Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
File: hplEyiVUvOj0uL_HXaWKjwhdX4E.mft (raw, json)
Hash identifier: ITOSzIg+aNlKWHCLjx27du67W1u8oC5YO4ubz8IY8PI=
Subject key identifier: 77:4C:4B:4F:14:7E:23:BD:CA:6F:E7:DF:13:F7:17:D6:67:9C:51:C0
Authority key identifier: 86:99:44:CA:25:54:BC:E8:F4:B8:BF:C7:5D:A5:8A:8F:08:5D:5F:81
Certificate issuer: /CN=869944ca2554bce8f4b8bfc75da58a8f085d5f81
Certificate serial: 019D382E7A9065F4B329CBDFFF1E20227812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 06:01:03 +0000
Manifest this update: Sun 29 Mar 2026 06:01:03 +0000
Manifest next update: Mon 30 Mar 2026 06:01:03 +0000
Files and hashes: 1: hplEyiVUvOj0uL_HXaWKjwhdX4E.crl (hash: FGnDIZ0Jd3V2iPHcFZ+mhG+3cvm2G3MN8UowZMkkJBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:7a:90:65:f4:b3:29:cb:df:ff:1e:20:22:78:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869944ca2554bce8f4b8bfc75da58a8f085d5f81
Validity
Not Before: Mar 29 06:01:03 2026 GMT
Not After : Mar 30 06:01:03 2026 GMT
Subject: CN=774c4b4f147e23bdca6fe7df13f717d6679c51c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d3:9a:28:50:25:9e:22:c1:d3:56:c0:58:1a:
8b:c7:de:95:8e:78:00:69:3b:3b:1e:39:4f:ed:f0:
e3:bd:99:2b:96:88:cd:18:e2:4d:1b:cb:4a:b8:f4:
91:8f:39:27:b2:9e:76:be:19:91:c9:22:85:42:9e:
59:e2:0d:46:73:d6:1e:32:58:83:e5:15:7e:7f:e4:
a9:93:e9:c5:75:9c:80:34:0f:35:0a:92:a6:72:e7:
9d:38:e1:20:68:b2:a1:dc:8c:3d:b8:08:bc:ec:bb:
a5:af:37:89:21:76:a2:16:11:b9:d0:03:0c:6a:26:
59:cf:5e:c8:98:73:78:f2:f5:68:c9:bd:d8:23:de:
65:ec:93:ed:41:bd:ea:71:3e:b0:9e:ad:d4:cf:d4:
0e:7b:da:ae:36:4f:0b:a9:09:eb:e8:7e:d3:78:c2:
e6:07:00:f2:62:30:51:be:f3:59:1e:64:54:ae:bb:
4b:0b:c0:79:fc:87:93:2f:50:b2:f6:83:0e:06:8d:
db:34:39:44:9e:40:0f:f8:55:c7:b1:ef:3e:4e:f9:
e6:18:94:e2:e8:65:8a:4a:43:53:2b:33:65:36:31:
20:6d:0a:cb:55:02:1c:46:be:1a:6b:15:b1:ba:a3:
a0:f6:48:f5:34:59:52:7c:04:ba:01:fa:c8:a6:82:
97:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4C:4B:4F:14:7E:23:BD:CA:6F:E7:DF:13:F7:17:D6:67:9C:51:C0
X509v3 Authority Key Identifier:
keyid:86:99:44:CA:25:54:BC:E8:F4:B8:BF:C7:5D:A5:8A:8F:08:5D:5F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hplEyiVUvOj0uL_HXaWKjwhdX4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9fdae0-5c63-4c07-873a-cdda4ba6bd78/1/hplEyiVUvOj0uL_HXaWKjwhdX4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3d:5d:fc:51:79:15:c3:a6:a8:0a:c7:07:71:4e:61:47:82:
