Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
File: HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft (raw, json)
Hash identifier: Ig87bQECQvVn9H151R54ayiazjHmTn5MD2koC4oKB/8=
Subject key identifier: 87:BA:02:4D:E8:E5:5F:DC:19:91:D4:54:3A:4D:AC:CF:1A:E6:94:24
Authority key identifier: 1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA
Certificate issuer: /CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
Certificate serial: 019D2695CD36EF774355BBEC26B67498347F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
Manifest number: 1419
Signing time: Wed 25 Mar 2026 20:00:44 +0000
Manifest this update: Wed 25 Mar 2026 20:00:44 +0000
Manifest next update: Thu 26 Mar 2026 20:00:44 +0000
Files and hashes: 1: HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl (hash: 4wW5R3e6R734AjyjQQzGieI/5E775mKStU9ZGn/wGAw=)
2: WrV4ZemJwrw_kjB05-5Id3wYxlE.roa (hash: eepRF61Uwq1JqMLzpuul90ksZb6fVRDXJtYxt1swjFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:cd:36:ef:77:43:55:bb:ec:26:b6:74:98:34:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
Validity
Not Before: Mar 25 20:00:44 2026 GMT
Not After : Mar 26 20:00:44 2026 GMT
Subject: CN=87ba024de8e55fdc1991d4543a4daccf1ae69424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cd:d8:1a:a3:46:b2:e1:e9:de:84:f2:61:e6:
87:ac:0e:f3:ec:63:9a:d9:c5:d4:b0:5f:c5:24:76:
aa:2b:79:60:65:50:cb:91:ac:4f:05:b6:cd:5b:4b:
8b:6b:de:dc:37:27:b9:43:20:f5:85:54:ec:1b:42:
4b:b4:fd:92:66:5f:61:14:f3:92:f1:80:d4:b6:09:
7b:ac:8b:84:47:27:5d:ec:4c:7e:bf:29:d6:85:69:
05:63:98:c3:82:7f:54:fe:b6:5f:c0:45:b2:60:f9:
bb:63:16:d9:e4:d7:32:11:9f:56:2e:57:ad:a7:e1:
b7:d4:f9:67:36:b2:da:f0:ac:ac:8d:c9:0a:23:8a:
ce:61:91:2a:b3:dc:1e:f7:b8:0c:66:b0:94:e5:2e:
5b:9f:5e:2b:82:a7:ac:92:02:61:de:21:7f:a0:a2:
44:4b:fe:51:c2:64:3f:1a:a1:1d:58:32:fb:ee:7a:
0b:0b:9e:77:43:29:d4:00:c0:5e:67:0c:2f:59:b1:
0d:9c:3d:47:12:1e:0a:e8:0d:da:7d:a9:4e:6b:a5:
3c:6b:8b:55:1d:05:9f:d1:6c:a4:79:13:c4:db:f5:
93:74:d6:b8:78:dc:2e:fa:89:0a:52:93:27:fe:dc:
54:cb:50:85:d9:90:01:81:f8:f9:a5:b7:78:64:12:
30:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BA:02:4D:E8:E5:5F:DC:19:91:D4:54:3A:4D:AC:CF:1A:E6:94:24
X509v3 Authority Key Identifier:
keyid:1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:47:12:fc:bf:a6:26:fe:ec:96:eb:0d:c0:5c:12:13:3b:ac:
bf:c3:10:a3:8d:6e:96:0a:c0:95:73:15:e4:b5:41:9e:f2:28:
