Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
File: hps2AP1zjmmNEv7yDhBuapTjtnQ.mft (raw, json)
Hash identifier: TqsNRaay87cGDgajKPTzDN37a739xcVYCnsKUxeDMoQ=
Subject key identifier: A7:80:04:2A:B8:5F:C5:82:AD:E1:D3:16:3C:C9:F0:5A:DE:03:49:62
Authority key identifier: 86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74
Certificate issuer: /CN=869b3600fd738e698d12fef20e106e6a94e3b674
Certificate serial: 019D28165A65C64AB92D9C389ACB9FB2BC60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
Manifest number: 0D78
Signing time: Thu 26 Mar 2026 03:00:46 +0000
Manifest this update: Thu 26 Mar 2026 03:00:46 +0000
Manifest next update: Fri 27 Mar 2026 03:00:46 +0000
Files and hashes: 1: D07dxDXxrFaWAK13Zm1gQWe6sqM.roa (hash: WEmuyO7ijZIUqK6Kdgpk4wxDQKr57OBRHR5wIMw0Uxo=)
2: hps2AP1zjmmNEv7yDhBuapTjtnQ.crl (hash: NBRFSwkCuR7iB3cuxQz8w9vBUUaFOCFkeAvEy7tT4iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:5a:65:c6:4a:b9:2d:9c:38:9a:cb:9f:b2:bc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869b3600fd738e698d12fef20e106e6a94e3b674
Validity
Not Before: Mar 26 03:00:46 2026 GMT
Not After : Mar 27 03:00:46 2026 GMT
Subject: CN=a780042ab85fc582ade1d3163cc9f05ade034962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5e:da:14:3a:3f:55:25:c9:e7:82:f1:ec:f9:
17:b6:68:97:7e:20:d9:a8:c5:92:24:30:b4:42:8f:
5f:5f:54:d1:a8:de:6f:d2:a6:17:57:0f:5f:7d:4e:
7c:35:58:19:fa:f2:21:89:33:79:90:89:fd:bc:01:
2a:9b:ea:dc:9e:a5:a1:21:00:f3:91:54:d8:58:12:
70:df:d5:d6:85:98:05:a6:c8:ad:7f:fb:4a:dc:9e:
56:12:5c:b3:76:7b:d2:fa:78:0f:4a:d8:d2:9f:fd:
d8:50:f3:f2:32:90:eb:5f:1e:dc:8c:90:8f:19:cf:
1b:77:0b:e3:b0:ce:ec:00:0d:16:19:db:27:2b:eb:
02:52:72:2d:d3:0b:47:43:d7:1c:65:ee:54:9c:5c:
8a:1d:ca:4b:1d:38:08:c0:10:23:00:d3:83:44:22:
85:aa:1a:44:3b:45:ed:2e:07:e5:8f:87:9f:d6:18:
ef:1e:dd:8d:6a:46:64:c9:7f:fb:03:d5:44:f1:9f:
51:9d:b9:2e:aa:9b:20:cf:1d:7b:5c:cb:b4:7d:48:
bd:cf:c6:e8:1a:20:7d:8f:23:89:0e:a3:1d:d3:f6:
c8:56:84:de:ac:6d:e6:c0:5d:a6:4a:2e:b2:3a:3e:
18:80:20:26:2a:2c:27:b2:85:d1:71:9c:32:5c:d2:
e9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:80:04:2A:B8:5F:C5:82:AD:E1:D3:16:3C:C9:F0:5A:DE:03:49:62
X509v3 Authority Key Identifier:
keyid:86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:41:b1:b1:21:21:4f:d4:f9:cd:84:13:ba:50:45:9c:42:83:
f7:de:4d:de:75:39:df:28:45:5c:58:d1:7e:da:ec:e1:13:2c:
