Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
File: HDP7O3JSC4FpopKNU4LknWda0GA.mft (raw, json)
Hash identifier: 1o9sz+hByBW4y10Z5Yjab2mghmYZPRVHQY/xujzi9B8=
Subject key identifier: 3B:8D:9D:03:59:8C:0D:B5:68:AF:18:2A:62:E7:20:F2:7F:E0:61:D7
Authority key identifier: 1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60
Certificate issuer: /CN=1c33fb3b72520b8169a2928d5382e49d675ad060
Certificate serial: 019EBEED3A6C14B0F4C514AE64433E5BA8D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
Manifest number: 1707
Signing time: Sat 13 Jun 2026 03:01:18 +0000
Manifest this update: Sat 13 Jun 2026 03:01:18 +0000
Manifest next update: Sun 14 Jun 2026 03:01:18 +0000
Files and hashes: 1: Gy7ZxbulJ_7Y0tx78zpcZAOHO2I.roa (hash: 8PQOWmSZ9/1/Et2ot0KAAdAS2aYMSpPnN0AQzm11bWE=)
2: HDP7O3JSC4FpopKNU4LknWda0GA.crl (hash: d04FTMZLmw7N5S1O+oBaLZRZx+aOE2fcuUn52H3toDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:3a:6c:14:b0:f4:c5:14:ae:64:43:3e:5b:a8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c33fb3b72520b8169a2928d5382e49d675ad060
Validity
Not Before: Jun 13 03:01:18 2026 GMT
Not After : Jun 14 03:01:18 2026 GMT
Subject: CN=3b8d9d03598c0db568af182a62e720f27fe061d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f1:17:6d:85:04:a3:63:5a:7f:f3:6a:1d:a1:
9d:86:ba:b8:b2:9c:5a:33:31:33:23:a6:65:fa:ee:
c4:d3:49:d7:57:9a:f2:33:89:fc:7f:78:2a:9d:f2:
cc:57:2a:dc:d6:e5:12:57:2b:c0:46:1a:b7:b0:3a:
28:3d:a2:30:56:d5:89:c1:71:2e:66:cd:27:b2:cc:
b4:3c:48:34:88:d3:52:f4:c5:a6:02:24:8f:ce:36:
a7:19:e7:9d:be:2a:a5:76:4b:3c:1a:2a:05:2c:50:
36:b9:3e:07:d0:42:5a:5c:68:76:e2:b7:e7:b3:90:
14:52:8d:d6:e6:82:f6:1d:17:50:ae:58:02:44:db:
d4:b4:c6:1b:9f:54:7c:3a:61:f7:71:9f:cd:ef:5e:
8d:21:5d:04:72:c2:fa:7f:05:a3:4c:10:69:5b:e9:
8b:6f:7e:41:11:29:55:80:1c:7f:af:94:97:d1:b1:
38:1a:a0:21:9b:f6:21:b0:7b:8a:5a:8f:dc:30:f9:
7c:5e:59:8e:75:96:82:ae:3d:ea:9e:ea:10:9f:87:
74:19:64:00:18:fd:30:67:d2:63:1e:0d:1a:a6:86:
84:8e:2c:18:08:ac:cc:53:9f:fa:01:3c:f0:6c:cd:
8d:2a:67:2c:cc:48:f1:ba:70:64:67:79:d7:e5:21:
ca:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8D:9D:03:59:8C:0D:B5:68:AF:18:2A:62:E7:20:F2:7F:E0:61:D7
X509v3 Authority Key Identifier:
keyid:1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ba:62:7c:06:b5:dd:a0:cf:d2:48:4d:d3:c0:d3:ba:b7:15:
c0:7c:86:f5:cd:76:fd:12:19:92:2c:73:fc:3f:c7:09:85:02:
67:6b:f2:99:20:9c:d3:a5:bb:d2:92:21:10:c0:a3:15:92:89:
31:77:e7:16:03:7a:7c:33:fb:23:66:d4:e1:c5:8d:47:18:46:
44:ab:d0:e2:74:09:fc:68:41:e8:fe:94:63:f4:7c:b0:38:b2:
18:aa:29:06:96:db:c9:05:1f:13:c9:99:9c:e3:43:c3:e1:4c:
d3:1f:b4:1d:d2:f3:70:2b:48:f1:64:70:45:74:51:0b:52:16:
db:0f:ac:cf:23:aa:ee:20:1c:99:73:9f:93:26:85:3f:39:4d:
e7:57:37:7d:b9:bd:d7:9b:74:be:ae:3f:8d:d3:1c:29:ec:05:
b0:5d:db:59:00:a9:9f:c0:f2:82:a6:5c:06:a8:d6:40:7c:95:
43:4f:23:41:b2:98:9a:8e:21:ed:4d:0b:b8:88:88:85:93:c5:
6f:f9:43:c6:0b:4f:85:12:dd:34:a8:a8:b0:9a:f9:89:30:76:
f6:7a:54:4a:02:c3:25:f9:3f:9b:7c:49:9d:eb:ad:7e:69:09:
19:22:fc:5c:85:6c:06:16:db:0d:50:1a:09:89:47:4b:15:91:
b9:8b:0d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:45:08 2026 by rpki-client