject: CN=82453d4bc32c8b922556d8696ad3dc75e295a610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:db:8a:bf:75:6b:c9:72:98:7e:bb:ad:96:46:
84:f1:80:e3:7b:b7:1c:a0:ff:e5:98:9b:94:60:80:
cf:c1:0a:5f:53:c7:4f:b6:45:a9:ef:4d:83:cc:57:
dc:0c:93:d7:a2:4f:6d:80:72:f7:cf:3b:b3:80:bd:
14:67:9f:25:68:1e:b3:d3:98:d1:84:9b:f8:ef:11:
12:d4:e1:94:8b:e8:c3:5f:69:89:6b:b6:2b:66:db:
89:c6:aa:e5:e7:eb:e2:87:08:c2:f2:7a:d3:e2:a6:
10:40:57:fd:87:9c:f9:b6:9a:60:09:6e:0c:01:ad:
20:a7:2e:75:9f:74:06:c2:0f:83:ae:15:6c:ca:12:
ea:26:99:7f:1e:ee:49:f9:e0:ca:49:08:cd:1f:e1:
ec:1f:47:33:33:dd:39:00:d8:e4:11:e5:46:d8:b9:
56:dd:a3:6d:81:30:5e:c3:79:f2:e6:cb:a6:08:6a:
5d:75:a9:bc:b5:54:07:dc:df:64:a2:47:e2:b5:35:
ef:32:fb:6d:32:d1:47:25:81:82:0d:f8:ff:5b:43:
db:ff:3e:4b:3e:97:48:af:af:9c:65:de:6f:dc:ad:
44:91:6b:c6:54:8b:94:75:b6:d2:d1:e2:0e:7d:cd:
4f:0a:df:3c:36:84:81:4c:c5:98:f5:c2:53:b9:9f:
e9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:45:3D:4B:C3:2C:8B:92:25:56:D8:69:6A:D3:DC:75:E2:95:A6:10
X509v3 Authority Key Identifier:
keyid:1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:6d:87:04:0a:e0:d7:31:21:30:26:54:33:d0:5a:8e:a9:86:
ca:20:a3:5e:db:88:f8:7a:64:04:c9:38:a6:3f:74:e5:a8:97:
1b:17:d4:5d:8f:f7:f2:43:3a:c4:a0:f3:23:5f:11:85:38:8e:
21:2e:68:15:f7:27:ff:96:53:a4:b0:1b:fb:78:9a:f6:36:d8:
b7:24:d0:3e:04:2c:8b:78:59:eb:ae:ab:f9:be:56:55:ca:75:
90:1a:06:e9:03:3e:aa:7e:a4:fa:f4:f2:74:9f:a3:35:7e:42:
a2:78:83:de:6c:05:8b:87:00:54:dd:7f:30:5b:bd:d8:1b:51:
e7:8a:6c:e9:82:82:40:54:01:15:7e:a4:b6:fe:26:96:38:1d:
ba:84:5b:15:3b:2e:e2:af:8c:15:b4:d9:26:f3:75:95:8c:71:
d0:fe:7d:c7:dd:92:bd:4e:c2:c9:a0:62:ed:7a:ea:c2:cd:e2:
95:6a:2a:99:1e:74:39:53:4e:dd:c0:ba:bf:b5:a4:9e:a6:cc:
95:2f:3b:aa:50:b4:f6:d1:d6:b9:ac:77:c0:95:54:2d:d1:ec:
ff:57:9d:58:59:3f:8b:01:c8:f3:55:23:a5:82:8a:77:bd:16:
80:e4:44:19:66:24:fc:e0:1f:39:8e:1f:7f:df:c6:32:95:28:
f9:f3:d1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:21:06 2026 by rpki-client