Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
File: HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft (raw, json)
Hash identifier: mmlI4v2TwL1lYh991rTemuh/mSM9Rmbo8t1sYa3xjso=
Subject key identifier: F0:99:C8:5F:43:18:60:DE:60:CC:CC:09:BB:4E:E9:F9:72:52:36:72
Authority key identifier: 1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
Certificate issuer: /CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Certificate serial: 019FAD889104735B957437258F3C452FC379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
Manifest number: 1341
Signing time: Wed 29 Jul 2026 11:00:36 +0000
Manifest this update: Wed 29 Jul 2026 11:00:36 +0000
Manifest next update: Thu 30 Jul 2026 11:00:36 +0000
Files and hashes: 1: 2xP9m1PRgrEVDmtd4i2eqIDsm-A.roa (hash: YQaYHIwFaP+vp12w1AQ2mwIWx2mQt+KNJdo+tWceYBM=)
2: 5hq20ZEzfqPUd8jJerdhQ6lvpnQ.roa (hash: QttHQD+33asdEv7t7iqO8hCmG2Lg/3s4dda2hulSCvo=)
3: HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl (hash: tYM2XpKW7zU8dPbcfsdCEKmsgKeOnnQajIEkTQZpsKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:88:91:04:73:5b:95:74:37:25:8f:3c:45:2f:c3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Validity
Not Before: Jul 29 11:00:36 2026 GMT
Not After : Jul 30 11:00:36 2026 GMT
Subject: CN=f099c85f431860de60cccc09bb4ee9f972523672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3a:6f:ff:1a:bd:6e:cf:da:29:25:1f:f4:78:
0c:86:2c:3c:87:cb:85:bb:7b:d2:92:94:1d:97:5c:
c3:d9:ba:74:b6:17:ae:d0:b2:8f:65:41:c4:68:33:
98:d4:e6:30:92:9e:56:10:91:39:cc:e0:1f:67:ad:
9c:68:f1:47:9e:d3:bd:a4:02:d0:f7:9c:5f:51:15:
5a:af:47:2c:e9:d9:59:1b:1a:6b:fc:b8:c5:45:c9:
9e:ed:6f:34:bf:b3:47:c1:c7:09:3e:a1:80:99:2b:
97:a4:24:e5:32:09:9b:e2:3e:2b:84:c0:d6:af:e0:
b9:cc:1e:8e:1b:8e:bf:17:6a:9a:f7:30:f2:23:6f:
9a:f1:62:05:67:e7:91:f4:ed:85:42:02:f3:4e:71:
91:9f:a7:fa:fe:ce:fe:86:19:37:29:96:5c:d9:70:
e7:2d:84:9b:36:59:1e:b7:7a:26:72:6d:c5:0c:96:
27:1c:0e:b4:a4:78:ae:2d:b1:d3:95:32:a5:f8:d4:
d9:84:2e:d0:65:9d:36:41:88:85:7b:1b:16:2c:63:
2f:a0:90:ac:52:5c:e1:c4:d0:73:8b:c4:21:37:fd:
ca:e3:13:4f:38:e2:19:79:4c:d3:3c:e9:91:08:36:
91:f2:d8:c9:cb:d1:e6:f3:2d:b0:10:10:9a:df:c1:
a6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:99:C8:5F:43:18:60:DE:60:CC:CC:09:BB:4E:E9:F9:72:52:36:72
X509v3 Authority Key Identifier:
keyid:1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:10:f9:1c:8b:cb:d6:54:17:0d:bf:ca:8e:18:ea:d7:74:fd:
eb:e6:1f:f8:d4:21:59:06:16:27:84:d6:dc:f1:db:52:55:85:
11:f4:3d:5c:e0:62:12:85:8e:9d:73:c1:0e:58:4a:8a:8f:92:
37:6f:ca:25:09:fc:ab:2c:9b:d6:31:49:02:2a:79:fa:a6:98:
fb:f4:d7:0b:d2:16:c0:79:be:d9:d1:13:e8:bc:cc:0e:f6:2f:
68:13:bd:3a:57:78:89:ab:4e:a5:3e:a3:e4:b9:38:df:66:ed:
01:a4:56:78:2f:cf:16:be:ab:9d:a0:8f:10:fd:b9:07:40:97:
41:25:8f:3b:d2:f9:ba:35:6d:fa:7f:9e:5a:f2:99:11:35:c0:
08:82:81:93:d9:7f:56:2b:d9:f1:bd:a6:71:6e:b7:98:f8:f2:
9f:ad:d3:92:72:6b:2e:ac:0c:ff:16:43:b7:03:ed:e2:e6:d1:
4a:34:66:f0:9d:bb:ea:3c:df:71:ea:c2:7d:f5:c3:57:26:3d:
79:c2:c0:9f:5e:b5:02:de:1a:67:ae:c2:39:27:6e:b8:88:50:
54:56:1b:4c:76:e9:e4:13:4d:4c:0e:67:ec:c3:b4:c8:c0:5f:
b0:b2:00:2f:0d:cb:70:01:89:9b:51:72:94:ef:cc:00:11:97:
fb:e6:c7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:15 2026 by rpki-client