Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
File: HdXNKgJh4eYGndd1iU2CbuiDbB4.mft (raw, json)
Hash identifier: z7ZXegGD2O/gtTwavtysURDCtg21GGaAAezNzc0mm5M=
Subject key identifier: C3:F9:50:09:73:A0:E0:A2:A2:8A:A7:41:1B:7C:E9:66:DA:DE:4C:FC
Authority key identifier: 1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
Certificate issuer: /CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Certificate serial: 019D98508E1D0585660CEA4CA280EA8ACFCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 22:01:49 +0000
Manifest this update: Thu 16 Apr 2026 22:01:49 +0000
Manifest next update: Fri 17 Apr 2026 22:01:49 +0000
Files and hashes: 1: 53uXZdGunbCbkFbF5LCIWF6hUow.roa (hash: YdDbEGhWwhK//MEhtCOroEdkE5sIGg0zyX8WVqthVro=)
2: HdXNKgJh4eYGndd1iU2CbuiDbB4.crl (hash: QqW9lnaEazME25BCtDH4I5A5Krwd8FNXF62Fvd/v9E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:8e:1d:05:85:66:0c:ea:4c:a2:80:ea:8a:cf:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Validity
Not Before: Apr 16 22:01:49 2026 GMT
Not After : Apr 17 22:01:49 2026 GMT
Subject: CN=c3f9500973a0e0a2a28aa7411b7ce966dade4cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3a:46:73:8d:15:14:0a:c0:70:15:09:51:e8:
97:30:cc:ac:37:5d:cb:96:41:b2:b8:f1:f4:1f:2a:
92:fa:98:97:af:32:97:09:96:12:56:a9:4a:bf:00:
0b:3f:a6:fb:7b:e4:0c:03:ff:af:58:12:92:db:9c:
46:91:38:97:9e:bf:82:b3:0b:65:4d:9f:bd:4e:1c:
b9:87:a0:35:31:c0:c2:53:5e:69:4b:75:3c:72:92:
c2:d2:fc:ea:b4:e4:4a:1a:0b:52:87:3f:00:86:ec:
a7:71:a3:1e:b5:ce:de:05:70:50:c8:15:21:aa:2f:
2f:a4:4b:5e:b3:f1:71:a2:81:55:02:b0:59:78:ea:
e3:1a:0f:f1:5f:60:e4:96:d4:3c:df:52:d8:6a:45:
f4:93:5a:7c:f2:e3:15:26:f1:03:04:3b:a7:17:97:
9e:92:b2:94:74:89:fb:da:49:af:33:b4:94:f4:97:
84:71:fa:af:db:97:88:ef:f9:08:c4:4f:46:39:53:
6a:0f:1f:ba:38:0b:c8:73:6c:82:2a:fc:ab:77:53:
85:97:cf:bf:29:f8:cc:7d:34:db:85:94:c7:c1:a4:
ed:5d:b1:ac:6c:61:ad:8c:5d:55:32:9a:9c:98:6d:
81:70:70:25:e8:6f:f2:88:08:54:13:f5:85:60:bc:
40:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F9:50:09:73:A0:E0:A2:A2:8A:A7:41:1B:7C:E9:66:DA:DE:4C:FC
X509v3 Authority Key Identifier:
keyid:1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:83:54:e4:d5:76:99:eb:53:c9:46:72:44:3c:54:70:87:41:
c8:94:b9:04:dc:7b:8f:08:c8:34:2a:61:78:23:f5:6f:90:1e:
f3:db:57:dc:90:c0:4e:48:2c:27:e0:f7:c2:51:cc:7f:da:69:
