Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
File: HLjjf1E93Cn_15HDjJZjI2nKVFE.mft (raw, json)
Hash identifier: hnShXipPPCU1uvLoNM8y8Qqr6kbd08ZqloOPt/ITM8I=
Subject key identifier: DD:29:1F:97:C0:D9:EA:D1:AB:93:CB:6C:FE:A3:D0:BE:C1:6A:CD:5C
Authority key identifier: 1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51
Certificate issuer: /CN=1cb8e37f513ddc29ffd791c38c96632369ca5451
Certificate serial: 019D9962968AFA096A3D3E2826656E756675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
Manifest number: 1470
Signing time: Fri 17 Apr 2026 03:01:08 +0000
Manifest this update: Fri 17 Apr 2026 03:01:08 +0000
Manifest next update: Sat 18 Apr 2026 03:01:08 +0000
Files and hashes: 1: 5bhy7eDbTF3iSMoLKUHBCIILj4E.roa (hash: 9YusEuoHgRDwFpuJ1B9xJzYQFifXAqM0fNdh2jgcmr0=)
2: D-r3D7TjflJW1amM5h7I8MR0oUk.asa (hash: z5fDIV8YawnmcSoSc/AVZ5e/iduZ1ZCGdbI+J/9nY3A=)
3: HLjjf1E93Cn_15HDjJZjI2nKVFE.crl (hash: MOLRzJEKksMp2d6y7ssYb2ularWw0K7qWKxacVsq3tU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:96:8a:fa:09:6a:3d:3e:28:26:65:6e:75:66:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cb8e37f513ddc29ffd791c38c96632369ca5451
Validity
Not Before: Apr 17 03:01:08 2026 GMT
Not After : Apr 18 03:01:08 2026 GMT
Subject: CN=dd291f97c0d9ead1ab93cb6cfea3d0bec16acd5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:23:9f:19:31:2d:f0:ea:44:3f:26:8b:66:
5c:51:b6:e3:95:5f:61:1c:bd:b0:8c:9c:78:0f:cf:
59:59:f6:ca:7c:76:9b:89:69:7e:60:95:65:0e:91:
0e:73:d8:bc:c3:4e:93:88:40:0e:3b:f7:92:3b:56:
ca:6a:e3:2e:67:d0:19:95:24:72:9a:03:ca:cb:05:
a6:17:b1:c2:aa:a0:06:09:98:5b:4a:ca:15:6a:3b:
5b:82:a5:a1:97:2d:d6:15:1c:b4:19:e2:fc:98:1e:
f7:83:58:9d:15:3f:79:02:2e:b4:9a:81:2c:b6:28:
ab:07:a3:cf:15:a8:79:18:03:d2:c0:79:d5:37:d3:
48:93:ff:8e:8e:9b:8b:2a:c5:c0:be:5a:9c:25:68:
fb:d3:0b:5f:3a:42:21:f0:1c:37:7c:d3:3c:21:6c:
5d:66:70:f9:8e:bb:4a:f0:b4:db:8d:12:7f:2d:d6:
69:b2:35:9b:a5:19:67:aa:22:4c:8b:1b:bd:4b:d2:
41:36:b5:91:10:f0:2b:a0:f4:ce:9e:60:03:83:9b:
eb:5a:e9:2f:87:fc:9f:b4:8d:f0:f3:af:2d:7a:a8:
ec:8b:06:40:57:ee:0b:76:3c:15:f3:79:4b:19:bb:
dc:a5:d5:88:49:90:dd:ad:60:aa:c3:b5:f8:7a:21:
2e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:29:1F:97:C0:D9:EA:D1:AB:93:CB:6C:FE:A3:D0:BE:C1:6A:CD:5C
X509v3 Authority Key Identifier:
keyid:1C:B8:E3:7F:51:3D:DC:29:FF:D7:91:C3:8C:96:63:23:69:CA:54:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HLjjf1E93Cn_15HDjJZjI2nKVFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bddfd6-76db-4331-afd3-e1cdb24c180b/1/HLjjf1E93Cn_15HDjJZjI2nKVFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:90:32:46:70:09:a5:01:90:39:d5:5d:6c:63:01:4a:7d:3b:
84:5c:0a:17:29:08:68:f7:7e:4f:ac:54:ce:49:f2:17:d3:f3:
bd:d6:75:37:b9:fb:7a:4e:aa:46:ed:51:fd:aa:b8:6d:f7:2f:
61:2f:22:4a:46:12:72:36:09:f1:f9:75:4e:10:fb:02:7d:b6:
e8:e1:18:03:fb:f2:fe:e7:88:ad:dc:4e:c3:b2:b0:60:81:26:
5f:1f:64:d2:99:40:51:93:53:c3:ea:2e:cc:07:81:6c:f7:81:
2c:0c:f8:d7:35:1c:65:fa:ae:3b:cb:a9:3a:62:19:40:49:69:
e2:f3:27:dc:ad:3b:81:55:c6:09:29:44:60:b3:45:68:12:28:
5f:fa:5e:50:56:3a:76:5a:b3:c3:1c:82:5a:13:ec:9e:0e:3e:
18:1f:23:c3:f9:01:24:c0:d0:5c:dc:5c:bd:5e:49:ce:74:d7:
c0:76:4a:30:2a:1a:1f:55:44:42:7c:d5:2a:ed:9c:d1:cc:ec:
03:ee:6f:9c:c4:b1:f4:74:62:c7:b0:3f:40:b0:0b:5f:04:eb:
63:e5:b4:17:4e:61:8a:f4:98:82:76:43:4d:20:db:4b:6a:6b:
0c:33:30:c4:6e:6d:78:a7:00:50:44:84:3c:73:65:fd:2d:75:
92:5f:01:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:30:04 2026 by rpki-client