Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
File: HDP7O3JSC4FpopKNU4LknWda0GA.mft (raw, json)
Hash identifier: GaJu+leokPSAvPbPer5d9+4Jzw+p7oKFdRS8mRPUCtU=
Subject key identifier: 9F:60:62:80:46:5E:C5:67:5C:B6:BE:87:F4:5D:EC:AF:0B:7C:23:CD
Authority key identifier: 1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60
Certificate issuer: /CN=1c33fb3b72520b8169a2928d5382e49d675ad060
Certificate serial: 019CE5C9205A6436CD0F6CB86DD1C88158F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
Manifest number: 1612
Signing time: Fri 13 Mar 2026 06:01:29 +0000
Manifest this update: Fri 13 Mar 2026 06:01:29 +0000
Manifest next update: Sat 14 Mar 2026 06:01:29 +0000
Files and hashes: 1: Gy7ZxbulJ_7Y0tx78zpcZAOHO2I.roa (hash: 8PQOWmSZ9/1/Et2ot0KAAdAS2aYMSpPnN0AQzm11bWE=)
2: HDP7O3JSC4FpopKNU4LknWda0GA.crl (hash: T3CpjALwijbHFy+p+lRM7vclnTa4wnf70as2SvWmMUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 06:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c9:20:5a:64:36:cd:0f:6c:b8:6d:d1:c8:81:58:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c33fb3b72520b8169a2928d5382e49d675ad060
Validity
Not Before: Mar 13 06:01:29 2026 GMT
Not After : Mar 14 06:01:29 2026 GMT
Subject: CN=9f606280465ec5675cb6be87f45decaf0b7c23cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0a:40:b2:a8:8f:85:86:70:5e:96:69:9b:7e:
b9:24:96:6e:a2:28:a3:c6:c3:8a:2d:fa:cd:58:2a:
4b:e9:3b:55:e5:72:ee:6a:97:de:18:0f:62:ea:65:
e5:d2:62:c8:53:bb:96:a2:b5:80:7e:33:83:cf:92:
e2:d8:fb:c7:d2:22:24:66:b4:99:7e:55:31:97:a4:
21:e4:4f:63:ee:78:7d:87:25:d1:44:3a:32:15:97:
79:bc:b9:22:f4:89:1a:e9:3b:ad:6a:63:ec:98:14:
67:5b:52:40:b4:c5:67:29:51:b1:78:c3:1e:a3:f7:
e1:97:97:c9:9c:61:08:59:3e:c8:89:b5:ed:79:d2:
00:d5:df:e4:53:6a:d4:6e:35:b2:45:55:6f:07:03:
ff:aa:2b:5f:9f:04:0c:ee:14:74:05:9a:95:a5:c0:
5e:b9:5e:ce:63:91:70:2b:2f:cf:e0:a9:74:b3:9b:
45:ad:b9:84:98:9e:ff:64:03:77:1b:aa:23:97:7e:
b7:37:ab:d9:a2:d1:d3:57:f5:03:f8:c6:d6:67:75:
bf:70:66:02:55:70:de:d7:a9:81:85:3d:69:20:7e:
a6:8b:da:53:f7:9c:b3:62:58:ff:18:98:ca:a8:37:
08:f9:90:33:19:37:4a:5f:8e:c6:9f:3f:a0:40:62:
08:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:60:62:80:46:5E:C5:67:5C:B6:BE:87:F4:5D:EC:AF:0B:7C:23:CD
X509v3 Authority Key Identifier:
keyid:1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b6:a1:cc:42:da:43:48:a1:a9:79:1f:af:2b:16:35:72:ae:
60:ea:0e:15:7f:d7:c8:12:50:a1:98:ad:48:8a:ed:cc:f5:64:
e1:d3:50:7b:93:d5:a6:1b:b2:fb:37:53:34:19:13:34:8f:e9:
35:3c:46:89:73:4a:8f:ed:aa:91:e4:dc:e1:d3:49:58:41:02:
aa:1f:92:7d:24:9b:db:37:23:8f:c0:19:89:59:6d:10:4a:3d:
68:fc:c8:1d:13:25:6d:f3:82:f5:41:c6:e0:25:6c:58:e9:0a:
73:b1:7a:65:11:95:3e:2f:82:9f:26:0f:1a:03:0a:49:95:9c:
a5:b5:75:57:8e:a3:d3:79:0d:00:0e:ee:fa:59:1b:50:17:e3:
13:71:b0:c3:fb:2f:d3:9e:61:60:12:d2:11:9d:cb:4a:8a:09:
d6:cd:8b:17:fe:1b:f6:a3:6c:19:da:48:fa:7a:0e:96:40:1a:
42:3b:9a:ed:c4:9c:3e:39:2e:50:3f:cb:ab:68:94:6c:d8:e2:
8d:fb:4f:ed:01:73:2b:89:ba:9a:49:71:73:60:06:47:54:04:
dd:9e:dd:21:b4:cc:47:7a:f1:67:13:c5:3f:65:89:ed:d1:11:
fa:be:e9:b6:0f:31:ca:65:5c:6d:88:ff:25:45:20:d8:f6:b1:
61:85:e1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:15:09 2026 by rpki-client