Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft
File: HNPDCTm5BqRRWhxlwIg2gptqMok.mft (raw, json)
Hash identifier: x36pY99RrrdlFVI+XOBB+dR8+Z1LDPz77bog+Zgl2m0=
Subject key identifier: 3E:E6:6C:1C:9D:A1:4F:77:52:87:9B:C9:D8:BC:FB:2F:B4:E0:86:94
Authority key identifier: 1C:D3:C3:09:39:B9:06:A4:51:5A:1C:65:C0:88:36:82:9B:6A:32:89
Certificate issuer: /CN=1cd3c30939b906a4515a1c65c08836829b6a3289
Certificate serial: 019D3978274FCED737F7BD942AAAADDC969E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 12:01:08 +0000
Manifest this update: Sun 29 Mar 2026 12:01:08 +0000
Manifest next update: Mon 30 Mar 2026 12:01:08 +0000
Files and hashes: 1: HNPDCTm5BqRRWhxlwIg2gptqMok.crl (hash: 7MfDvvLM0yx6acmxW/Jj+b/ImgpNptfmFXI76/pOUCU=)
2: qBbPAft3FWUnWh4M6QbA4zR0xig.roa (hash: F60FmMouqBuHf/lcjKBMzLkzhlv6RxJ5MDnmKBuksKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:27:4f:ce:d7:37:f7:bd:94:2a:aa:ad:dc:96:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cd3c30939b906a4515a1c65c08836829b6a3289
Validity
Not Before: Mar 29 12:01:08 2026 GMT
Not After : Mar 30 12:01:08 2026 GMT
Subject: CN=3ee66c1c9da14f7752879bc9d8bcfb2fb4e08694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:b3:43:43:1f:97:f0:02:44:d9:7c:d6:3c:
c5:61:4a:68:58:65:01:67:7f:cf:9d:8d:d5:71:4f:
7e:3e:25:a7:4a:72:00:1a:f7:46:ca:46:63:2c:29:
f9:f0:4d:87:f7:b2:6f:7f:4e:06:69:98:73:80:d5:
42:dc:19:cb:9c:2a:e6:be:57:20:d5:b4:ee:cc:af:
a9:b6:01:58:d8:ce:78:b3:f2:8a:0c:7f:34:19:85:
bb:3b:2b:28:45:43:56:fd:8c:0a:40:c7:03:b4:93:
fd:9b:63:52:3f:b0:e9:7b:27:c6:b7:dd:de:9f:51:
50:3e:8e:e8:4b:d6:9b:9f:92:3f:7a:df:d5:bd:05:
93:84:1d:e8:c1:c6:a2:de:92:06:e0:2a:1c:d8:29:
ad:25:38:a4:54:b2:59:af:7c:73:51:8a:0f:d9:35:
51:06:da:a0:a7:4a:ea:73:82:33:8b:66:20:b7:b8:
d7:d1:72:a7:a2:97:0a:f8:54:2e:d0:29:e1:57:70:
68:7d:ab:16:2c:f0:6e:ca:7b:9c:ee:84:0d:79:0b:
9a:e5:f2:8d:6d:9a:83:8c:14:a0:81:35:dc:19:b2:
b5:a9:5b:ff:e5:88:fc:a4:bc:6c:50:21:8a:94:08:
08:1e:eb:c2:1b:d0:e8:91:85:cf:f2:b5:bf:10:07:
71:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E6:6C:1C:9D:A1:4F:77:52:87:9B:C9:D8:BC:FB:2F:B4:E0:86:94
X509v3 Authority Key Identifier:
keyid:1C:D3:C3:09:39:B9:06:A4:51:5A:1C:65:C0:88:36:82:9B:6A:32:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNPDCTm5BqRRWhxlwIg2gptqMok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c5768-e80a-4110-a46d-0ff86ef95e0f/1/HNPDCTm5BqRRWhxlwIg2gptqMok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:ad:e3:ec:9e:a1:34:c3:13:b8:c7:a9:87:65:e4:9b:37:a6:
