Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft
File: HpUuiDc295y9nFZHBL88NmIbjso.mft (raw, json)
Hash identifier: nd+rIwvUHluzhctdgbuhjfYjuXbZnw99GqCmRwEFquw=
Subject key identifier: 03:4F:E5:57:34:7A:9C:AF:BF:13:CD:27:13:E6:83:7C:99:2D:63:32
Authority key identifier: 1E:95:2E:88:37:36:F7:9C:BD:9C:56:47:04:BF:3C:36:62:1B:8E:CA
Certificate issuer: /CN=1e952e883736f79cbd9c564704bf3c36621b8eca
Certificate serial: 019D2772A3CC2D736FEDA9D7A5FEE4E210E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 00:01:57 +0000
Manifest this update: Thu 26 Mar 2026 00:01:57 +0000
Manifest next update: Fri 27 Mar 2026 00:01:57 +0000
Files and hashes: 1: 1cwCMtAIvTWCxyP_Iez-RNBZ-5I.roa (hash: DIWs3NXNIaM1l1Z4VPA1y0AbQE6IAqLDJXzdXYBdRAU=)
2: HpUuiDc295y9nFZHBL88NmIbjso.crl (hash: CeSY4I8TsE7Sz32el9o1hW9eCnxBa+CuIDZ4520v3Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:a3:cc:2d:73:6f:ed:a9:d7:a5:fe:e4:e2:10:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e952e883736f79cbd9c564704bf3c36621b8eca
Validity
Not Before: Mar 26 00:01:57 2026 GMT
Not After : Mar 27 00:01:57 2026 GMT
Subject: CN=034fe557347a9cafbf13cd2713e6837c992d6332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d4:54:29:0a:b9:39:0f:9a:53:a3:de:81:f6:
34:cc:49:44:14:20:dc:40:01:ef:10:f1:b9:7c:b9:
c7:36:a6:8f:be:67:55:0e:48:1d:bc:13:f8:e9:33:
08:d7:f7:ee:61:91:f5:5e:14:70:ec:87:71:97:7c:
a4:3d:54:ba:b6:14:6c:29:66:61:29:7b:9f:87:2f:
67:87:c5:9d:13:f4:24:ed:ad:f9:91:a4:97:a5:f2:
5f:fc:ea:65:7a:64:da:bd:c2:1a:4b:fe:9e:bd:ad:
de:85:75:7c:bd:60:13:bf:2f:1a:9b:3b:84:1a:2b:
37:df:ac:77:3c:06:11:38:ce:73:3a:4c:76:10:72:
7d:6a:c0:84:90:b7:9c:be:29:30:e2:46:25:a3:ac:
65:eb:82:23:79:32:6c:f0:7c:9c:b0:30:97:bb:9a:
ea:33:b2:fa:39:d1:c2:00:32:46:8e:ff:f7:69:8d:
76:f9:44:0c:62:4b:f3:66:75:ae:8a:f7:7c:c9:27:
ca:c1:30:85:c5:c4:12:6c:c3:0c:83:11:c5:01:3f:
b6:52:94:11:5e:6f:af:41:e7:7d:7b:16:6c:7c:66:
54:f2:ee:13:b4:69:21:1d:da:34:52:9a:b0:5d:a9:
32:8f:24:88:fd:65:f9:aa:ab:89:67:03:7d:67:c9:
61:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4F:E5:57:34:7A:9C:AF:BF:13:CD:27:13:E6:83:7C:99:2D:63:32
X509v3 Authority Key Identifier:
keyid:1E:95:2E:88:37:36:F7:9C:BD:9C:56:47:04:BF:3C:36:62:1B:8E:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpUuiDc295y9nFZHBL88NmIbjso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b140ae-c047-4ff6-864f-3560356571a7/1/HpUuiDc295y9nFZHBL88NmIbjso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:2f:36:66:6c:37:e8:7c:14:31:27:22:9a:1e:68:08:12:bd:
b7:72:35:4e:5c:0b:fa:74:cf:c9:83:cc:93:e9:79:29:ce:95:
6a:ea:05:49:9e:2c:8f:7b:15:d6:a9:5c:71:fa:ba:65:ae:be:
a8:6b:f8:20:c0:03:ee:ed:e8:04:de:8b:bc:d5:07:f0:6f:bf:
e4:4f:ba:f0:d0:5e:2e:9d:ba:db:37:45:67:6d:33:74:e4:a6:
fb:53:dd:95:27:fb:5f:35:28:ad:57:01:98:6b:e5:71:ba:4a:
c4:f1:b3:78:f6:bc:f4:e6:8d:bf:44:dd:82:74:1a:48:c3:02:
f3:85:b1:c6:22:ea:92:50:99:e0:c4:71:22:59:cd:2f:4a:a5:
1d:73:59:2a:8b:8a:f1:b8:28:6b:23:76:56:77:69:d2:9f:32:
68:d6:6e:78:8c:81:50:a2:c7:4c:c8:ee:81:ce:63:25:2c:eb:
11:19:94:b4:fc:3a:25:7c:a5:4d:5b:d2:76:56:03:6d:9f:9a:
35:39:c9:01:d1:97:95:12:72:c8:7c:f2:65:53:d6:e8:e3:02:
90:5a:5d:4c:19:3b:19:89:66:e2:0c:c4:2f:b6:7b:b1:77:41:
58:69:fb:fa:89:d5:25:b0:51:22:8c:13:9f:07:6c:92:9c:d4:
8c:31:c5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:05:07 2026 by rpki-client