bb:90:ac:75:e1:33:00:f2:f5:17:d6:80:63:6f:a4:c9:d4:67:
94:e3:41:40:7e:6d:09:ee:40:97:5b:ae:bf:08:2b:bc:10:0c:
89:dc:3e:96:43:8f:ea:5c:ad:72:9f:51:29:ab:00:49:e4:3f:
2c:32:d1:f1:1b:bb:ab:bd:1a:34:6f:42:1c:2c:d0:82:51:32:
fc:3a:bd:3c:a4:9a:24:9d:09:cb:14:1a:dd:b2:59:2d:75:74:
29:07:c4:0a:e7:36:d9:44:60:6d:58:67:34:72:d1:3b:77:a4:
a7:08:0a:19:5b:f0:10:3f:4d:1d:fe:2a:d6:16:f7:af:1e:1d:
62:ef:c2:42:25:b9:61:1f:2e:3c:2a:5b:c4:e5:ed:25:b9:21:
34:42:65:23:c4:14:dc:30:7a:65:75:1b:1e:a2:a0:6f:29:e5:
21:8b:9c:bf:d5:f9:b8:06:b5:d5:4b:f6:58:bd:47:05:7b:92:
32:3f:08:28:f3:bd:c5:89:c2:54:db:ff:0e:5c:d0:e3:ea:94:
a7:27:66:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUI4dBYVmDOpMooDqis/NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZDVjZDJhMDI2MWUxZTYwNjlkZDc3NTg5NGQ4MjZlZTg4
MzZjMWUwHhcNMjYwNDE2MjIwMTQ5WhcNMjYwNDE3MjIwMTQ5WjAzMTEwLwYDVQQD
EyhjM2Y5NTAwOTczYTBlMGEyYTI4YWE3NDExYjdjZTk2NmRhZGU0Y2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzpGc40VFArAcBUJUeiXMMysN13L
lkGyuPH0HyqS+piXrzKXCZYSVqlKvwALP6b7e+QMA/+vWBKS25xGkTiXnr+Cswtl
TZ+9Thy5h6A1McDCU15pS3U8cpLC0vzqtORKGgtShz8AhuyncaMetc7eBXBQyBUh
qi8vpEtes/FxooFVArBZeOrjGg/xX2DkltQ831LYakX0k1p88uMVJvEDBDunF5ee
krKUdIn72kmvM7SU9JeEcfqv25eI7/kIxE9GOVNqDx+6OAvIc2yCKvyrd1OFl8+/
KfjMfTTbhZTHwaTtXbGsbGGtjF1VMpqcmG2BcHAl6G/yiAhUE/WFYLxAOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMP5UAlzoOCiooqnQRt86Wba3kz8MB8GA1UdIwQY
MBaAFB3VzSoCYeHmBp3XdYlNgm7og2weMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGRYTktnSmg0ZVlHbmRkMWlVMkNidWlEYkI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi80ZmU5ODMtNzE1Mi00OTMzLTlmMzYt
ZDg2Y2FkZDYxMGI4LzEvSGRYTktnSmg0ZVlHbmRkMWlVMkNidWlEYkI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi80ZmU5ODMtNzE1Mi00OTMzLTlmMzYtZDg2Y2FkZDYxMGI4
LzEvSGRYTktnSmg0ZVlHbmRkMWlVMkNidWlEYkI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiYNU5NV2
metTyUZyRDxUcIdByJS5BNx7jwjINCpheCP1b5Ae89tX3JDATkgsJ+D3wlHMf9pp
u5CsdeEzAPL1F9aAY2+kydRnlONBQH5tCe5Al1uuvwgrvBAMidw+lkOP6lytcp9R
KasASeQ/LDLR8Ru7q70aNG9CHCzQglEy/Dq9PKSaJJ0JyxQa3bJZLXV0KQfECuc2
2URgbVhnNHLRO3ekpwgKGVvwED9NHf4q1hb3rx4dYu/CQiW5YR8uPCpbxOXtJbkh
NEJlI8QU3DB6ZXUbHqKgbynlIYucv9X5uAa11Uv2WL1HBXuSMj8IKPO9xYnCVNv/
DlzQ4+qUpydmHg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:17:31 2026 by rpki-client