Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
File: HdXNKgJh4eYGndd1iU2CbuiDbB4.mft (raw, json)
Hash identifier: 5maFEFVjoxuhVCrKcvD7jINgzhIvGnhPmKnEsGmwflM=
Subject key identifier: 6C:1D:7A:02:98:9E:07:96:1C:62:73:4A:7B:86:E4:D8:2F:20:B8:3E
Authority key identifier: 1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
Certificate issuer: /CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Certificate serial: 019FAB640822A89AF814AAC2F025EB7B53BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 01:01:27 +0000
Manifest this update: Wed 29 Jul 2026 01:01:27 +0000
Manifest next update: Thu 30 Jul 2026 01:01:27 +0000
Files and hashes: 1: 53uXZdGunbCbkFbF5LCIWF6hUow.roa (hash: YdDbEGhWwhK//MEhtCOroEdkE5sIGg0zyX8WVqthVro=)
2: HdXNKgJh4eYGndd1iU2CbuiDbB4.crl (hash: Q8NSjAVH7/1R7uUsehl65kHq3AnvGbx8ADicKoEq954=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:64:08:22:a8:9a:f8:14:aa:c2:f0:25:eb:7b:53:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Validity
Not Before: Jul 29 01:01:27 2026 GMT
Not After : Jul 30 01:01:27 2026 GMT
Subject: CN=6c1d7a02989e07961c62734a7b86e4d82f20b83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c1:d8:bd:85:59:6e:bf:c2:c7:d9:fe:54:72:
15:74:61:7d:b7:37:b1:01:d8:62:7b:80:28:7f:97:
38:63:9a:84:7d:dc:cd:67:0e:c5:db:ef:07:6c:71:
f8:de:06:0c:30:a7:34:9d:d5:47:b6:29:d8:3b:37:
75:09:9d:96:a4:52:c9:51:8b:3a:66:d3:01:1b:65:
65:c0:da:1a:96:3b:09:25:fa:ed:93:68:2d:55:70:
ac:1a:21:5f:fe:2f:bb:55:9b:5d:5d:18:05:58:7c:
4f:e9:fb:3c:5c:4c:b6:f6:65:c1:40:83:0f:30:a1:
e8:e4:2b:ef:f0:e1:72:14:c6:c9:95:62:17:d5:87:
50:ba:d3:3d:08:1a:c5:24:0b:5c:2e:76:ef:54:ae:
5e:81:1d:2b:9e:c7:5f:a1:d4:2a:20:09:e9:b3:67:
5c:cf:f4:5f:74:01:fe:98:7d:90:e5:38:c2:2e:89:
15:a9:7c:fb:29:15:6d:04:1d:6f:33:a1:1e:9d:10:
3d:4f:b7:21:dd:07:53:36:63:22:eb:68:ba:6e:5f:
e1:21:26:18:60:a9:70:df:8b:ab:5c:e6:6d:10:8f:
87:41:d8:a3:85:cf:93:71:91:46:c3:94:57:a7:9a:
f9:4f:0a:6f:30:d7:21:95:b6:4c:33:ce:99:26:74:
ef:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:1D:7A:02:98:9E:07:96:1C:62:73:4A:7B:86:E4:D8:2F:20:B8:3E
X509v3 Authority Key Identifier:
keyid:1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ad:22:2b:f8:25:6c:7b:98:10:fd:72:5c:46:4c:2c:e2:ce:
96:62:c0:af:98:66:ac:f7:32:ca:5f:a9:40:4e:23:78:de:88:
48:e2:70:33:ea:f1:d3:61:c6:79:a8:79:56:2b:7a:33:05:12:
b5:2d:d8:84:96:9c:64:71:0b:1b:fc:d3:01:a1:50:43:17:a2:
d9:a8:fc:df:21:84:4e:35:63:07:01:e9:c4:6b:3f:42:72:6b:
e3:64:eb:74:f3:00:22:a0:ae:e6:e6:33:49:00:e1:b0:13:1e:
12:10:6f:5d:91:aa:5f:97:9b:75:c9:c7:2e:63:ba:d4:b2:b8:
4f:0c:ba:7a:28:3b:1c:bd:7e:bf:3c:33:23:08:88:33:e9:86:
25:75:ff:98:15:41:d7:fd:69:a2:92:5e:a7:5a:3d:e1:0d:3a:
fa:14:20:75:bc:16:84:b1:72:05:98:2b:7f:7b:02:c2:8f:bb:
f3:ea:f7:8c:04:e2:f9:15:f7:5a:fc:59:4c:38:92:76:86:89:
76:2a:a8:ae:7f:d0:ab:85:ff:e4:d0:91:cc:3d:b9:74:4a:da:
17:39:5b:9d:72:d1:5f:8b:d8:c5:43:53:ed:ca:09:67:8f:6d:
39:c8:b7:55:01:49:e6:36:94:83:13:ef:78:10:b0:a7:a3:27:
5a:35:34:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:49:41 2026 by rpki-client