Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
File: hps2AP1zjmmNEv7yDhBuapTjtnQ.mft (raw, json)
Hash identifier: G28yj2vW0VJYwmZR/YOJWLEEI+hLW6tfC5OwNIyEPC4=
Subject key identifier: 74:62:E8:52:8B:26:A6:01:A1:83:8E:9C:46:98:15:C5:C2:C4:93:88
Authority key identifier: 86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74
Certificate issuer: /CN=869b3600fd738e698d12fef20e106e6a94e3b674
Certificate serial: 019E213605DF32C28B9A2946D1CADC7289BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
Manifest number: 0DF9
Signing time: Wed 13 May 2026 12:00:48 +0000
Manifest this update: Wed 13 May 2026 12:00:48 +0000
Manifest next update: Thu 14 May 2026 12:00:48 +0000
Files and hashes: 1: D07dxDXxrFaWAK13Zm1gQWe6sqM.roa (hash: WEmuyO7ijZIUqK6Kdgpk4wxDQKr57OBRHR5wIMw0Uxo=)
2: hps2AP1zjmmNEv7yDhBuapTjtnQ.crl (hash: Q0JkmCBjtWf56oQkNgWifKHmFpN5npvwhwzDuWejopk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:36:05:df:32:c2:8b:9a:29:46:d1:ca:dc:72:89:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869b3600fd738e698d12fef20e106e6a94e3b674
Validity
Not Before: May 13 12:00:48 2026 GMT
Not After : May 14 12:00:48 2026 GMT
Subject: CN=7462e8528b26a601a1838e9c469815c5c2c49388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9a:fe:18:14:95:45:15:bc:95:ce:ae:f4:77:
22:57:9f:88:13:2b:fe:33:70:a6:fa:6d:4e:cb:51:
8a:2d:e0:57:ae:e6:ca:5a:b2:e2:39:8b:d4:a7:fc:
5a:1e:6e:ed:79:cc:41:e4:fc:8c:aa:d8:9c:e4:7b:
dc:55:cd:56:95:38:9f:88:22:16:d2:90:22:7f:6e:
95:21:19:95:ea:d8:83:89:65:62:a7:ef:2c:d9:6e:
74:c2:6c:6e:c0:c1:50:60:8a:f2:d6:e0:b3:7c:80:
ab:4b:b7:aa:da:dc:7d:03:0c:8d:5b:c6:a2:88:a3:
f2:47:8e:69:3d:ab:b8:29:5d:ef:d3:51:f3:cf:20:
67:77:84:c7:c4:7b:93:07:c7:e1:49:8e:5a:e4:c6:
fa:67:f3:c5:ba:be:f8:4b:05:34:50:07:97:02:a1:
04:90:2d:d5:92:97:cc:0b:5e:99:ed:e4:f0:0c:7a:
aa:22:4e:b4:76:8f:e3:9d:bd:51:28:8e:d8:9a:21:
cf:d6:9a:2f:b2:4c:c7:e8:34:32:3d:39:4b:bd:e8:
79:fd:aa:10:dd:7e:87:e9:ca:b3:5d:15:48:98:a9:
6c:76:b2:db:af:f2:4c:a6:80:61:39:65:b7:fc:b8:
b3:53:02:63:56:cf:e4:5c:9c:76:a6:85:23:a2:fe:
01:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:62:E8:52:8B:26:A6:01:A1:83:8E:9C:46:98:15:C5:C2:C4:93:88
X509v3 Authority Key Identifier:
keyid:86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:0f:44:c8:0a:a9:bf:1b:20:13:9f:00:af:ec:a7:9a:38:63:
2b:cc:84:de:55:6f:75:a3:06:5a:d0:80:47:27:11:60:c6:d1:
b8:cc:a0:e2:cb:9e:5f:10:58:f7:a3:e1:93:86:52:f5:1b:f1:
09:fd:13:62:7d:7d:48:fa:c6:13:0e:b7:8e:57:84:3a:1b:8d:
02:6b:f7:49:0b:08:58:a9:1b:53:49:4d:bd:39:a6:a1:25:6f:
9d:63:9e:07:b7:0b:f3:f5:db:48:98:83:13:d5:09:2f:4a:0f:
9b:52:80:81:16:de:fd:0a:8d:ee:cb:8c:22:2d:14:eb:36:ee:
ad:07:e2:3f:a8:c9:a4:fb:c3:b2:a1:98:f0:a5:82:e1:25:6a:
4b:f4:dc:86:e0:f0:4c:f9:0b:ef:0d:9b:cf:c7:e8:12:cf:fe:
31:36:35:02:b9:66:f7:1b:2e:be:dc:d7:ae:ee:a8:02:c2:56:
3c:76:ec:2e:15:f6:e2:3c:11:dc:a0:c5:21:05:ea:35:b0:e0:
ee:7d:7e:83:72:92:99:61:35:7e:d1:1a:1e:da:4e:46:b4:3e:
31:57:8e:b5:93:93:0a:a0:e6:30:53:47:0f:96:6f:2b:21:47:
0b:ba:95:d4:da:bb:0d:72:c5:c5:ca:6a:f5:4a:4b:94:cc:95:
79:48:8f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:57:34 2026 by rpki-client