Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft
File: HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft (raw, json)
Hash identifier: n7Fu+nbydtsyiYTs+txcadoYS4re/97qqWApzP1UWi8=
Subject key identifier: 23:CC:71:FF:2D:2F:91:9D:B0:73:56:F6:58:CA:B6:4E:8F:68:1E:56
Authority key identifier: 1C:FB:6D:F9:33:75:A0:6C:56:82:C0:57:C0:FD:2A:73:06:21:8A:54
Certificate issuer: /CN=1cfb6df93375a06c5682c057c0fd2a7306218a54
Certificate serial: 019D3941CD0B22A6C97682AD8CA4EA35CE6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPtt-TN1oGxWgsBXwP0qcwYhilQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft
Manifest number: 0499
Signing time: Sun 29 Mar 2026 11:01:46 +0000
Manifest this update: Sun 29 Mar 2026 11:01:46 +0000
Manifest next update: Mon 30 Mar 2026 11:01:46 +0000
Files and hashes: 1: 3uUdC3qqQNH1_dT0n-HK8fBBniQ.roa (hash: UQYOsde53G7aaoc7Sep9TNvii9QGeiprFatc1ldKcwI=)
2: HPtt-TN1oGxWgsBXwP0qcwYhilQ.crl (hash: OrxwY2Hcng3JtoCsGPSpoghJg+4YeY54+i9HqsjWJ58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HPtt-TN1oGxWgsBXwP0qcwYhilQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:cd:0b:22:a6:c9:76:82:ad:8c:a4:ea:35:ce:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cfb6df93375a06c5682c057c0fd2a7306218a54
Validity
Not Before: Mar 29 11:01:46 2026 GMT
Not After : Mar 30 11:01:46 2026 GMT
Subject: CN=23cc71ff2d2f919db07356f658cab64e8f681e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:db:96:96:30:2e:d6:d7:9d:39:c9:26:a9:85:
96:71:64:16:92:41:27:5e:06:6f:fb:a8:95:20:75:
79:80:7c:20:58:95:42:ae:0c:1b:27:72:bf:78:0e:
1d:34:45:20:6f:2a:3f:30:d9:4c:3f:f6:7a:b2:cc:
6a:e6:00:7b:2b:31:cd:55:47:6a:fb:9f:b9:d8:8c:
ba:4a:69:f4:ec:43:45:39:9a:0f:8a:46:1c:2e:10:
ed:71:08:ca:a3:1a:80:b6:cc:fd:17:47:8b:4f:dc:
75:5a:71:82:ec:f7:b1:28:97:92:23:b8:b4:f8:34:
dd:96:5a:87:cf:24:7c:e2:45:12:0b:f8:13:86:42:
9d:dc:62:a6:ea:1d:f7:80:96:cb:e0:74:49:16:21:
12:d5:77:b2:f5:f4:65:25:11:40:03:dc:68:cf:6b:
14:19:b3:7e:78:f5:ac:11:54:0b:a0:ee:15:a8:5a:
80:5e:e8:26:26:9d:f5:44:d0:01:d2:5e:cf:c5:f6:
04:a5:60:9e:0b:5e:ad:e7:cc:46:44:5a:f6:45:ca:
89:1a:d0:79:a8:b8:0f:b4:11:af:99:93:09:e3:02:
4c:db:6c:b9:12:a5:c0:e3:26:4e:36:11:f0:75:8b:
59:46:2d:dc:d4:6d:da:5f:af:5d:2d:f4:96:1b:3c:
7b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CC:71:FF:2D:2F:91:9D:B0:73:56:F6:58:CA:B6:4E:8F:68:1E:56
X509v3 Authority Key Identifier:
keyid:1C:FB:6D:F9:33:75:A0:6C:56:82:C0:57:C0:FD:2A:73:06:21:8A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPtt-TN1oGxWgsBXwP0qcwYhilQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/fbadff-75d7-4cba-9735-66ec2eaf646f/1/HPtt-TN1oGxWgsBXwP0qcwYhilQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:25:7c:fd:77:be:f0:ed:e7:e2:1a:28:e9:85:81:6e:eb:10:
58:53:f7:f3:5f:fc:c8:78:48:40:77:0e:6f:4f:d9:67:57:d9:
ed:41:10:19:68:bd:aa:bc:eb:88:62:1f:ab:9b:37:86:3f:72:
ec:12:ef:c1:90:32:f8:ea:f9:db:45:68:62:50:09:32:89:41:
da:0b:2b:f8:9a:8d:c7:b8:9a:9e:55:1a:ba:d1:30:ed:70:90:
ad:1f:f2:3e:da:16:b2:b1:cf:9d:0d:79:b8:05:83:8a:53:b3:
46:29:eb:db:61:8c:f9:ac:f9:5a:18:aa:fb:6d:80:33:a3:61:
c6:8c:7e:d6:4b:bf:49:d3:d7:f0:56:40:c0:80:d6:d9:e1:5e:
b5:13:03:bb:7b:cc:60:34:3f:82:bc:47:98:af:6c:e2:ee:3c:
c5:85:9c:84:0e:7e:3f:56:ee:3e:ae:35:d0:63:46:32:a9:00:
e6:f2:f3:e5:c5:5a:91:9c:45:33:7d:2a:86:b5:8b:02:18:86:
f7:ee:73:d0:9c:34:de:f1:c2:14:b5:be:1d:5c:64:d4:a5:6c:
c5:fd:6b:5c:44:9d:06:a1:79:35:86:95:dd:41:54:4a:79:c1:
d4:ec:11:ff:ae:8b:eb:8a:48:94:e2:f1:4f:d1:e5:81:0e:b9:
06:f6:ff:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:11:17 2026 by rpki-client