Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
File: HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft (raw, json)
Hash identifier: l5Dt86/gh2ink47OBdd06Lg6vFYm0tf/mF6VJw2Bdgg=
Subject key identifier: 9E:CF:D5:B5:86:BE:FA:16:74:D1:93:20:EE:C6:5D:D3:40:9E:FB:0B
Authority key identifier: 1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
Certificate issuer: /CN=1dd7088d9da221f0565eb178443600171e7977aa
Certificate serial: 019CADFE322433762E522BA22E06D83700EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
Manifest number: 034D
Signing time: Mon 02 Mar 2026 10:00:43 +0000
Manifest this update: Mon 02 Mar 2026 10:00:43 +0000
Manifest next update: Tue 03 Mar 2026 10:00:43 +0000
Files and hashes: 1: CjgS_b2r-3qplZ5KDVZa8VStIhQ.roa (hash: 243j3TvIuSB1M/hUhuu8ZLn+QAVeT40RY9rpOYK+p6Q=)
2: HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl (hash: 1LBgfH7JFTKEWk6L436ygyACtEYnHaRZPw9P5WqyJ1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:32:24:33:76:2e:52:2b:a2:2e:06:d8:37:00:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd7088d9da221f0565eb178443600171e7977aa
Validity
Not Before: Mar 2 10:00:43 2026 GMT
Not After : Mar 3 10:00:43 2026 GMT
Subject: CN=9ecfd5b586befa1674d19320eec65dd3409efb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7b:80:91:54:bf:d5:19:63:1d:8f:73:fa:58:
4c:ea:d4:83:b3:de:15:7d:ee:bd:21:5a:f5:bc:5e:
7a:f9:3f:62:da:6a:fe:8e:df:b3:49:17:75:31:ab:
d9:80:e3:b8:ce:9e:52:68:9a:3c:0a:45:8c:bd:a7:
40:6b:16:17:6e:7a:4f:fd:09:99:29:4b:e5:ab:0e:
50:bd:46:47:1b:0d:e0:e7:eb:b4:9b:ee:13:e7:2e:
92:8d:5a:3d:89:04:1c:58:8f:a6:57:6b:bb:9b:9f:
c2:ef:f6:2f:f4:60:cc:c2:95:9e:9a:a8:04:3e:2b:
cd:41:81:28:48:a2:fc:7a:b3:7a:be:c2:99:ec:da:
a9:f6:dc:f9:2d:40:b7:28:61:41:2d:82:41:c0:c3:
1f:57:9f:b1:7a:54:9d:44:45:4c:6b:20:77:fb:5d:
10:e5:72:84:07:41:85:4b:b5:9b:fc:4e:3e:a9:8e:
95:37:85:84:3e:e4:5c:43:65:95:71:96:96:01:9f:
29:ac:cc:20:50:4a:27:78:ae:3b:d5:a0:8b:09:e7:
11:17:96:26:eb:ef:3a:7a:e5:b7:bb:b4:19:fd:79:
44:9d:45:93:79:c4:1b:7c:cc:40:d0:1a:ef:b6:d3:
ea:0d:b3:a4:b4:f3:34:5c:f4:77:73:d0:2e:96:2e:
1f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CF:D5:B5:86:BE:FA:16:74:D1:93:20:EE:C6:5D:D3:40:9E:FB:0B
X509v3 Authority Key Identifier:
keyid:1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:64:a4:0b:5e:fc:16:7d:34:45:7f:f5:9a:a1:02:d6:bf:75:
50:de:4e:0a:59:c8:88:6d:99:fb:03:80:6d:ec:25:11:4b:37:
28:07:19:38:a1:4a:f6:92:16:46:62:82:1e:48:94:bd:94:14:
9f:02:a2:fd:90:79:e3:3f:e7:62:d3:d2:11:ee:ff:0f:cb:c3:
cb:b6:69:4e:93:a9:9c:e1:ec:55:d8:d4:cd:1c:2a:2e:84:91:
4b:93:dc:d3:b9:b2:87:00:63:a9:3f:f5:1e:e3:32:76:9a:be:
cb:07:49:83:30:47:ad:c3:e5:b8:16:de:79:59:9d:df:43:f9:
bc:7a:d4:80:5f:26:fa:e6:11:26:34:40:4e:95:c0:b9:a4:1d:
b3:45:86:5c:cc:6b:04:83:9c:57:cb:b2:71:1d:4d:7f:bf:a1:
ec:44:5d:b5:81:f6:5a:2f:b4:00:62:85:aa:00:c8:3c:66:5f:
5c:13:04:21:0d:3d:ae:fa:fa:dd:10:b3:19:f7:c1:1f:36:26:
86:69:a7:39:42:e9:2b:d0:e0:58:13:4b:83:63:b4:5d:72:20:
20:a3:cc:b6:a9:0f:22:a0:ff:79:7f:0e:e9:c4:9f:4e:f0:d3:
71:b9:c6:67:df:5f:cb:89:5d:95:94:4d:fc:8b:f0:dc:ac:02:
8c:f1:22:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:51 2026 by rpki-client