Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
File: HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft (raw, json)
Hash identifier: PI21k+rIDMcyrupDHOz4TUZIPppfqHKJAq+YQSq/mEs=
Subject key identifier: 94:83:17:3D:CB:18:E9:C6:33:E6:A0:54:A2:47:2F:D9:76:65:E4:42
Authority key identifier: 1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
Certificate issuer: /CN=1dd7088d9da221f0565eb178443600171e7977aa
Certificate serial: 019FAC08E8B0608104A61BC57C6348A90756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
Manifest number: 04DB
Signing time: Wed 29 Jul 2026 04:01:32 +0000
Manifest this update: Wed 29 Jul 2026 04:01:32 +0000
Manifest next update: Thu 30 Jul 2026 04:01:32 +0000
Files and hashes: 1: HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl (hash: E1ohc2PRjFjmg441OETIj/8MPDSutQ6pq+MawBlopvM=)
2: jj4p-t17R-_1G4MNsVWsKf7lxt8.roa (hash: gxtd056u5s+5E72I3IyM1AJXXx0KOPdQmubbLYFzxYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:e8:b0:60:81:04:a6:1b:c5:7c:63:48:a9:07:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd7088d9da221f0565eb178443600171e7977aa
Validity
Not Before: Jul 29 04:01:32 2026 GMT
Not After : Jul 30 04:01:32 2026 GMT
Subject: CN=9483173dcb18e9c633e6a054a2472fd97665e442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1c:8b:81:5d:a2:f6:82:26:28:cd:c3:41:e1:
a4:62:1f:18:f7:89:85:ff:03:f9:4f:54:50:ff:4d:
2f:81:04:ed:64:7f:7f:80:31:75:6c:30:73:4c:e4:
29:bc:cd:0b:44:fc:95:25:40:5e:e0:e7:44:19:d2:
3e:ce:c0:d7:25:4d:d3:1e:29:4b:de:93:18:89:a1:
96:20:ca:02:aa:ea:b2:07:9f:4e:16:2d:9a:64:ce:
61:8f:42:5c:82:4a:93:71:97:d3:b0:5a:6c:59:56:
39:47:0b:33:99:32:ae:2d:ba:0c:05:0f:d9:5e:a4:
43:d8:51:ae:0e:a1:11:c2:82:9f:34:1c:03:3e:2a:
ec:10:37:5f:6b:a4:a3:d5:c9:06:66:8c:20:58:32:
cc:6b:67:6d:2e:9d:0e:af:33:07:3b:8b:d7:35:a8:
ac:7b:bb:dd:5c:0e:07:b4:5a:f4:49:0d:8b:10:cf:
1f:a4:9d:b4:cd:8e:f9:90:38:df:fe:07:f4:84:a8:
2a:7f:6a:a3:a8:3b:fc:a3:72:9d:af:ff:6b:29:3e:
84:b8:21:98:c0:07:dc:1c:b9:cb:f4:7d:6d:0a:60:
ce:2d:f2:46:1a:68:0c:42:52:ab:4a:67:b1:a4:5f:
29:7c:1a:b5:ed:61:af:22:1a:0a:59:ce:e8:95:ab:
0b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:83:17:3D:CB:18:E9:C6:33:E6:A0:54:A2:47:2F:D9:76:65:E4:42
X509v3 Authority Key Identifier:
keyid:1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:10:06:5c:fe:f4:fa:ec:8a:2d:f1:4c:9f:1d:21:4c:11:d6:
01:0a:82:47:a2:2f:5f:ff:49:d3:a7:06:b3:64:3d:9b:2d:f6:
