Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
File: hpwOc330guiapnJs3YqZWKp0ER4.mft (raw, json)
Hash identifier: YicmoiTuIxwj7Qfan4effl622as9rYDrLGZ/XS/a+T4=
Subject key identifier: BE:B3:5C:24:14:51:1D:F4:72:94:AD:B8:37:9E:22:6F:91:A4:A4:A0
Authority key identifier: 86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E
Certificate issuer: /CN=869c0e737df482e89aa6726cdd8a9958aa74111e
Certificate serial: 019D39410ABA7BEEA5AF35C47D29ABE35A18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
Manifest number: 02F3
Signing time: Sun 29 Mar 2026 11:00:57 +0000
Manifest this update: Sun 29 Mar 2026 11:00:57 +0000
Manifest next update: Mon 30 Mar 2026 11:00:57 +0000
Files and hashes: 1: GoJ7p5byconiGncMqRmL8LXgnE8.roa (hash: ZMKph7pEjMlyasEu5eXgJpQBIoAaFlANMUUEAZTh0+E=)
2: hpwOc330guiapnJs3YqZWKp0ER4.crl (hash: +QZ6DQ40p9jBBFDoryBGk7cO4Dyfk91QV1vketkt/K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:0a:ba:7b:ee:a5:af:35:c4:7d:29:ab:e3:5a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869c0e737df482e89aa6726cdd8a9958aa74111e
Validity
Not Before: Mar 29 11:00:57 2026 GMT
Not After : Mar 30 11:00:57 2026 GMT
Subject: CN=beb35c2414511df47294adb8379e226f91a4a4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e5:ed:08:7f:4d:51:a8:fe:56:d0:97:26:e0:
42:3c:f0:a8:26:f9:04:03:c5:6e:9b:24:08:42:03:
d7:cc:e3:a9:e2:9c:f3:9e:1c:8d:f9:06:47:88:31:
9a:8c:f7:db:90:de:9a:1c:de:b4:6f:31:7c:96:c6:
8e:ea:bf:97:8f:37:ad:a3:e2:cd:58:ff:26:a1:e9:
b7:fe:da:15:1b:88:29:d5:90:8e:38:6a:3e:4e:0f:
75:37:af:1c:ea:32:79:2b:56:d5:76:f9:ea:c9:1b:
d3:96:f6:98:09:7c:b0:66:96:ef:66:59:8c:de:71:
5a:b0:92:21:ac:f1:a7:94:41:88:01:cd:eb:25:71:
7a:c6:7c:1b:18:29:a7:35:82:13:49:c6:00:6f:e6:
68:72:1d:e6:53:3e:e5:39:11:3e:72:42:5f:72:ee:
f6:0a:bd:46:ce:3f:b3:57:97:a8:e6:f5:7a:74:5f:
27:90:94:a3:59:54:10:da:77:3e:6e:b7:dd:61:f3:
7a:7b:fe:a0:f1:56:b4:ff:ed:f1:5a:ae:f1:a6:ff:
21:84:50:fb:61:07:b2:68:48:42:06:47:30:cd:7c:
c9:1e:60:1a:e5:03:98:ff:c5:c1:da:14:d8:93:42:
87:11:03:6d:bc:9e:25:8d:a3:8b:16:ff:6c:95:d8:
e7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B3:5C:24:14:51:1D:F4:72:94:AD:B8:37:9E:22:6F:91:A4:A4:A0
X509v3 Authority Key Identifier:
keyid:86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8d:c8:07:13:60:5c:2d:20:85:67:20:9d:8a:d2:68:0f:07:
af:65:d7:73:a0:8f:f0:d2:21:f9:46:5d:df:7b:91:9f:68:f7:
2b:92:6f:cd:09:e6:6d:40:a7:3c:11:5a:70:6a:da:74:e6:b4:
d6:7d:ba:b0:33:78:1b:e2:00:34:c1:b9:7a:25:3c:5c:0e:0a:
47:31:e5:e0:d1:48:8a:38:54:bd:2a:24:f5:ed:98:25:bd:d5:
e9:7c:3e:28:8d:9a:16:e0:e9:5e:ad:5e:55:3f:15:82:53:15:
b2:ff:3d:7f:81:85:6c:72:83:c2:cb:d1:63:da:d2:5c:8b:77:
a9:22:59:a6:73:4f:c7:f6:75:44:dd:eb:d1:5a:13:3e:a7:e4:
59:19:24:eb:37:09:d8:fd:11:15:5e:54:65:f4:67:75:2c:b9:
21:51:b7:7e:a3:c2:f1:bd:d8:de:5a:92:06:ec:8b:d9:16:29:
7c:d1:41:ff:d2:fb:45:3b:51:79:65:76:df:0e:14:23:32:77:
a0:60:1c:a1:84:94:5e:e3:2b:ac:1f:eb:28:b6:0e:d3:28:11:
1e:3e:b6:d4:77:ee:36:2b:95:8b:48:ad:7b:36:4a:5f:b7:c7:
b0:8e:ab:70:fd:e2:a4:4f:67:c8:48:5d:19:6d:3d:4f:30:d8:
a8:5b:aa:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:38 2026 by rpki-client