Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
File: hps2AP1zjmmNEv7yDhBuapTjtnQ.mft (raw, json)
Hash identifier: kulTIb70zjsvpIBQI5zE4Klg7wzylMNv88ZeHySLuMQ=
Subject key identifier: 8A:F9:F7:0E:EA:74:3C:99:98:20:47:AD:D2:86:E5:93:18:5F:0F:82
Authority key identifier: 86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74
Certificate issuer: /CN=869b3600fd738e698d12fef20e106e6a94e3b674
Certificate serial: 019D224BA189462F9E83C54BCB3ED0715FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
Manifest number: 0D75
Signing time: Wed 25 Mar 2026 00:01:14 +0000
Manifest this update: Wed 25 Mar 2026 00:01:14 +0000
Manifest next update: Thu 26 Mar 2026 00:01:14 +0000
Files and hashes: 1: D07dxDXxrFaWAK13Zm1gQWe6sqM.roa (hash: WEmuyO7ijZIUqK6Kdgpk4wxDQKr57OBRHR5wIMw0Uxo=)
2: hps2AP1zjmmNEv7yDhBuapTjtnQ.crl (hash: kat+qRtAHHf4r9GZYJVdm+C//2Pig4Zf1Q+cbcBoLb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:22:4b:a1:89:46:2f:9e:83:c5:4b:cb:3e:d0:71:5f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869b3600fd738e698d12fef20e106e6a94e3b674
Validity
Not Before: Mar 25 00:01:14 2026 GMT
Not After : Mar 26 00:01:14 2026 GMT
Subject: CN=8af9f70eea743c99982047add286e593185f0f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1a:34:9e:09:66:74:42:39:35:a7:c3:8f:7c:
12:f6:bb:7a:4a:4e:a3:21:b7:71:e4:a4:5a:63:76:
b1:22:fa:bb:a0:d8:a5:a8:27:dc:70:17:e6:62:40:
69:7d:4c:04:2d:fd:91:d7:8a:be:1a:ba:16:17:e3:
a6:77:18:0a:0b:2a:cf:56:41:ec:b7:7f:e3:45:0a:
33:a9:04:ba:5f:fa:65:7a:9f:a9:1c:df:46:9a:01:
51:98:8b:0f:4d:e5:54:f7:e9:bf:b3:fc:0d:78:5c:
a0:52:7c:ad:5f:72:00:25:3d:91:76:d9:11:de:b7:
93:fb:d9:8a:9a:a1:ef:5e:3d:0f:59:81:48:cf:5a:
c8:cc:25:03:9f:d7:dc:27:42:f7:3c:7b:36:37:b1:
ab:80:de:d4:d2:67:6e:f3:e5:72:18:5a:2a:68:d8:
ec:ef:7f:f4:37:5e:cd:92:f1:63:30:cb:2a:59:82:
23:1d:56:82:04:0a:10:ba:cb:9c:10:45:42:ac:c2:
a5:f6:2a:09:eb:95:36:d0:66:fa:5c:35:08:3e:0d:
15:a9:9e:2e:ee:a8:b0:57:38:b4:75:a3:2b:01:25:
51:32:5a:3c:d2:52:3f:18:09:58:d9:7b:9d:53:42:
de:0b:8f:d0:7d:72:e1:ad:ef:ca:bf:fe:f0:43:d8:
e7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F9:F7:0E:EA:74:3C:99:98:20:47:AD:D2:86:E5:93:18:5F:0F:82
X509v3 Authority Key Identifier:
keyid:86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e6:25:dc:52:68:a0:b9:06:e9:a5:d2:73:76:f4:27:9a:43:
dc:f2:85:0a:ad:2e:94:c5:3d:62:83:77:a4:d8:ad:fc:22:ba:
