Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
File: HApvbzqa4dpeW-h1L6sY3rKLphQ.mft (raw, json)
Hash identifier: /zoNUWYcPWJWvh+8AZN2LJ3HehNOt3Vx5B1YrSsOXYM=
Subject key identifier: DC:FC:EC:73:49:0E:B9:58:29:6D:8B:C9:61:7F:50:81:47:89:DF:5E
Authority key identifier: 1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14
Certificate issuer: /CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
Certificate serial: 019DFA964A3ED4ED575079C6E5C7DB91955E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
Manifest number: 03AB
Signing time: Wed 06 May 2026 00:00:46 +0000
Manifest this update: Wed 06 May 2026 00:00:46 +0000
Manifest next update: Thu 07 May 2026 00:00:46 +0000
Files and hashes: 1: HApvbzqa4dpeW-h1L6sY3rKLphQ.crl (hash: 0hHFNcGOVo7VlAH7JvCr6EwPBsCtm0sHSatRP3ydHLw=)
2: fxHBsVKaXsttW_zXOj8FZqtqL7U.roa (hash: J1BSTHyqQv5WDh3XQtbmLEWduZkd0l1Wk4UUhPLMUhY=)
3: sIfcqsxg3WW57k2COZeb4Iarq9c.roa (hash: wIaOvcTZtG+qCBDexHsWNsZh+YEPmUdduOIOWtQaX0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 00:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fa:96:4a:3e:d4:ed:57:50:79:c6:e5:c7:db:91:95:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
Validity
Not Before: May 6 00:00:46 2026 GMT
Not After : May 7 00:00:46 2026 GMT
Subject: CN=dcfcec73490eb958296d8bc9617f50814789df5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:73:d7:3f:c2:e9:d5:80:a9:1b:21:52:e3:50:
00:8f:94:42:5a:7b:92:ac:67:12:36:63:92:60:4e:
7c:4d:71:04:bb:c6:ea:64:47:3c:64:e5:e7:04:fa:
b5:ca:b2:d3:5d:e0:cd:0f:68:86:e7:c1:82:78:49:
51:70:4f:5d:9a:67:a6:84:e5:c5:9d:94:69:0c:ce:
16:39:96:7e:db:d4:d8:61:e3:0a:ad:ab:7b:78:7d:
89:0a:30:5f:4e:f1:82:77:dc:1e:90:91:96:05:e7:
08:c2:80:2a:e6:fe:c5:b1:bf:85:ef:ef:0e:40:23:
fe:da:59:44:60:f8:9a:80:ad:29:51:dc:99:c9:97:
d0:5f:6e:ba:9a:98:9c:52:b2:c0:a6:dc:d2:85:5a:
1b:65:37:04:ec:f0:17:ca:64:c0:71:68:99:b8:e3:
39:b6:4c:f0:26:8f:e5:d6:2e:ba:57:6e:b0:99:f0:
b7:60:fa:6f:a0:85:73:c5:0f:76:87:4b:63:2e:e1:
06:d5:e5:dd:cf:1a:78:f8:fd:c3:cd:0a:51:1c:a8:
0d:6c:26:cc:28:0d:ae:5c:4f:55:a1:25:e3:f9:90:
19:14:55:26:67:c7:71:d3:65:88:47:bf:88:2e:db:
4e:21:1f:d8:53:3b:3f:64:ef:48:d1:6b:24:60:09:
1a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FC:EC:73:49:0E:B9:58:29:6D:8B:C9:61:7F:50:81:47:89:DF:5E
X509v3 Authority Key Identifier:
keyid:1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:35:5f:37:03:79:d4:e7:7e:d6:56:61:cd:7a:ae:3d:18:e7:
37:e8:47:0e:a8:3b:b8:8c:8b:9a:2f:7c:48:37:d7:b0:e3:fd:
ed:df:2c:22:8a:f3:fc:59:56:51:1a:88:7c:94:5b:a0:a8:10:
ed:ff:3f:9b:d4:b2:be:82:c9:ea:99:6d:ca:53:d1:26:35:9f:
79:41:f0:f5:a2:e2:77:c3:16:fa:0f:e4:59:d3:f4:4a:76:45:
21:6e:7d:35:50:76:a7:54:a2:1b:d8:e6:6e:08:ba:f8:10:9e:
ad:be:8a:51:c4:1b:63:43:3e:cc:5c:47:2b:d0:09:f5:6c:c3:
c0:15:f4:0e:f9:18:7c:26:25:fb:f0:67:d8:e3:17:cd:a6:6a:
2b:03:28:11:d9:12:c0:98:f9:bc:99:80:b4:e7:f8:92:7c:a0:
43:e3:f8:f9:41:b6:6e:e7:cc:24:30:61:05:96:4e:60:93:a2:
2a:c9:0c:78:b0:9f:3f:2b:9a:8b:52:88:5b:bc:ab:d3:12:05:
21:bd:82:76:1d:e6:7d:2d:cc:c5:ca:46:2d:4a:51:4c:a4:bd:
67:8e:df:24:de:12:87:c8:19:00:c3:aa:e3:5c:13:2a:c0:b9:
67:0e:f6:8c:ce:3e:22:f5:e5:f3:c1:e0:d5:05:96:e3:5f:c4:
02:bb:67:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 10:03:20 2026 by rpki-client