Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
File: HDP7O3JSC4FpopKNU4LknWda0GA.mft (raw, json)
Hash identifier: PlXGBa5qMAmPTzuRnwc0uhD0s5o0N4oexXeOn4q3EeQ=
Subject key identifier: 61:C3:C7:39:C2:01:61:0F:B8:4F:D2:8C:1A:2F:90:19:E9:F4:CF:B8
Authority key identifier: 1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60
Certificate issuer: /CN=1c33fb3b72520b8169a2928d5382e49d675ad060
Certificate serial: 019F954930F66803FD9A5372DD2054883F50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
Manifest number: 1776
Signing time: Fri 24 Jul 2026 18:00:29 +0000
Manifest this update: Fri 24 Jul 2026 18:00:29 +0000
Manifest next update: Sat 25 Jul 2026 18:00:29 +0000
Files and hashes: 1: Gy7ZxbulJ_7Y0tx78zpcZAOHO2I.roa (hash: 8PQOWmSZ9/1/Et2ot0KAAdAS2aYMSpPnN0AQzm11bWE=)
2: HDP7O3JSC4FpopKNU4LknWda0GA.crl (hash: Hk0yiIdh1yv5sfNlUwcpvjQAka5T5BqmUdMfm78lvTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:30:f6:68:03:fd:9a:53:72:dd:20:54:88:3f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c33fb3b72520b8169a2928d5382e49d675ad060
Validity
Not Before: Jul 24 18:00:29 2026 GMT
Not After : Jul 25 18:00:29 2026 GMT
Subject: CN=61c3c739c201610fb84fd28c1a2f9019e9f4cfb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cb:38:3a:19:4e:bb:08:d5:b8:4f:46:a6:87:
c1:fa:a4:1a:97:58:1c:71:36:1e:d3:c9:8d:a7:9b:
a8:dd:7d:7c:77:6c:24:8d:9e:03:c9:ad:db:38:0e:
8e:04:6f:f2:95:e3:da:2e:b8:35:57:59:e1:c3:db:
74:a7:f8:80:c6:73:45:79:3e:be:d3:cc:0f:ed:12:
11:bc:e7:ba:0e:8b:62:f6:17:ca:aa:aa:0e:16:5a:
c5:47:7a:73:61:55:55:35:da:fc:52:a2:4c:82:39:
23:02:1e:b8:c2:ee:10:3b:24:34:9e:90:3c:65:c0:
10:f8:ac:cf:7d:6a:8b:24:bb:a7:36:01:01:78:80:
40:72:29:06:e0:b1:18:9e:ae:a9:8f:a5:94:f5:ae:
e6:e1:38:29:6c:22:6b:04:92:c1:f4:fb:12:2e:cc:
6f:5e:3f:ae:ef:7a:df:bc:2a:f3:8d:94:ed:1b:2a:
79:c0:ee:90:76:d2:d7:3b:f7:9a:88:88:05:85:22:
41:2f:95:f6:e4:ed:d0:2f:94:c9:03:89:ba:ba:79:
0b:bb:d0:01:70:6b:36:bd:ef:a4:88:81:c1:90:27:
9b:7f:38:92:3d:7c:80:31:0a:04:a9:79:d5:8e:62:
5b:d2:0e:b0:66:64:55:68:db:ef:25:77:98:a8:40:
98:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C3:C7:39:C2:01:61:0F:B8:4F:D2:8C:1A:2F:90:19:E9:F4:CF:B8
X509v3 Authority Key Identifier:
keyid:1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e9:36:56:f3:f6:5c:98:eb:12:33:64:a5:89:0b:54:23:ea:
6d:c2:a0:dc:a7:ef:7b:66:bc:0b:80:83:be:82:18:be:de:5a:
6d:72:13:0e:fa:60:59:66:45:7b:ad:1c:04:ae:64:89:a0:5f:
c1:93:21:50:3c:85:61:e6:49:5f:b4:38:e7:e7:ed:ad:1f:64:
5a:29:2f:1e:b5:67:77:09:24:78:76:e1:84:97:e2:20:ff:aa:
c7:c3:5e:58:c0:fd:5c:3a:81:c1:d5:57:90:b6:38:1d:07:96:
94:20:f9:eb:39:0c:e0:74:f8:49:fb:0d:d4:c4:e3:eb:81:79:
7d:87:42:6d:94:6f:9e:89:bc:a2:c3:53:12:c1:dc:38:ec:64:
a6:e1:95:2b:4f:84:3f:af:88:23:f6:0f:d3:f2:24:02:be:91:
65:fe:86:4d:b3:03:37:d5:dc:cd:6b:ec:2e:3f:e9:57:8a:f4:
b6:43:fd:67:fc:fe:ad:0a:bf:05:e3:84:db:8e:06:12:3a:ca:
b3:a6:41:f1:f9:43:f8:fc:63:cd:c1:34:24:61:dc:fc:76:2c:
cb:98:9b:f5:d1:d9:1c:ee:c8:0e:ec:9e:8a:d2:1b:9d:3d:90:
1c:95:51:e4:e1:f6:d4:e0:68:4d:b1:09:df:b1:db:90:16:c2:
27:03:d0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:14:36 2026 by rpki-client