Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
File: Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft (raw, json)
Hash identifier: 07JWC0i6wVqfi5017BOdpLerPy1DJMGR6jkWhwvcaL4=
Subject key identifier: B8:38:98:FF:E8:76:D0:5C:35:69:2C:FD:38:3A:21:50:F0:8C:19:20
Authority key identifier: 1E:98:BB:48:B5:93:06:A7:30:C9:B9:BD:8D:77:34:67:CF:1C:54:E0
Certificate issuer: /CN=1e98bb48b59306a730c9b9bd8d773467cf1c54e0
Certificate serial: 019D38668731C65D4550514B626A2A6250DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hpi7SLWTBqcwybm9jXc0Z88cVOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
Manifest number: 0E94
Signing time: Sun 29 Mar 2026 07:02:16 +0000
Manifest this update: Sun 29 Mar 2026 07:02:16 +0000
Manifest next update: Mon 30 Mar 2026 07:02:16 +0000
Files and hashes: 1: Hpi7SLWTBqcwybm9jXc0Z88cVOA.crl (hash: xxC4hiXjKaBGnO8+PnvtU0qrKNUH70zXGKm9AgkiylQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hpi7SLWTBqcwybm9jXc0Z88cVOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:87:31:c6:5d:45:50:51:4b:62:6a:2a:62:50:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e98bb48b59306a730c9b9bd8d773467cf1c54e0
Validity
Not Before: Mar 29 07:02:16 2026 GMT
Not After : Mar 30 07:02:16 2026 GMT
Subject: CN=b83898ffe876d05c35692cfd383a2150f08c1920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:99:a7:50:d5:d0:20:bf:e6:b6:66:da:20:92:
25:e8:28:3f:59:3c:c0:8e:5c:64:4c:9b:b0:b5:89:
6c:06:02:8a:4b:74:22:6d:d3:9c:5b:e3:d2:4d:37:
88:42:0f:9c:4e:40:ef:60:98:eb:f8:a4:33:c5:d9:
d2:d9:fa:54:12:8b:f4:f7:74:67:4b:f4:16:e3:11:
54:b2:56:5b:b5:be:7d:01:e6:22:fb:81:63:fd:b0:
71:e8:bd:9e:b5:b8:6c:c7:c4:cf:98:e2:57:89:e0:
7e:91:ed:37:db:07:68:f9:94:7b:af:e8:2e:82:80:
8c:36:44:36:01:7e:51:34:04:66:4b:35:97:25:d7:
07:d2:ba:92:41:d1:17:1f:84:9e:b5:12:16:6e:25:
20:f0:69:9b:14:d9:04:49:96:c6:63:97:d2:b8:b7:
83:f9:dc:61:37:66:c4:21:ff:5e:d2:f3:9e:e3:58:
e9:f5:06:fe:31:d3:6d:96:7b:79:7e:69:8f:d2:bb:
c4:a2:78:9f:09:3e:b2:52:95:f5:2a:2e:ef:c2:01:
f5:4b:8c:4f:ab:bd:5f:66:03:37:d5:07:81:c8:ca:
e0:7e:6f:34:4c:56:40:6e:57:77:7b:3c:d4:50:b6:
cf:aa:d2:72:e4:69:7e:0f:41:b0:a1:b7:57:20:ca:
4b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:38:98:FF:E8:76:D0:5C:35:69:2C:FD:38:3A:21:50:F0:8C:19:20
X509v3 Authority Key Identifier:
keyid:1E:98:BB:48:B5:93:06:A7:30:C9:B9:BD:8D:77:34:67:CF:1C:54:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hpi7SLWTBqcwybm9jXc0Z88cVOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5161cb-bcdd-4096-88f7-5aed8d6a33b7/1/Hpi7SLWTBqcwybm9jXc0Z88cVOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:2a:d4:b9:22:50:34:6a:43:4a:c7:66:df:a2:62:60:46:61:
e9:61:55:8e:d3:ea:9b:92:df:79:16:d7:4e:85:50:2c:b6:b3:
0e:aa:e7:bf:56:9c:03:0f:8d:13:2b:6d:ab:b8:8d:8a:75:65:
05:65:98:61:ba:a5:10:00:f6:af:5d:4a:4c:c8:06:fa:fd:69:
04:9b:96:78:df:c0:1a:1a:75:52:51:ef:35:49:6e:f2:48:eb:
72:62:6b:e5:2b:e3:b9:84:5a:3f:fc:68:2d:0f:d8:f0:99:2f:
30:e5:97:a3:5c:9c:6d:16:5c:2a:49:b4:74:f9:e0:8e:dd:99:
8a:4d:0d:4b:69:c1:fe:5d:10:30:24:ab:7a:cd:bc:66:28:f1:
4b:42:a2:aa:8e:56:ac:4c:b9:f4:27:0d:d1:21:58:f5:dd:5d:
a8:2e:b5:3b:80:23:37:31:75:66:20:3c:16:a9:b8:b5:1e:6e:
37:ec:78:1b:77:4b:7f:73:15:21:a0:63:c0:05:09:ef:5f:07:
c5:c8:f8:aa:1e:1e:0b:1a:1b:98:ae:e1:52:c4:69:ee:6d:02:
01:0f:f3:74:55:36:fc:64:ef:e8:4d:3b:65:bd:7d:36:9e:d0:
51:9b:0b:81:95:3d:a0:f0:a5:53:90:5a:05:54:5f:36:3f:30:
86:62:63:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:41 2026 by rpki-client