Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
File: HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft (raw, json)
Hash identifier: FkrBZT3Z5RA5q/bwBqkq+EcVGWF0BNhnPoOUsQjSNm8=
Subject key identifier: 62:32:EC:99:87:30:6A:A9:D0:5E:78:34:E9:5B:72:87:AD:FC:12:14
Authority key identifier: 1D:13:CD:3D:DE:78:9D:29:47:93:AF:CE:93:8A:53:3C:02:BB:84:D1
Certificate issuer: /CN=1d13cd3dde789d294793afce938a533c02bb84d1
Certificate serial: 019D2A05067894D1DC417EE5FE0DCBB9754A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
Manifest number: 03DD
Signing time: Thu 26 Mar 2026 12:01:05 +0000
Manifest this update: Thu 26 Mar 2026 12:01:05 +0000
Manifest next update: Fri 27 Mar 2026 12:01:05 +0000
Files and hashes: 1: HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl (hash: 2frXnLY+Ps+RBU5q0MoPjSHBmC+3+TqcDEqs1WMGnug=)
2: S55S8Hzi5_Q3lDvpIg173TfOL20.roa (hash: nVY2KJyclpu9SOzeZLMYN+3Xs02J0rwhn0vdFsFFuVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:05:06:78:94:d1:dc:41:7e:e5:fe:0d:cb:b9:75:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d13cd3dde789d294793afce938a533c02bb84d1
Validity
Not Before: Mar 26 12:01:05 2026 GMT
Not After : Mar 27 12:01:05 2026 GMT
Subject: CN=6232ec9987306aa9d05e7834e95b7287adfc1214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:43:d4:53:e6:6d:ae:65:49:3a:7b:10:8c:76:
ff:c5:97:d0:39:0e:69:08:2d:cf:f5:69:ff:0c:b9:
ca:0d:ae:1d:76:79:a0:9c:2d:aa:7a:07:ce:3b:bd:
5f:10:88:f4:41:77:93:82:e0:18:6e:12:38:c5:b6:
bb:59:ce:aa:54:7e:cc:6b:04:93:fb:fe:30:e6:9b:
d5:5e:ee:20:fb:0e:93:3e:df:c7:e9:07:27:bd:e0:
88:7c:12:e3:28:f7:11:4d:02:8b:b6:f3:15:0a:ce:
e1:a2:ae:a1:ad:2b:5c:e8:38:cf:c0:a1:80:44:43:
b8:c6:93:83:84:ee:35:68:4e:3a:0c:04:85:b5:64:
a1:7e:ac:21:34:80:87:0c:24:af:88:f5:36:05:14:
a4:1e:0b:f4:c7:29:b9:4f:e0:a0:fd:35:a8:9b:96:
33:ff:c8:77:a1:6e:32:81:9a:41:27:01:73:21:13:
4d:35:ab:f9:fc:f6:b9:3e:11:56:5d:63:1f:23:6d:
85:7b:16:d8:50:62:95:bd:b9:54:02:64:f6:7d:aa:
d4:fa:03:95:aa:11:bb:90:52:ed:21:69:0e:ab:c3:
28:d8:7a:b9:6d:d1:b1:8d:ab:a1:eb:24:09:52:fb:
ab:56:d5:69:1c:56:b1:76:a5:cd:c3:d1:b0:88:96:
f8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:32:EC:99:87:30:6A:A9:D0:5E:78:34:E9:5B:72:87:AD:FC:12:14
X509v3 Authority Key Identifier:
keyid:1D:13:CD:3D:DE:78:9D:29:47:93:AF:CE:93:8A:53:3C:02:BB:84:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:37:d5:ff:bf:d9:2a:37:c0:ed:af:ca:f6:58:4a:ce:09:0d:
aa:8a:ff:49:8e:95:e0:e3:f7:22:80:cd:ec:4c:2d:96:35:40:
05:9a:de:a6:fd:f1:ef:1d:fc:a4:84:a4:56:9f:f0:0d:4a:30:
78:29:34:8d:7a:9a:18:36:39:bd:90:0e:f4:1b:4d:ae:1d:c6:
81:5d:74:4f:ef:97:8f:9a:0b:92:9c:2f:c1:4c:48:98:86:61:
06:e7:f5:03:fe:3f:1c:df:c9:0a:47:e7:8b:dc:1e:75:76:db:
7b:79:5f:79:b0:c4:2f:c2:ed:13:a8:42:32:67:99:95:14:47:
84:0f:07:38:cf:d1:f8:22:5d:1d:02:b0:59:36:a2:4c:b6:37:
95:6c:f4:89:e1:9a:ab:a2:59:4e:c1:24:06:45:41:8e:b3:d8:
53:59:6f:a8:e3:7a:58:a6:c7:66:29:ef:39:06:c7:52:05:38:
73:cd:62:7d:57:6b:59:e5:b5:64:34:f1:8e:65:f2:32:a1:43:
cc:6f:9c:71:39:2d:99:af:59:cc:82:d5:cc:44:f3:36:de:16:
72:ed:88:3a:2e:1c:76:c2:63:ca:d4:3e:67:5c:1b:34:40:46:
92:f7:f9:1f:7d:a5:7d:6f:8b:45:af:77:f9:fb:ad:bf:4e:0b:
28:0c:3b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:09 2026 by rpki-client