Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
File: HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft (raw, json)
Hash identifier: aI1C/5wvBBdxFgWfEqeEVxhtsZRoEAPJEfqACnIkF2s=
Subject key identifier: 74:15:8D:3F:C6:B2:D2:B7:56:B7:27:5F:D2:B2:7A:DF:4F:C4:26:11
Authority key identifier: 1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA
Certificate issuer: /CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
Certificate serial: 019E2D3ADB2F3FFAC8C8DA4E625ADB435562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
Manifest number: 14A1
Signing time: Fri 15 May 2026 20:01:32 +0000
Manifest this update: Fri 15 May 2026 20:01:32 +0000
Manifest next update: Sat 16 May 2026 20:01:32 +0000
Files and hashes: 1: HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl (hash: dVbzrbWI6I5X4O1rPYCwtdI+MtPiQYKQl/R1WlBOQa8=)
2: WrV4ZemJwrw_kjB05-5Id3wYxlE.roa (hash: eepRF61Uwq1JqMLzpuul90ksZb6fVRDXJtYxt1swjFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 15:18:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2d:3a:db:2f:3f:fa:c8:c8:da:4e:62:5a:db:43:55:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cfb087ffb7f61ce113f69345e4d50a113808fea
Validity
Not Before: May 15 20:01:32 2026 GMT
Not After : May 16 20:01:32 2026 GMT
Subject: CN=74158d3fc6b2d2b756b7275fd2b27adf4fc42611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:80:43:58:6e:5a:bd:7c:a8:b3:f2:62:6e:0f:
67:66:1a:63:43:4c:b6:1c:97:c5:60:66:1a:10:74:
08:8c:0f:1f:3c:a5:ea:db:f8:18:2d:a0:00:00:aa:
13:27:0f:81:49:38:a7:22:f5:dd:61:f2:45:e1:ee:
ff:f6:77:80:02:75:41:3f:08:c6:f3:82:47:f7:56:
cb:78:ed:d9:4c:7c:3d:b2:b5:34:da:13:9a:8d:13:
0b:32:10:e8:b0:fb:d2:b4:2a:45:88:c0:78:6d:e9:
73:80:41:17:cf:f0:c8:fd:69:bb:96:b4:5a:28:70:
0a:fe:36:da:c9:8b:80:a0:c7:c7:04:9c:a9:0b:e2:
ba:6c:11:dd:e4:02:97:a9:a8:43:83:ad:cf:a9:2d:
43:b8:fc:aa:a2:2a:1e:c0:e2:4d:2e:d5:1d:55:9a:
a6:d4:ab:1c:e7:d9:c5:6b:3c:53:c9:43:43:92:32:
52:a4:99:ae:fa:3a:35:01:a6:18:ee:ef:31:0a:b9:
ba:6a:5d:18:19:10:46:6f:10:57:f7:65:5f:08:50:
50:8f:47:ea:3a:68:bd:50:ad:7a:5b:46:00:f8:6e:
cd:cb:99:31:54:cb:7a:81:58:ec:43:da:57:e3:db:
9c:83:0f:dc:e3:99:06:34:1e:83:ac:7e:63:3e:b2:
b4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:15:8D:3F:C6:B2:D2:B7:56:B7:27:5F:D2:B2:7A:DF:4F:C4:26:11
X509v3 Authority Key Identifier:
keyid:1C:FB:08:7F:FB:7F:61:CE:11:3F:69:34:5E:4D:50:A1:13:80:8F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fdd51e-bca1-4892-b97a-69aa53c69d54/1/HPsIf_t_Yc4RP2k0Xk1QoROAj-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1d:3c:02:01:43:39:b2:8a:9b:38:6a:c7:e8:6d:56:d8:be:
f3:08:5e:32:8a:ba:fb:19:06:cd:3b:03:33:3c:18:94:09:59:
b7:8e:69:20:66:49:b3:b5:69:0f:84:67:ba:7f:2c:85:34:10:
26:61:b1:76:27:9d:ef:56:ed:ab:87:22:6a:bd:a8:a5:9d:16:
b6:cc:6c:31:6c:43:43:69:f1:f3:e2:67:b2:7a:00:12:ec:6a:
b1:ed:de:ea:19:1c:33:2f:40:ba:35:35:07:7e:6b:a1:b6:6b:
e6:31:57:8d:93:59:b3:ef:13:15:ad:59:86:bb:c9:45:d9:9a:
a0:d2:a6:17:c0:30:c8:6a:83:61:4f:9c:9f:8a:b7:6d:40:3b:
e5:65:aa:be:f1:ee:bc:ea:27:de:6c:2d:b8:e1:4f:7c:ee:06:
e6:2a:66:aa:8d:27:47:fe:51:cd:a1:08:7e:94:1d:bb:8c:c5:
90:4d:2e:0c:e9:a2:cd:8c:bb:9f:26:23:ac:30:0b:3a:13:a6:
88:86:11:04:1a:57:16:7f:2f:53:21:93:a6:3f:ad:be:24:af:
38:74:f5:35:05:55:82:08:86:b6:ad:94:90:d5:13:93:a1:ca:
97:75:47:44:5f:68:f2:64:09:38:f4:ee:35:f8:1b:98:2b:4d:
5d:54:b8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 23:07:33 2026 by rpki-client