Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
File: HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft (raw, json)
Hash identifier: fNWZf7zo6jvbf+c9ov4Qqp1MvxsncLKt2D7QcsxpmPY=
Subject key identifier: 37:48:6E:91:51:D4:D7:FB:F7:74:89:AB:64:BF:30:FC:C6:80:8E:51
Authority key identifier: 1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA
Certificate issuer: /CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba
Certificate serial: 019D38D29FAEDFD43B93898553A6D0930597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
Manifest number: 0FC6
Signing time: Sun 29 Mar 2026 09:00:20 +0000
Manifest this update: Sun 29 Mar 2026 09:00:20 +0000
Manifest next update: Mon 30 Mar 2026 09:00:20 +0000
Files and hashes: 1: HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl (hash: qFArKY1Wa64u8ZxBnhwHR02flZ6jtpkwm/9Mszd9EX8=)
2: nwKbwtoqpnT5gVqh1QUIgDFgOWQ.roa (hash: JOb72Ix/3IvyYR98c/TNjJBo/rc+TguIVe9HFGNgsGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:9f:ae:df:d4:3b:93:89:85:53:a6:d0:93:05:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba
Validity
Not Before: Mar 29 09:00:20 2026 GMT
Not After : Mar 30 09:00:20 2026 GMT
Subject: CN=37486e9151d4d7fbf77489ab64bf30fcc6808e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5c:b8:b5:1d:4c:80:84:1c:de:50:a8:09:4f:
cd:06:d7:33:e1:0b:48:96:87:be:f1:f1:8a:5a:7b:
6e:fa:5c:13:b2:44:b8:f7:ec:08:e7:88:18:7a:e4:
26:30:50:9e:ca:a7:d3:0d:bc:0e:39:c1:19:19:a2:
8c:23:f0:0b:1a:5e:8d:6c:f6:6d:7c:51:96:a7:5b:
ad:8f:21:b6:50:34:3e:bc:1c:d4:c0:85:62:8b:ed:
bc:7f:37:b4:f5:49:9a:7b:65:63:0f:18:2f:67:c1:
d5:a9:b2:64:7f:5c:14:be:d8:59:f3:25:6f:3f:ce:
60:58:61:55:25:9c:64:f2:83:f1:cf:55:9f:6a:b3:
b2:d6:dd:d9:7e:9d:99:4c:f5:44:32:6c:e9:8c:5a:
b3:27:33:61:33:58:64:33:21:74:2c:d1:d2:f3:4f:
33:07:c4:86:ed:99:0e:d6:d1:55:f3:58:d8:05:28:
60:95:c0:eb:08:59:b9:30:ef:b9:0b:26:f4:e0:1a:
47:7b:78:a3:78:82:d8:02:24:04:e0:73:e1:dd:e1:
a9:77:6b:70:50:b1:57:31:8a:6b:9b:09:3f:a6:8c:
8a:96:1a:19:08:56:89:47:c3:50:44:ae:af:32:a1:
ac:69:59:09:4d:0c:0e:f6:c8:c9:21:cd:f7:ee:f2:
2f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:48:6E:91:51:D4:D7:FB:F7:74:89:AB:64:BF:30:FC:C6:80:8E:51
X509v3 Authority Key Identifier:
keyid:1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:17:47:2a:56:65:ba:40:00:83:ce:af:46:60:89:0b:0d:ec:
e2:b3:88:91:c2:0f:89:69:fe:c2:21:07:a4:c6:22:4d:b9:75:
