Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
File: HpKJoBWvREH4-d9MjFXpiykogc8.mft (raw, json)
Hash identifier: eFd+Y+I1rg5BCobdXSAsxFYCjBmp9szv8SspwQDDgHE=
Subject key identifier: CC:BB:5C:9C:17:AF:99:B0:BA:E2:D2:3C:DA:18:96:85:A3:F0:B1:69
Authority key identifier: 1E:92:89:A0:15:AF:44:41:F8:F9:DF:4C:8C:55:E9:8B:29:28:81:CF
Certificate issuer: /CN=1e9289a015af4441f8f9df4c8c55e98b292881cf
Certificate serial: 019D3941981A243332D027F422C8B06AC99D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 11:01:33 +0000
Manifest this update: Sun 29 Mar 2026 11:01:33 +0000
Manifest next update: Mon 30 Mar 2026 11:01:33 +0000
Files and hashes: 1: HpKJoBWvREH4-d9MjFXpiykogc8.crl (hash: lo4km+o3Du5aJq1WKxAB/4P9PdoQpW4oumCpeePQJ4c=)
2: qXW1tFeOtiksAO4B-LToz6aX1z0.roa (hash: uLilZNr9B9MLP79uUoSooDJXZ1XBNKFz1okgC0rlTvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:98:1a:24:33:32:d0:27:f4:22:c8:b0:6a:c9:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9289a015af4441f8f9df4c8c55e98b292881cf
Validity
Not Before: Mar 29 11:01:33 2026 GMT
Not After : Mar 30 11:01:33 2026 GMT
Subject: CN=ccbb5c9c17af99b0bae2d23cda189685a3f0b169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:25:2a:3b:cb:a6:9f:22:b3:c4:84:3c:c4:4a:
3f:e2:b9:db:08:36:e0:9b:ee:a8:e6:b2:5a:60:2d:
e9:20:47:c9:8d:b4:23:6e:fc:f8:cb:ee:4a:42:2c:
7b:ff:3a:2a:dd:30:fb:f5:d9:18:36:90:1e:32:e2:
5c:99:28:a9:99:22:74:28:1e:cc:2c:ff:fe:f6:c7:
1c:85:62:d8:9a:90:db:f1:09:cb:ae:19:9c:c3:0f:
43:55:16:a1:ef:78:df:90:f8:25:3f:4f:38:ed:04:
aa:29:ea:ce:b5:17:8d:5b:0f:b8:72:e8:3b:4e:37:
55:0f:2e:c2:93:c9:76:58:4f:c8:5a:1e:ef:55:9c:
68:03:c1:34:42:73:fc:19:71:b8:ac:72:11:ef:69:
fa:96:03:0e:ca:e5:f0:4c:df:08:df:ce:13:b9:13:
f5:09:a8:35:eb:99:f1:0f:f1:e6:3d:46:ac:b4:6f:
52:12:f0:8c:cf:1f:b7:49:b1:26:59:f7:96:f4:5d:
c9:78:a2:b3:b4:30:2a:9b:5b:f1:ba:9a:53:92:d7:
19:e4:d3:c9:3b:ac:5b:38:9a:5f:a3:1a:11:79:fe:
3f:c3:e1:66:06:28:9c:96:b1:9c:75:5d:00:32:eb:
a7:dc:a5:8f:c9:83:a2:7e:3a:79:9d:99:fe:06:c8:
77:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BB:5C:9C:17:AF:99:B0:BA:E2:D2:3C:DA:18:96:85:A3:F0:B1:69
X509v3 Authority Key Identifier:
keyid:1E:92:89:A0:15:AF:44:41:F8:F9:DF:4C:8C:55:E9:8B:29:28:81:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:55:b2:17:5b:ed:26:40:48:bc:dc:b5:3c:df:ff:02:f9:d6:
35:ba:38:6c:15:f5:32:f1:bf:26:38:98:e6:03:16:cd:4c:b9:
4e:c6:dd:25:85:31:d0:c2:21:54:3b:cf:35:db:c1:4f:cb:68:
42:75:4d:d3:90:bd:43:21:12:cd:c9:98:53:f2:f1:99:a9:f1:
f4:5f:54:ad:12:f7:8d:93:56:6f:54:35:ed:e6:60:15:e1:52:
52:45:ef:09:5b:4d:84:c0:af:e5:37:20:05:5a:f9:0b:e2:a6:
4e:b0:b6:cd:cc:75:4e:31:eb:af:a4:74:f0:7b:2b:34:ca:b4:
f9:aa:11:46:53:58:78:df:e3:7d:44:56:6e:97:f1:bf:d2:f0:
10:f0:01:b3:bf:b1:fd:0d:f9:b9:28:00:aa:98:ee:31:dc:2b:
b1:80:97:1e:45:7e:5a:ab:b4:13:3c:a0:22:61:98:28:dd:67:
5c:62:04:c5:2f:8d:07:3d:63:56:66:62:4b:dc:a4:56:88:00:
a1:fc:4a:60:ea:a4:f4:b8:94:eb:b3:42:55:4c:8b:f4:ae:e8:
94:46:e4:7a:8d:ef:67:d8:18:09:64:91:6d:0e:7a:45:4a:3c:
e3:aa:42:c9:dc:db:5f:ee:c8:e9:71:9e:a2:b1:63:0e:f8:da:
56:e6:db:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:00 2026 by rpki-client