Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
File: hps2AP1zjmmNEv7yDhBuapTjtnQ.mft (raw, json)
Hash identifier: fglY8RICYMDdm+n6wo0FEgGTAbweyOhvSb3mgj1Oe98=
Subject key identifier: C2:38:04:7E:BD:BE:E2:FC:BF:DA:65:5F:4C:A8:52:5C:2A:E6:0C:D5
Authority key identifier: 86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74
Certificate issuer: /CN=869b3600fd738e698d12fef20e106e6a94e3b674
Certificate serial: 019F1A5623F439CFB9CDE23FF2468EF65E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
Manifest number: 0E7A
Signing time: Tue 30 Jun 2026 21:01:20 +0000
Manifest this update: Tue 30 Jun 2026 21:01:20 +0000
Manifest next update: Wed 01 Jul 2026 21:01:20 +0000
Files and hashes: 1: D07dxDXxrFaWAK13Zm1gQWe6sqM.roa (hash: WEmuyO7ijZIUqK6Kdgpk4wxDQKr57OBRHR5wIMw0Uxo=)
2: hps2AP1zjmmNEv7yDhBuapTjtnQ.crl (hash: BSgUE/0zL6kk3jRZ92VVW9rSK33c0HJ4Kk/Wd+dcTpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 21:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:56:23:f4:39:cf:b9:cd:e2:3f:f2:46:8e:f6:5e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869b3600fd738e698d12fef20e106e6a94e3b674
Validity
Not Before: Jun 30 21:01:20 2026 GMT
Not After : Jul 1 21:01:20 2026 GMT
Subject: CN=c238047ebdbee2fcbfda655f4ca8525c2ae60cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:58:d6:b6:37:48:e3:6b:d6:bc:28:3f:a0:37:
a7:ae:3c:bc:c7:8a:18:7e:c0:a5:f2:d6:aa:7b:f7:
be:32:26:3a:f6:62:26:f3:96:4a:bd:31:36:7c:56:
cb:b6:59:92:b9:ee:fb:7c:9a:cf:30:55:65:a5:2e:
29:3a:cd:fd:f8:17:07:42:81:cb:93:5e:34:8d:86:
67:f4:36:10:d9:bd:95:1b:e3:89:3f:e0:a0:e6:f2:
6b:6c:70:db:ed:0d:87:fe:83:28:12:04:23:31:a1:
ec:ea:5e:22:8a:65:ec:aa:24:4e:79:a9:8d:1d:98:
dc:fc:e6:68:bd:b8:d8:95:b7:a3:a2:8e:f5:f1:fe:
b7:31:92:5b:ea:d7:38:0f:26:12:d9:e1:f4:e5:72:
fb:71:4c:15:b5:02:fc:ab:71:d1:80:89:4a:8f:02:
ef:11:da:1f:15:75:71:f8:8b:54:4d:0a:22:43:f2:
88:a5:86:f0:9c:a7:98:a3:7d:82:79:ef:f9:ae:69:
3b:c7:58:cc:5a:7f:a3:c7:cb:4f:fa:45:9c:cf:f8:
e8:74:12:cb:7e:42:c1:92:1e:bd:c6:4c:7f:a5:f2:
91:52:d4:9d:6a:ef:b1:4a:cf:9f:18:50:ce:d5:52:
13:70:11:55:c7:3f:53:a3:67:ec:6c:82:7a:ee:a1:
c2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:38:04:7E:BD:BE:E2:FC:BF:DA:65:5F:4C:A8:52:5C:2A:E6:0C:D5
X509v3 Authority Key Identifier:
keyid:86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:c8:a7:6a:67:d8:08:fb:b3:a5:58:ff:06:b5:8e:ec:01:70:
6e:d0:cc:6d:82:39:80:94:5b:0a:bd:6f:68:05:84:ca:50:51:
24:de:d6:da:bb:f5:c3:61:e6:6d:4a:1b:f9:65:50:d9:4f:64:
da:1c:75:b8:99:c6:03:ab:57:71:dc:d2:d7:ec:44:ef:0b:d3:
e1:e3:a2:a2:7c:c2:e5:1d:1a:56:ec:da:f6:33:91:46:3f:a2:
63:be:61:0d:c4:11:8e:b7:d2:e1:52:d9:70:df:bb:c5:39:7c:
a2:5e:19:76:22:0a:09:7e:0f:2f:88:32:e7:42:2a:c6:62:2b:
d9:ec:e4:0a:63:d3:ff:93:4a:5c:a0:93:fc:48:a1:4e:0d:79:
72:7b:38:3c:35:f4:41:e3:bb:01:09:6a:d3:fe:a5:0c:0f:d8:
69:a2:e1:74:a9:c5:8c:ef:54:b5:e8:2a:b0:7a:f0:79:56:97:
65:47:d2:78:9c:5e:61:af:d1:cf:11:d1:83:70:86:bf:6a:8f:
e3:dc:c9:d7:01:ed:d2:41:7d:cc:3f:db:3f:fd:3b:a5:76:74:
bc:4e:d3:55:80:2f:a3:27:86:ed:ea:99:06:fd:eb:c5:4d:fc:
3d:02:7d:27:6f:09:c5:a7:ea:e2:41:70:5a:bf:cc:cd:56:2b:
41:0e:51:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 06:46:48 2026 by rpki-client