Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
File: hplEyiVUvOj0uL_HXaWKjwhdX4E.mft (raw, json)
Hash identifier: FJDlepX+z/bK06kIme5AOrEo0ayyYFrnfN2/tGCWFSE=
Subject key identifier: 60:10:61:81:01:D3:CD:2A:90:C7:47:46:FA:F8:CC:4F:7C:5A:CA:BC
Authority key identifier: 86:99:44:CA:25:54:BC:E8:F4:B8:BF:C7:5D:A5:8A:8F:08:5D:5F:81
Certificate issuer: /CN=869944ca2554bce8f4b8bfc75da58a8f085d5f81
Certificate serial: 019D28BBF002167AE84901DB04F74F6F3EB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 06:01:38 +0000
Manifest this update: Thu 26 Mar 2026 06:01:38 +0000
Manifest next update: Fri 27 Mar 2026 06:01:38 +0000
Files and hashes: 1: hplEyiVUvOj0uL_HXaWKjwhdX4E.crl (hash: hEMPhSNCtAaWtHREfC9WuPGFF0con6FdF7FoMKQTg/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:f0:02:16:7a:e8:49:01:db:04:f7:4f:6f:3e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869944ca2554bce8f4b8bfc75da58a8f085d5f81
Validity
Not Before: Mar 26 06:01:38 2026 GMT
Not After : Mar 27 06:01:38 2026 GMT
Subject: CN=6010618101d3cd2a90c74746faf8cc4f7c5acabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:31:95:f5:93:1d:3a:77:8e:74:29:18:a0:d2:
38:c5:b0:e1:09:25:5e:53:9f:5d:95:62:85:19:2c:
02:dd:3d:91:73:45:8d:7a:ff:b9:c5:37:df:34:b1:
8d:1d:59:4e:4e:1a:29:e2:da:34:f5:07:09:50:87:
3f:6e:21:8f:26:f7:db:6f:c1:d1:59:17:ef:0c:36:
21:7d:70:e5:a8:51:35:fc:ba:7b:f0:e9:d5:29:9c:
1d:6f:45:50:0d:c0:ea:a9:a7:75:b0:2e:cf:83:48:
b1:00:26:0b:37:5d:c7:53:e6:d2:08:5c:d8:89:e2:
ef:03:69:ae:ef:43:70:ee:fd:22:7d:a6:2b:18:22:
5b:b0:1f:e7:27:ac:c7:0f:19:10:c4:23:11:b7:82:
c6:6c:28:78:48:97:1d:94:db:35:8b:fd:4e:7c:fb:
70:e7:89:ce:75:20:81:a9:fd:30:8e:83:56:3c:b3:
18:a2:85:bd:fe:93:af:ee:6e:8e:f3:aa:ac:b8:0e:
c8:ec:5d:d0:0e:b7:ef:2c:6b:4f:21:67:fa:88:11:
25:35:ba:90:52:41:16:4d:1f:61:5c:39:8c:12:98:
9b:4a:af:ad:f4:55:30:24:d0:97:6d:90:3a:92:9c:
0a:73:ac:d4:89:2d:38:c4:6b:e5:9f:65:ed:df:06:
86:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:10:61:81:01:D3:CD:2A:90:C7:47:46:FA:F8:CC:4F:7C:5A:CA:BC
X509v3 Authority Key Identifier:
keyid:86:99:44:CA:25:54:BC:E8:F4:B8:BF:C7:5D:A5:8A:8F:08:5D:5F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ea:2d:d1:d3:e2:a5:4b:9a:32:dd:c0:15:2f:74:80:42:7a:
64:e8:6e:3d:84:6c:77:74:de:41:61:70:46:6d:76:6a:d7:7f:
ea:1a:5a:bd:53:68:b7:39:d8:db:8f:1b:5c:b5:1f:8f:2d:7f:
