Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
File: HDP7O3JSC4FpopKNU4LknWda0GA.mft (raw, json)
Hash identifier: AYaAnBJJgEMBbnuooSzsbdFwylNerGqx6aD6Cymei8I=
Subject key identifier: F9:33:00:29:9C:C3:36:42:A4:42:DE:19:17:B4:F5:47:EB:23:54:B5
Authority key identifier: 1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60
Certificate issuer: /CN=1c33fb3b72520b8169a2928d5382e49d675ad060
Certificate serial: 01A0D2011358D834064A485B34F2D8308BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
Manifest number: 181A
Signing time: Thu 24 Sep 2026 06:01:20 +0000
Manifest this update: Thu 24 Sep 2026 06:01:20 +0000
Manifest next update: Fri 25 Sep 2026 06:01:20 +0000
Files and hashes: 1: Gy7ZxbulJ_7Y0tx78zpcZAOHO2I.roa (hash: 8PQOWmSZ9/1/Et2ot0KAAdAS2aYMSpPnN0AQzm11bWE=)
2: HDP7O3JSC4FpopKNU4LknWda0GA.crl (hash: 5HgnpBrxhHSEErIPLMGD9aUYBDDpvlbYGpe1qkR9Uoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:01:13:58:d8:34:06:4a:48:5b:34:f2:d8:30:8b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c33fb3b72520b8169a2928d5382e49d675ad060
Validity
Not Before: Sep 24 06:01:20 2026 GMT
Not After : Sep 25 06:01:20 2026 GMT
Subject: CN=f93300299cc33642a442de1917b4f547eb2354b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5f:11:a5:07:4a:4c:b0:8a:c8:39:60:dd:44:
af:6e:ab:15:b9:28:7b:02:a5:60:77:ea:56:13:bf:
ee:f4:8a:43:38:0b:8f:4a:7f:96:b9:e8:77:6a:d1:
92:7b:55:99:b0:72:e8:fd:8d:05:f1:e2:1f:da:cb:
a7:8d:3a:b5:aa:b0:8a:b7:ef:25:84:10:51:b6:b0:
0f:b7:9f:ee:70:6f:09:67:f4:d5:58:18:17:65:e8:
47:2d:db:bb:e8:a9:44:cb:2e:0f:70:a5:60:ec:8b:
c1:78:d9:ee:2a:86:b4:06:5b:ea:b5:9b:19:69:47:
76:e5:92:3a:c6:22:e2:d5:03:5b:89:38:4e:52:9e:
7b:fa:14:61:12:b5:dc:d6:f9:97:0b:b6:1b:0d:ea:
ff:ea:88:40:06:1f:01:e2:0e:ff:4f:ff:95:df:24:
e5:77:e0:84:62:4d:d8:06:0f:8f:36:b4:b0:eb:c8:
aa:06:fa:60:d9:84:68:95:8d:23:24:bc:2a:01:10:
b6:1b:a9:87:38:99:39:88:31:63:a4:d5:dd:0a:25:
90:9a:c6:65:94:d4:d3:bc:a9:fc:32:a2:ea:4e:80:
a7:14:3b:cd:82:b9:b3:a1:fd:a9:aa:1e:ed:cb:cc:
2c:11:15:9b:69:cd:65:b3:c9:ae:0b:1c:e5:97:83:
0f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:33:00:29:9C:C3:36:42:A4:42:DE:19:17:B4:F5:47:EB:23:54:B5
X509v3 Authority Key Identifier:
keyid:1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:36:6d:76:8d:4a:e9:56:93:75:b4:24:54:57:4c:f3:e1:05:
73:21:35:db:6e:b6:6a:70:d4:ac:b8:04:f0:d9:57:15:a6:64:
92:26:5f:07:41:c6:50:7c:6d:ee:6c:6e:9c:2e:ba:8c:c6:3d:
fc:a0:46:4f:4e:4d:75:33:64:62:ed:6b:c8:3f:43:a1:e7:36:
c9:04:53:85:d1:8a:a0:6c:48:e7:f8:2b:70:c9:dc:75:e3:30:
52:f8:7e:c6:ad:a8:82:15:5b:11:03:7d:f8:5c:76:20:02:27:
47:43:ed:98:31:ec:47:f4:4e:50:0d:1c:fe:6e:41:08:23:72:
99:18:fd:11:6e:9d:48:dc:11:eb:f8:54:35:29:8a:c4:5f:1a:
63:21:f0:5a:65:18:44:b8:5a:b1:d6:54:12:f0:d2:3c:9b:bc:
80:35:d8:74:18:fb:57:82:02:59:a6:47:0f:07:24:5d:02:51:
b3:63:ef:b2:a2:dd:75:ff:5f:10:da:f6:08:8f:e9:03:4a:a6:
85:de:5d:ee:b8:19:5b:a5:93:b6:c2:7f:b0:e0:ee:75:fc:13:
c0:03:d8:9e:dc:74:6d:d4:4a:86:8c:5f:5c:fa:35:1a:bb:44:
f0:3e:d0:8a:23:7c:73:48:58:5c:25:91:b1:9b:cf:03:a5:8d:
1e:38:c0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:30:40 2026 by rpki-client