Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
File: HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft (raw, json)
Hash identifier: 1FMKTzyJRcqxJPP5DRxw7DKgVykxpPTTON5RIZnGtQo=
Subject key identifier: EF:7D:EC:D7:08:FD:BC:45:EF:DD:2F:6F:BD:C9:58:5F:27:B5:AA:F8
Authority key identifier: 1D:13:CD:3D:DE:78:9D:29:47:93:AF:CE:93:8A:53:3C:02:BB:84:D1
Certificate issuer: /CN=1d13cd3dde789d294793afce938a533c02bb84d1
Certificate serial: 019D3789B75669BD90108952D972D0200420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
Manifest number: 03E4
Signing time: Sun 29 Mar 2026 03:01:05 +0000
Manifest this update: Sun 29 Mar 2026 03:01:05 +0000
Manifest next update: Mon 30 Mar 2026 03:01:05 +0000
Files and hashes: 1: HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl (hash: txr5XeGsTQYfzEbRGREI5khGVfshHI0himykRRr9uJ8=)
2: S55S8Hzi5_Q3lDvpIg173TfOL20.roa (hash: nVY2KJyclpu9SOzeZLMYN+3Xs02J0rwhn0vdFsFFuVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:b7:56:69:bd:90:10:89:52:d9:72:d0:20:04:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d13cd3dde789d294793afce938a533c02bb84d1
Validity
Not Before: Mar 29 03:01:05 2026 GMT
Not After : Mar 30 03:01:05 2026 GMT
Subject: CN=ef7decd708fdbc45efdd2f6fbdc9585f27b5aaf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6c:85:95:27:ba:9a:50:db:1e:59:1f:1a:79:
00:50:70:fe:fe:f2:0e:5e:70:e8:fe:3c:6e:53:87:
ab:99:5e:f3:a2:a0:4e:ff:b0:15:ee:6c:3c:55:29:
f4:dc:25:2f:c1:dc:50:b5:80:5a:7b:36:5b:36:9f:
b0:4c:b9:1a:41:53:5c:52:46:7e:b6:37:c7:04:68:
e5:22:f6:75:fd:44:a2:bd:41:05:fc:b2:c9:52:46:
30:c8:bc:c5:56:7a:0c:65:2a:0b:79:e3:db:cc:29:
00:05:ec:92:57:ec:94:0e:a8:d6:5e:c6:4f:bc:d6:
64:f9:2b:f0:b0:e1:37:61:ca:42:a3:9e:c8:a4:e3:
79:ed:b3:eb:f4:49:c8:e9:d2:ce:68:7d:a9:c3:a4:
a5:17:01:57:50:66:52:5e:93:bd:a4:4d:cd:74:64:
56:c5:6e:61:63:09:d7:20:7b:2f:49:56:a3:1e:d9:
8d:92:86:7f:4e:ab:5d:9d:76:c1:c0:d3:a4:41:4d:
05:64:2c:f8:36:42:8e:41:4e:1b:5b:37:ab:6a:9a:
d8:49:fb:f4:20:2b:76:a8:a5:20:70:72:fb:98:f2:
56:83:80:21:f7:70:2e:44:3d:92:a4:ff:98:8e:c1:
68:37:19:af:c8:13:67:38:1a:04:a3:44:cd:00:77:
3e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7D:EC:D7:08:FD:BC:45:EF:DD:2F:6F:BD:C9:58:5F:27:B5:AA:F8
X509v3 Authority Key Identifier:
keyid:1D:13:CD:3D:DE:78:9D:29:47:93:AF:CE:93:8A:53:3C:02:BB:84:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:fe:01:61:b8:53:65:2d:49:85:ce:3d:85:25:2b:f2:f8:2f:
a3:c7:54:08:3f:97:62:8b:ad:82:76:3a:ba:04:25:ea:43:44:
e7:74:1b:ff:44:07:96:22:2a:2c:72:85:20:30:2d:ee:cf:c7:
01:3f:b9:78:4c:6c:9b:0f:14:5a:94:52:de:b4:1d:2e:e6:d9:
8a:af:23:df:5f:45:c1:3f:be:de:2a:35:9a:c4:80:e0:b4:3e:
04:2f:87:e9:a0:6f:c6:7e:1c:3e:db:d8:1e:b0:dd:e2:3c:18:
dd:8e:2e:98:be:d4:7d:f9:74:14:e1:b9:b2:95:f6:fb:36:3f:
b0:24:8d:01:6c:c5:a1:23:48:76:a0:cd:c9:3b:9a:46:9b:bb:
62:58:3d:28:eb:d6:c8:c3:cc:09:7b:67:18:bc:e8:f0:0e:1d:
f0:0f:26:3c:ad:bc:34:88:23:7f:3b:c7:86:47:2c:61:3f:83:
12:b7:dd:07:ab:bc:bc:7d:46:6a:30:8e:56:66:79:aa:f9:a1:
71:16:f9:9e:76:11:b5:02:cf:93:d7:08:cd:55:a7:5c:10:74:
0c:f0:a5:a7:8a:e2:61:1a:1c:f2:54:7d:c6:ed:f6:21:28:67:
55:c0:e8:6a:08:69:3f:8e:37:dc:75:8c:4a:2f:7a:72:c9:5a:
a6:0d:80:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:19:23 2026 by rpki-client