Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft
File: HPMelYpvqF39UX6lohZ6NZzgJpE.mft (raw, json)
Hash identifier: S22DY/nFF2wYoB0e90JoBpPKaqxTkPpWEPOM2YadT5I=
Subject key identifier: 60:CF:C1:F3:21:F4:3B:14:46:3F:AD:22:FE:ED:1B:74:94:E4:87:69
Authority key identifier: 1C:F3:1E:95:8A:6F:A8:5D:FD:51:7E:A5:A2:16:7A:35:9C:E0:26:91
Certificate issuer: /CN=1cf31e958a6fa85dfd517ea5a2167a359ce02691
Certificate serial: 019D382E02126A1DDB2F8B680820DBF0987B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HPMelYpvqF39UX6lohZ6NZzgJpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:32 +0000
Manifest this update: Sun 29 Mar 2026 06:00:32 +0000
Manifest next update: Mon 30 Mar 2026 06:00:32 +0000
Files and hashes: 1: HPMelYpvqF39UX6lohZ6NZzgJpE.crl (hash: ZCLFVfAsc6sFnekcqCXCPicZV36RyFRyzueS2bwW8V0=)
2: rwePCHeXZXjU5TFT1312djJxKwE.roa (hash: BW7jBdpBoXaBVzPLrcX3bWseCVe3tOKG4oOWTEJm0U0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HPMelYpvqF39UX6lohZ6NZzgJpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:02:12:6a:1d:db:2f:8b:68:08:20:db:f0:98:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cf31e958a6fa85dfd517ea5a2167a359ce02691
Validity
Not Before: Mar 29 06:00:32 2026 GMT
Not After : Mar 30 06:00:32 2026 GMT
Subject: CN=60cfc1f321f43b14463fad22feed1b7494e48769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:80:f8:43:05:d4:65:3d:c1:f3:b5:4d:2b:65:
49:cf:e2:a8:f9:a8:52:a3:f1:69:5f:b6:4f:05:b7:
a9:8f:83:df:e4:87:52:c9:be:ab:6a:d1:ee:22:f9:
a9:3f:9d:18:91:fd:33:29:e8:8a:57:6a:cf:2f:26:
a2:d5:2f:9e:44:ff:9e:22:48:6d:bc:7c:ce:77:5e:
43:6b:63:f3:18:63:60:ac:89:66:bc:eb:f6:a6:d6:
ed:23:e2:5f:89:b2:79:13:04:4c:e6:e9:9c:87:b5:
84:18:1d:d8:f5:08:19:83:48:0d:b9:45:61:c3:a9:
68:1c:4e:9d:f8:f0:48:17:6d:b4:70:e8:4d:85:75:
4f:99:af:2f:c9:76:a3:59:37:8d:51:68:7f:0d:12:
e2:7b:4d:8a:a9:20:c4:4e:2f:35:66:d1:40:a7:76:
e1:f3:e9:d9:78:04:40:20:a6:59:c0:55:a8:49:41:
a8:0a:97:b8:65:50:49:50:fc:39:c5:4b:b4:26:55:
d5:da:f2:32:48:be:71:fe:d8:e5:43:ab:29:a9:5d:
9e:73:95:df:f4:31:16:2a:de:68:ae:10:08:f1:5d:
3f:76:df:9c:fb:18:29:7f:ad:9c:a2:6a:d5:8d:87:
37:f4:3c:c0:e4:21:58:a1:2a:7c:2c:71:4e:f5:2d:
d0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CF:C1:F3:21:F4:3B:14:46:3F:AD:22:FE:ED:1B:74:94:E4:87:69
X509v3 Authority Key Identifier:
keyid:1C:F3:1E:95:8A:6F:A8:5D:FD:51:7E:A5:A2:16:7A:35:9C:E0:26:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPMelYpvqF39UX6lohZ6NZzgJpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/95cd2d-0d52-4b07-b76b-d853e7842b3a/1/HPMelYpvqF39UX6lohZ6NZzgJpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:eb:41:ad:13:4c:c4:89:00:8d:0f:1a:0a:ad:8f:4f:59:59:
a3:10:0a:f8:b8:df:77:5a:9f:40:41:73:d0:2c:fa:cd:e8:45:
c5:0d:4f:7b:19:04:bf:71:44:c3:b3:ca:f7:bc:75:d4:a7:05:
de:46:bc:9a:e2:d5:30:28:74:b1:63:d5:82:6b:64:65:ad:60:
a1:a8:93:19:02:4f:27:6b:cf:ad:1e:9c:46:70:fa:6e:fd:52:
dd:33:9d:25:09:8a:a9:40:19:39:32:80:27:23:03:05:e9:4b:
a2:a1:67:93:4e:5c:13:26:36:36:51:7b:2f:5d:35:3d:a6:72:
b7:e5:f2:8a:0b:82:02:5d:9b:75:5e:f4:53:03:65:69:a3:78:
0d:5d:24:8d:63:40:b6:bd:2f:17:f6:8e:02:ed:df:a9:0f:8a:
7b:03:a7:62:48:58:e5:f7:d1:02:c4:80:56:d1:d1:97:62:1a:
43:c3:9c:94:f4:4b:49:1d:ae:98:55:b6:3e:82:26:38:bc:8d:
e9:bc:90:a0:48:78:b2:dd:96:63:25:90:07:72:ab:d7:2c:6a:
7c:19:af:1b:6b:8e:f3:a3:63:9d:62:dd:53:15:fa:41:1d:1d:
a8:d7:b2:50:2e:ae:4c:bf:35:6f:11:16:a5:57:11:6a:05:66:
e0:ea:19:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:18 2026 by rpki-client