Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
File: HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft (raw, json)
Hash identifier: N3UE4l9xH15pgtKgHL0y7JcPDnfqX45Sn0XCUBIM6hY=
Subject key identifier: 46:B8:DF:3C:C3:A7:8F:C4:EC:73:EE:33:44:20:3D:AC:E3:FF:71:34
Authority key identifier: 1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
Certificate issuer: /CN=1dd7088d9da221f0565eb178443600171e7977aa
Certificate serial: 019EBF2397CBFF6E8D36721D2AA7BB927CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
Manifest number: 045F
Signing time: Sat 13 Jun 2026 04:00:41 +0000
Manifest this update: Sat 13 Jun 2026 04:00:41 +0000
Manifest next update: Sun 14 Jun 2026 04:00:41 +0000
Files and hashes: 1: CjgS_b2r-3qplZ5KDVZa8VStIhQ.roa (hash: 243j3TvIuSB1M/hUhuu8ZLn+QAVeT40RY9rpOYK+p6Q=)
2: HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl (hash: xkmQMw6TwROrkMbX1G00vKBQF0LnXM7ZDncIUX7yCZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:97:cb:ff:6e:8d:36:72:1d:2a:a7:bb:92:7c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd7088d9da221f0565eb178443600171e7977aa
Validity
Not Before: Jun 13 04:00:41 2026 GMT
Not After : Jun 14 04:00:41 2026 GMT
Subject: CN=46b8df3cc3a78fc4ec73ee3344203dace3ff7134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:aa:f0:e4:ef:61:81:e8:8c:72:b2:c5:2e:c4:
ba:a6:06:26:c7:22:88:64:cc:51:58:90:8e:8e:87:
c9:0c:7a:a2:d9:67:5a:1a:76:19:18:9e:00:37:12:
e9:64:00:51:e3:67:32:f9:5a:6a:55:a2:0b:e5:1a:
26:47:6b:03:0a:a5:67:23:a7:8e:08:b8:5a:f6:15:
9c:f2:9f:d8:d9:52:39:28:9e:8b:d7:60:ff:15:87:
e8:45:1b:ee:82:78:06:7c:a4:bd:b2:9a:5c:2d:16:
b4:f0:af:0f:cf:d2:b9:91:c2:d1:d2:3a:ce:a8:53:
10:7c:ff:d0:a1:8c:98:19:52:b9:5d:b8:52:eb:8b:
b1:1b:c9:8b:52:24:11:6c:5d:47:be:86:ac:fd:e5:
a7:d4:53:30:88:09:40:d4:a6:87:0f:45:8a:f5:66:
35:8c:b8:3f:d5:c0:cd:69:9e:df:e1:0d:b6:00:18:
7a:ee:c4:31:28:9d:46:23:74:43:31:a9:8f:ba:f1:
88:7f:8d:38:99:5d:85:1b:b4:eb:28:cf:cb:a4:60:
fb:68:78:7d:91:8a:a0:93:c8:2d:87:09:6f:a1:49:
5e:60:72:ab:24:49:de:ba:f5:51:d1:db:d8:0f:a0:
3d:f3:f9:2e:96:24:94:ba:f4:d0:77:8c:3d:ab:bb:
e3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B8:DF:3C:C3:A7:8F:C4:EC:73:EE:33:44:20:3D:AC:E3:FF:71:34
X509v3 Authority Key Identifier:
keyid:1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:7e:2e:c9:02:34:40:4b:46:6f:cd:97:f4:76:3f:91:6c:8d:
00:38:35:f9:45:39:30:2d:89:7c:40:1f:ae:15:e3:2a:1f:19:
08:8d:7d:22:b2:a5:64:07:74:29:fd:6b:9c:46:5d:c8:60:0e:
58:76:dd:56:44:10:83:ad:c9:af:7b:66:4c:07:3d:57:da:9a:
2a:c8:17:e3:e6:e0:ab:d2:a5:ac:1d:8e:4b:0a:a8:5e:35:9b:
65:2c:bd:bf:91:f3:de:5a:fc:70:9f:74:be:7d:c6:95:8a:a5:
f9:1c:63:0f:b1:11:ad:94:a6:77:8d:59:9f:56:7c:c5:14:43:
1f:1c:e9:5a:fc:98:c2:31:62:a3:b6:e5:bf:c5:89:7a:3b:f5:
91:2b:b3:98:0a:0a:00:20:af:25:93:50:0d:a4:54:e7:e8:37:
a9:c6:8e:05:67:ac:97:2c:f1:67:a2:66:94:9d:01:0c:e5:a6:
a2:92:cb:2f:5d:0c:62:f6:f3:95:a4:fd:bc:4c:4a:a7:33:86:
a7:31:ff:3e:14:19:7f:10:e8:ad:24:e6:a5:d1:d4:34:f5:56:
b3:b0:82:de:9f:84:48:39:92:d5:67:d8:3a:b9:b4:f7:37:48:
21:f7:da:21:98:56:0c:62:e8:8e:c4:b0:a9:74:11:9e:44:2c:
4f:42:bc:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:49:07 2026 by rpki-client