Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/HdlIU1Eogmp2v_cI3RcYh0ZPdh0.mft
File: HdlIU1Eogmp2v_cI3RcYh0ZPdh0.mft (raw, json)
Hash identifier: kFyzhWA+L4jOFvt/WLozlkh3lYN0vQSPs/u2Dk0gHfs=
Subject key identifier: 02:01:F9:4A:5B:7E:A2:26:EC:9E:26:8F:D4:D6:38:B6:9D:0C:78:C6
Authority key identifier: 1D:D9:48:53:51:28:82:6A:76:BF:F7:08:DD:17:18:87:46:4F:76:1D
Certificate issuer: /CN=1dd948535128826a76bff708dd171887464f761d
Certificate serial: 019FAC7656FA6A0BC66107316ED966AC5EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdlIU1Eogmp2v_cI3RcYh0ZPdh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/HdlIU1Eogmp2v_cI3RcYh0ZPdh0.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:04 +0000
Manifest this update: Wed 29 Jul 2026 06:01:04 +0000
Manifest next update: Thu 30 Jul 2026 06:01:04 +0000
Files and hashes: 1: 6zhOToGy-7eerSPcD6Zk88bSn-U.roa (hash: StF8qh8Q6ojdAyBVUyhMU+MCp+v6bVi68LDVyNV1XXw=)
2: HdlIU1Eogmp2v_cI3RcYh0ZPdh0.crl (hash: YX0RVHyLgEkfjmo8+fNMwYO6PzC3gEGrtaGOXEJsUc0=)
3: ljr5Ev8ltj-Q1WbkGDDvMVsOmYc.roa (hash: BKzDpz91rBGUfq74JahLX4rr+D8vrn+n570lJmbIsaI=)
4: v3tdUAJsUaJo7LGTVWw6rDruSvc.roa (hash: JkCFfO0fYGgVWbmwj7vVnIlee+Xmb7TFcFsfWBDN668=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/HdlIU1Eogmp2v_cI3RcYh0ZPdh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/HdlIU1Eogmp2v_cI3RcYh0ZPdh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdlIU1Eogmp2v_cI3RcYh0ZPdh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:56:fa:6a:0b:c6:61:07:31:6e:d9:66:ac:5e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd948535128826a76bff708dd171887464f761d
Validity
Not Before: Jul 29 06:01:04 2026 GMT
Not After : Jul 30 06:01:04 2026 GMT
Subject: CN=0201f94a5b7ea226ec9e268fd4d638b69d0c78c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4b:92:5e:33:bf:12:f5:7a:37:c8:00:9b:84:
fa:7c:1c:b5:57:ae:c7:6f:bd:2d:dc:f6:38:ef:e0:
c6:77:92:df:86:92:ec:fd:7c:1c:44:52:0c:47:79:
4e:ca:b8:63:7a:a0:2c:94:91:24:a7:06:b2:d4:c3:
ec:bb:5d:2e:a4:0c:0e:bc:5b:eb:d2:c2:3a:95:24:
d0:de:3b:2c:8d:5a:c0:d4:22:1c:7f:43:0d:30:30:
60:37:d6:6e:82:06:02:5c:9a:7b:39:76:67:fb:a9:
d9:93:6a:d5:e8:be:2c:7a:58:8a:89:6c:65:f8:23:
ce:28:e2:22:83:19:e6:71:af:2b:64:85:b2:91:c8:
53:42:22:b2:48:e2:5f:68:97:71:93:f7:13:7b:7b:
32:90:ac:30:15:a7:e5:59:bc:2d:77:fe:3b:15:af:
2e:3a:c7:b2:6b:6a:fe:91:30:98:e4:62:c4:f7:a0:
fb:28:f3:9d:a8:e6:fd:40:13:61:21:9f:12:3f:9b:
96:13:53:43:1a:29:e0:8d:a1:f3:12:96:37:97:55:
9a:61:d6:11:de:93:4f:d5:a8:4c:ff:34:23:52:f4:
36:29:76:44:6c:ae:02:28:24:06:73:ff:f3:ed:ab:
d6:0d:a7:97:d7:4a:d6:05:81:85:3c:fc:58:14:0c:
a5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:01:F9:4A:5B:7E:A2:26:EC:9E:26:8F:D4:D6:38:B6:9D:0C:78:C6
X509v3 Authority Key Identifier:
keyid:1D:D9:48:53:51:28:82:6A:76:BF:F7:08:DD:17:18:87:46:4F:76:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdlIU1Eogmp2v_cI3RcYh0ZPdh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/HdlIU1Eogmp2v_cI3RcYh0ZPdh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/HdlIU1Eogmp2v_cI3RcYh0ZPdh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1d:be:44:99:71:f6:25:e7:16:eb:4f:17:27:af:6b:81:28:
8e:3d:aa:e0:22:40:c5:ca:fe:74:67:49:a4:35:1f:26:99:d6:
6e:a3:9a:54:15:d6:e5:cf:9d:67:cb:fd:fa:99:2c:ee:f9:42:
c3:80:d1:67:4e:d0:bd:98:8f:2c:ae:f0:e0:12:b1:1a:7b:c1:
0e:66:0d:a3:cb:5e:fc:86:8e:7f:42:c1:3c:4b:2f:8d:28:29:
19:fa:17:2a:c4:79:66:2e:4c:52:d5:e1:ef:4c:9e:65:6e:9a:
08:86:8a:ca:8c:43:a4:b8:9d:29:68:54:bc:fa:fe:77:b7:ce:
11:a3:e9:42:78:35:c6:f0:9b:35:0a:3a:5c:08:21:c9:59:eb:
ba:c3:ef:0e:96:be:de:ee:e5:23:05:43:d8:1b:b9:3c:3f:8f:
63:84:dc:be:3c:81:77:ab:53:a2:af:2e:0d:8d:ee:14:81:52:
f5:fa:55:61:90:97:87:18:27:1c:e6:8f:e2:4c:a8:36:84:4b:
3b:ad:b0:f5:64:34:dd:d1:dc:a5:9b:5d:c5:f5:ca:d5:3d:ae:
b1:f3:2a:e6:1a:50:f7:84:94:3c:31:66:25:75:dc:12:5f:ac:
e4:36:72:9c:4d:40:17:4b:fb:a4:c8:e6:68:cf:ef:0e:fc:2b:
51:8f:6f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:07:19 2026 by rpki-client