Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
File: hpY9ADE0zNpW_t_rJ496dop_QC8.mft (raw, json)
Hash identifier: cpGjVuE4nMLEgwJaHSCMPn+06Bi5+HOapTR8fqWwoVo=
Subject key identifier: 4B:C8:C8:00:97:83:B6:36:3F:ED:44:57:4A:86:34:5F:B4:3B:EA:4F
Authority key identifier: 86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F
Certificate issuer: /CN=86963d003134ccda56fedfeb278f7a768a7f402f
Certificate serial: 019D281671E6DDA40A08A3134D1C0AA74F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
Manifest number: 0A34
Signing time: Thu 26 Mar 2026 03:00:52 +0000
Manifest this update: Thu 26 Mar 2026 03:00:52 +0000
Manifest next update: Fri 27 Mar 2026 03:00:52 +0000
Files and hashes: 1: hpY9ADE0zNpW_t_rJ496dop_QC8.crl (hash: 3gce1jxaoQu4LOjUa8sG+uvoKMHYRdciS/4Y1ptFG2g=)
2: ykE1MwKYkciApw-UZeYngB_HUNs.roa (hash: SkxpvOB9g0NJAFJu1F10IT/jLtAQ4gxiMRGC76Dncgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:71:e6:dd:a4:0a:08:a3:13:4d:1c:0a:a7:4f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86963d003134ccda56fedfeb278f7a768a7f402f
Validity
Not Before: Mar 26 03:00:52 2026 GMT
Not After : Mar 27 03:00:52 2026 GMT
Subject: CN=4bc8c8009783b6363fed44574a86345fb43bea4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:71:ce:7c:c5:e3:ad:e7:45:a8:d6:2e:2f:6e:
f5:6c:4b:2b:9c:25:f0:34:67:4d:e3:38:72:21:1a:
51:02:7b:96:95:4a:d8:9e:2c:66:26:5d:dc:a0:5d:
18:c1:0f:46:6d:61:7a:5e:f8:93:22:44:99:ff:c8:
ad:f0:f4:27:6c:ca:c8:12:72:a4:fb:68:fe:9c:ce:
1d:68:2a:9b:ae:f5:1e:2a:97:73:c7:6e:c8:a0:c0:
35:7d:7a:48:08:4b:ed:d5:e3:34:8c:db:f7:f8:27:
47:e6:11:5f:c9:0c:ad:fd:d4:00:49:b6:6d:a0:5a:
8e:a4:34:e0:9c:ec:da:f5:9e:b8:0c:f0:32:bb:a8:
b2:fd:bf:88:4f:5a:1c:87:6b:de:94:0d:7a:29:4b:
33:53:f1:45:4e:64:3b:cf:6a:99:cd:ac:21:21:fe:
52:48:62:24:3c:af:2a:72:b2:fa:fe:4b:ed:22:51:
7a:c3:78:45:4f:32:91:a9:52:e6:a0:ae:fe:a0:9a:
3d:ba:73:bc:b0:38:19:c4:d1:95:ea:60:24:b3:4b:
32:f4:0e:01:8c:62:c5:5d:2c:77:8b:c5:e4:5e:85:
2a:85:c4:6d:87:69:16:3d:7d:0a:34:95:32:20:b8:
89:7c:de:9e:92:b1:57:eb:92:eb:27:dc:72:4e:c9:
de:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C8:C8:00:97:83:B6:36:3F:ED:44:57:4A:86:34:5F:B4:3B:EA:4F
X509v3 Authority Key Identifier:
keyid:86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:de:f6:38:c1:3f:67:a8:58:dc:14:62:01:66:9f:c5:78:fd:
41:3f:2f:b7:26:72:38:d5:8e:3c:1f:84:86:9c:95:17:32:b8:
59:b4:60:4f:c5:9c:62:9d:13:5b:ef:a3:53:e1:9e:7c:41:95:
5d:ef:b8:c0:dd:bf:08:ea:01:9e:fd:f9:d0:8c:73:94:c9:29:
f5:3a:01:51:cf:d4:cb:38:c6:c6:21:a3:fd:86:16:f5:49:33:
db:b9:0f:2e:51:a0:1d:02:62:89:ec:f0:51:e9:b4:d4:a9:48:
b1:ef:93:5b:7e:ce:ed:1c:eb:83:fa:1f:a8:90:3e:cc:8b:ae:
3f:78:dc:63:75:6f:57:df:c9:04:5b:f0:35:b5:96:dc:66:69:
b5:4f:ad:53:02:69:f4:f3:bf:d2:60:0f:0e:62:fd:80:ab:a1:
9a:96:12:b9:f8:4f:54:84:06:82:df:5f:25:36:2d:29:7d:54:
90:e5:58:6e:30:38:26:d6:ee:b7:27:e1:69:e8:c6:fd:58:3c:
57:ce:84:41:eb:9d:b5:b1:08:5f:5c:bb:45:54:ef:12:d8:65:
52:aa:2f:b3:16:f3:3a:04:fc:18:13:27:f8:5c:88:68:5b:bb:
7c:02:83:0c:86:8d:ff:e0:6b:00:39:1a:28:a2:ad:c8:7e:56:
b3:23:67:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:31:02 2026 by rpki-client