77:d4:f2:be:21:1f:48:ad:14:76:5f:4e:b2:d9:9a:32:fc:7b:
54:fb:07:af:f1:4e:3b:a4:05:ba:03:e9:f1:0c:54:61:57:94:
1e:9f:8c:90:70:d2:af:f5:eb:6c:51:0a:70:bd:ab:f5:a1:88:
89:7f:49:08:e0:f9:f7:10:f6:a4:78:77:ac:cb:b7:b0:aa:44:
22:4c:97:10:17:4f:d3:54:bd:95:19:86:d8:50:a9:7a:90:53:
5f:0c:05:4a:43:4d:27:d7:57:6c:c9:43:7e:81:30:87:af:77:
29:e1:6d:3e:56:e9:3e:0a:a0:d0:36:f0:e4:d1:1e:4e:60:19:
5c:12:12:6a:5d:63:f0:9c:3e:d7:ad:29:45:ca:97:00:28:ae:
ed:d0:c2:c3:29:b4:0c:1f:6e:1b:05:01:ca:04:e9:3e:30:96:
48:20:8c:31:59:3a:47:f8:9b:a4:22:bc:ae:c2:a6:52:e1:c9:
81:e9:00:66:12:17:6d:11:c5:56:c5:21:30:ac:fb:9d:78:2e:
ba:1e:09:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou/ACFnroSQHbBPdPbz63MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OTk0NGNhMjU1NGJjZThmNGI4YmZjNzVkYTU4YThmMDg1
ZDVmODEwHhcNMjYwMzI2MDYwMTM4WhcNMjYwMzI3MDYwMTM4WjAzMTEwLwYDVQQD
Eyg2MDEwNjE4MTAxZDNjZDJhOTBjNzQ3NDZmYWY4Y2M0ZjdjNWFjYWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTGV9ZMdOneOdCkYoNI4xbDhCSVe
U59dlWKFGSwC3T2Rc0WNev+5xTffNLGNHVlOThop4to09QcJUIc/biGPJvfbb8HR
WRfvDDYhfXDlqFE1/Lp78OnVKZwdb0VQDcDqqad1sC7Pg0ixACYLN13HU+bSCFzY
ieLvA2mu70Nw7v0ifaYrGCJbsB/nJ6zHDxkQxCMRt4LGbCh4SJcdlNs1i/1OfPtw
54nOdSCBqf0wjoNWPLMYooW9/pOv7m6O86qsuA7I7F3QDrfvLGtPIWf6iBElNbqQ
UkEWTR9hXDmMEpibSq+t9FUwJNCXbZA6kpwKc6zUiS04xGvln2Xt3waGgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAQYYEB080qkMdHRvr4zE98Wsq8MB8GA1UdIwQY
MBaAFIaZRMolVLzo9Li/x12lio8IXV+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHBsRXlpVlV2T2owdUxfSFhhV0tqd2hkWDRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85ZmRhZTAtNWM2My00YzA3LTg3M2Et
Y2RkYTRiYTZiZDc4LzEvaHBsRXlpVlV2T2owdUxfSFhhV0tqd2hkWDRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS85ZmRhZTAtNWM2My00YzA3LTg3M2EtY2RkYTRiYTZiZDc4
LzEvaHBsRXlpVlV2T2owdUxfSFhhV0tqd2hkWDRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+ot0dPi
pUuaMt3AFS90gEJ6ZOhuPYRsd3TeQWFwRm12atd/6hpavVNotznY248bXLUfjy1/
d9TyviEfSK0Udl9OstmaMvx7VPsHr/FOO6QFugPp8QxUYVeUHp+MkHDSr/XrbFEK
cL2r9aGIiX9JCOD59xD2pHh3rMu3sKpEIkyXEBdP01S9lRmG2FCpepBTXwwFSkNN
J9dXbMlDfoEwh693KeFtPlbpPgqg0Dbw5NEeTmAZXBISal1j8Jw+160pRcqXACiu
7dDCwym0DB9uGwUBygTpPjCWSCCMMVk6R/ibpCK8rsKmUuHJgekAZhIXbRHFVsUh
MKz7nXguuh4Jyg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:28 2026 by rpki-client