
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
File: hps2AP1zjmmNEv7yDhBuapTjtnQ.mft (raw, json)
Hash identifier: FbeyxXx3oDGeWk1Y2zM52Xq0ZMxZ1Zi7MUSFyccPIL0=
Subject key identifier: 3C:2B:57:47:C9:EB:26:36:5A:01:D5:CB:CD:4D:FE:AE:46:9C:68:64
Authority key identifier: 86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74
Certificate issuer: /CN=869b3600fd738e698d12fef20e106e6a94e3b674
Certificate serial: 01A13ECB918AADB154802293AD70C3A216B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
Manifest number: 0F96
Signing time: Thu 15 Oct 2026 09:01:30 +0000
Manifest this update: Thu 15 Oct 2026 09:01:30 +0000
Manifest next update: Fri 16 Oct 2026 09:01:30 +0000
Files and hashes: 1: D07dxDXxrFaWAK13Zm1gQWe6sqM.roa (hash: WEmuyO7ijZIUqK6Kdgpk4wxDQKr57OBRHR5wIMw0Uxo=)
2: hps2AP1zjmmNEv7yDhBuapTjtnQ.crl (hash: rOqpwUes9N6EGYIMc0OEscaJjGtvcT7Aj867WcoPqxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:91:8a:ad:b1:54:80:22:93:ad:70:c3:a2:16:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869b3600fd738e698d12fef20e106e6a94e3b674
Validity
Not Before: Oct 15 09:01:30 2026 GMT
Not After : Oct 16 09:01:30 2026 GMT
Subject: CN=3c2b5747c9eb26365a01d5cbcd4dfeae469c6864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6b:42:ef:81:f9:90:14:64:de:be:84:8f:84:
03:69:ec:af:36:e2:d5:5b:7e:1c:79:73:c4:27:de:
86:c7:10:3e:57:5e:c7:7a:fe:1b:cd:b2:f0:3d:5d:
3f:95:96:83:92:2b:b7:c8:d7:2e:80:5b:ce:db:47:
dd:ed:d3:58:ff:fc:54:b4:d8:c7:10:9c:5d:b9:5e:
ce:ea:58:4c:64:11:17:e6:0a:33:57:40:8c:10:d1:
81:7f:3c:b0:3a:72:e3:2f:7e:6b:8a:3f:a7:8e:32:
77:24:dd:27:27:c3:bf:26:32:64:66:57:91:b7:ae:
33:31:c0:d4:9c:b1:57:c9:02:11:e0:f9:59:45:92:
dc:7a:bf:b4:df:c5:c8:2d:ab:de:45:5c:20:a5:4a:
db:45:89:8d:2f:5d:fa:a0:a0:07:93:00:fa:29:7e:
ef:31:48:49:24:07:dc:2a:31:c5:a5:e8:cf:d0:9d:
cb:55:58:fb:f9:bc:04:e8:19:01:a3:a4:5a:53:1c:
ec:46:0f:d9:d4:6e:13:ec:16:c6:a3:3d:7b:6b:08:
50:fd:cb:f0:9f:aa:c1:6e:24:cd:fa:61:a4:9b:ae:
60:73:e8:23:58:8e:04:e4:3e:16:5e:b8:90:90:bb:
af:20:b4:2f:69:b7:aa:ee:94:4d:58:74:c9:68:da:
9c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2B:57:47:C9:EB:26:36:5A:01:D5:CB:CD:4D:FE:AE:46:9C:68:64
X509v3 Authority Key Identifier:
keyid:86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:c7:82:25:7f:9c:09:24:35:b6:75:a7:7f:b6:1a:ce:b5:00:
94:56:83:e0:48:05:52:28:e1:f2:63:fc:c8:46:e3:d9:e9:00:
ff:13:d5:0b:7a:63:86:2d:1a:7b:1e:6e:ad:ee:90:db:7d:3d:
ba:49:d5:ff:09:b0:09:56:05:4a:9a:44:b0:35:af:f9:98:c3:
a6:d4:6e:ca:ea:51:5b:fd:f3:a9:e2:38:19:4f:92:dd:57:ba:
c6:4f:df:8b:76:75:ad:ed:6a:30:01:cd:f7:e6:8e:f7:bd:f0:
ad:0b:b1:8c:2d:4f:b4:13:25:90:b6:70:9e:c3:0e:5c:59:d0:
0f:3b:eb:0e:3d:27:ec:08:0a:9f:7e:ae:df:da:ef:bb:e1:07:
3f:38:59:48:99:16:b1:e2:d1:12:44:f7:fd:54:cd:a2:f6:05:
0e:3d:b3:16:10:d5:5a:9a:27:c2:ba:b2:ec:16:b8:64:53:c4:
e2:ac:1c:69:04:b6:32:db:81:a1:dd:89:24:bb:81:15:11:ee:
10:7b:7b:2c:19:9a:6f:11:d3:a0:74:5c:e5:41:ac:62:17:6a:
cb:7e:76:e3:4a:62:e9:30:28:f2:fc:b3:67:82:34:ec:b0:7a:
4b:85:dd:2d:1c:5c:ad:63:fa:f1:a5:15:7d:8a:9d:84:9a:4c:
77:c6:bd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:36:08 2026 by rpki-client