Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
File: HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft (raw, json)
Hash identifier: Xc6AshuAVelcvUNfDMDN/02m/MHzOmJAlJBereAlSts=
Subject key identifier: 4A:23:EB:7A:72:7E:1D:79:6F:E0:1B:E9:8C:CF:E8:0F:97:6B:1E:52
Authority key identifier: 1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
Certificate issuer: /CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Certificate serial: 019D9A74F309DC64606F13DE30F1FB963CAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
Manifest number: 122E
Signing time: Fri 17 Apr 2026 08:00:48 +0000
Manifest this update: Fri 17 Apr 2026 08:00:48 +0000
Manifest next update: Sat 18 Apr 2026 08:00:48 +0000
Files and hashes: 1: 2xP9m1PRgrEVDmtd4i2eqIDsm-A.roa (hash: YQaYHIwFaP+vp12w1AQ2mwIWx2mQt+KNJdo+tWceYBM=)
2: 5hq20ZEzfqPUd8jJerdhQ6lvpnQ.roa (hash: QttHQD+33asdEv7t7iqO8hCmG2Lg/3s4dda2hulSCvo=)
3: HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl (hash: pBQzSpl+0KkzADCBMAXJCOeBgxUB3tjH4/2c360X6/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:f3:09:dc:64:60:6f:13:de:30:f1:fb:96:3c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Validity
Not Before: Apr 17 08:00:48 2026 GMT
Not After : Apr 18 08:00:48 2026 GMT
Subject: CN=4a23eb7a727e1d796fe01be98ccfe80f976b1e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:60:a2:f1:fa:96:ca:1b:07:8d:39:ff:cb:33:
2e:b1:58:65:af:a1:15:e4:62:6c:c0:9b:16:b0:db:
b6:b3:1d:d1:05:c0:c0:15:df:06:b1:37:56:a6:d8:
0b:41:69:67:b2:e7:a9:bf:4c:cd:ce:55:34:fa:f9:
2e:c0:75:31:6f:47:ad:2a:5f:37:51:bc:9a:25:79:
9b:08:fa:64:3a:e5:3e:15:50:09:ff:bb:ae:48:62:
38:83:87:e9:36:8b:e8:90:eb:35:74:36:48:c4:ff:
89:87:6d:50:6f:20:ba:ad:79:52:34:f6:c7:ef:63:
a0:f4:33:96:65:0c:09:b5:04:d5:47:3f:f3:19:da:
9f:0b:43:cf:05:36:1b:60:3e:a5:17:31:21:15:2c:
1e:ab:7f:ae:c3:2c:66:d6:c9:89:97:ac:4c:9f:02:
3f:47:cc:a9:e0:07:b3:4a:8c:63:41:8b:00:8c:b8:
00:f6:16:22:96:b2:c0:8e:01:1f:78:e6:59:3d:30:
6d:66:c0:a4:92:32:af:11:c1:05:6d:1f:b8:bf:54:
da:5a:65:e2:c5:f3:5d:f5:cb:43:d7:8c:ce:15:61:
a7:cc:46:e2:d9:ba:d0:67:d6:44:0b:02:03:a6:12:
a3:26:dc:41:98:db:72:3d:82:6c:71:a3:98:04:f7:
47:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:23:EB:7A:72:7E:1D:79:6F:E0:1B:E9:8C:CF:E8:0F:97:6B:1E:52
X509v3 Authority Key Identifier:
keyid:1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4f:59:05:52:22:b7:19:03:b6:05:c1:b9:9a:d5:16:6d:6b:
