Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
File: HDP7O3JSC4FpopKNU4LknWda0GA.mft (raw, json)
Hash identifier: FclVuBpkoTqt1gmpKs1O/+Qn/I7jlVJnoBAYCwuLs4c=
Subject key identifier: B7:AB:9B:6E:C9:D0:93:A0:72:18:E8:48:E8:6F:35:C8:FF:8E:5A:11
Authority key identifier: 1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60
Certificate issuer: /CN=1c33fb3b72520b8169a2928d5382e49d675ad060
Certificate serial: 01A198EAF85DB2A4D469433FD9C353D2C5C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
Manifest number: 1881
Signing time: Sun 01 Nov 2026 21:01:38 +0000
Manifest this update: Sun 01 Nov 2026 21:01:38 +0000
Manifest next update: Mon 02 Nov 2026 21:01:38 +0000
Files and hashes: 1: Gy7ZxbulJ_7Y0tx78zpcZAOHO2I.roa (hash: 8PQOWmSZ9/1/Et2ot0KAAdAS2aYMSpPnN0AQzm11bWE=)
2: HDP7O3JSC4FpopKNU4LknWda0GA.crl (hash: XG0deJzLo8Z6NDm1xe4m2LnI8W8FxcfhtIhK8rzaJ8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 21:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:98:ea:f8:5d:b2:a4:d4:69:43:3f:d9:c3:53:d2:c5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c33fb3b72520b8169a2928d5382e49d675ad060
Validity
Not Before: Nov 1 21:01:38 2026 GMT
Not After : Nov 2 21:01:38 2026 GMT
Subject: CN=b7ab9b6ec9d093a07218e848e86f35c8ff8e5a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:80:55:50:b8:ea:17:a3:33:b3:29:1a:c7:b3:
fc:06:96:44:ac:18:15:9e:43:61:86:22:e2:09:83:
bc:f3:eb:67:e9:61:27:d4:33:41:88:5d:8e:14:ae:
de:eb:8f:ee:bf:06:ee:f9:0c:61:18:30:7d:4d:bc:
83:86:f4:38:93:5b:2d:cc:41:c2:a0:7c:af:b3:96:
ec:c8:e7:9f:82:4e:6f:24:3f:49:60:d1:de:28:fe:
92:9f:4f:21:e9:71:09:a5:b6:ba:aa:4f:bc:ae:47:
6d:ac:c2:e7:c2:25:5a:9a:aa:73:10:1e:83:98:57:
64:a6:67:32:b6:11:ee:7a:15:f1:6b:d0:38:a3:5e:
f9:b1:84:80:5b:1f:cb:dd:a9:5b:63:b6:2f:ab:8a:
83:83:b1:5a:1f:9b:11:c7:0e:2d:fe:00:14:80:7c:
8d:ed:2b:ab:0d:ee:bd:c9:8d:76:82:8a:5a:25:ed:
fd:38:a7:2d:c0:72:75:8c:3f:b5:4a:4c:9b:b8:02:
ab:32:40:7a:ba:cd:3d:29:c5:27:f3:13:97:08:b2:
70:74:20:2b:55:d7:d5:93:ec:f7:95:60:29:93:e4:
12:ed:81:a8:d8:8d:94:7a:14:a6:3a:7b:43:16:f0:
d0:81:5c:ef:e1:3b:df:04:21:96:90:bb:b5:fa:9c:
27:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AB:9B:6E:C9:D0:93:A0:72:18:E8:48:E8:6F:35:C8:FF:8E:5A:11
X509v3 Authority Key Identifier:
keyid:1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:2c:82:ce:30:78:b9:c4:98:2f:55:f5:1f:5d:1b:19:56:e6:
0e:18:2c:6b:aa:6c:d8:32:97:d3:1a:10:c0:c9:ad:9b:f8:a6:
34:30:e3:20:20:09:53:9f:54:25:90:e8:62:03:62:0c:21:14:
ec:81:1a:f8:c3:07:f2:90:c5:fd:ea:fd:39:75:1a:e7:e5:6f:
6f:34:9f:59:58:40:93:70:1a:6c:d2:a1:dd:57:33:27:52:1e:
6e:87:c2:c8:d0:6b:b8:92:06:8c:cf:ce:5e:d5:28:c0:a6:9c:
7f:c9:3a:fd:9d:da:9b:7b:e7:0c:0b:92:5d:05:ff:8f:75:8c:
32:87:9e:eb:d6:4f:1a:eb:61:60:a1:97:e6:a5:63:14:4e:be:
da:e1:da:41:78:4e:3f:6c:16:27:b1:a2:2e:60:e1:9a:35:85:
dd:1f:90:06:6f:e7:62:30:e4:02:dd:47:00:35:b2:e5:67:f1:
a0:56:be:0e:00:18:c9:3f:9c:4a:d7:70:ff:af:83:93:75:55:
85:d9:07:00:e7:85:41:70:22:e9:1e:82:f0:ea:33:e1:0c:af:
9a:60:00:ec:31:1c:c9:ab:40:c4:60:04:c4:08:69:21:0a:d6:
ea:c6:91:e3:be:a4:f5:5f:fb:19:14:9c:04:70:db:d0:79:9c:
e2:ff:6e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 08:28:12 2026 by rpki-client