Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
File: HApvbzqa4dpeW-h1L6sY3rKLphQ.mft (raw, json)
Hash identifier: PgwquPL6daf1Q6vQnHiPBHSoEIKanO60j4bEgHwaN6A=
Subject key identifier: 59:BD:D1:9D:79:E8:E2:C0:81:7E:E8:69:C8:2A:E2:1D:22:C3:91:42
Authority key identifier: 1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14
Certificate issuer: /CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
Certificate serial: 019CB8F0312F85D70DA6EDC7D6B2AF4FD824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
Manifest number: 0303
Signing time: Wed 04 Mar 2026 13:01:14 +0000
Manifest this update: Wed 04 Mar 2026 13:01:14 +0000
Manifest next update: Thu 05 Mar 2026 13:01:14 +0000
Files and hashes: 1: HApvbzqa4dpeW-h1L6sY3rKLphQ.crl (hash: mP/kxupfTucGdk/B0D6LMNTlmIWV1mhLJ2i9xJQ0Okk=)
2: hVCMHbhbfZIv6_XEgHNxBb1iBTg.roa (hash: +BlQApbHjZb7f8RHAby22GvRQWprbhCIUcnRWldtZiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:f0:31:2f:85:d7:0d:a6:ed:c7:d6:b2:af:4f:d8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
Validity
Not Before: Mar 4 13:01:14 2026 GMT
Not After : Mar 5 13:01:14 2026 GMT
Subject: CN=59bdd19d79e8e2c0817ee869c82ae21d22c39142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:f8:78:1b:46:c3:5f:6c:69:85:8c:cc:0b:
d0:b4:80:f6:28:a6:f3:3b:2a:df:26:4b:8f:30:45:
38:aa:dd:27:56:96:16:11:aa:74:8a:9a:6e:47:b7:
a1:39:7a:ce:aa:65:fd:b7:20:27:66:81:dd:17:b4:
ee:01:10:0a:24:b4:55:f7:76:a5:0b:c5:17:a5:39:
63:a1:9e:6d:11:df:dc:a8:81:07:47:4f:db:d4:69:
12:fc:59:94:1b:26:4a:a7:8c:d0:21:b0:9c:64:f2:
2a:27:71:ee:64:5f:82:ab:87:8f:a4:49:08:c9:9d:
ca:5b:ad:93:12:79:e8:e6:bd:db:fa:43:48:9f:0f:
a2:43:e8:f5:bb:c3:5c:20:55:2d:a3:9a:9a:fd:ab:
92:46:ed:ab:0d:94:8b:52:4e:8c:95:ff:8c:f2:5d:
d0:70:a6:8d:12:94:8a:cc:ce:d7:fe:23:21:39:d1:
60:02:fc:20:55:37:db:60:2b:cd:8e:38:e3:01:f4:
1c:88:e5:0c:b7:48:d3:42:f7:28:30:45:97:22:16:
dc:61:aa:31:4d:91:30:e5:d7:2f:f2:40:d3:a3:ce:
5f:cd:99:0f:28:46:57:97:2d:ae:cd:5f:8a:30:af:
b6:55:f8:25:3e:75:75:c2:9c:9f:5f:d1:81:6e:08:
96:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BD:D1:9D:79:E8:E2:C0:81:7E:E8:69:C8:2A:E2:1D:22:C3:91:42
X509v3 Authority Key Identifier:
keyid:1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:f9:43:2b:ad:32:0a:fe:39:a8:fd:d6:e7:f8:8a:4a:39:62:
29:4b:58:86:7f:57:0b:80:f7:04:80:b1:ac:f1:0d:8b:4c:e5:
b8:5c:7b:94:dd:84:3e:f5:b9:0b:ef:f3:b7:f2:12:1c:0c:ff:
a6:a6:43:5e:31:b4:2c:f7:26:a5:fc:ca:27:ae:3d:ef:16:82:
4d:83:b6:f0:e2:2e:7b:9d:8d:69:47:b5:3c:93:c9:c4:83:e9:
64:d7:13:6e:79:d5:a1:29:e2:82:08:f4:3b:66:7d:b1:f4:bf:
29:72:40:84:9c:5c:e5:8c:26:93:16:a1:e3:4d:18:a0:db:45:
07:14:7b:0c:71:f8:0d:11:54:e0:db:c4:f3:a2:cf:51:ba:19:
24:fc:3b:71:04:f7:d9:57:88:35:c2:62:59:f7:0b:2f:92:14:
ed:f3:09:1a:84:89:63:b4:56:02:b5:a3:01:3b:a2:a5:b0:8d:
71:af:2d:dc:67:c6:27:f4:52:06:15:8d:75:8b:ab:1f:db:6b:
04:ce:8f:aa:91:08:08:ea:92:46:7a:a9:a0:0a:30:25:09:6b:
0c:78:dd:60:cf:ce:15:cb:1c:d2:4b:3f:0e:35:48:38:91:ee:
4b:0a:e4:ef:41:b4:7e:9f:36:3e:0a:50:1d:3b:16:2c:9d:5b:
43:7e:41:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 23:37:18 2026 by rpki-client