Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
File: hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft (raw, json)
Hash identifier: /d09dyf96yPPUnVeWWc5+rMVE5/eUA1aD3Py9KqMZZM=
Subject key identifier: C2:EB:55:67:92:52:46:85:A9:28:C7:1F:AF:49:B8:65:60:6D:A0:4E
Authority key identifier: 85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84
Certificate issuer: /CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084
Certificate serial: 019DA41CE3909B70333A004AD90D61B862F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
Manifest number: 0FED
Signing time: Sun 19 Apr 2026 05:00:49 +0000
Manifest this update: Sun 19 Apr 2026 05:00:49 +0000
Manifest next update: Mon 20 Apr 2026 05:00:49 +0000
Files and hashes: 1: Mm3cGWuzg7gyTt25MrA_Cb8WYyU.roa (hash: QSO9mmv4K2NyhZinj8I/GzIYb/RrAcM6Y8mv7blhZ40=)
2: hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl (hash: SFV+vp25Q97NOx8POyjVUARh+wU+AgdsyZMcKFzMIlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:e3:90:9b:70:33:3a:00:4a:d9:0d:61:b8:62:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084
Validity
Not Before: Apr 19 05:00:49 2026 GMT
Not After : Apr 20 05:00:49 2026 GMT
Subject: CN=c2eb556792524685a928c71faf49b865606da04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:75:21:92:31:14:cd:6b:03:d0:66:98:27:96:
21:ce:eb:36:7b:28:a5:14:ca:ce:57:06:0c:4b:75:
79:27:fd:13:d7:06:9f:8d:18:d5:2a:5e:a3:6d:d1:
d3:56:ee:20:6a:7f:f4:37:cd:ca:61:dd:1b:7c:60:
38:a4:e6:eb:63:25:0a:cb:72:8a:ee:66:2c:f1:7a:
ec:d1:7b:9e:84:e4:15:05:53:14:07:1a:22:80:bc:
c3:9a:12:91:91:d0:50:a8:27:2c:78:aa:64:1e:0a:
e2:61:82:e2:5c:a1:ba:ec:2f:a6:6b:72:ba:70:b3:
b5:d2:6c:1f:fd:53:45:79:c6:d7:7f:72:0e:0c:cb:
d5:22:64:b3:0b:d2:dc:a7:92:8c:21:82:13:7c:e8:
b2:8d:4f:36:20:11:bd:3c:3e:01:41:59:07:51:a0:
55:e7:5c:54:9c:d5:51:87:cf:fa:a5:e7:2a:07:ee:
35:dc:f1:a9:80:27:32:ed:e7:e7:b6:66:c4:9d:c9:
69:06:aa:d0:d6:c2:87:80:4c:5f:ae:45:dc:82:b0:
d6:1a:8a:11:50:b2:f3:c5:ed:7a:af:c8:4c:09:d4:
0b:64:0a:8b:db:aa:84:20:39:63:2a:b0:36:a0:62:
d4:70:30:40:b8:26:65:88:09:40:96:bf:be:99:f2:
6b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EB:55:67:92:52:46:85:A9:28:C7:1F:AF:49:B8:65:60:6D:A0:4E
X509v3 Authority Key Identifier:
keyid:85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f0:45:0b:9d:bb:cb:60:65:d9:46:a8:b5:4d:d3:a0:7f:a3:
43:4b:90:ff:20:2f:99:f9:81:3c:8c:bd:80:8a:1e:8b:92:97:
52:bc:45:7e:86:a1:e6:09:43:34:75:70:38:28:a9:7b:aa:9c:
6c:38:0f:cc:af:40:2d:f3:d8:30:b9:d9:5b:ab:5e:e2:19:9c:
30:3e:19:44:5b:a9:f1:37:0c:04:c0:a0:0b:55:34:00:92:5d:
ec:1f:a1:ac:1d:1b:91:33:34:bf:ce:45:22:1c:15:1a:61:ac:
74:11:eb:1b:cd:db:fd:33:aa:0e:09:94:7f:0a:a0:5b:13:42:
99:f3:43:2e:75:d6:c5:51:73:ca:a6:ce:66:7c:79:5f:58:ec:
40:63:d7:e0:02:4d:dc:e2:46:19:fd:53:ce:32:86:85:e8:4b:
e2:a0:68:f8:51:0b:ad:8a:a6:5c:10:9f:3a:74:81:ed:f6:2b:
59:81:be:bb:3c:02:fa:69:71:9f:36:ad:57:10:d5:f0:c3:64:
83:6f:e5:9b:d3:09:8d:73:3b:ba:a8:6a:73:96:f7:81:e3:50:
2c:56:fb:65:89:d5:87:de:68:ea:d4:21:a8:49:ef:1b:8e:97:
76:0a:de:2e:85:0b:c9:47:6f:73:85:1b:af:a7:3b:b0:af:d1:
66:ef:f5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:37 2026 by rpki-client