
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
File: HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft (raw, json)
Hash identifier: dIbcfn522KSDHXOJBvPSZSGscG0G9YqwGe/xjBKir9s=
Subject key identifier: AF:8F:BA:83:BD:BC:C5:30:19:D8:29:D9:1D:95:F5:C8:42:B7:EE:28
Authority key identifier: 1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
Certificate issuer: /CN=1dd7088d9da221f0565eb178443600171e7977aa
Certificate serial: 01A0DB3B34DCFF17BD379DD92B9B6C1A2A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
Manifest number: 0578
Signing time: Sat 26 Sep 2026 01:01:25 +0000
Manifest this update: Sat 26 Sep 2026 01:01:25 +0000
Manifest next update: Sun 27 Sep 2026 01:01:25 +0000
Files and hashes: 1: HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl (hash: MeDswCdMBcJz6UMpxTMosI/mJAeUSdHfeuqOPF+LT4w=)
2: jj4p-t17R-_1G4MNsVWsKf7lxt8.roa (hash: gxtd056u5s+5E72I3IyM1AJXXx0KOPdQmubbLYFzxYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3b:34:dc:ff:17:bd:37:9d:d9:2b:9b:6c:1a:2a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd7088d9da221f0565eb178443600171e7977aa
Validity
Not Before: Sep 26 01:01:25 2026 GMT
Not After : Sep 27 01:01:25 2026 GMT
Subject: CN=af8fba83bdbcc53019d829d91d95f5c842b7ee28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:5a:9b:56:c4:04:93:4b:d5:91:09:25:fa:
6b:44:45:be:5a:91:01:fb:c4:8a:a9:d9:05:24:d6:
fa:c4:61:01:2c:b4:ab:b6:c4:95:36:72:00:6c:ae:
e2:cb:2f:73:e6:80:d8:64:9d:c3:33:41:41:d2:f5:
15:77:fa:3d:10:72:95:7e:33:57:f0:4a:1a:6a:ec:
04:4b:88:b5:dc:d6:0f:97:25:58:5a:7a:ae:2c:d5:
63:8d:f2:da:09:4e:e8:80:f9:27:11:65:c3:b3:a1:
62:8b:05:b8:14:2d:f5:32:98:66:2d:c7:61:2f:9a:
c6:84:f6:7e:2d:79:f0:21:5e:16:27:14:d5:db:2c:
92:58:fe:90:19:51:2d:d1:49:93:4a:b8:eb:b0:7e:
a2:74:3a:ad:a6:72:a4:bc:be:88:80:88:0c:73:90:
72:f8:8a:60:2d:bd:38:db:88:c4:c5:e7:bd:6e:cf:
f5:d9:91:35:93:e5:69:ec:1e:a0:46:44:88:32:1a:
61:5d:53:62:a1:4e:ac:db:72:54:62:7d:d6:5b:cf:
26:56:f4:f4:b8:69:a1:d2:5f:37:82:0e:c2:61:1d:
6b:c9:5f:cb:6d:2c:da:9c:64:ea:3f:e0:a0:fe:fa:
66:fe:77:e1:0f:ff:cc:7b:af:a8:bf:c6:9e:ad:a2:
9c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8F:BA:83:BD:BC:C5:30:19:D8:29:D9:1D:95:F5:C8:42:B7:EE:28
X509v3 Authority Key Identifier:
keyid:1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:10:7e:d1:9c:a2:bd:58:c5:55:d9:66:3a:a8:8e:98:ab:a8:
ec:25:a4:62:22:bb:08:f4:b8:c0:75:ca:ab:56:6a:42:a4:e9:
f9:b8:98:eb:43:af:61:aa:77:06:ef:fb:3b:2e:64:22:aa:c6:
88:3b:57:27:eb:63:e8:c5:03:a7:c8:91:88:06:6f:c2:f7:83:
a4:e5:ce:fd:87:a7:46:d0:7a:b9:f5:51:26:86:06:94:23:c5:
cf:d5:1e:a5:60:da:de:e7:92:44:f5:7b:6c:3a:01:47:af:1d:
a0:35:ab:4a:53:8e:39:0b:9e:0d:d2:d2:dd:9d:1b:f6:0d:96:
0c:07:68:a1:ae:36:75:e2:a6:56:03:a0:aa:c4:9c:94:f0:c1:
e1:3b:2a:47:fb:b9:1b:a3:3b:80:39:21:34:34:45:71:2f:c6:
5b:63:9f:f9:fb:5b:a2:82:57:6c:7a:10:4e:ad:63:16:b2:16:
05:af:02:df:81:c3:33:d8:e6:43:b9:7b:1b:e2:7e:37:9c:f3:
dd:f2:46:ba:b8:c3:99:a0:8b:d2:3a:cb:c7:6e:9a:bd:03:b9:
24:fa:51:77:5f:f7:36:84:7b:4f:f5:76:b5:6c:5d:aa:f5:7a:
c4:4d:03:7f:f3:da:92:8a:eb:da:cc:72:83:98:5d:cf:ca:61:
60:dd:0d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:07:53 2026 by rpki-client