Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
File: HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft (raw, json)
Hash identifier: JP3DpaOLzAhT5SiNuG1rjOboe6523F1SUltCBsTUrpE=
Subject key identifier: CF:8E:53:A9:F0:DE:5C:B0:CE:EB:27:01:D5:46:3A:1C:A8:FD:13:1E
Authority key identifier: 1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
Certificate issuer: /CN=1dd7088d9da221f0565eb178443600171e7977aa
Certificate serial: 019DA52F702F1E90877B8F6EB95B777531E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
Manifest number: 03CD
Signing time: Sun 19 Apr 2026 10:00:42 +0000
Manifest this update: Sun 19 Apr 2026 10:00:42 +0000
Manifest next update: Mon 20 Apr 2026 10:00:42 +0000
Files and hashes: 1: CjgS_b2r-3qplZ5KDVZa8VStIhQ.roa (hash: 243j3TvIuSB1M/hUhuu8ZLn+QAVeT40RY9rpOYK+p6Q=)
2: HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl (hash: Gl9Nyv5MbFOjWtACwMfMQOP7j9XGdkwlcPW2PaDA+I8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:70:2f:1e:90:87:7b:8f:6e:b9:5b:77:75:31:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd7088d9da221f0565eb178443600171e7977aa
Validity
Not Before: Apr 19 10:00:42 2026 GMT
Not After : Apr 20 10:00:42 2026 GMT
Subject: CN=cf8e53a9f0de5cb0ceeb2701d5463a1ca8fd131e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:70:0d:c8:7f:fd:d0:39:39:b0:08:6e:d0:7e:
4c:ed:99:21:7a:99:5a:00:a0:14:a4:d4:f6:17:53:
e9:35:52:18:13:0b:1c:c9:e1:9d:ee:a3:ef:83:99:
ab:7c:bd:83:42:04:6c:d8:d9:70:06:25:d5:1e:41:
03:54:4a:c9:62:aa:58:e5:3e:7c:a7:7d:40:8c:29:
49:03:0e:31:14:85:01:92:44:4f:1e:f9:aa:03:c7:
37:dc:a9:3b:1d:70:4d:89:85:a6:c7:fb:6a:78:38:
bd:fe:22:f8:ad:db:52:66:bb:93:fa:a7:9e:c8:5c:
cc:08:76:39:28:ff:13:d9:92:6e:84:10:e6:9b:fe:
ef:13:91:93:82:08:4c:b4:2d:44:e8:a6:48:b1:e6:
44:01:2a:90:1e:ed:57:3e:54:4f:e2:14:b2:4a:c3:
c8:56:94:d1:73:4b:5c:c8:0a:03:a9:43:3a:35:de:
fc:c7:90:7f:8b:e3:c8:6c:ad:b6:84:d4:66:8c:de:
33:bc:11:fa:f9:cb:5c:c5:3c:16:b9:2e:35:e2:7c:
69:be:50:70:47:94:74:05:98:92:8a:d0:f9:3b:82:
73:1b:09:d8:54:2c:a4:bb:78:28:63:4b:09:72:48:
39:91:5e:0c:78:01:ce:1b:6d:54:3b:39:6a:e1:c8:
2b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8E:53:A9:F0:DE:5C:B0:CE:EB:27:01:D5:46:3A:1C:A8:FD:13:1E
X509v3 Authority Key Identifier:
keyid:1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e3:2c:a8:07:f2:e5:73:5e:2c:ff:86:a2:ea:2e:b9:04:75:
ee:22:d7:2d:f8:89:6f:ad:0c:4c:cb:73:52:52:ef:4a:5d:ee:
bc:6f:82:46:e3:b0:af:38:38:6d:78:e9:b8:d2:76:61:8d:9b:
8d:ad:30:0f:17:06:f4:e9:d6:41:52:8b:24:eb:f9:e4:ee:f3:
71:92:9b:2b:ea:43:50:a8:bf:8a:42:9e:2b:1c:a3:ff:f6:58:
a3:68:73:d6:c6:d4:7d:f4:69:20:40:7f:f1:0c:02:c9:0d:66:
25:43:0d:e7:cf:1f:27:41:5e:81:0e:6d:ed:0f:25:7b:a0:ce:
88:db:8b:b5:3f:a8:3b:48:1c:91:32:00:12:34:40:9b:fe:32:
77:d4:09:19:fe:6c:89:44:8b:43:4b:57:f9:7e:ca:2a:58:c3:
68:92:95:35:e4:30:23:25:7e:4b:6f:c7:8d:da:63:6c:db:80:
b1:ab:7d:5d:aa:5f:8b:e3:d1:4d:dd:e0:55:20:ad:ab:a8:96:
d7:6d:51:f8:ec:44:91:8f:d4:a5:8b:5a:85:64:14:42:67:b9:
d8:2d:6d:0f:3f:b8:8c:8f:ee:a2:1a:9d:07:94:65:ce:74:ac:
7a:c1:70:53:61:e7:0e:5a:9a:d0:98:bb:a2:5e:23:e1:7c:b7:
5b:0a:a4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:20:26 2026 by rpki-client