67:97:eb:45:31:00:94:1c:fc:a0:c9:d0:ba:b2:15:63:0a:ec:
23:5f:3b:7c:b4:4d:3f:16:62:7c:c4:33:4b:df:3d:4f:d1:d5:
31:e3:4d:81:f1:88:c5:3c:ea:af:db:f7:2c:54:bd:fd:da:72:
85:85:cd:85:2f:c1:6a:e8:df:f6:da:30:86:3b:a1:63:4b:5f:
7e:df:bd:15:98:2d:bd:c4:b2:86:c9:4e:76:11:72:69:5c:f7:
e4:63:18:20:a3:57:0b:87:6c:bb:af:63:ac:51:79:22:58:c2:
84:6f:e3:5d:33:2a:30:cc:1b:49:62:77:1c:f0:5a:56:df:19:
39:a3:f9:8d:bb:10:48:36:2f:5b:8c:1a:48:8c:5c:51:a3:66:
7f:5e:6d:f2:5b:55:79:96:ef:f3:51:d8:e9:11:7f:c9:8f:31:
bc:7c:82:50:7f:d5:5b:66:9f:58:30:fa:ce:dd:0e:f5:41:f7:
bb:51:19:bd:cb:b0:d8:98:cd:95:10:96:da:a0:79:7c:e4:be:
c5:b9:97:e4:5e:bd:63:a4:47:5c:cf:cb:6f:60:63:9b:80:e7:
23:b5:7a:e5:e5:34:5a:c4:63:90:3f:3f:0e:2e:09:db:21:95:
b1:42:5f:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LnqQZfSzKcvf/x4gIngSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OTk0NGNhMjU1NGJjZThmNGI4YmZjNzVkYTU4YThmMDg1
ZDVmODEwHhcNMjYwMzI5MDYwMTAzWhcNMjYwMzMwMDYwMTAzWjAzMTEwLwYDVQQD
Eyg3NzRjNGI0ZjE0N2UyM2JkY2E2ZmU3ZGYxM2Y3MTdkNjY3OWM1MWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdOaKFAlniLB01bAWBqLx96VjngA
aTs7HjlP7fDjvZkrlojNGOJNG8tKuPSRjzknsp52vhmRySKFQp5Z4g1Gc9YeMliD
5RV+f+Spk+nFdZyANA81CpKmcuedOOEgaLKh3Iw9uAi87LulrzeJIXaiFhG50AMM
aiZZz17ImHN48vVoyb3YI95l7JPtQb3qcT6wnq3Uz9QOe9quNk8LqQnr6H7TeMLm
BwDyYjBRvvNZHmRUrrtLC8B5/IeTL1Cy9oMOBo3bNDlEnkAP+FXHse8+TvnmGJTi
6GWKSkNTKzNlNjEgbQrLVQIcRr4aaxWxuqOg9kj1NFlSfAS6AfrIpoKXdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdMS08UfiO9ym/n3xP3F9ZnnFHAMB8GA1UdIwQY
MBaAFIaZRMolVLzo9Li/x12lio8IXV+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHBsRXlpVlV2T2owdUxfSFhhV0tqd2hkWDRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85ZmRhZTAtNWM2My00YzA3LTg3M2Et
Y2RkYTRiYTZiZDc4LzEvaHBsRXlpVlV2T2owdUxfSFhhV0tqd2hkWDRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS85ZmRhZTAtNWM2My00YzA3LTg3M2EtY2RkYTRiYTZiZDc4
LzEvaHBsRXlpVlV2T2owdUxfSFhhV0tqd2hkWDRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACz1d/FF5
FcOmqArHB3FOYUeCZ5frRTEAlBz8oMnQurIVYwrsI187fLRNPxZifMQzS989T9HV
MeNNgfGIxTzqr9v3LFS9/dpyhYXNhS/Baujf9towhjuhY0tfft+9FZgtvcSyhslO
dhFyaVz35GMYIKNXC4dsu69jrFF5IljChG/jXTMqMMwbSWJ3HPBaVt8ZOaP5jbsQ
SDYvW4waSIxcUaNmf15t8ltVeZbv81HY6RF/yY8xvHyCUH/VW2afWDD6zt0O9UH3
u1EZvcuw2JjNlRCW2qB5fOS+xbmX5F69Y6RHXM/Lb2Bjm4DnI7V65eU0WsRjkD8/
Di4J2yGVsUJfNQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:05 2026 by rpki-client