Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
File: Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft (raw, json)
Hash identifier: pzcoxbOu0IlT9DmCWHdCuihDQHZPCHJ7BI1TUoXFSno=
Subject key identifier: 3E:B5:C5:18:58:D5:D4:39:66:41:36:BF:06:F3:CA:76:33:44:4E:73
Authority key identifier: 1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2
Certificate issuer: /CN=1dde7463ed8498020dd392322459d2cf40f226b2
Certificate serial: 01A0D0803805FBF98FEDC577B40A69125297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
Manifest number: 0EA1
Signing time: Wed 23 Sep 2026 23:00:58 +0000
Manifest this update: Wed 23 Sep 2026 23:00:58 +0000
Manifest next update: Thu 24 Sep 2026 23:00:58 +0000
Files and hashes: 1: EPIHsxcfLuChPC0N3L4_ybUFOk0.roa (hash: 1xlVkrwEe8dHdyY6GUfJC8Bthh85BMj9UMn+rmdsApg=)
2: Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl (hash: IoPm1rau0O4zOx8Ipt9Wy3BndGrdQgG72yQ6g8RKcS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:80:38:05:fb:f9:8f:ed:c5:77:b4:0a:69:12:52:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dde7463ed8498020dd392322459d2cf40f226b2
Validity
Not Before: Sep 23 23:00:58 2026 GMT
Not After : Sep 24 23:00:58 2026 GMT
Subject: CN=3eb5c51858d5d439664136bf06f3ca7633444e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8f:96:be:c6:73:ab:e1:94:55:7a:b8:60:a9:
2b:d6:f9:44:b0:98:35:b9:3c:78:2c:74:6e:0b:7f:
84:b3:39:d6:07:02:a6:fc:4c:cd:b1:2e:b7:03:ee:
ea:a5:51:e1:b3:2d:9f:9e:cc:9d:f2:9c:d3:b4:5e:
07:bb:f8:e8:2d:4d:ab:42:42:8f:5e:bf:c7:90:d9:
2f:2d:3d:ab:6b:bc:0d:a5:56:a7:c9:f6:b9:e6:f2:
84:29:41:49:0d:c9:c0:ce:3a:8f:43:51:c0:4e:f4:
21:0b:14:96:45:37:0b:43:41:39:8d:78:32:ef:a5:
4a:a1:22:b8:a5:f1:e1:50:7f:8b:99:a9:98:ec:d7:
1a:22:ee:14:e2:94:f8:dc:5c:99:d0:26:57:44:12:
56:e8:c1:d2:7d:6e:b4:4d:cf:1e:c5:ba:55:5e:a3:
fd:75:6a:c9:0b:50:41:80:52:b7:e0:59:fc:5c:11:
7f:f9:05:11:56:69:ce:78:08:05:04:ce:4e:bc:7e:
d5:60:a0:98:a4:92:06:5f:c9:9a:92:e9:af:4e:14:
ad:c4:95:50:24:1b:be:42:36:47:8b:cb:22:8e:1a:
f2:66:b7:0c:6d:5d:34:d0:fd:56:43:24:c5:42:83:
d7:bb:e9:e6:dd:92:4d:a2:0d:e9:6f:0a:a4:59:fa:
bb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B5:C5:18:58:D5:D4:39:66:41:36:BF:06:F3:CA:76:33:44:4E:73
X509v3 Authority Key Identifier:
keyid:1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a5:f3:9f:a4:0e:52:6c:0c:19:31:41:b9:2e:0e:42:b6:8d:
16:e5:f3:42:d5:51:e6:c7:dc:ef:e9:fa:50:51:ab:9f:37:d8:
3c:ca:bb:0b:44:69:8b:04:d9:52:c4:c9:06:0f:74:cb:7f:32:
89:d4:12:3d:6e:80:13:d5:18:4a:ce:64:8d:b8:2d:7e:d5:15:
2e:f2:04:77:bb:f3:96:e3:7a:27:8e:94:d2:c5:3e:b5:5d:b2:
4b:58:89:d2:b4:cc:13:cc:c9:3c:fe:1b:75:cf:c9:0b:a1:d9:
50:5e:5a:27:e1:92:65:7e:56:fc:48:84:d9:ab:ad:66:77:f0:
3c:25:0b:03:6a:73:24:90:1e:fb:1a:a9:9b:4a:b0:39:5c:7b:
48:09:12:6e:d7:30:05:93:97:40:7f:36:80:db:ab:fb:7c:60:
e5:c0:52:b0:09:4d:9d:1f:60:fc:c0:ad:78:d9:a7:6b:8e:f6:
1e:49:dd:eb:cd:d8:6a:1b:1b:47:1f:2a:87:a0:9c:a7:e1:c2:
bf:f8:d5:89:54:96:f8:4f:97:2c:1a:bb:41:67:2e:1d:ce:1f:
e9:77:09:2c:9d:25:2a:9a:da:77:9e:0a:1d:ed:da:92:a7:2b:
f2:10:68:40:a7:ae:f0:9f:b5:8c:ca:bc:cb:fc:2d:f6:07:58:
71:fd:dd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:33:21 2026 by rpki-client