Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
File: hds5fcdkjw_TPGMfNcwgdOTuMy4.mft (raw, json)
Hash identifier: LyyXtNKgmK7ZgrhA1fVcuixbUGZueVZlD5uD57tsytY=
Subject key identifier: 8F:23:41:68:E5:9D:CC:F0:C5:AD:37:71:5D:B7:36:A4:9A:5C:0C:74
Authority key identifier: 85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
Certificate issuer: /CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Certificate serial: 019D9A3E190194BF688543EF30A3CCCDAC81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
Manifest number: 0BDA
Signing time: Fri 17 Apr 2026 07:00:54 +0000
Manifest this update: Fri 17 Apr 2026 07:00:54 +0000
Manifest next update: Sat 18 Apr 2026 07:00:54 +0000
Files and hashes: 1: VTGNe0wLMZV0ZCvK8WlwuJb3oIU.roa (hash: xQJpTfnGU7sVo8llzufhQdICBBAxKZdw2Wu7Ywev7hE=)
2: hds5fcdkjw_TPGMfNcwgdOTuMy4.crl (hash: rUY/fIMT6WV8C1mSVV2mus0ZdYPX4nqUUfKB0J14eAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:19:01:94:bf:68:85:43:ef:30:a3:cc:cd:ac:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Validity
Not Before: Apr 17 07:00:54 2026 GMT
Not After : Apr 18 07:00:54 2026 GMT
Subject: CN=8f234168e59dccf0c5ad37715db736a49a5c0c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a5:49:06:32:a7:b0:b2:aa:2b:e7:ad:9c:8a:
c0:17:1b:be:ea:32:de:7c:62:be:04:f3:c2:19:ce:
bc:f5:4d:ca:20:8b:a2:97:9b:ca:a9:c0:2a:41:36:
e9:2d:6a:26:29:a1:76:5b:a6:01:4a:eb:51:97:09:
33:b5:09:cb:d7:5c:cb:0c:20:87:61:cb:b0:e1:1a:
11:a1:ff:4b:f1:12:3a:43:8d:e7:c1:1c:5c:39:eb:
50:44:c2:a9:7f:39:8b:06:7e:0d:91:0e:38:fa:93:
e5:a6:9f:56:36:6e:cf:d5:a2:4b:c8:0e:66:eb:8e:
2f:47:b7:b7:fd:a7:ee:ff:b9:4a:3e:3b:06:a3:9d:
7c:71:d8:5e:fe:1d:f0:ed:b6:7f:58:60:c5:5a:f7:
34:cf:26:dc:5d:d7:23:98:fe:86:7f:fb:9b:16:c7:
cb:41:a6:1c:83:7a:58:71:77:c3:47:81:9a:ba:0d:
30:58:1e:62:31:d9:91:66:9b:df:f8:55:fa:1d:a4:
40:01:96:f5:50:ff:60:e9:a3:7b:a7:fa:52:72:7c:
af:ab:08:3b:52:1a:c0:47:da:97:c4:f4:fb:2c:1e:
8d:b8:ed:f6:ce:0d:65:93:79:b7:f6:83:ee:83:aa:
61:3b:06:3a:2d:bd:f6:a0:f9:90:7f:d1:ba:1f:95:
5a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:23:41:68:E5:9D:CC:F0:C5:AD:37:71:5D:B7:36:A4:9A:5C:0C:74
X509v3 Authority Key Identifier:
keyid:85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f3:b1:2a:fc:48:ac:4c:24:b8:dd:d8:3e:a9:a2:a6:9e:07:
55:fd:90:a1:80:a6:5a:cf:02:01:4a:61:e7:1b:d1:f2:c9:9e:
73:00:8e:88:49:65:89:a2:2d:8f:aa:7d:4d:90:38:1f:ee:32:
8c:79:56:27:0c:cc:dc:af:9b:73:15:1f:9a:df:db:3c:05:0e:
7c:00:d6:47:41:25:4b:b7:43:76:ab:a6:67:07:7d:25:34:3c:
79:9d:cc:cd:9e:55:f3:df:3a:51:8a:18:62:d5:26:de:c6:68:
bf:4f:b7:98:d8:a5:11:9c:05:ef:a5:ed:3d:80:13:ee:7b:52:
24:c9:c6:b3:24:3d:11:81:fe:cf:08:0c:f6:9f:99:0d:3f:9f:
f1:fe:17:b2:76:8d:2c:85:00:35:46:05:41:05:87:a9:ca:96:
6c:54:04:f1:be:c6:54:a1:dc:2a:e4:dc:b1:ae:c8:ac:7d:e7:
fa:da:a8:7f:db:aa:84:18:75:bf:79:a5:68:06:2d:91:b1:27:
12:c8:54:aa:61:f4:fd:fa:2a:5a:35:51:b2:01:f6:0b:0c:2e:
b5:be:e2:2d:21:8b:ea:db:92:02:3b:07:e6:c5:24:10:95:2a:
08:29:d1:cb:1f:1d:2f:3b:2a:8e:7a:eb:d1:6f:26:7e:6c:be:
cf:53:d8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:08:21 2026 by rpki-client