Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
File: HpICrmewRlNH1t35D2Ri-ubk5kM.mft (raw, json)
Hash identifier: sVhOwMupxdgmJzdToDWLGmDMRRFOFws0h8oP44fFrOc=
Subject key identifier: F1:6E:01:BB:FA:A2:44:73:02:96:B1:C8:3D:B9:61:83:79:36:9E:C5
Authority key identifier: 1E:92:02:AE:67:B0:46:53:47:D6:DD:F9:0F:64:62:FA:E6:E4:E6:43
Certificate issuer: /CN=1e9202ae67b0465347d6ddf90f6462fae6e4e643
Certificate serial: 019D3940C85F1A855FE34E387286C8648A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
Manifest number: 0D39
Signing time: Sun 29 Mar 2026 11:00:40 +0000
Manifest this update: Sun 29 Mar 2026 11:00:40 +0000
Manifest next update: Mon 30 Mar 2026 11:00:40 +0000
Files and hashes: 1: HpICrmewRlNH1t35D2Ri-ubk5kM.crl (hash: q4EWgYfAdXnUvA1Rt5T9h7ZdaQEV4Ri7nLnyxdWSv58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:c8:5f:1a:85:5f:e3:4e:38:72:86:c8:64:8a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9202ae67b0465347d6ddf90f6462fae6e4e643
Validity
Not Before: Mar 29 11:00:40 2026 GMT
Not After : Mar 30 11:00:40 2026 GMT
Subject: CN=f16e01bbfaa244730296b1c83db9618379369ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ac:77:fd:28:a7:b0:2e:30:b4:c2:ab:54:e0:
5d:63:4d:51:02:6b:fb:5b:fd:d4:77:57:31:9b:39:
fd:56:c1:3a:3d:a3:b9:ec:94:9b:25:59:a8:c4:a3:
96:2c:37:11:ff:42:e6:5a:50:2d:ca:3b:ac:19:ef:
96:16:84:07:b2:89:36:dc:5a:8b:63:a5:90:0e:a4:
29:6d:79:37:92:a3:88:9b:de:37:5b:7b:8a:6b:7a:
79:ac:e5:6e:3b:9e:8b:67:03:5e:c5:2b:00:d6:04:
b6:50:92:c7:bb:28:4d:7a:04:4c:1c:a0:3f:90:bd:
ab:c6:ac:c1:e6:cb:49:5b:c5:48:10:66:04:b5:e2:
35:40:0a:26:86:65:6e:f7:f4:05:b4:61:89:57:37:
83:6d:73:c0:bd:9c:63:6f:27:95:95:73:8c:01:b1:
fb:df:04:b3:5d:ca:50:18:f1:a0:36:be:69:b4:5c:
73:8a:d3:e1:73:d4:7c:6b:74:8d:7b:b7:e0:2f:ff:
5b:28:af:03:46:9c:49:2b:89:41:f7:39:c8:2c:a7:
53:de:da:37:1d:ce:a1:c5:4c:e5:76:ec:ae:7c:43:
12:bd:61:3b:8d:ba:77:f6:b2:9d:3b:0f:d7:67:1e:
ec:39:7a:74:a5:4b:53:5e:49:ce:9d:14:40:86:25:
dc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6E:01:BB:FA:A2:44:73:02:96:B1:C8:3D:B9:61:83:79:36:9E:C5
X509v3 Authority Key Identifier:
keyid:1E:92:02:AE:67:B0:46:53:47:D6:DD:F9:0F:64:62:FA:E6:E4:E6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpICrmewRlNH1t35D2Ri-ubk5kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5efdd5-0ccc-425f-9301-540a348dd223/1/HpICrmewRlNH1t35D2Ri-ubk5kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:93:54:5d:89:aa:c8:67:18:76:21:34:50:cd:10:3b:ce:16:
25:96:f8:75:4f:12:3d:ba:a7:54:4e:48:1d:0e:e1:41:e9:5f:
2b:1e:4f:19:92:98:de:55:13:b5:cd:c6:66:cd:da:91:06:bf:
bd:86:c2:5a:97:22:2c:e6:0b:14:5a:63:83:b6:5e:7e:44:3e:
14:80:6e:1e:25:a4:7c:dc:fb:db:f6:a1:45:6e:63:23:4e:29:
a2:01:12:4f:eb:be:91:16:6e:8d:57:fc:bd:6d:ab:05:53:f8:
3f:f7:54:5e:05:b6:92:90:17:a8:4b:87:ad:29:f4:47:bd:41:
e7:7f:6c:fc:e8:40:4d:47:79:9a:16:54:53:ac:cb:c1:0b:f9:
94:96:d5:8d:5b:43:7a:a1:c4:bb:2b:0f:e3:f0:d6:21:1b:41:
04:b8:db:ee:b3:b7:d7:f0:5e:44:0a:ed:53:09:76:67:80:f3:
e4:0d:67:77:2e:94:85:e8:c9:68:f0:2f:76:0c:88:89:75:ad:
20:84:38:2e:a1:19:72:a5:66:5e:53:6d:e7:b6:e8:12:a0:a1:
4c:f4:96:db:6a:67:7e:9b:d6:d1:a6:1b:57:f9:37:e4:c8:ef:
73:16:ba:42:52:95:89:6e:18:bf:bb:80:74:6b:da:de:7a:64:
7d:ec:a2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:30 2026 by rpki-client