ac:c3:c6:af:f1:8f:d8:d8:69:be:4c:fd:d3:bb:cf:c5:69:fc:
99:41:4c:dc:49:7e:a6:6f:06:d5:00:a3:a3:fc:e4:44:81:fc:
89:3d:c5:63:e0:60:50:83:1c:eb:e7:bb:40:c1:b7:f8:39:9d:
e8:50:e6:a1:1f:97:23:c4:7c:ef:70:b1:19:be:01:b9:94:54:
1b:b2:ce:b4:fb:d4:a0:06:12:a6:9c:66:7f:8d:5a:fb:b5:0f:
ed:45:ab:c0:ed:cb:48:9d:87:66:96:d3:1f:6b:3e:88:59:95:
a0:05:1e:11:35:81:d8:8b:cf:3a:36:6d:05:0c:54:22:91:df:
8d:ee:0e:8b:35:e6:34:c0:5b:8a:92:c9:fe:d2:fc:f6:51:6d:
7f:c5:ee:67:18:44:9b:3f:a1:4c:32:26:5a:c6:b5:34:17:66:
2c:04:c2:82:3f:7c:78:2b:19:a2:a0:5e:57:8f:59:dd:2e:e8:
0e:84:11:df:3a:a8:81:22:4b:d7:08:c1:af:2d:ee:04:96:68:
64:0a:29:e4:88:e7:73:0d:84:0e:0b:89:cd:48:35:ad:db:c8:
5b:bb:b0:f3:52:86:39:d9:2b:fa:4c:7c:ea:5a:44:cc:f7:73:
ae:5a:ef:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adPMJ3GRgbxPeMPH7ljyuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMTBlMzhlZDU1ZTMxODVhZWQ2ZjA3OWY4YmI5YmYxMmQ0
NDQ4ZGIwHhcNMjYwNDE3MDgwMDQ4WhcNMjYwNDE4MDgwMDQ4WjAzMTEwLwYDVQQD
Eyg0YTIzZWI3YTcyN2UxZDc5NmZlMDFiZTk4Y2NmZTgwZjk3NmIxZTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mCi8fqWyhsHjTn/yzMusVhlr6EV
5GJswJsWsNu2sx3RBcDAFd8GsTdWptgLQWlnsuepv0zNzlU0+vkuwHUxb0etKl83
UbyaJXmbCPpkOuU+FVAJ/7uuSGI4g4fpNovokOs1dDZIxP+Jh21QbyC6rXlSNPbH
72Og9DOWZQwJtQTVRz/zGdqfC0PPBTYbYD6lFzEhFSweq3+uwyxm1smJl6xMnwI/
R8yp4AezSoxjQYsAjLgA9hYilrLAjgEfeOZZPTBtZsCkkjKvEcEFbR+4v1TaWmXi
xfNd9ctD14zOFWGnzEbi2brQZ9ZECwIDphKjJtxBmNtyPYJscaOYBPdHYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoj63pyfh15b+Ab6YzP6A+Xax5SMB8GA1UdIwQY
MBaAFB0Q447VXjGFrtbwefi7m/EtREjbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFJEamp0VmVNWVd1MXZCNS1MdWI4UzFFU05zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lMjM5NjktZmZiMC00ZTU3LWEzNmEt
NzYwZjZiNmFhYmMxLzEvSFJEamp0VmVNWVd1MXZCNS1MdWI4UzFFU05zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9lMjM5NjktZmZiMC00ZTU3LWEzNmEtNzYwZjZiNmFhYmMx
LzEvSFJEamp0VmVNWVd1MXZCNS1MdWI4UzFFU05zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS09ZBVIi
txkDtgXBuZrVFm1rrMPGr/GP2Nhpvkz907vPxWn8mUFM3El+pm8G1QCjo/zkRIH8
iT3FY+BgUIMc6+e7QMG3+Dmd6FDmoR+XI8R873CxGb4BuZRUG7LOtPvUoAYSppxm
f41a+7UP7UWrwO3LSJ2HZpbTH2s+iFmVoAUeETWB2IvPOjZtBQxUIpHfje4OizXm
NMBbipLJ/tL89lFtf8XuZxhEmz+hTDImWsa1NBdmLATCgj98eCsZoqBeV49Z3S7o
DoQR3zqogSJL1wjBry3uBJZoZAop5Ijncw2EDguJzUg1rdvIW7uw81KGOdkr+kx8
6lpEzPdzrlrvfw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:16 2026 by rpki-client