Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
File: hFPR6GGO-ProB13dWCcNCUAGvpk.mft (raw, json)
Hash identifier: K14ejk6nPOocJ1jXmpR1TcKSjFA8Z4jxHSwtW+S92Gw=
Subject key identifier: C1:CA:F3:99:A0:09:02:C9:F5:7A:67:96:30:3D:19:D2:CB:4F:CC:B5
Authority key identifier: 84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99
Certificate issuer: /CN=8453d1e8618ef8fae8075ddd58270d094006be99
Certificate serial: 019DCCE22544FFF5A00BD4E86391EF648EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
Manifest number: 0557
Signing time: Mon 27 Apr 2026 03:01:05 +0000
Manifest this update: Mon 27 Apr 2026 03:01:05 +0000
Manifest next update: Tue 28 Apr 2026 03:01:05 +0000
Files and hashes: 1: H6fEkqVKszpXDZG-GKB24yi6fGA.roa (hash: VZx0qzECb8pJ5sSNI4YrIdOddJh7Fq3Sv2eEUes2jOk=)
2: hFPR6GGO-ProB13dWCcNCUAGvpk.crl (hash: X5luKvyWQ0iVcS7o2gqi7XpzKnJ9fzEn0s2W3fm9zlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:e2:25:44:ff:f5:a0:0b:d4:e8:63:91:ef:64:8e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8453d1e8618ef8fae8075ddd58270d094006be99
Validity
Not Before: Apr 27 03:01:05 2026 GMT
Not After : Apr 28 03:01:05 2026 GMT
Subject: CN=c1caf399a00902c9f57a6796303d19d2cb4fccb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:82:ce:94:76:f9:92:31:7b:26:34:8f:01:43:
83:96:98:76:b9:61:66:85:3f:a7:e9:63:40:8d:cb:
bb:84:bc:ef:cf:e9:d2:55:42:db:12:53:80:b5:30:
ad:6d:84:d0:18:60:34:db:b4:17:68:3d:6e:25:51:
5d:bb:d9:af:62:74:ad:eb:02:94:f8:13:d8:d2:39:
d0:4a:b0:bd:04:e4:c4:21:fb:08:e6:64:32:ca:e3:
4c:b3:b5:4c:89:0d:ea:ef:13:a2:79:03:31:3a:19:
1c:fd:4a:f0:64:7f:07:ad:42:34:70:76:6a:ce:06:
96:26:1b:49:41:43:3c:45:c6:2e:f3:c0:f6:9f:2f:
09:94:47:86:31:b5:87:d6:24:64:c2:01:c0:65:9d:
f3:9c:d6:0d:2d:e0:07:ae:09:3e:e2:da:e3:2f:1d:
46:8c:1f:38:e2:a7:15:20:2d:0a:9b:01:00:f9:04:
e9:3d:12:31:77:72:d3:12:e2:f8:e8:88:fb:90:35:
18:8f:a4:6f:02:f5:5c:d0:cd:58:d3:b1:ef:87:37:
19:d1:95:55:1d:ef:ac:5f:6c:20:f0:a8:d0:5d:a6:
32:29:11:71:43:69:26:7f:67:68:61:f3:d4:3b:73:
a7:be:08:fb:ae:74:15:8b:94:be:f1:3b:b5:d1:ca:
dd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CA:F3:99:A0:09:02:C9:F5:7A:67:96:30:3D:19:D2:CB:4F:CC:B5
X509v3 Authority Key Identifier:
keyid:84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:32:c3:7e:5b:48:20:68:5d:3e:8e:1b:63:e3:58:15:8c:62:
d1:e7:70:f3:12:46:a3:bf:a7:f0:21:0a:33:cb:52:16:29:bd:
10:4a:a0:51:2a:24:63:06:c1:50:a5:03:26:18:29:3f:2e:fc:
bd:88:c4:be:4a:bf:f4:c2:8a:a0:34:65:05:b7:a8:d2:5c:b0:
10:dc:f4:71:04:51:1d:1b:f2:c1:96:ee:91:6c:fa:f7:b7:d2:
4a:ab:6c:d9:29:d7:6c:12:16:c1:ca:6b:22:7d:0d:7e:24:2d:
d6:51:90:3d:68:35:44:3e:ae:e0:00:3d:b5:b2:10:be:4c:59:
d9:ba:13:98:b3:bf:be:29:45:9a:d3:4b:9f:b4:9d:60:d5:de:
2b:58:29:4c:e1:81:0f:bb:bd:94:e2:e4:a2:8f:98:87:b4:d5:
53:b5:4d:70:7c:bd:62:e4:02:a3:44:99:b0:be:11:7d:17:47:
80:c0:a5:53:fa:bf:96:5b:83:7e:08:ab:38:66:f5:3f:ea:63:
71:6b:01:fd:50:3b:e9:43:e6:4a:de:9a:ae:5e:aa:b6:40:09:
4e:06:aa:76:cc:5e:6c:10:2b:ac:97:c6:c4:7b:92:a6:79:f9:
71:b2:c9:6a:1a:cd:e0:06:05:87:7c:49:bf:0a:80:59:49:2f:
8e:41:2e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:57:55 2026 by rpki-client