Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
File: HdXNKgJh4eYGndd1iU2CbuiDbB4.mft (raw, json)
Hash identifier: QdzDckMfzHS1Uh91m+QOFY5WdaKV8RAXrElS5M9fvuc=
Subject key identifier: 88:CB:AE:E1:81:BF:DA:23:8F:27:D3:71:57:C7:D9:FC:80:AD:3E:73
Authority key identifier: 1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
Certificate issuer: /CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Certificate serial: 019EBFC8449370C034A2DA2E3F1395866538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 07:00:33 +0000
Manifest this update: Sat 13 Jun 2026 07:00:33 +0000
Manifest next update: Sun 14 Jun 2026 07:00:33 +0000
Files and hashes: 1: 53uXZdGunbCbkFbF5LCIWF6hUow.roa (hash: YdDbEGhWwhK//MEhtCOroEdkE5sIGg0zyX8WVqthVro=)
2: HdXNKgJh4eYGndd1iU2CbuiDbB4.crl (hash: CH2mC6tYlYphN8LFnb/qGb5jv3gY+XO+crLAPHlhe3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:44:93:70:c0:34:a2:da:2e:3f:13:95:86:65:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Validity
Not Before: Jun 13 07:00:33 2026 GMT
Not After : Jun 14 07:00:33 2026 GMT
Subject: CN=88cbaee181bfda238f27d37157c7d9fc80ad3e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ee:f6:e4:ce:99:f4:f6:24:32:a2:58:32:5c:
e0:e8:a9:5d:b4:b6:56:72:86:55:59:fc:18:57:77:
7e:ed:bb:78:3b:52:3a:49:90:69:d3:9e:40:62:4e:
8c:17:2b:28:39:2a:8e:b4:dc:2c:5a:05:aa:21:05:
4e:93:15:ab:0d:7b:df:b1:4d:62:35:e3:bb:62:46:
8f:c3:10:b4:36:04:32:21:85:b6:10:38:d5:91:c2:
7a:ff:93:51:7a:e7:55:83:cd:04:17:ad:f8:b4:2b:
e4:58:2d:44:d8:4f:ec:6b:a0:c4:75:97:c7:b4:af:
2c:05:ce:40:e1:60:46:f8:84:97:cb:3a:2f:d3:e0:
b3:0a:5f:5f:6a:db:08:be:bd:d7:31:0c:5a:2f:d2:
76:26:3d:e5:13:0b:e8:e0:a6:de:ed:ff:da:f9:6d:
ab:af:ad:cc:c0:e9:de:8b:f5:ed:16:7a:e5:23:25:
9a:e3:09:10:24:5e:22:c1:e9:95:f4:db:8d:51:a1:
a7:98:8c:cf:c5:b1:37:d5:69:ac:f2:42:af:40:8b:
cd:55:c0:50:c0:e7:d0:bb:28:f2:7b:2d:f5:8a:17:
56:17:42:26:a1:f2:57:73:c1:e6:cc:d6:e8:6e:c7:
1f:ad:24:e9:c1:55:7b:be:dd:d7:94:d8:1f:0a:0b:
9f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CB:AE:E1:81:BF:DA:23:8F:27:D3:71:57:C7:D9:FC:80:AD:3E:73
X509v3 Authority Key Identifier:
keyid:1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:bb:a0:f0:74:45:2d:01:9f:2f:8d:cf:51:0e:33:1f:6a:f8:
29:93:a2:69:d9:16:8a:e9:17:3e:18:44:a0:bb:34:f2:ea:29:
1f:20:94:85:0a:39:d0:8d:7f:30:e3:a9:2b:6d:2f:59:14:6a:
05:e8:c1:66:88:ed:44:9b:dc:7d:61:bc:0f:cd:2c:00:7c:87:
7a:ab:0e:02:ac:d4:08:55:11:2d:e5:82:2f:14:d2:8e:67:c5:
da:29:46:03:44:d5:c1:61:28:ee:6c:eb:3a:48:c2:25:18:70:
af:be:83:ea:30:bc:a9:8c:e0:1c:26:d5:af:7f:19:be:6f:07:
a6:4a:a4:e9:8a:bc:77:7b:98:ad:a3:81:3c:01:3c:0b:f3:85:
12:8b:32:b3:f0:0c:51:e4:d1:09:d5:1c:77:85:c0:43:76:60:
2b:dd:e0:4c:4b:17:0a:80:31:f7:1d:2c:23:73:6f:23:35:17:
53:f7:c4:91:55:9f:31:e2:45:32:3b:a6:db:85:de:bf:56:96:
46:ff:01:33:e2:0d:6c:46:c5:a1:28:96:a4:41:81:d5:d5:8f:
cb:10:4b:8e:94:cd:78:08:cf:81:d8:21:6b:58:7c:76:ee:15:
13:9f:a3:23:e9:0d:c7:4b:85:9e:d0:16:f5:b1:fb:c6:76:f0:
e2:ec:76:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:07:35 2026 by rpki-client