Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
File: hpPf7hdoc561l2wkW1rQBbMljsY.mft (raw, json)
Hash identifier: ZIAYvZMmhdCBOTUb+etozqhuwbQ9BEC/cIhktDUy8cY=
Subject key identifier: 5A:D7:1E:50:B9:C0:FF:36:5D:70:29:18:FF:C5:C8:65:95:7F:DA:BA
Authority key identifier: 86:93:DF:EE:17:68:73:9E:B5:97:6C:24:5B:5A:D0:05:B3:25:8E:C6
Certificate issuer: /CN=8693dfee1768739eb5976c245b5ad005b3258ec6
Certificate serial: 019D2772575C3401AE5668A0F01BF0D1E0B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 00:01:37 +0000
Manifest this update: Thu 26 Mar 2026 00:01:37 +0000
Manifest next update: Fri 27 Mar 2026 00:01:37 +0000
Files and hashes: 1: hpPf7hdoc561l2wkW1rQBbMljsY.crl (hash: xnc66ZCG6raMkUNg8PQz6vXj5nXxxJK7V1KS8RjXA3k=)
2: mNaUQzwFX0BqVlBJLpzVszIOnM4.roa (hash: SiNsZYiIVTVZpo2V87H2BrP189PsIRUH34sgwW+FJSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:57:5c:34:01:ae:56:68:a0:f0:1b:f0:d1:e0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8693dfee1768739eb5976c245b5ad005b3258ec6
Validity
Not Before: Mar 26 00:01:37 2026 GMT
Not After : Mar 27 00:01:37 2026 GMT
Subject: CN=5ad71e50b9c0ff365d702918ffc5c865957fdaba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e2:f8:e0:a2:9c:b0:19:b3:5b:3e:bb:03:b5:
fd:ce:5c:f0:12:9a:f1:87:24:77:9f:56:4b:7a:0e:
94:42:27:f6:31:f9:a7:01:fe:aa:68:36:eb:ed:a4:
7f:38:fa:4a:db:2f:b6:25:2d:7f:10:19:49:33:3a:
dc:0e:85:35:be:54:00:42:d8:fe:06:71:3b:63:31:
d0:66:e6:e0:6a:ef:2e:69:fb:b2:a8:ea:64:1d:21:
df:6b:f8:9d:ac:a9:a6:ae:6f:e6:e5:b7:7e:cd:e5:
f2:5f:84:63:da:c3:d9:62:c7:6b:de:34:6e:3e:8d:
e2:63:48:b4:ca:5b:97:ab:d1:19:e2:49:eb:60:ab:
9c:4b:1b:da:64:ec:8c:18:c1:35:20:ef:08:66:0c:
5d:8c:42:40:fd:5e:98:b4:63:8c:f0:10:4e:c2:6d:
7f:a7:4f:13:80:b2:a0:54:f0:69:94:bc:9c:7d:27:
50:0b:ea:1a:35:87:bc:93:8a:da:54:e2:02:7e:3a:
e4:21:31:4b:9e:59:e7:a8:51:5f:13:46:c1:e2:94:
3a:6d:e5:18:41:f6:59:c8:c0:60:72:7f:dc:87:a0:
0a:fa:03:6f:06:1f:d9:81:a5:81:5c:34:ab:ca:5d:
3f:ae:2f:28:ae:a0:26:05:b1:f4:8e:0d:b6:f5:bb:
12:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D7:1E:50:B9:C0:FF:36:5D:70:29:18:FF:C5:C8:65:95:7F:DA:BA
X509v3 Authority Key Identifier:
keyid:86:93:DF:EE:17:68:73:9E:B5:97:6C:24:5B:5A:D0:05:B3:25:8E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpPf7hdoc561l2wkW1rQBbMljsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb063f-4c3c-4971-ae50-66482071b819/1/hpPf7hdoc561l2wkW1rQBbMljsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:02:e0:1a:3c:42:e4:9b:2e:e8:d9:86:d9:c0:d1:35:a0:9f:
07:dc:88:3e:72:a6:e7:51:f3:98:29:5f:f5:a3:3c:a3:8f:3e:
29:8a:b0:53:54:71:50:f8:1d:3f:01:ba:ec:99:c5:a6:e6:37:
02:fd:f0:73:2a:55:eb:84:4d:f3:27:bb:7d:0f:34:ba:7b:3f:
12:86:92:ae:96:11:2e:26:7c:71:e4:95:85:47:0e:c2:08:ac:
dc:f8:a5:d6:f0:2e:2f:e3:ec:6d:34:09:4b:11:ab:0f:60:75:
1d:82:b0:22:29:77:9d:8e:7d:7f:f8:87:a9:56:dc:fe:8c:e6:
e0:27:da:58:45:0e:5f:e2:8b:91:90:85:81:19:4d:ad:46:74:
2f:8f:5f:1b:ac:97:8f:43:95:1d:b3:27:24:05:d4:94:74:a8:
de:20:b3:cf:ac:18:96:38:d1:98:6e:57:ec:b0:87:11:85:fd:
25:d7:5e:90:b2:85:d3:76:79:8d:61:10:eb:e6:f0:48:60:3f:
90:38:50:4c:be:7e:99:17:e1:91:8d:39:97:f6:48:d5:7f:13:
29:1b:14:49:38:3c:7e:85:b0:da:05:10:cb:5e:8b:26:c2:88:
e5:40:cb:13:3e:69:33:9c:71:d9:fc:da:52:d6:d6:d8:05:b5:
97:c9:ad:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:45 2026 by rpki-client