Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
File: Heds5TXPuOIW7A0k3rV50aTKDgY.mft (raw, json)
Hash identifier: hWCHMIen4OO96hycU8tyUduth6iTGQC692v08vfbrrw=
Subject key identifier: 7C:18:30:0D:9C:90:74:67:2A:35:65:71:AF:54:DC:A5:40:7B:1C:DF
Authority key identifier: 1D:E7:6C:E5:35:CF:B8:E2:16:EC:0D:24:DE:B5:79:D1:A4:CA:0E:06
Certificate issuer: /CN=1de76ce535cfb8e216ec0d24deb579d1a4ca0e06
Certificate serial: 019D9A3E65FD6B7811D822BBCBD23DFA2FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
Manifest number: 05F4
Signing time: Fri 17 Apr 2026 07:01:13 +0000
Manifest this update: Fri 17 Apr 2026 07:01:13 +0000
Manifest next update: Sat 18 Apr 2026 07:01:13 +0000
Files and hashes: 1: ASskbiBD-ObX8oC040-fCoWvcFA.roa (hash: Sm4y81MRyHGizqogZIaFxikCrX8RLabzmDJ+zETP3zo=)
2: Heds5TXPuOIW7A0k3rV50aTKDgY.crl (hash: 8uMXv2q1MjEqtc9pstf9Jn+eOTyJELqPdWfVO5hXtWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:65:fd:6b:78:11:d8:22:bb:cb:d2:3d:fa:2f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1de76ce535cfb8e216ec0d24deb579d1a4ca0e06
Validity
Not Before: Apr 17 07:01:13 2026 GMT
Not After : Apr 18 07:01:13 2026 GMT
Subject: CN=7c18300d9c9074672a356571af54dca5407b1cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a8:0a:56:53:ad:8e:c9:9e:ee:f1:d7:5a:c8:
b0:ef:91:80:d5:36:40:81:62:1e:46:ad:24:1c:f5:
1f:bb:00:60:3b:f3:36:aa:f4:5a:a9:96:4c:61:53:
c6:d6:e5:a6:99:f0:19:6e:a3:eb:89:d7:68:b0:3a:
54:90:db:b9:e8:15:e7:9c:1f:ef:6a:3c:1c:dd:db:
cc:e0:44:df:65:3a:92:a5:18:b0:03:8b:ae:89:6b:
56:90:31:30:78:b9:23:e6:e6:83:76:50:e8:68:f2:
f1:d0:87:ac:8e:56:bb:15:af:d3:bd:56:43:2a:d1:
a6:29:d7:85:b3:de:91:1f:09:3f:32:c1:1f:37:b6:
22:1e:ea:f6:14:2e:bd:5f:13:51:ff:fd:4f:5a:82:
41:d7:fd:8a:b3:14:59:13:86:bf:e2:c5:2d:f1:dc:
2a:2a:8e:01:4f:41:aa:a2:82:0e:f4:78:01:05:3e:
64:7d:5b:a5:88:10:16:bd:6e:28:f5:50:d8:5e:24:
47:a0:f7:e9:1b:38:12:7c:06:ac:71:2a:37:c2:af:
86:99:f1:49:51:08:e0:ba:fd:64:a8:63:33:94:50:
1b:1f:c4:c4:d6:83:d3:d4:48:ee:a0:d7:72:b8:96:
0b:c4:d8:1f:26:ac:fa:7d:53:ce:86:43:26:75:b2:
03:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:18:30:0D:9C:90:74:67:2A:35:65:71:AF:54:DC:A5:40:7B:1C:DF
X509v3 Authority Key Identifier:
keyid:1D:E7:6C:E5:35:CF:B8:E2:16:EC:0D:24:DE:B5:79:D1:A4:CA:0E:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:63:b3:fd:f8:d2:16:2e:f0:9f:61:4b:08:77:cf:f2:f4:16:
b0:90:c6:bb:56:f7:12:06:8b:6e:e3:9c:6a:e8:ea:35:bf:09:
3b:c4:55:32:11:ec:62:de:f7:45:67:8a:ea:54:ef:dd:cb:41:
9e:08:92:39:52:3a:1a:cc:36:87:f4:9d:a4:58:03:e1:bd:ec:
f9:af:4f:83:d9:e2:f0:6d:b0:89:66:89:d5:74:fd:76:46:47:
57:a1:f4:ea:88:5f:72:54:a7:30:ca:98:58:fd:66:5f:b7:c9:
61:32:4c:12:e9:0e:42:d1:39:fc:66:e7:1f:38:a5:68:de:74:
28:38:21:ac:ed:ee:45:bb:66:f4:a2:41:bd:0d:20:b7:31:72:
b6:ee:86:9b:a1:20:08:f9:6f:43:c4:d7:43:c8:d7:7c:28:c7:
d0:b0:ad:17:19:a3:5a:68:33:3a:12:1c:bc:a4:c6:59:33:44:
70:d9:bd:57:7a:19:96:af:42:24:3f:c2:d8:f3:91:af:86:9d:
2c:63:eb:a2:d3:44:50:3d:3c:2b:c7:66:7a:68:80:84:01:08:
f4:28:ae:f3:da:b0:39:2e:b7:11:fa:f8:5a:29:c4:93:95:98:
9d:1b:ee:b4:d4:3e:ac:65:39:72:8e:31:15:8f:5f:01:0f:d8:
6f:f3:a4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:57:37 2026 by rpki-client