Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
File: HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft (raw, json)
Hash identifier: wMu2H/VpU0fC1YSwaOotHDoy85FOkMRQH8vzc+EL2iU=
Subject key identifier: 74:8B:4E:2C:DB:4A:E5:45:CF:B2:5B:0C:A2:C8:CF:37:D3:41:4E:33
Authority key identifier: 1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
Certificate issuer: /CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Certificate serial: 019D39777A4343A84ECDA148B96E2834CA73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 12:00:24 +0000
Manifest this update: Sun 29 Mar 2026 12:00:24 +0000
Manifest next update: Mon 30 Mar 2026 12:00:24 +0000
Files and hashes: 1: 0MNL0uKxne1mAOLvHp-kx9a8Fdo.roa (hash: pIY3J3TKdJieQx/4M129VemTVQ361aPzoM039AQ5uwg=)
2: HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl (hash: bedXL9HvJSg+SypnmuhTJC0zLBMuk8WdM0rMbO0fnfQ=)
3: kEw9rNT7b4WnmBTnJkhnSvQpmJU.roa (hash: 8ygbL45xfX44BSp7tVTrAniW2EqVVMi7g3VOHgdtiPg=)
4: p1SBAES1_gf6qDKrzWJOUPLiAnA.roa (hash: H/UDNhAVh0s/O2Wme8wDfM0n2+DjkR5j821NKKTliTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:7a:43:43:a8:4e:cd:a1:48:b9:6e:28:34:ca:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Validity
Not Before: Mar 29 12:00:24 2026 GMT
Not After : Mar 30 12:00:24 2026 GMT
Subject: CN=748b4e2cdb4ae545cfb25b0ca2c8cf37d3414e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:21:c3:a7:56:87:48:01:d8:d7:5a:e9:ac:f6:
15:b7:f2:21:7a:ca:0c:e5:87:24:4f:2e:d0:0a:be:
6b:fb:40:e0:fe:dd:80:0d:8b:4b:40:cf:b6:e2:66:
a2:77:fa:35:92:4e:02:79:66:b6:af:f6:bd:20:44:
de:dc:30:ae:c4:ea:7a:e0:76:a1:f5:15:40:99:af:
c3:22:af:aa:b3:15:e7:95:91:f3:c4:93:b7:ed:66:
ae:de:e3:08:b5:f4:e6:8f:49:d5:c1:17:b4:84:be:
81:48:6b:c6:d2:96:14:42:cb:bb:c3:d8:53:12:b2:
0a:7a:ba:35:a2:fc:7f:ee:87:0c:9e:3e:76:19:a7:
b1:13:0f:81:cf:65:29:10:0c:82:99:41:22:7f:d1:
c7:40:09:fa:4f:c6:b2:86:c9:6d:e8:39:38:88:45:
81:3c:2c:51:6f:4e:10:6f:a5:36:a0:b0:e7:80:6f:
58:91:68:6b:67:86:ff:a0:7c:3e:8b:ef:d1:32:d3:
81:62:c4:88:66:3c:41:b2:f0:e1:f4:cd:54:a0:a9:
cf:fe:4d:df:cc:22:40:ed:5b:0e:f1:b7:ac:54:b9:
50:98:6a:2c:6f:7a:26:9a:14:a9:e1:13:41:d0:ce:
49:d5:e7:cc:49:22:44:63:a9:1b:79:63:e5:d2:4e:
45:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8B:4E:2C:DB:4A:E5:45:CF:B2:5B:0C:A2:C8:CF:37:D3:41:4E:33
X509v3 Authority Key Identifier:
keyid:1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:cc:29:d9:f9:8f:31:56:f6:91:0b:3d:be:1a:ab:19:55:de:
af:fa:93:ef:4b:3e:13:b8:95:07:1d:34:32:4d:79:10:b1:78:
08:ad:46:06:dd:97:a5:fa:b2:31:cc:0f:92:20:0b:ce:f1:d1:
8f:5d:64:4c:c5:bc:27:48:b6:d4:02:f9:74:a0:47:4a:ab:f8:
75:98:7b:38:11:39:d0:9e:e0:dc:57:13:3e:6e:f5:10:3c:e3:
60:9f:45:60:6d:a6:6d:e3:d2:c9:32:99:d6:11:11:0e:f9:b5:
f3:9f:01:f1:de:c6:17:3f:ce:e5:c8:67:56:bb:1d:07:64:bd:
50:05:c2:2d:95:50:76:c9:67:a8:99:aa:0c:1a:c0:e1:3c:dd:
84:ea:3e:7c:53:a2:c9:b5:41:4f:fd:d6:77:3d:70:3f:92:d3:
67:30:bf:11:19:d7:e6:f2:82:5c:b6:b6:19:cb:73:26:0f:61:
92:61:15:55:c2:54:ee:bd:31:e3:49:92:35:03:4e:b6:30:57:
6b:a6:0c:55:47:4d:87:65:16:71:bf:32:8a:f7:2e:55:f5:c3:
8e:fd:00:8e:22:88:8d:35:f0:a5:e3:78:2f:dc:a0:54:a4:da:
fb:8d:d2:a4:c5:ce:70:73:9c:33:b6:15:1b:7c:04:e4:db:15:
f1:c6:b2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:25:19 2026 by rpki-client