82:88:6e:fa:59:a0:a9:d1:ad:25:65:c8:21:80:e8:7e:c1:2e:
81:0b:32:95:93:ea:51:d2:e9:21:74:27:89:4b:50:91:75:32:
ed:dc:0f:50:f5:f9:46:02:5f:ed:40:cc:15:75:0b:ea:87:70:
31:84:0d:3d:54:8f:80:18:7e:2b:c8:e0:46:f8:13:73:3d:75:
1b:8e:5f:14:e0:a1:f7:bd:eb:27:27:74:07:43:2c:a4:de:63:
9d:92:78:28:94:d2:d8:d2:49:1d:f4:88:6c:c1:ba:fe:7e:50:
57:9a:34:8f:43:4b:28:42:29:0b:37:5d:3d:02:df:49:4c:49:
7a:18:a8:6f:a8:2b:7f:2a:75:81:bf:ce:cb:e9:80:6f:0b:56:
16:c3:97:cb:54:98:6c:d2:ce:29:78:d1:be:ab:01:88:e2:96:
e9:b5:e0:70:26:2c:a7:62:49:06:b1:18:d6:29:a8:6b:27:7f:
b7:29:e9:0d:85:cc:d1:61:77:8e:42:e4:b3:fd:78:1e:ce:ad:
f8:24:ab:0f:b3:c5:97:43:58:46:04:03:15:74:9e:8f:e5:8d:
30:74:bc:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFlplxkq5LZw4msufsrxgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OWIzNjAwZmQ3MzhlNjk4ZDEyZmVmMjBlMTA2ZTZhOTRl
M2I2NzQwHhcNMjYwMzI2MDMwMDQ2WhcNMjYwMzI3MDMwMDQ2WjAzMTEwLwYDVQQD
EyhhNzgwMDQyYWI4NWZjNTgyYWRlMWQzMTYzY2M5ZjA1YWRlMDM0OTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr17aFDo/VSXJ54Lx7PkXtmiXfiDZ
qMWSJDC0Qo9fX1TRqN5v0qYXVw9ffU58NVgZ+vIhiTN5kIn9vAEqm+rcnqWhIQDz
kVTYWBJw39XWhZgFpsitf/tK3J5WElyzdnvS+ngPStjSn/3YUPPyMpDrXx7cjJCP
Gc8bdwvjsM7sAA0WGdsnK+sCUnIt0wtHQ9ccZe5UnFyKHcpLHTgIwBAjANODRCKF
qhpEO0XtLgflj4ef1hjvHt2NakZkyX/7A9VE8Z9Rnbkuqpsgzx17XMu0fUi9z8bo
GiB9jyOJDqMd0/bIVoTerG3mwF2mSi6yOj4YgCAmKiwnsoXRcZwyXNLpdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKeABCq4X8WCreHTFjzJ8FreA0liMB8GA1UdIwQY
MBaAFIabNgD9c45pjRL+8g4QbmqU47Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHBzMkFQMXpqbW1ORXY3eURoQnVhcFRqdG5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82MDk5NzYtMWFjZS00NDRmLWJjYjUt
NDI0M2U4OGJkNzZjLzEvaHBzMkFQMXpqbW1ORXY3eURoQnVhcFRqdG5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy82MDk5NzYtMWFjZS00NDRmLWJjYjUtNDI0M2U4OGJkNzZj
LzEvaHBzMkFQMXpqbW1ORXY3eURoQnVhcFRqdG5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADUGxsSEh
T9T5zYQTulBFnEKD995N3nU53yhFXFjRftrs4RMsgohu+lmgqdGtJWXIIYDofsEu
gQsylZPqUdLpIXQniUtQkXUy7dwPUPX5RgJf7UDMFXUL6odwMYQNPVSPgBh+K8jg
RvgTcz11G45fFOCh973rJyd0B0MspN5jnZJ4KJTS2NJJHfSIbMG6/n5QV5o0j0NL
KEIpCzddPQLfSUxJehiob6grfyp1gb/Oy+mAbwtWFsOXy1SYbNLOKXjRvqsBiOKW
6bXgcCYsp2JJBrEY1imoayd/tynpDYXM0WF3jkLks/14Hs6t+CSrD7PFl0NYRgQD
FXSej+WNMHS8/g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:23:44 2026 by rpki-client