Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft
File: hpA1wxdzT2Ybv4XCGEFVofNhat0.mft (raw, json)
Hash identifier: Zlx/bQUMslVFlGQiz+wHKhis2Lzz9721VANPT34RG0A=
Subject key identifier: FC:0E:2D:72:65:A1:C4:7E:9F:66:CF:82:69:7E:DB:20:4A:B8:1B:37
Authority key identifier: 86:90:35:C3:17:73:4F:66:1B:BF:85:C2:18:41:55:A1:F3:61:6A:DD
Certificate issuer: /CN=869035c317734f661bbf85c2184155a1f3616add
Certificate serial: 019D29977FD13AE4DBE03C02DE118393B8FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft
Manifest number: 140E
Signing time: Thu 26 Mar 2026 10:01:27 +0000
Manifest this update: Thu 26 Mar 2026 10:01:27 +0000
Manifest next update: Fri 27 Mar 2026 10:01:27 +0000
Files and hashes: 1: hpA1wxdzT2Ybv4XCGEFVofNhat0.crl (hash: UgMOHxkoAH8UGSY9Q4qC4C9yu/nhPTGN5okZsrooKL4=)
2: xICMKArLvTx29numTiutzmAayDM.roa (hash: Lqd0tIHATER1ygDumfjqbLFR0sPowEmoXTK5gpQqBN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:7f:d1:3a:e4:db:e0:3c:02:de:11:83:93:b8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869035c317734f661bbf85c2184155a1f3616add
Validity
Not Before: Mar 26 10:01:27 2026 GMT
Not After : Mar 27 10:01:27 2026 GMT
Subject: CN=fc0e2d7265a1c47e9f66cf82697edb204ab81b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:01:b8:16:f1:e6:b5:49:78:74:ac:8f:31:18:
36:8a:fa:39:71:40:f9:76:01:0e:68:81:61:ab:01:
cf:5d:a8:85:5e:a2:02:4c:a1:49:aa:d9:dd:56:4b:
46:0a:8e:2c:b2:f9:b1:8b:a5:4b:0c:f9:01:29:9e:
89:c8:98:f8:06:9f:96:9c:ea:69:3a:dc:1f:39:95:
c1:d7:ac:91:88:9a:13:32:69:4a:c3:3b:3c:1e:9a:
80:26:6a:49:3f:98:92:a5:53:03:ae:68:63:af:ac:
9a:a6:f7:ed:14:2d:d5:fb:ef:0d:0f:cd:d4:c3:ce:
a4:79:8c:8e:ee:52:c6:1e:48:68:6b:83:bf:31:42:
63:ce:da:93:c3:40:8c:94:e1:21:da:85:23:ec:6f:
3e:95:e0:46:f7:b9:ab:1c:aa:81:fc:91:94:ca:c7:
80:72:29:5c:20:73:af:3a:a0:b1:64:a4:1b:56:bb:
e2:69:2b:c0:7c:09:32:f0:56:89:1a:38:be:d8:86:
d7:e4:e1:2f:90:97:24:11:bf:f7:53:41:07:09:43:
48:2e:46:d1:eb:0f:86:8b:a0:0e:38:6f:ae:30:ae:
1f:44:c4:de:ff:84:9c:e9:53:49:9c:1e:5a:6e:2c:
65:44:4e:6c:b8:be:94:79:5c:78:73:cc:fd:ee:1b:
94:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0E:2D:72:65:A1:C4:7E:9F:66:CF:82:69:7E:DB:20:4A:B8:1B:37
X509v3 Authority Key Identifier:
keyid:86:90:35:C3:17:73:4F:66:1B:BF:85:C2:18:41:55:A1:F3:61:6A:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:1d:4b:75:51:a0:9f:95:20:89:ac:34:2b:9d:4c:0a:10:00:
91:40:dd:8a:ed:87:46:3b:5c:8d:00:87:8b:7e:30:06:a4:4a:
87:14:83:2a:ef:04:1c:4f:42:ad:69:17:92:5b:61:09:77:a7:
48:ed:65:b9:62:60:5c:11:4c:57:a4:a7:84:35:3f:26:20:82:
95:de:56:7a:be:c3:9c:72:8f:c3:87:df:35:3b:e9:35:da:12:
db:f4:58:17:74:49:43:52:bf:51:33:fc:b5:c7:6e:6c:8d:e1:
01:c2:a1:62:ab:59:78:9e:40:5f:fb:3a:52:fb:d4:41:67:b1:
c0:ff:42:88:61:36:7c:c9:d0:45:14:73:3a:e0:b6:0e:6c:83:
d6:ae:2d:c2:60:77:69:66:d6:90:03:fe:5b:ef:70:48:24:b1:
c4:d7:93:9c:54:6c:01:94:26:ab:fd:fe:f5:0c:36:07:40:f3:
e9:b0:78:e7:ce:2c:f9:e4:f5:39:5f:cd:cf:33:f8:ae:34:03:
e0:38:17:38:44:4f:82:da:29:a9:7b:98:56:9a:b9:93:c1:7d:
a4:c5:be:17:74:30:e1:a1:73:69:b4:26:e6:43:42:5b:61:63:
13:c7:6c:4d:47:10:71:d8:76:e8:86:cb:6f:27:ca:97:d9:d2:
e9:d2:f7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:58:29 2026 by rpki-client