Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
File: HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft (raw, json)
Hash identifier: 2vcQddBM9/QqEMeyc3oLbZvvVO4PDUiBAnfTXSB/AIw=
Subject key identifier: C3:E7:48:1B:3E:1E:B2:9D:03:A5:8A:D3:69:F5:7B:5E:81:C1:D3:A1
Authority key identifier: 1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E
Certificate issuer: /CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e
Certificate serial: 019CAAC712072C1D860C3D8608FD4F7230FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:01:38 +0000
Manifest this update: Sun 01 Mar 2026 19:01:38 +0000
Manifest next update: Mon 02 Mar 2026 19:01:38 +0000
Files and hashes: 1: HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl (hash: M/9yymRTvoQ4E+3BMv2Cx3KvekApA12jyvGj4o8hixs=)
2: ib3cAwbg8C9r2aqBWyNBb5uSoms.roa (hash: KrmwOWhj2jFqWpLOhPbRuQeJTVBkN+LvN0H+FMdxOSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:12:07:2c:1d:86:0c:3d:86:08:fd:4f:72:30:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e
Validity
Not Before: Mar 1 19:01:38 2026 GMT
Not After : Mar 2 19:01:38 2026 GMT
Subject: CN=c3e7481b3e1eb29d03a58ad369f57b5e81c1d3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6f:04:05:74:93:bd:12:0d:a0:6f:3f:98:4e:
e0:47:6e:19:0c:ec:0d:1a:b2:80:0a:b6:01:9c:d9:
02:c1:f5:00:aa:c3:0c:5d:56:6a:66:76:58:14:b1:
26:13:e8:30:3d:48:9f:c1:4d:d1:8f:73:66:fa:4b:
b4:6a:53:c5:3a:df:ea:d5:2c:b8:8c:9e:33:de:71:
3f:f2:8c:0a:97:ce:f1:1b:42:e4:e6:56:47:2b:89:
f2:27:93:63:a7:c3:56:0c:8e:b0:71:b2:32:bc:11:
b7:95:08:87:5e:df:f2:f0:d2:77:8d:12:14:09:aa:
cc:b2:fa:9c:e5:39:5e:99:a7:e0:3a:c0:7a:29:0c:
46:a6:23:9b:c9:38:96:54:9d:4b:69:0e:cf:fb:5d:
e2:5c:5e:85:16:ca:d9:96:2a:44:e3:41:0e:e6:4a:
a3:3f:97:1f:e3:76:f9:49:46:42:71:54:f1:6e:bb:
9f:5e:af:50:fd:1a:7a:1b:89:62:8e:c7:55:96:4e:
ab:a5:78:2b:5e:34:4f:45:0f:4a:a4:c4:46:36:97:
83:dd:84:75:aa:54:d5:8e:28:32:38:2f:5c:b0:26:
52:91:7e:2a:b1:97:50:a8:c7:85:87:a5:6b:95:40:
fa:d1:3c:55:d5:f6:9e:2f:d5:3d:6f:32:9b:08:3f:
67:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E7:48:1B:3E:1E:B2:9D:03:A5:8A:D3:69:F5:7B:5E:81:C1:D3:A1
X509v3 Authority Key Identifier:
keyid:1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:31:9b:f1:d8:5c:39:1b:a6:a5:22:9d:d3:38:00:e2:94:c8:
b5:01:5d:de:a7:a1:1b:90:d0:cc:e2:fd:32:5f:b2:54:31:16:
ae:df:65:d0:41:58:3a:8f:a1:92:e3:f4:7e:e5:4e:62:ef:b7:
2a:db:8f:ae:ba:dc:3f:d9:9c:e5:58:a8:c8:d6:91:e2:1d:76:
12:de:f5:1e:d2:6c:59:9e:c5:70:c0:f9:6c:63:41:1a:e6:50:
2e:1b:61:ba:54:01:8a:87:b2:92:50:80:94:3b:95:6a:f4:a9:
bb:f8:8d:4c:0b:39:b1:68:d6:6f:10:89:97:32:7a:77:09:fb:
c6:8e:2a:27:f2:99:74:f0:b6:92:fd:b1:03:8c:62:05:54:92:
45:85:34:e3:dc:74:e4:7f:6d:a7:7d:54:0d:b2:ba:34:7a:00:
23:65:34:56:f4:0f:c5:4a:5a:17:f3:ce:c0:10:2c:21:4b:6b:
30:82:37:8d:f8:b6:46:92:25:35:de:bf:55:c6:56:b7:ef:16:
c4:3e:a7:94:8b:b9:7b:3e:94:26:ff:a6:27:a7:d4:46:51:64:
f0:2f:d4:f7:1a:8e:fc:7c:e5:26:18:7b:d1:2c:e1:ed:88:e2:
b2:cc:a8:9f:24:4b:0a:5a:37:94:cd:1e:e3:82:8d:da:78:22:
7b:56:bd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:49 2026 by rpki-client