Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
File: hPLOccb_zodWDVZe5czaMeAbnBU.mft (raw, json)
Hash identifier: unUMMYmVBa/rui39+2OYRawq2vooxCarO8uFbls4Ayg=
Subject key identifier: 7A:FB:AC:EE:29:2F:A3:E5:4A:A1:22:B9:A8:99:64:35:93:85:D2:B8
Authority key identifier: 84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
Certificate issuer: /CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
Certificate serial: 019D37890D82443423D8B7DD06A2FF2F4B91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
Manifest number: 13BB
Signing time: Sun 29 Mar 2026 03:00:21 +0000
Manifest this update: Sun 29 Mar 2026 03:00:21 +0000
Manifest next update: Mon 30 Mar 2026 03:00:21 +0000
Files and hashes: 1: Vs7BQ_LZ7tnxolhpvx8dREz5TnU.roa (hash: DTkKxG2OCn2HUjqRtTQ53+a8mSrOuYj/XPGf19kdObY=)
2: hPLOccb_zodWDVZe5czaMeAbnBU.crl (hash: 8mUrXthEDmnbPT1DynJ2cgKazTd+v0iZnW0TBrBbmxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:0d:82:44:34:23:d8:b7:dd:06:a2:ff:2f:4b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
Validity
Not Before: Mar 29 03:00:21 2026 GMT
Not After : Mar 30 03:00:21 2026 GMT
Subject: CN=7afbacee292fa3e54aa122b9a89964359385d2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1c:ba:9c:e0:ca:25:21:ab:f1:27:9b:2c:77:
03:dc:95:12:62:d9:cf:fc:ba:d2:34:34:6c:f7:63:
8f:eb:2d:a1:98:f6:e0:d5:a4:72:1d:9e:e8:3e:da:
b9:43:ee:12:5b:b0:a1:b7:a7:ce:8e:40:22:9f:ed:
c6:47:aa:21:3e:15:f9:bf:43:61:86:74:c0:24:db:
a1:1d:18:ee:e2:18:61:f0:84:3a:04:99:35:48:cd:
5d:88:96:ba:12:92:a4:6c:3c:18:f0:09:73:a8:3e:
57:69:f0:e1:81:92:87:63:7d:98:8b:08:e0:ea:d0:
e2:79:97:7a:47:eb:c3:a9:a6:e5:10:a4:59:fd:af:
25:9d:fe:ba:86:b9:48:15:6c:b0:f8:d5:12:3d:07:
11:f4:4c:82:0f:ab:0e:74:ce:b9:e3:97:fc:06:8d:
36:b0:6d:76:bd:4d:6b:70:95:c3:de:b0:02:23:c3:
4e:15:3c:5b:2a:8a:10:70:f5:5d:3b:f1:97:b6:cd:
37:2e:1c:6d:f7:60:5f:b8:a9:e8:df:46:12:72:d1:
e7:d5:44:43:f4:77:f2:32:44:c4:28:c2:46:33:05:
0a:0b:76:21:d6:a4:d4:58:9d:fe:04:eb:1d:58:97:
59:78:0a:45:fb:80:fc:97:15:6d:47:dd:ce:85:db:
d4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FB:AC:EE:29:2F:A3:E5:4A:A1:22:B9:A8:99:64:35:93:85:D2:B8
X509v3 Authority Key Identifier:
keyid:84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c2:b1:42:00:24:d1:5f:91:ae:ab:3e:4e:bc:aa:49:67:da:
84:b6:d1:bb:0d:0d:61:32:0b:f2:8c:56:32:2a:6d:7a:8d:60:
cf:6f:12:fc:f6:44:4a:50:f7:ff:ca:07:1b:ce:f5:fe:1c:e2:
cc:f1:31:14:ce:f3:d2:40:d5:11:c7:4f:c8:3d:ad:bd:d6:a0:
8e:86:97:c7:aa:b0:f5:a1:d6:9e:f6:4c:11:c5:79:d7:ba:40:
84:e2:92:c2:8d:e6:48:93:7b:60:7d:3f:e8:e9:4d:74:c2:be:
97:3d:ab:7d:b5:18:21:51:2a:f0:c1:66:b0:d5:07:75:2e:6c:
c3:aa:4d:bc:33:0f:41:47:02:e9:2b:81:58:10:81:cc:4d:61:
da:76:7e:97:a3:2e:ae:02:a8:51:c3:fd:4c:d5:43:ba:b5:be:
49:28:c7:f4:38:db:6f:64:70:ed:47:08:7b:ec:29:14:ef:7d:
a2:19:ac:76:a0:05:c3:6d:03:9a:92:75:74:c1:9d:25:40:6f:
da:0c:1e:1d:3b:cb:bb:1c:e4:1b:6c:20:31:d4:81:91:94:4c:
05:65:ec:b7:28:e0:74:3b:5d:bc:46:a8:6a:be:24:95:d4:34:
22:c5:33:19:a5:36:5c:f2:b1:b9:0b:a0:76:dc:eb:dc:11:1c:
86:19:ef:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:01 2026 by rpki-client