Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
File: HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft (raw, json)
Hash identifier: DWk6WxGeTHKWBTFAokYX9xeykr3Wun/GFrHobST58GE=
Subject key identifier: E9:70:72:9E:2A:20:DA:D7:BD:7E:8F:7D:DA:11:34:1E:F6:A7:23:C9
Authority key identifier: 1C:39:D5:79:36:DD:2D:15:21:44:3E:68:DA:DD:9D:09:49:CD:E3:3F
Certificate issuer: /CN=1c39d57936dd2d1521443e68dadd9d0949cde33f
Certificate serial: 019D9A06F0B22740F668873C581AB4F8C58B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 06:00:39 +0000
Manifest this update: Fri 17 Apr 2026 06:00:39 +0000
Manifest next update: Sat 18 Apr 2026 06:00:39 +0000
Files and hashes: 1: 9rDYh6RoCnRP7wyIaMUt11JFs3w.roa (hash: ceIif/yZZ/uAesVBkNPfdSQjyTnuFeMLRlIbdZ852RQ=)
2: HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl (hash: zCeG36n07LPYqOohQKmtIL7oRhcHp5tR3DzGN8BXUMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:f0:b2:27:40:f6:68:87:3c:58:1a:b4:f8:c5:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c39d57936dd2d1521443e68dadd9d0949cde33f
Validity
Not Before: Apr 17 06:00:39 2026 GMT
Not After : Apr 18 06:00:39 2026 GMT
Subject: CN=e970729e2a20dad7bd7e8f7dda11341ef6a723c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:94:a7:62:7e:8d:18:a2:f4:57:d3:88:04:72:
9e:a0:97:7b:f2:7e:bd:62:be:b0:c7:e4:31:27:6e:
78:4a:7f:65:2b:b5:f6:d7:c6:a2:14:c8:5e:e5:b9:
3d:d1:3f:dc:58:86:27:ad:9e:2d:5d:c6:9e:82:2e:
f8:f0:08:f0:e6:5e:8a:df:e0:30:3b:e1:53:1d:a4:
56:05:e3:44:9d:bc:8c:54:6b:15:05:17:ff:72:e4:
90:3d:0b:43:52:a0:cd:12:5e:ae:a6:17:46:b2:a8:
05:7b:85:b0:06:2b:1b:4f:e4:a9:a5:01:37:2d:f2:
ab:39:49:ff:24:6b:65:cb:dd:a7:4e:98:5d:71:19:
a1:81:9e:cf:56:7f:58:28:ab:59:81:2f:b1:8e:a4:
3c:70:4e:3a:ee:82:eb:46:c5:13:61:36:46:c3:90:
c6:c4:a3:8d:70:38:06:e7:e2:6e:2f:47:fb:5c:c7:
74:3a:c2:59:49:59:80:0e:08:3f:3b:9d:e5:38:4f:
4d:fa:5a:a2:49:90:49:79:64:37:94:b8:5b:94:1d:
f1:f5:31:97:bb:87:d6:38:56:c2:b8:82:c6:84:1a:
b2:74:dc:98:2a:6e:16:39:d6:b0:b3:8c:0b:75:ba:
d7:a2:1d:ce:40:44:9c:37:d8:25:d9:93:6c:51:bc:
d9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:70:72:9E:2A:20:DA:D7:BD:7E:8F:7D:DA:11:34:1E:F6:A7:23:C9
X509v3 Authority Key Identifier:
keyid:1C:39:D5:79:36:DD:2D:15:21:44:3E:68:DA:DD:9D:09:49:CD:E3:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b4:a8:c2:cb:b8:8d:ea:bc:cf:0c:b1:8a:13:48:fb:60:02:
cb:a1:f5:87:a9:83:92:e1:b6:ca:92:74:4d:d9:80:19:59:8d:
ce:89:8a:9e:49:21:af:fb:ae:a7:99:85:be:21:f7:0e:f3:b7:
87:19:f3:cf:2b:6d:b2:41:20:f5:ca:af:03:3e:3f:7d:05:2d:
ee:76:3c:a9:81:48:6e:9e:07:5b:1c:42:f4:50:e8:73:0f:65:
a2:00:b0:74:73:21:f9:da:91:ca:d8:98:e3:0d:ac:f9:28:98:
6d:53:21:29:3b:e5:c6:61:d9:76:08:4d:2c:e6:94:ef:d7:6f:
f3:92:5b:e0:b7:78:0e:cd:48:c4:7b:f8:ce:a2:1e:bb:18:24:
4d:8d:53:20:b3:25:d3:6d:2c:67:6d:09:7e:71:55:26:20:b2:
b9:dd:87:d2:80:1f:8d:f7:52:b1:b2:53:72:07:bd:7f:00:c2:
2e:73:af:9a:47:7c:70:74:b1:18:ea:f5:e1:15:13:11:f1:86:
d7:b2:b2:21:6b:0e:2e:ff:cb:10:5a:e5:3e:02:98:b4:21:04:
be:7d:46:65:a7:09:9f:a4:0f:a0:2c:4b:4d:5c:84:c9:56:63:
92:f1:cf:82:c5:fb:77:c3:bf:fc:99:c4:3d:ee:53:d5:36:b9:
ef:25:a8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:22 2026 by rpki-client