Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft
File: HNPDCTm5BqRRWhxlwIg2gptqMok.mft (raw, json)
Hash identifier: EM97DuS2sZnzUMO7PNBEl1PVwyGKJwwQUPttYx8Q6Uk=
Subject key identifier: DB:15:6E:99:7F:31:08:FA:20:67:89:CF:2B:01:07:1D:98:ED:85:40
Authority key identifier: 1C:D3:C3:09:39:B9:06:A4:51:5A:1C:65:C0:88:36:82:9B:6A:32:89
Certificate issuer: /CN=1cd3c30939b906a4515a1c65c08836829b6a3289
Certificate serial: 019D28164F5998FD3D48F729DF17722E5F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 03:00:43 +0000
Manifest this update: Thu 26 Mar 2026 03:00:43 +0000
Manifest next update: Fri 27 Mar 2026 03:00:43 +0000
Files and hashes: 1: HNPDCTm5BqRRWhxlwIg2gptqMok.crl (hash: 3qFLRUmU6rVURIOy99nRkxYWeIRvYcl3LX4dTxt4xKo=)
2: qBbPAft3FWUnWh4M6QbA4zR0xig.roa (hash: F60FmMouqBuHf/lcjKBMzLkzhlv6RxJ5MDnmKBuksKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:4f:59:98:fd:3d:48:f7:29:df:17:72:2e:5f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cd3c30939b906a4515a1c65c08836829b6a3289
Validity
Not Before: Mar 26 03:00:43 2026 GMT
Not After : Mar 27 03:00:43 2026 GMT
Subject: CN=db156e997f3108fa206789cf2b01071d98ed8540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e1:10:1e:8b:79:0a:b4:ca:49:c3:37:09:e5:
4e:93:a4:1b:d9:1c:41:96:b7:d7:34:62:28:a3:92:
1b:dc:3a:0b:63:73:96:ee:68:80:21:75:16:27:ff:
ce:80:04:8f:27:0d:df:cd:54:c0:8c:df:d9:e3:fa:
54:7d:73:fa:5f:3c:61:89:12:b8:f9:3b:cd:ab:fa:
19:0d:db:8e:47:16:46:3c:53:5a:42:bb:02:fa:a3:
16:19:02:9b:6d:ac:dc:e4:a6:88:c1:9c:67:27:9d:
fb:20:2f:10:05:a4:aa:b8:34:05:23:c8:68:f7:99:
36:30:6e:e8:de:3f:a0:4d:7c:1f:02:c4:20:66:fc:
d1:19:2e:84:a2:84:7c:92:5f:ad:66:c7:f4:75:88:
59:bb:61:ec:a8:65:b8:9a:0d:c0:ff:ce:f2:34:e7:
be:9d:83:c4:78:a7:b1:12:ba:1a:7e:cb:6c:d3:55:
5a:d3:24:67:63:22:22:3d:29:dc:12:52:fd:92:e0:
7d:5e:25:68:4b:4f:a3:22:4c:f9:f4:a3:87:29:26:
a3:8c:ef:61:26:8c:04:3f:75:8e:d2:f4:ce:e3:8b:
67:2b:9d:22:2c:63:10:d0:1e:23:d5:71:5d:08:bc:
b7:02:22:3a:b5:e4:24:39:e0:74:dc:83:49:00:f2:
44:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:15:6E:99:7F:31:08:FA:20:67:89:CF:2B:01:07:1D:98:ED:85:40
X509v3 Authority Key Identifier:
keyid:1C:D3:C3:09:39:B9:06:A4:51:5A:1C:65:C0:88:36:82:9B:6A:32:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:5f:aa:46:61:3b:e6:86:38:fd:da:59:f9:bf:68:e9:6d:b9:
bf:20:7d:61:b6:32:c8:76:69:89:77:d4:53:a0:dc:cc:63:e1:
dc:af:05:7b:8b:1e:ad:05:9d:3a:ba:e5:ae:b6:79:95:9d:99:
a1:6d:c5:d0:f6:05:13:4d:59:f7:b2:e8:58:a8:c1:f5:ad:ac:
7f:1b:22:dd:a8:ed:60:24:2b:2c:d0:84:4e:2b:ee:ca:b2:ad:
44:5c:ef:1a:aa:1e:75:5b:d8:57:75:41:c2:4f:bd:ae:e9:bf:
1b:ce:27:27:79:63:24:af:79:b1:c6:e3:c1:9c:c2:40:12:2d:
ce:19:b7:5f:3b:c0:06:1e:81:07:b1:0d:e9:37:cb:20:d2:88:
63:28:e6:f4:25:3f:26:d0:f3:6d:6e:7b:9f:1d:02:09:67:49:
30:68:79:10:11:03:26:8d:c3:84:f6:41:1f:4d:83:b0:c5:ca:
d5:f6:16:3d:89:56:83:f8:8e:a1:d6:14:9a:cb:05:54:d9:97:
fc:83:30:b0:9d:7f:19:e5:68:9e:71:77:55:15:0e:54:23:93:
ff:27:60:8c:b4:60:6a:89:d2:30:9d:07:9d:68:83:68:5c:d5:
e3:ac:5d:dc:65:a6:7f:a9:3a:6c:c8:c5:2b:ad:85:58:9e:67:
ac:66:6b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:30:14 2026 by rpki-client