Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
File: HvpZajEmrOApxtcNUpJX4Hs4ugY.mft (raw, json)
Hash identifier: hIiRFgLr5uVQIhlSgJcIhLj6YHPo1n+6LBn6joU8lhg=
Subject key identifier: 9C:49:FF:E4:42:04:34:AD:CD:CD:F6:6B:42:AC:05:D4:BF:8F:AC:A5
Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
Certificate issuer: /CN=1efa596a3126ace029c6d70d529257e07b38ba06
Certificate serial: 019D28169E71C45661A34A62CB22B4734CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
Manifest number: 188F
Signing time: Thu 26 Mar 2026 03:01:04 +0000
Manifest this update: Thu 26 Mar 2026 03:01:04 +0000
Manifest next update: Fri 27 Mar 2026 03:01:04 +0000
Files and hashes: 1: 5bPAfHY71g1tz33WhyemzOl8Afo.roa (hash: TP978Gguy7Dyr8s78cghRC57XCgceUKU/R4E1xx5GXM=)
2: FrDGqtAlSdh4w6GnxdkzTd7bHd8.roa (hash: cZLJ2r1Doel5lpVBvhmnLBua06MQetotpEsjgD1nP28=)
3: HvpZajEmrOApxtcNUpJX4Hs4ugY.crl (hash: s70d2bfMJD2sEyDNfFty93rdMfKAdqRhwf0F5Ji8kNw=)
4: Jgw1Gx1dPclOABYcbQJfITbOPSs.roa (hash: BIdjPDAk2zyiIML1uGPD7J7cytE8YqCkn/DCRcCwXHg=)
5: WmQL_VXpmFEvvoiR5PkxFDta9mk.roa (hash: 17mQDCBUS/Kj6BwRHUdOrAKzENyd7WfmRdfkyMXwsNg=)
6: k0uiX_PSGOLpmHbIawhjH3EL4VU.roa (hash: bIgcQVO40YbjY2beu9BGZjDPrIJm2Cv7wEtLZBhcVvU=)
7: oWfoIebl0vdlosgiWt_PqvTMCvI.roa (hash: sSMkZCHcY8051GIBXnABdJ427F125fjlpin/p+USqXE=)
8: u4N4FwbZU3R4YrPAif2Bhql7uXo.roa (hash: j1Aeh/ewSlpsUAcZ6gs1u3mvHVZZFBD8JqF3ICrH+Og=)
9: ukePksioR9rZ806d8URQYeRLONE.roa (hash: EXhlSdLPcjyLmaBcE0rpgx1b7yqNH2I+X3p7p/NtRc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:9e:71:c4:56:61:a3:4a:62:cb:22:b4:73:4c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06
Validity
Not Before: Mar 26 03:01:04 2026 GMT
Not After : Mar 27 03:01:04 2026 GMT
Subject: CN=9c49ffe4420434adcdcdf66b42ac05d4bf8faca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:8a:3d:2a:fd:31:9b:e1:d7:13:6b:f5:ba:
0e:c2:d2:4c:fb:6e:69:f7:2a:10:40:79:95:e7:30:
5e:e7:6b:98:67:4e:a4:a9:0e:c3:6d:c9:f1:38:21:
a5:92:54:3b:72:33:98:ac:7e:9b:58:7f:d8:fd:c0:
e3:53:eb:7b:86:33:67:5d:b0:70:11:eb:16:d6:b3:
d7:a1:9b:20:ea:d2:a5:91:3f:77:4c:6e:f0:3d:e2:
05:ea:96:3e:aa:33:ca:af:92:76:8f:24:06:07:6f:
81:51:b5:71:64:96:59:e4:d4:45:4f:3f:e5:35:ba:
0d:ae:af:44:6c:f9:0f:48:84:a6:d4:15:d1:c2:40:
6f:6c:f6:73:a5:cb:ba:f3:bf:24:f0:b7:41:fb:a7:
73:da:b2:fa:84:24:ec:b1:22:d7:a9:a9:2e:67:b3:
e8:a1:be:ca:53:a9:fc:8f:3b:48:0c:7d:da:09:24:
11:2e:8b:c5:9b:60:82:19:8c:de:9e:b9:2d:a8:e0:
84:83:3a:c5:5e:d4:51:9a:96:04:2f:a2:5b:fc:3a:
f6:79:46:3b:48:c1:2f:65:25:a8:94:48:84:5e:62:
a7:9c:ed:c2:77:fc:36:ba:31:ef:d8:01:08:a9:da:
45:a1:d4:2b:18:5c:5c:2e:16:47:bc:70:ad:6b:89:
6b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:49:FF:E4:42:04:34:AD:CD:CD:F6:6B:42:AC:05:D4:BF:8F:AC:A5
X509v3 Authority Key Identifier:
keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:28:b9:a7:35:21:95:55:ad:e6:d6:72:18:55:f7:b3:48:f0:
ad:50:a1:af:81:d6:f1:23:09:49:e8:42:e9:ba:61:95:fd:95:
80:e9:b4:82:c4:d6:89:f8:08:ca:a8:5c:81:5d:34:bf:34:1a:
29:b6:06:c3:bb:ea:f7:ee:7e:5f:7e:5d:23:c0:30:a8:98:6b:
2e:6a:4f:25:e6:dc:ed:1f:99:a3:52:57:14:3b:f5:31:9e:00:
47:32:5e:8f:ac:0e:0c:50:b9:52:4e:2b:69:bd:44:ac:be:6f:
2a:df:07:2a:f1:9b:67:e3:98:09:45:28:6d:bd:85:98:b0:fe:
e5:73:ce:d0:38:26:e1:51:75:52:b1:81:f8:19:c1:3d:37:37:
9e:f8:f6:92:35:1e:02:5d:02:69:42:1e:bc:52:37:23:24:b1:
9f:f8:27:4e:36:cf:80:a0:6f:7e:94:de:b7:e5:8d:c5:68:54:
3c:8f:e2:fd:fb:f1:ce:36:21:41:dc:b2:49:47:c8:b7:de:b8:
ba:1f:75:ac:0f:a2:cc:0e:74:71:f1:ce:18:53:29:ad:0d:95:
d2:33:98:ca:52:9a:2c:63:61:a4:14:84:88:e5:22:b4:b8:e0:
c2:32:22:17:a5:55:99:b2:dc:3a:b7:b2:2a:49:38:28:00:e3:
6d:13:2a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:20 2026 by rpki-client