Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/HDD3j2nE_tp1e89CVd8FsxWhcDQ.mft
File: HDD3j2nE_tp1e89CVd8FsxWhcDQ.mft (raw, json)
Hash identifier: 7fmQj+MfHKuepM/A+XzUWnCLNsNrb5vbePQ6cRCURc4=
Subject key identifier: F9:94:28:55:B2:EE:72:E3:06:EB:94:6D:37:D5:18:72:83:47:D3:D4
Authority key identifier: 1C:30:F7:8F:69:C4:FE:DA:75:7B:CF:42:55:DF:05:B3:15:A1:70:34
Certificate issuer: /CN=1c30f78f69c4feda757bcf4255df05b315a17034
Certificate serial: 019FA899D3A5C1747A2D7586C91B0B849CA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDD3j2nE_tp1e89CVd8FsxWhcDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/HDD3j2nE_tp1e89CVd8FsxWhcDQ.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:21 +0000
Manifest this update: Tue 28 Jul 2026 12:01:21 +0000
Manifest next update: Wed 29 Jul 2026 12:01:21 +0000
Files and hashes: 1: 5MYsrTrGt0DK3hhe_hTnJHjRUSk.roa (hash: d8Ob0+iWtRfV6Nx5Pu8v5JKQ/eOTHxz4fRHVoGisGcw=)
2: HDD3j2nE_tp1e89CVd8FsxWhcDQ.crl (hash: SNspW/sXovKfoU7sE88Rv9OaD7Q7oaiPryAw/+2e4Fg=)
3: aPB4pQ2ueKvr6zjzxsY5Ti2RN9U.roa (hash: 4zkK55G3V3JSOAT1yaA8XGwIhLW+eh3lT36QZKyNsiE=)
4: v5Gk-SvsMlwLeGXo-bf0g2JN8lw.roa (hash: ixTxIDHKTxoajzi+yXrvev4yk36gH7a2isl5U2DpEWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/HDD3j2nE_tp1e89CVd8FsxWhcDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/HDD3j2nE_tp1e89CVd8FsxWhcDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDD3j2nE_tp1e89CVd8FsxWhcDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:d3:a5:c1:74:7a:2d:75:86:c9:1b:0b:84:9c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c30f78f69c4feda757bcf4255df05b315a17034
Validity
Not Before: Jul 28 12:01:21 2026 GMT
Not After : Jul 29 12:01:21 2026 GMT
Subject: CN=f9942855b2ee72e306eb946d37d518728347d3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e7:6c:c8:1e:ea:81:36:9c:75:58:87:52:3c:
a4:d8:16:2d:12:ec:5e:2a:35:0f:85:34:04:df:f5:
1e:66:fe:21:66:08:7f:64:f7:4b:88:54:2e:a8:c5:
6b:c8:12:b6:33:51:11:58:11:ba:23:54:25:0e:db:
a8:e5:65:af:09:4b:7a:8b:5d:df:dc:08:7a:be:9d:
62:cc:76:d2:8e:f7:bd:95:b6:b1:dc:f9:2a:90:d4:
75:d1:43:17:8f:ec:f8:05:e9:b7:cb:1a:74:0c:54:
5e:22:48:25:d6:e8:a7:d1:34:d7:8b:42:24:dc:a8:
fd:6b:17:ae:88:3c:88:b0:65:f1:54:10:0b:d1:b6:
89:23:41:eb:3f:7d:87:45:f8:7d:4e:3a:d7:c3:d0:
ee:d2:e7:5c:1b:05:a1:4c:cf:b6:24:ab:4a:d9:f3:
12:7e:2c:0b:0e:e8:1a:97:80:4a:c5:23:58:d9:b3:
55:58:0e:35:d5:cf:e8:d2:cb:98:3b:dc:1b:3e:e0:
1b:ec:9d:3f:7c:e6:ed:f0:a5:6c:76:c7:96:ec:52:
bd:d2:8b:c7:ec:5e:39:7f:f1:e1:bc:6f:80:df:36:
df:de:72:ee:b0:74:5d:f5:74:25:73:26:75:c9:34:
8a:52:e1:57:93:c5:29:dc:bc:b9:65:f8:a9:fa:08:
ad:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:94:28:55:B2:EE:72:E3:06:EB:94:6D:37:D5:18:72:83:47:D3:D4
X509v3 Authority Key Identifier:
keyid:1C:30:F7:8F:69:C4:FE:DA:75:7B:CF:42:55:DF:05:B3:15:A1:70:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDD3j2nE_tp1e89CVd8FsxWhcDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/HDD3j2nE_tp1e89CVd8FsxWhcDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/HDD3j2nE_tp1e89CVd8FsxWhcDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:61:2e:34:6a:61:ae:f2:97:6e:b2:91:ae:c0:29:3b:18:c0:
94:ee:30:1a:3c:7c:45:9f:7f:34:70:35:eb:52:34:77:28:02:
7c:0e:c0:8d:07:3a:8f:a8:ac:bf:b8:3b:78:5c:cb:a7:d6:41:
36:02:f1:c3:b7:51:f2:16:75:6e:10:0b:89:3f:a7:3a:a0:f5:
b9:4b:0a:42:a9:67:e1:6f:c9:dc:13:79:c4:58:4a:ba:ea:83:
08:e6:24:1d:ad:4a:94:35:76:42:3e:38:45:91:c8:0a:49:75:
a2:e2:12:82:0a:4b:9c:00:46:d8:f7:05:00:49:78:91:88:91:
4d:b8:dd:b6:93:c4:02:03:15:84:45:42:ed:28:ae:5f:50:68:
22:f2:29:ad:16:41:90:48:33:69:b5:ca:f4:e8:b5:25:ef:c7:
86:de:95:a0:d6:6c:a3:ee:17:de:2c:a7:e8:8c:bd:44:16:21:
2d:d0:37:14:1c:e7:a4:4d:57:57:8f:94:7f:d2:2b:21:5e:67:
9c:4d:17:78:69:5d:78:02:e1:43:f5:a1:fa:34:2d:3e:57:e7:
98:de:c0:ba:33:0e:be:a2:84:12:b7:8a:09:3d:f4:c7:68:f7:
48:3f:be:e1:40:ad:ae:a8:fd:f2:61:d8:41:05:62:07:e5:75:
d9:03:89:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:27:06 2026 by rpki-client