Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
File: Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft (raw, json)
Hash identifier: vf2ArlzPDK8DkjLSmGyAYqyDB1LmiDGkggLzE7OAlxs=
Subject key identifier: 7F:37:BF:C3:50:2B:12:05:9D:C7:F8:DB:07:A9:5F:A4:52:04:F3:B1
Authority key identifier: 1E:98:BB:48:B5:93:06:A7:30:C9:B9:BD:8D:77:34:67:CF:1C:54:E0
Certificate issuer: /CN=1e98bb48b59306a730c9b9bd8d773467cf1c54e0
Certificate serial: 019FA0723941E497EC4B93D374D828366936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hpi7SLWTBqcwybm9jXc0Z88cVOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
Manifest number: 0FD3
Signing time: Sun 26 Jul 2026 22:01:07 +0000
Manifest this update: Sun 26 Jul 2026 22:01:07 +0000
Manifest next update: Mon 27 Jul 2026 22:01:07 +0000
Files and hashes: 1: Hpi7SLWTBqcwybm9jXc0Z88cVOA.crl (hash: mSWpcXZxYhF4SmqhQzoiudoLSpYgfPj6WhV8V+XWHrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hpi7SLWTBqcwybm9jXc0Z88cVOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:72:39:41:e4:97:ec:4b:93:d3:74:d8:28:36:69:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e98bb48b59306a730c9b9bd8d773467cf1c54e0
Validity
Not Before: Jul 26 22:01:07 2026 GMT
Not After : Jul 27 22:01:07 2026 GMT
Subject: CN=7f37bfc3502b12059dc7f8db07a95fa45204f3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:66:ad:ef:45:49:92:6c:aa:f8:76:4c:12:93:
03:3c:d7:8c:f9:7c:df:a2:0c:15:16:7f:4f:1d:06:
ed:4e:10:f8:5a:3f:b8:c3:db:14:db:53:a0:17:32:
e0:37:77:10:7c:02:1e:97:e9:46:37:ea:c4:88:4d:
1f:4f:14:b6:ea:31:19:27:0d:85:f2:7e:a2:90:e2:
8e:5c:9a:9f:80:39:d8:3b:3e:01:bf:79:d5:26:72:
20:b0:93:7f:ae:d0:66:12:11:01:3a:6e:b1:6d:20:
e8:c7:5d:98:1c:13:9b:a4:00:7e:82:e0:16:08:f1:
d8:65:73:26:3d:79:a5:32:d7:dc:9d:36:81:b9:b4:
c5:36:e0:33:76:f7:1b:92:07:1d:1e:c4:b3:22:b0:
e9:7f:a6:2a:3d:c6:16:8b:ae:1a:cd:d3:7b:b1:0d:
4a:c0:c4:7d:2a:37:17:48:b0:8b:e2:c5:39:26:90:
23:e2:62:f2:fd:87:41:93:39:fd:6e:5f:2b:06:16:
d4:3d:ba:49:5e:62:32:28:bf:51:dc:ab:7e:32:9e:
39:49:e9:ad:c7:9d:17:7b:06:25:d8:6d:74:05:42:
15:17:3e:22:a7:3a:22:8a:d6:6e:5d:d0:c8:df:9a:
19:c2:5f:fc:e9:23:54:a9:3a:c6:83:a8:a6:a1:08:
67:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:37:BF:C3:50:2B:12:05:9D:C7:F8:DB:07:A9:5F:A4:52:04:F3:B1
X509v3 Authority Key Identifier:
keyid:1E:98:BB:48:B5:93:06:A7:30:C9:B9:BD:8D:77:34:67:CF:1C:54:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hpi7SLWTBqcwybm9jXc0Z88cVOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:8c:9a:d4:b8:7f:76:cf:30:60:76:85:d2:9c:ee:84:a0:68:
f5:77:cb:eb:0c:48:33:36:04:f1:ab:26:b6:a6:77:d0:f4:5d:
9a:4b:1f:34:b0:aa:d7:fb:98:63:ae:89:95:c8:d8:de:d2:52:
47:24:07:b7:5d:6d:ec:a9:24:d8:e3:3d:61:21:cb:cb:7f:9e:
56:d8:fc:f4:56:c3:48:d2:7a:66:e7:dc:28:f1:8a:9d:ae:ea:
54:70:b0:53:b8:24:4d:97:e7:00:26:2a:56:68:f5:1e:75:d2:
93:7c:73:35:ac:60:21:ce:89:26:ff:c2:52:ee:33:3b:82:62:
02:97:39:8e:eb:75:9f:7d:f3:77:d5:49:88:1d:66:09:1e:99:
cf:0f:b0:bc:e0:a9:1d:62:99:02:4e:1c:01:7a:37:44:1d:31:
f9:81:8c:e4:d6:07:5c:6d:49:f6:42:66:1e:76:82:40:d4:2c:
dc:ef:e4:42:c8:79:22:b0:d7:49:e3:a5:75:de:11:06:33:d2:
82:b2:22:b1:65:d8:b9:3a:2e:d2:e0:6b:71:fa:36:36:2b:29:
e9:37:73:fe:ad:c7:a4:f3:65:92:ae:b7:4c:d1:17:07:bc:ba:
c1:c5:27:72:cf:c9:bb:21:1f:56:81:f0:c2:30:d3:9a:ca:b0:
87:0b:0b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:41:20 2026 by rpki-client