Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
File: Heds5TXPuOIW7A0k3rV50aTKDgY.mft (raw, json)
Hash identifier: WndUjWUcCYoAVkMWNlN005pgE87SwJB+Xyp8bOzvRKk=
Subject key identifier: 15:7D:60:3B:FB:E2:C7:D2:B3:34:EF:15:F4:25:0F:2A:1F:E0:91:E9
Authority key identifier: 1D:E7:6C:E5:35:CF:B8:E2:16:EC:0D:24:DE:B5:79:D1:A4:CA:0E:06
Certificate issuer: /CN=1de76ce535cfb8e216ec0d24deb579d1a4ca0e06
Certificate serial: 019CACB4D721088A645A551E4FCABD88CD47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
Manifest number: 0579
Signing time: Mon 02 Mar 2026 04:00:58 +0000
Manifest this update: Mon 02 Mar 2026 04:00:58 +0000
Manifest next update: Tue 03 Mar 2026 04:00:58 +0000
Files and hashes: 1: ASskbiBD-ObX8oC040-fCoWvcFA.roa (hash: Sm4y81MRyHGizqogZIaFxikCrX8RLabzmDJ+zETP3zo=)
2: Heds5TXPuOIW7A0k3rV50aTKDgY.crl (hash: 9YRpwIKiFx8oT11oNxCy7tevACQpcNppxhD6tsHLjaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:d7:21:08:8a:64:5a:55:1e:4f:ca:bd:88:cd:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1de76ce535cfb8e216ec0d24deb579d1a4ca0e06
Validity
Not Before: Mar 2 04:00:58 2026 GMT
Not After : Mar 3 04:00:58 2026 GMT
Subject: CN=157d603bfbe2c7d2b334ef15f4250f2a1fe091e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:10:74:75:cd:84:3f:f7:eb:9b:f4:9b:d3:1d:
2b:0d:22:bd:c9:94:3a:ea:ca:4d:37:43:8d:56:1e:
c4:73:08:2a:a1:42:7c:a7:8b:94:1c:e0:e0:88:62:
ce:14:6f:ba:e6:64:51:05:8b:ab:65:8f:11:93:f6:
b4:6a:b4:e3:b3:d5:f7:83:f1:ec:80:ed:8d:42:ef:
57:c5:09:19:8c:0b:7d:7e:0d:fb:76:d2:20:56:51:
5e:2d:b2:bd:51:3f:78:d9:53:31:45:86:97:63:5e:
00:fc:64:13:ae:10:c1:1e:9a:ca:00:04:ac:b5:53:
19:e9:cf:88:e4:6a:5a:3d:fb:7a:ee:57:5e:95:56:
99:33:4c:40:2c:dd:a6:a6:2d:86:f9:e9:56:f7:a6:
5e:a0:e0:b7:ec:76:fb:74:72:9f:5b:76:4e:99:14:
54:6b:68:06:4f:6d:b9:46:e0:f0:3b:da:d3:c8:47:
f8:f7:4b:37:47:fa:9c:53:0e:e3:4c:6f:3d:7b:31:
12:ce:57:7b:a1:4a:b7:fd:0e:0a:df:dc:af:99:8e:
c5:58:f5:57:85:5f:a0:ac:e4:0e:62:04:4c:aa:be:
90:3a:f5:bc:7d:9f:c0:f0:a6:5a:57:47:1f:bc:db:
d1:70:31:d7:ae:7c:e4:5d:15:91:6b:97:7b:c9:3a:
f2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7D:60:3B:FB:E2:C7:D2:B3:34:EF:15:F4:25:0F:2A:1F:E0:91:E9
X509v3 Authority Key Identifier:
keyid:1D:E7:6C:E5:35:CF:B8:E2:16:EC:0D:24:DE:B5:79:D1:A4:CA:0E:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4a:f4:93:49:3d:41:e4:42:77:8d:97:e9:f2:19:61:82:77:
08:58:a8:52:ee:51:4f:fc:1c:cc:75:3e:f6:6e:f1:14:b3:38:
ce:85:79:6d:c1:aa:92:ef:62:ff:d5:de:22:f2:81:c2:ce:c6:
34:c1:55:d9:dd:b2:28:81:82:3c:00:4a:a8:d5:8f:3f:af:0f:
5c:a3:30:b6:54:30:4c:87:a5:01:60:3e:e4:c9:93:da:6f:11:
db:eb:d7:fc:83:22:df:8f:f2:96:d5:d1:f6:55:f8:b6:43:7a:
a0:e9:d8:f6:8c:9f:69:b2:94:7a:27:f2:f4:e5:a2:59:0e:cb:
68:3e:88:12:93:ed:b9:9f:d9:47:cf:c5:a0:6c:6a:7d:ed:be:
37:47:ce:7b:95:ca:16:d7:5a:f7:30:d9:b2:87:50:d8:24:3c:
32:28:f6:8a:ee:99:f4:8b:7a:7d:72:5f:4e:d0:1f:fc:0c:36:
c1:57:70:06:ed:4b:d8:ce:d9:76:e4:f2:b9:8a:cc:b7:92:94:
ce:bb:5f:c5:51:0b:5a:c3:6d:98:3c:46:de:2e:dc:e4:80:4c:
90:fe:c8:fd:46:02:65:2c:9e:fd:b5:97:a3:bd:96:cf:52:8f:
54:e6:d5:21:c3:e3:3f:a2:a3:ac:4d:5c:25:4e:a3:38:90:2a:
a3:b5:66:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:18 2026 by rpki-client