Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
File: HpKJoBWvREH4-d9MjFXpiykogc8.mft (raw, json)
Hash identifier: z0HGLG9qOdQJHbyWfwvFucW0IfQ4EsgczdhH0YoaqjI=
Subject key identifier: C4:CF:A6:65:B8:25:0F:6D:35:C1:16:62:42:8E:10:67:BC:E7:16:E0
Authority key identifier: 1E:92:89:A0:15:AF:44:41:F8:F9:DF:4C:8C:55:E9:8B:29:28:81:CF
Certificate issuer: /CN=1e9289a015af4441f8f9df4c8c55e98b292881cf
Certificate serial: 019D25F19D46C77A69628F22C9B4E1E17FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 17:01:24 +0000
Manifest this update: Wed 25 Mar 2026 17:01:24 +0000
Manifest next update: Thu 26 Mar 2026 17:01:24 +0000
Files and hashes: 1: HpKJoBWvREH4-d9MjFXpiykogc8.crl (hash: aSpdFgbtCqMI/eAfouPpPghP9o8guxaS5NinikxhAvg=)
2: qXW1tFeOtiksAO4B-LToz6aX1z0.roa (hash: uLilZNr9B9MLP79uUoSooDJXZ1XBNKFz1okgC0rlTvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:9d:46:c7:7a:69:62:8f:22:c9:b4:e1:e1:7f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9289a015af4441f8f9df4c8c55e98b292881cf
Validity
Not Before: Mar 25 17:01:24 2026 GMT
Not After : Mar 26 17:01:24 2026 GMT
Subject: CN=c4cfa665b8250f6d35c11662428e1067bce716e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:f1:21:ff:94:9f:37:d4:94:05:66:53:6d:
dd:ff:e6:a6:6c:f3:5a:bf:f3:4e:ba:b0:84:91:57:
36:de:9f:f1:c9:b8:c5:15:07:5c:57:ff:b6:55:40:
37:b5:b0:b9:34:0d:f9:9a:59:29:73:94:e3:03:a4:
bf:04:4e:bf:b9:73:4f:bd:c1:bd:bb:09:0c:9d:1b:
a3:7f:a8:5d:c6:3f:24:6d:e2:8b:7d:e2:b4:d8:fe:
6a:d1:d6:66:4d:be:10:5e:19:b7:f3:39:72:cb:9d:
e6:1c:85:f9:9f:f4:90:06:c0:6f:0a:05:02:28:60:
8a:cc:13:42:dc:86:fb:85:e0:34:2a:a5:a9:55:bc:
84:12:dc:ed:65:06:50:f7:33:8a:98:f9:3a:c8:7b:
ce:da:b6:bf:b0:c2:38:8b:02:03:cb:27:d2:ae:f4:
61:0b:52:14:00:10:97:18:99:41:74:24:95:64:ac:
79:b0:ad:ac:69:89:5f:5a:80:e6:08:6b:71:ba:41:
1c:8f:78:57:0f:62:39:e3:1e:3f:f2:7e:d1:a9:31:
fb:8c:12:d8:8f:a2:a6:63:b4:4b:57:f8:f5:47:7c:
d6:eb:28:82:77:48:a3:0f:0c:0a:7a:7b:36:1d:e8:
af:00:77:88:d3:2d:f2:17:6d:b8:3d:d2:dd:54:83:
cc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CF:A6:65:B8:25:0F:6D:35:C1:16:62:42:8E:10:67:BC:E7:16:E0
X509v3 Authority Key Identifier:
keyid:1E:92:89:A0:15:AF:44:41:F8:F9:DF:4C:8C:55:E9:8B:29:28:81:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:59:fd:62:2b:33:48:97:0e:56:52:ef:f7:0a:ec:3d:c9:8b:
70:e6:fc:94:67:45:6b:e2:c5:09:6c:2b:89:eb:08:32:aa:fc:
1f:50:de:91:bd:d3:d4:90:ed:2c:c7:74:c0:e8:36:41:a7:b0:
24:1a:60:bc:f6:78:e4:65:c8:e3:99:b0:7d:82:f3:5e:43:80:
b5:cd:3d:7a:e7:e5:59:73:b7:86:31:73:de:9e:03:a3:37:7f:
6d:27:c7:17:1c:09:93:8a:ec:2e:14:05:b9:d4:f7:ba:d9:2c:
c4:36:c4:f2:1c:45:bb:98:0a:fb:78:3d:0f:03:cc:63:a9:f9:
19:a2:86:d9:26:1a:60:b1:e2:62:45:0d:c1:d3:a8:c1:45:53:
c8:97:0f:36:6f:b5:5c:ff:70:aa:cd:a0:3c:16:17:d7:d1:54:
59:80:e6:18:f2:c8:d4:73:48:9f:7f:95:0d:94:5b:5b:c9:be:
bc:15:e2:6a:2b:de:02:ed:ae:72:b0:6f:18:ea:4e:ff:c0:31:
0d:5c:d4:38:4f:01:a4:50:90:f7:2a:94:be:a2:c1:c6:d5:4e:
39:dd:8d:4c:d6:0a:18:bd:79:7a:93:52:94:db:0f:d0:25:24:
44:7b:36:66:d4:a0:12:2c:b4:9e:56:a3:b1:ad:97:07:59:2c:
bd:c8:68:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:07 2026 by rpki-client