c1:c3:cf:1a:f9:ab:12:11:b8:96:e1:e6:03:d1:f7:3b:2a:7a:
96:86:af:c8:cb:7f:8a:80:ce:30:ef:f6:fc:41:65:01:34:3c:
09:3d:4b:17:83:49:b4:bc:21:83:94:97:b7:21:66:92:6a:11:
3f:01:b0:f2:32:af:30:16:ca:67:ee:7c:f3:15:49:10:12:8d:
be:12:d0:2a:08:7f:39:94:df:4d:b3:b6:76:df:d8:93:3b:28:
7f:ee:2d:78:4b:de:64:c1:14:36:a5:cc:73:3a:60:8b:04:f9:
d6:e8:52:eb:04:d6:d8:40:07:10:a3:88:ee:52:56:c9:88:d7:
8d:14:34:2a:30:8c:81:83:fa:3b:64:3f:8a:66:31:e7:ca:5e:
55:d7:93:c2:a3:a3:43:1f:1e:ff:f4:e6:91:11:29:b4:56:c0:
d0:cc:46:20:29:19:16:57:29:8b:46:de:f0:d0:b9:5e:c4:d4:
4b:63:aa:bd:4c:e0:2a:dc:e4:37:c9:d9:59:23:e5:f4:dd:9c:
71:3d:9f:20:23:d1:6c:72:fe:bc:3d:9f:41:12:77:9e:39:54:
a3:af:22:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040p+u39Q7k4mFU6bQkwWXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOWI4NTYyNjE1ZjUxMTBkMzU1MWY4ZWM1ZGQwNTZmYjBh
NDhhYmEwHhcNMjYwMzI5MDkwMDIwWhcNMjYwMzMwMDkwMDIwWjAzMTEwLwYDVQQD
EygzNzQ4NmU5MTUxZDRkN2ZiZjc3NDg5YWI2NGJmMzBmY2M2ODA4ZTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxly4tR1MgIQc3lCoCU/NBtcz4QtI
loe+8fGKWntu+lwTskS49+wI54gYeuQmMFCeyqfTDbwOOcEZGaKMI/ALGl6NbPZt
fFGWp1utjyG2UDQ+vBzUwIVii+28fze09Umae2VjDxgvZ8HVqbJkf1wUvthZ8yVv
P85gWGFVJZxk8oPxz1WfarOy1t3Zfp2ZTPVEMmzpjFqzJzNhM1hkMyF0LNHS808z
B8SG7ZkO1tFV81jYBShglcDrCFm5MO+5Cyb04BpHe3ijeILYAiQE4HPh3eGpd2tw
ULFXMYprmwk/poyKlhoZCFaJR8NQRK6vMqGsaVkJTQwO9sjJIc337vIv+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdIbpFR1Nf793SJq2S/MPzGgI5RMB8GA1UdIwQY
MBaAFB6bhWJhX1EQ01UfjsXdBW+wpIq6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHB1RlltRmZVUkRUVlItT3hkMEZiN0NraXJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80NTQ0ZTQtMzVkYi00MDk4LTkwNDAt
NTM5YTBmMjY2ODRkLzEvSHB1RlltRmZVUkRUVlItT3hkMEZiN0NraXJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS80NTQ0ZTQtMzVkYi00MDk4LTkwNDAtNTM5YTBmMjY2ODRk
LzEvSHB1RlltRmZVUkRUVlItT3hkMEZiN0NraXJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJBdHKlZl
ukAAg86vRmCJCw3s4rOIkcIPiWn+wiEHpMYiTbl1wcPPGvmrEhG4luHmA9H3Oyp6
loavyMt/ioDOMO/2/EFlATQ8CT1LF4NJtLwhg5SXtyFmkmoRPwGw8jKvMBbKZ+58
8xVJEBKNvhLQKgh/OZTfTbO2dt/Ykzsof+4teEveZMEUNqXMczpgiwT51uhS6wTW
2EAHEKOI7lJWyYjXjRQ0KjCMgYP6O2Q/imYx58peVdeTwqOjQx8e//TmkREptFbA
0MxGICkZFlcpi0be8NC5XsTUS2OqvUzgKtzkN8nZWSPl9N2ccT2fICPRbHL+vD2f
QRJ3njlUo68iBQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:10 2026 by rpki-client