Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
File: hduDqDZaYER28oLSTTJ60e8P3lI.mft (raw, json)
Hash identifier: pRf1REyM0M1RX534deVL6Ib7SjyEo1xQVS6cLs/42/k=
Subject key identifier: 27:00:E3:97:58:27:1F:6F:BE:17:07:23:40:A9:2F:3B:C4:8F:EE:98
Authority key identifier: 85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
Certificate issuer: /CN=85db83a8365a604476f282d24d327ad1ef0fde52
Certificate serial: 019DCE2B865DD0FA7B7326551F71B50D87AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
Manifest number: 18E1
Signing time: Mon 27 Apr 2026 09:00:51 +0000
Manifest this update: Mon 27 Apr 2026 09:00:51 +0000
Manifest next update: Tue 28 Apr 2026 09:00:51 +0000
Files and hashes: 1: 6wLeIQ39c0qgX0Vja7MdBYJAMn8.roa (hash: nC6rexnNHi4WNC4B4GVKP/4QaiD+SkPn2gOVHs21A7Y=)
2: hduDqDZaYER28oLSTTJ60e8P3lI.crl (hash: HRLtbofq1H48ndaZRUmNlCIZNr/fVOWo2cStEfLvBG4=)
3: pZGlbrvPRrDTvWn_feYW76Iq3BI.roa (hash: j/VDUcf2k6fyYHL9cYumkvnabaWqMQDCybh7xh24GlM=)
4: uz-5eh8ij7CKyL1gCG3agXaZfdI.roa (hash: MLGYmgTbm9R3gQ6lW9l1/n4SxkT8aKZvJY9FygoVZ1Y=)
5: vrzJKe06Kv3pGusg7vo_4lpx3jQ.roa (hash: hLnvHO8i7CwgpM8QFslqTR7QsmT/3aqV/BvJ6FLuFCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:86:5d:d0:fa:7b:73:26:55:1f:71:b5:0d:87:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db83a8365a604476f282d24d327ad1ef0fde52
Validity
Not Before: Apr 27 09:00:51 2026 GMT
Not After : Apr 28 09:00:51 2026 GMT
Subject: CN=2700e39758271f6fbe17072340a92f3bc48fee98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:27:36:0e:5e:bb:cb:44:72:cf:b7:dd:e0:fd:
60:54:f5:3c:18:8e:91:70:f5:35:6c:33:0f:5c:62:
1a:ac:36:22:03:22:f1:27:75:80:f4:bb:92:79:cc:
a7:e6:7c:93:e1:89:f7:fc:dd:26:d0:6b:47:72:1e:
85:24:7e:7a:65:32:4f:d6:6b:0c:11:64:8c:a0:8b:
d8:6a:d8:64:98:9a:e0:67:28:85:e6:75:c2:b9:cb:
6b:38:ee:b6:a0:4b:7d:33:e2:cd:39:27:04:4b:03:
37:fe:65:00:4d:8d:fa:69:59:b2:94:28:aa:16:4a:
c1:cb:b9:95:72:eb:b9:bb:43:59:83:89:63:bb:8c:
4c:d8:47:fc:0f:f2:86:99:1d:03:34:b4:12:c8:2c:
1b:75:57:f5:74:69:bd:2b:b2:72:ea:01:fd:92:94:
20:2f:a5:58:67:eb:f6:61:fd:43:9c:63:7a:ce:59:
7c:cb:33:2e:29:62:27:14:a1:6a:81:86:05:01:db:
17:71:81:04:40:be:4e:0e:9b:7e:d7:6f:4c:fb:27:
12:cb:51:23:16:1d:13:a1:59:c2:fe:94:ae:74:de:
e7:5d:fd:d5:6e:2d:ad:4b:e9:84:4b:b1:63:e5:7c:
d4:d7:6b:77:4a:5d:fc:92:84:4e:84:06:3b:3e:91:
45:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:00:E3:97:58:27:1F:6F:BE:17:07:23:40:A9:2F:3B:C4:8F:EE:98