7f:c4:13:2d:1b:83:f1:54:48:20:f0:56:b3:a9:75:ae:a0:bf:
57:1d:cd:b3:5f:93:39:da:4d:b9:ba:9e:7e:d5:c6:6c:1d:f4:
e5:a7:ea:1c:55:30:e1:7f:0f:0d:f3:5c:54:bf:e3:b9:8b:84:
52:3d:c4:37:51:b8:e9:ec:de:29:44:ae:72:66:44:08:af:ce:
35:dc:66:b5:da:bf:da:f2:62:85:23:8a:dc:11:f1:fb:86:27:
ee:69:c9:20:ed:04:17:c8:99:d7:7b:33:f3:d9:7f:cc:05:b8:
83:13:bf:f7:7d:64:20:3e:d3:84:86:e0:b7:d1:91:75:24:bb:
75:42:8a:c6:88:98:a8:d0:92:f3:84:48:cd:ff:90:b5:24:cd:
be:0a:1f:ce:7d:29:6b:c9:90:0a:26:6e:9f:c5:7f:e3:f7:0c:
ae:bf:c0:ea:4b:91:4f:d7:06:5c:2f:7e:95:53:52:3c:d4:e3:
ca:de:d8:74:fa:8d:a1:11:c7:8b:92:92:3c:28:77:90:b1:9f:
2b:e0:21:d8:a1:8a:ec:d4:3d:a8:f8:b0:e7:18:9d:02:e0:d1:
f2:84:8a:a3:30:e3:9c:f5:c8:55:5b:1e:84:b2:9e:1c:fb:c0:
31:81:eb:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05eCdPztc3972UKqqt3JaeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZDNjMzA5MzliOTA2YTQ1MTVhMWM2NWMwODgzNjgyOWI2
YTMyODkwHhcNMjYwMzI5MTIwMTA4WhcNMjYwMzMwMTIwMTA4WjAzMTEwLwYDVQQD
EygzZWU2NmMxYzlkYTE0Zjc3NTI4NzliYzlkOGJjZmIyZmI0ZTA4Njk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/uzQ0Mfl/ACRNl81jzFYUpoWGUB
Z3/PnY3VcU9+PiWnSnIAGvdGykZjLCn58E2H97Jvf04GaZhzgNVC3BnLnCrmvlcg
1bTuzK+ptgFY2M54s/KKDH80GYW7OysoRUNW/YwKQMcDtJP9m2NSP7DpeyfGt93e
n1FQPo7oS9abn5I/et/VvQWThB3owcai3pIG4Coc2CmtJTikVLJZr3xzUYoP2TVR
Btqgp0rqc4Izi2Ygt7jX0XKnopcK+FQu0CnhV3BofasWLPBuynuc7oQNeQua5fKN
bZqDjBSggTXcGbK1qVv/5Yj8pLxsUCGKlAgIHuvCG9DokYXP8rW/EAdx6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7mbBydoU93Uoebydi8+y+04IaUMB8GA1UdIwQY
MBaAFBzTwwk5uQakUVocZcCINoKbajKJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE5QRENUbTVCcVJSV2h4bHdJZzJncHRxTW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85YzU3NjgtZTgwYS00MTEwLWE0NmQt
MGZmODZlZjk1ZTBmLzEvSE5QRENUbTVCcVJSV2h4bHdJZzJncHRxTW9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi85YzU3NjgtZTgwYS00MTEwLWE0NmQtMGZmODZlZjk1ZTBm
LzEvSE5QRENUbTVCcVJSV2h4bHdJZzJncHRxTW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA563j7J6h
NMMTuMeph2Xkmzemf8QTLRuD8VRIIPBWs6l1rqC/Vx3Ns1+TOdpNubqeftXGbB30
5afqHFUw4X8PDfNcVL/juYuEUj3EN1G46ezeKUSucmZECK/ONdxmtdq/2vJihSOK
3BHx+4Yn7mnJIO0EF8iZ13sz89l/zAW4gxO/931kID7ThIbgt9GRdSS7dUKKxoiY
qNCS84RIzf+QtSTNvgofzn0pa8mQCiZun8V/4/cMrr/A6kuRT9cGXC9+lVNSPNTj
yt7YdPqNoRHHi5KSPCh3kLGfK+Ah2KGK7NQ9qPiw5xidAuDR8oSKozDjnPXIVVse
hLKeHPvAMYHrgA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:22 2026 by rpki-client