91:0b:b6:7e:46:22:29:0a:09:bb:45:58:c6:b2:11:5d:bc:a7:
68:53:80:a1:ab:fb:64:f4:f6:13:68:16:73:0f:30:33:80:b1:
58:1c:4b:d7:32:7a:d7:8b:f0:9d:5f:8b:50:da:7d:31:61:88:
9a:02:c8:63:d7:fe:f4:a8:6a:0b:9a:c3:20:5b:86:90:2e:1a:
5b:aa:e5:ed:4e:7f:8a:7d:d2:a8:63:8b:da:69:3d:b0:0f:f5:
0d:37:5a:71:89:ed:e6:de:01:50:52:57:3d:76:01:7e:7b:f7:
a0:c5:fc:c2:90:5a:f8:f7:67:3a:6c:9b:4c:a1:cc:12:0c:57:
76:98:4f:96:70:4f:84:de:c9:0f:46:33:5f:8f:d5:5a:fe:bb:
b3:77:a7:24:66:b0:10:4e:74:48:92:ed:b0:cb:cf:dd:9b:1d:
0d:27:ea:6f:84:8b:93:39:76:11:76:e3:6c:da:a5:5d:44:6e:
d6:d2:41:0f:1c:45:4a:22:22:58:bb:3e:5a:93:cb:ca:fc:76:
95:e8:13:64:0d:28:be:9c:ba:ad:4f:50:58:27:30:66:c4:7c:
0f:e6:31:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0iS6GJRi+eg8VLyz7QcV/uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OWIzNjAwZmQ3MzhlNjk4ZDEyZmVmMjBlMTA2ZTZhOTRl
M2I2NzQwHhcNMjYwMzI1MDAwMTE0WhcNMjYwMzI2MDAwMTE0WjAzMTEwLwYDVQQD
Eyg4YWY5ZjcwZWVhNzQzYzk5OTgyMDQ3YWRkMjg2ZTU5MzE4NWYwZjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBo0nglmdEI5NafDj3wS9rt6Sk6j
Ibdx5KRaY3axIvq7oNilqCfccBfmYkBpfUwELf2R14q+GroWF+OmdxgKCyrPVkHs
t3/jRQozqQS6X/plep+pHN9GmgFRmIsPTeVU9+m/s/wNeFygUnytX3IAJT2RdtkR
3reT+9mKmqHvXj0PWYFIz1rIzCUDn9fcJ0L3PHs2N7GrgN7U0mdu8+VyGFoqaNjs
73/0N17NkvFjMMsqWYIjHVaCBAoQusucEEVCrMKl9ioJ65U20Gb6XDUIPg0VqZ4u
7qiwVzi0daMrASVRMlo80lI/GAlY2XudU0LeC4/QfXLhre/Kv/7wQ9jn8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIr59w7qdDyZmCBHrdKG5ZMYXw+CMB8GA1UdIwQY
MBaAFIabNgD9c45pjRL+8g4QbmqU47Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHBzMkFQMXpqbW1ORXY3eURoQnVhcFRqdG5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82MDk5NzYtMWFjZS00NDRmLWJjYjUt
NDI0M2U4OGJkNzZjLzEvaHBzMkFQMXpqbW1ORXY3eURoQnVhcFRqdG5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy82MDk5NzYtMWFjZS00NDRmLWJjYjUtNDI0M2U4OGJkNzZj
LzEvaHBzMkFQMXpqbW1ORXY3eURoQnVhcFRqdG5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATuYl3FJo
oLkG6aXSc3b0J5pD3PKFCq0ulMU9YoN3pNit/CK6kQu2fkYiKQoJu0VYxrIRXbyn
aFOAoav7ZPT2E2gWcw8wM4CxWBxL1zJ614vwnV+LUNp9MWGImgLIY9f+9KhqC5rD
IFuGkC4aW6rl7U5/in3SqGOL2mk9sA/1DTdacYnt5t4BUFJXPXYBfnv3oMX8wpBa
+PdnOmybTKHMEgxXdphPlnBPhN7JD0YzX4/VWv67s3enJGawEE50SJLtsMvP3Zsd
DSfqb4SLkzl2EXbjbNqlXURu1tJBDxxFSiIiWLs+WpPLyvx2legTZA0ovpy6rU9Q
WCcwZsR8D+YxfQ==
-----END CERTIFICATE-----
Generated at Wed Mar 25 06:40:04 2026 by rpki-client