X509v3 Authority Key Identifier:
keyid:85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:33:7d:ae:35:ef:38:66:6a:aa:2a:a5:94:35:47:89:2e:76:
2d:0e:ae:93:58:13:07:2d:ce:8e:39:0b:f7:c1:9f:c2:87:50:
25:d7:e4:3b:3e:8d:b8:81:ff:ba:1f:7e:f6:08:e9:0d:18:9c:
c5:63:08:57:93:fd:ca:0a:86:66:1b:8b:0c:5d:db:eb:3c:a0:
90:d3:64:d1:29:b0:9a:e6:cf:63:53:5d:12:37:e2:12:65:18:
ac:64:fd:04:12:6c:61:b1:60:e4:2c:32:2d:b8:0d:56:a3:97:
41:13:c9:92:cf:c8:b4:89:ff:7f:69:ed:c5:69:f9:ab:be:32:
39:56:e7:d9:4d:3b:1b:0c:43:6b:be:7d:a9:92:3f:29:c5:00:
6d:bc:a8:b0:f9:22:23:04:39:aa:8b:af:14:5d:1a:cf:76:09:
bb:7b:cc:80:24:75:dc:2f:28:1c:72:c4:c8:90:b6:e7:ad:29:
00:d9:a1:70:c3:c6:e7:2e:08:e8:23:a3:17:0c:70:de:9f:d7:
de:a0:21:5a:a3:34:12:56:b1:8c:9d:7e:2a:14:c6:99:47:6e:
03:08:25:22:8a:ca:5a:bc:38:27:47:af:9f:62:e0:2e:2e:c5:
0f:a4:86:97:7b:df:8b:f2:4b:1c:a0:2a:a9:87:ba:02:36:c6:
32:ea:77:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3OK4Zd0Pp7cyZVH3G1DYeuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZGI4M2E4MzY1YTYwNDQ3NmYyODJkMjRkMzI3YWQxZWYw
ZmRlNTIwHhcNMjYwNDI3MDkwMDUxWhcNMjYwNDI4MDkwMDUxWjAzMTEwLwYDVQQD
EygyNzAwZTM5NzU4MjcxZjZmYmUxNzA3MjM0MGE5MmYzYmM0OGZlZTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSc2Dl67y0Ryz7fd4P1gVPU8GI6R
cPU1bDMPXGIarDYiAyLxJ3WA9LuSecyn5nyT4Yn3/N0m0GtHch6FJH56ZTJP1msM
EWSMoIvYathkmJrgZyiF5nXCuctrOO62oEt9M+LNOScESwM3/mUATY36aVmylCiq
FkrBy7mVcuu5u0NZg4lju4xM2Ef8D/KGmR0DNLQSyCwbdVf1dGm9K7Jy6gH9kpQg
L6VYZ+v2Yf1DnGN6zll8yzMuKWInFKFqgYYFAdsXcYEEQL5ODpt+129M+ycSy1Ej
Fh0ToVnC/pSudN7nXf3Vbi2tS+mES7Fj5XzU12t3Sl38koROhAY7PpFF5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCcA45dYJx9vvhcHI0CpLzvEj+6YMB8GA1UdIwQY
MBaAFIXbg6g2WmBEdvKC0k0yetHvD95SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yYzhmMDgtZTU5OS00NGYzLWJiYzEt
OGNiZWY5MTNlMzQyLzEvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8yYzhmMDgtZTU5OS00NGYzLWJiYzEtOGNiZWY5MTNlMzQy
LzEvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTN9rjXv
OGZqqiqllDVHiS52LQ6uk1gTBy3OjjkL98GfwodQJdfkOz6NuIH/uh9+9gjpDRic
xWMIV5P9ygqGZhuLDF3b6zygkNNk0SmwmubPY1NdEjfiEmUYrGT9BBJsYbFg5Cwy
LbgNVqOXQRPJks/ItIn/f2ntxWn5q74yOVbn2U07GwxDa759qZI/KcUAbbyosPki
IwQ5qouvFF0az3YJu3vMgCR13C8oHHLEyJC2560pANmhcMPG5y4I6COjFwxw3p/X
3qAhWqM0ElaxjJ1+KhTGmUduAwglIorKWrw4J0evn2LgLi7FD6SGl3vfi/JLHKAq
qYe6AjbGMup34A==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:10:33 2026 by rpki-client