b9:58:39:d6:b1:7f:ea:87:a0:16:05:96:fa:ab:9b:73:4d:68:
e2:2e:fe:97:37:db:4d:f1:6e:de:cf:e1:12:48:4e:55:0f:b0:
be:5b:f8:3c:22:f3:9f:e1:c7:2d:e9:b7:8a:0e:7e:87:ef:ad:
b4:c0:8d:dd:0a:9d:0f:eb:f1:e4:4e:ff:e4:e9:9c:64:c7:f4:
59:7a:21:19:70:fc:b0:09:d5:b2:3c:5a:85:24:dd:16:d0:58:
e0:d2:3b:2e:07:b1:f7:b6:ca:55:ce:ea:f2:4c:2f:00:e2:2b:
4b:91:5b:bb:48:ea:8b:c5:55:f6:68:f1:76:9a:f3:a9:c8:72:
e3:6b:97:5c:fc:41:5a:5e:ec:ea:c7:8f:2c:56:01:1a:b0:99:
84:db:80:ed:bd:4c:c7:02:d8:5d:b8:8d:7e:ee:cc:b0:ed:9f:
79:cb:d4:45:dd:53:c7:93:18:de:85:11:55:51:80:60:75:19:
8f:2f:81:ee:97:62:df:e2:c4:15:d1:1e:88:b4:b1:65:2f:c4:
02:91:16:bc:2b:7e:37:90:5a:90:a2:0d:46:67:97:92:1c:3f:
85:f3:49:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlc0273dDVbvsJrZ0mDR/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZmIwODdmZmI3ZjYxY2UxMTNmNjkzNDVlNGQ1MGExMTM4
MDhmZWEwHhcNMjYwMzI1MjAwMDQ0WhcNMjYwMzI2MjAwMDQ0WjAzMTEwLwYDVQQD
Eyg4N2JhMDI0ZGU4ZTU1ZmRjMTk5MWQ0NTQzYTRkYWNjZjFhZTY5NDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl83YGqNGsuHp3oTyYeaHrA7z7GOa
2cXUsF/FJHaqK3lgZVDLkaxPBbbNW0uLa97cNye5QyD1hVTsG0JLtP2SZl9hFPOS
8YDUtgl7rIuERydd7Ex+vynWhWkFY5jDgn9U/rZfwEWyYPm7YxbZ5NcyEZ9WLlet
p+G31PlnNrLa8KysjckKI4rOYZEqs9we97gMZrCU5S5bn14rgqeskgJh3iF/oKJE
S/5RwmQ/GqEdWDL77noLC553QynUAMBeZwwvWbENnD1HEh4K6A3afalOa6U8a4tV
HQWf0WykeRPE2/WTdNa4eNwu+okKUpMn/txUy1CF2ZABgfj5pbd4ZBIwTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIe6Ak3o5V/cGZHUVDpNrM8a5pQkMB8GA1UdIwQY
MBaAFBz7CH/7f2HOET9pNF5NUKETgI/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFBzSWZfdF9ZYzRSUDJrMFhrMVFvUk9Bai1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9mZGQ1MWUtYmNhMS00ODkyLWI5N2Et
NjlhYTUzYzY5ZDU0LzEvSFBzSWZfdF9ZYzRSUDJrMFhrMVFvUk9Bai1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9mZGQ1MWUtYmNhMS00ODkyLWI5N2EtNjlhYTUzYzY5ZDU0
LzEvSFBzSWZfdF9ZYzRSUDJrMFhrMVFvUk9Bai1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUcS/L+m
Jv7slusNwFwSEzusv8MQo41ulgrAlXMV5LVBnvIouVg51rF/6oegFgWW+qubc01o
4i7+lzfbTfFu3s/hEkhOVQ+wvlv4PCLzn+HHLem3ig5+h++ttMCN3QqdD+vx5E7/
5OmcZMf0WXohGXD8sAnVsjxahSTdFtBY4NI7Lgex97bKVc7q8kwvAOIrS5Fbu0jq
i8VV9mjxdprzqchy42uXXPxBWl7s6sePLFYBGrCZhNuA7b1MxwLYXbiNfu7MsO2f
ecvURd1Tx5MY3oURVVGAYHUZjy+B7pdi3+LEFdEeiLSxZS/EApEWvCt+N5BakKIN
RmeXkhw/hfNJkA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:23 2026 by rpki-client