11:da:f8:c6:74:df:ee:ad:7e:9d:60:f8:8e:82:65:a3:f1:73:
1d:42:4c:a2:7a:a3:98:f0:86:04:86:7d:0f:9e:61:f3:1d:8e:
ef:bd:ec:ad:02:b2:52:ce:00:6e:0c:48:27:66:c2:ed:52:b1:
1a:7d:bf:fd:97:01:19:60:ce:21:0d:27:15:25:2d:48:9c:8d:
c1:06:69:08:aa:16:36:77:f8:27:04:03:c4:c6:02:ca:df:e1:
c9:00:b2:43:e6:49:79:ce:83:9a:bd:ee:35:7f:75:4c:b4:c2:
6e:22:5d:97:f6:df:03:af:f3:fb:52:02:62:5c:7b:31:12:72:
b5:e2:49:13:e3:78:c2:bc:0e:9d:56:4c:0d:e7:92:b5:c4:cf:
8e:8f:2b:13:ba:60:f3:0d:b8:68:62:67:63:8c:ec:2d:6b:a5:
1c:ca:0c:a9:d6:e9:79:79:a3:67:58:7d:f1:79:71:4c:4f:4f:
1b:ae:8e:d9:90:81:db:f4:8d:37:df:da:8a:b6:fc:ad:ef:58:
1b:f9:92:e5:2a:ca:7d:3c:c5:ec:40:6c:74:6a:d8:df:ce:78:
75:6e:eb:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sCOiwYIEEphvFfGNIqQdWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZDcwODhkOWRhMjIxZjA1NjVlYjE3ODQ0MzYwMDE3MWU3
OTc3YWEwHhcNMjYwNzI5MDQwMTMyWhcNMjYwNzMwMDQwMTMyWjAzMTEwLwYDVQQD
Eyg5NDgzMTczZGNiMThlOWM2MzNlNmEwNTRhMjQ3MmZkOTc2NjVlNDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hyLgV2i9oImKM3DQeGkYh8Y94mF
/wP5T1RQ/00vgQTtZH9/gDF1bDBzTOQpvM0LRPyVJUBe4OdEGdI+zsDXJU3THilL
3pMYiaGWIMoCquqyB59OFi2aZM5hj0JcgkqTcZfTsFpsWVY5RwszmTKuLboMBQ/Z
XqRD2FGuDqERwoKfNBwDPirsEDdfa6Sj1ckGZowgWDLMa2dtLp0OrzMHO4vXNais
e7vdXA4HtFr0SQ2LEM8fpJ20zY75kDjf/gf0hKgqf2qjqDv8o3Kdr/9rKT6EuCGY
wAfcHLnL9H1tCmDOLfJGGmgMQlKrSmexpF8pfBq17WGvIhoKWc7olasLawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSDFz3LGOnGM+agVKJHL9l2ZeRCMB8GA1UdIwQY
MBaAFB3XCI2doiHwVl6xeEQ2ABceeXeqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGRjSWpaMmlJZkJXWHJGNFJEWUFGeDU1ZDZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS82Nzk5NjgtMTFlOS00OWE1LWIxZDEt
ZTBiZTE0OGM0MDk3LzEvSGRjSWpaMmlJZkJXWHJGNFJEWUFGeDU1ZDZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS82Nzk5NjgtMTFlOS00OWE1LWIxZDEtZTBiZTE0OGM0MDk3
LzEvSGRjSWpaMmlJZkJXWHJGNFJEWUFGeDU1ZDZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUhAGXP70
+uyKLfFMnx0hTBHWAQqCR6IvX/9J06cGs2Q9my32Edr4xnTf7q1+nWD4joJlo/Fz
HUJMonqjmPCGBIZ9D55h8x2O773srQKyUs4AbgxIJ2bC7VKxGn2//ZcBGWDOIQ0n
FSUtSJyNwQZpCKoWNnf4JwQDxMYCyt/hyQCyQ+ZJec6Dmr3uNX91TLTCbiJdl/bf
A6/z+1ICYlx7MRJyteJJE+N4wrwOnVZMDeeStcTPjo8rE7pg8w24aGJnY4zsLWul
HMoMqdbpeXmjZ1h98XlxTE9PG66O2ZCB2/SNN9/airb8re9YG/mS5SrKfTzF7EBs
dGrY3854dW7r+w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:13:15 2026 by rpki-client