Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
File: hpY9ADE0zNpW_t_rJ496dop_QC8.mft (raw, json)
Hash identifier: sRpAHYox8aER+bWhlWO6TCQ3f/wJTXM0MHEMtps2v2M=
Subject key identifier: 3D:29:1A:A0:51:52:3B:EA:CC:EA:1A:7E:70:81:FA:5D:17:51:0C:EF
Authority key identifier: 86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F
Certificate issuer: /CN=86963d003134ccda56fedfeb278f7a768a7f402f
Certificate serial: 019D39777F713C7060ABF69715034D26D783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
Manifest number: 0A3D
Signing time: Sun 29 Mar 2026 12:00:25 +0000
Manifest this update: Sun 29 Mar 2026 12:00:25 +0000
Manifest next update: Mon 30 Mar 2026 12:00:25 +0000
Files and hashes: 1: hpY9ADE0zNpW_t_rJ496dop_QC8.crl (hash: zIWBPhBUKTs88qJ/sYswpJXR/j1S8/s1grIMayQAvEY=)
2: ykE1MwKYkciApw-UZeYngB_HUNs.roa (hash: SkxpvOB9g0NJAFJu1F10IT/jLtAQ4gxiMRGC76Dncgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:7f:71:3c:70:60:ab:f6:97:15:03:4d:26:d7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86963d003134ccda56fedfeb278f7a768a7f402f
Validity
Not Before: Mar 29 12:00:25 2026 GMT
Not After : Mar 30 12:00:25 2026 GMT
Subject: CN=3d291aa051523beaccea1a7e7081fa5d17510cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fd:ca:6f:de:98:00:b0:3a:d2:b1:51:17:d9:
de:2f:eb:13:61:33:71:43:e4:8d:3c:37:8e:13:d8:
8a:88:b6:98:21:4f:44:a3:13:37:98:7e:ce:03:b5:
0a:aa:47:96:f2:99:df:05:76:d6:08:4e:8f:01:74:
95:33:71:42:c0:ba:79:3a:1a:c1:e1:bd:ab:64:e0:
e3:50:02:c0:e7:3f:fd:8a:c6:6a:d7:f3:da:54:a8:
bc:83:21:d1:91:ae:3d:e2:41:e8:1e:f5:a5:03:f1:
a5:83:f0:07:5b:1a:fd:8b:5a:ff:34:a3:12:29:a1:
6a:5a:42:84:e2:86:fb:e5:ba:90:7b:4f:46:5b:d8:
bf:8a:52:dc:86:65:dd:f6:08:40:3f:9a:b7:4e:d8:
be:70:ce:32:52:05:9e:6a:d8:54:e5:b0:26:9f:97:
bb:70:44:72:7e:7e:ec:fa:f3:42:52:c0:11:db:f2:
de:44:2f:d0:05:80:67:ee:44:62:4c:a1:9b:c2:2e:
6a:d8:e1:bb:fd:6f:80:ef:7b:b8:de:1d:d4:c0:4c:
57:e3:57:85:1b:52:a2:97:45:9c:d7:c3:96:3f:a4:
6f:bc:7b:96:6e:95:18:87:46:af:5c:23:14:8c:26:
5d:60:61:1b:69:7d:19:01:28:97:2f:40:9d:3a:1f:
6f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:29:1A:A0:51:52:3B:EA:CC:EA:1A:7E:70:81:FA:5D:17:51:0C:EF
X509v3 Authority Key Identifier:
keyid:86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:70:b3:1c:0c:17:df:68:76:e9:18:d1:3f:19:b8:03:6b:80:
77:8b:ff:4e:1a:fc:bc:39:ed:75:dd:9d:f0:28:7d:1c:5a:53:
b4:69:ec:57:b4:63:b6:8e:9d:e9:b2:15:33:13:80:cf:d5:6e:
d5:b9:4f:99:81:f4:f6:89:72:3e:ec:3c:c3:32:f8:d7:eb:df:
aa:e2:11:f9:5f:a8:fc:41:80:a2:eb:72:66:d7:0e:e5:4f:42:
8b:24:f0:35:eb:e5:9f:3f:d6:9f:b0:3c:f0:c9:87:d7:ab:0a:
9c:eb:d2:ac:6f:e0:e6:a8:88:42:8b:d7:e2:50:ce:97:5e:9b:
d9:e8:d6:1e:1b:ce:29:bf:8f:08:9c:9c:1f:5b:4b:b4:28:dc:
8c:55:49:68:ce:2d:af:aa:ef:37:8d:ef:0f:38:fe:2b:bc:a4:
09:76:63:c7:4c:50:b9:5d:33:bb:74:2a:0f:d1:6b:bc:3c:2b:
e5:4e:75:71:9f:fe:44:5a:2b:68:11:a3:70:db:35:41:08:fd:
68:b6:97:26:c0:03:4a:c8:86:99:ab:47:4a:47:ee:48:ba:96:
af:f9:38:25:e8:77:71:21:82:61:8f:b5:8c:40:21:b5:77:7c:
35:99:5a:3c:84:78:ca:64:ac:11:df:86:93:49:4c:83:45:a2:
ad:1c:20:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:55:19 2026 by rpki-client