Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
File: Heds5TXPuOIW7A0k3rV50aTKDgY.mft (raw, json)
Hash identifier: LXDTeUCXk5ECxK/C48zPyMBmnKFgRVfKKFw6vpVT0hE=
Subject key identifier: E8:53:F1:D6:D0:84:D3:76:49:62:9E:E4:87:81:8C:11:3C:AA:C8:5B
Authority key identifier: 1D:E7:6C:E5:35:CF:B8:E2:16:EC:0D:24:DE:B5:79:D1:A4:CA:0E:06
Certificate issuer: /CN=1de76ce535cfb8e216ec0d24deb579d1a4ca0e06
Certificate serial: 019D39AEB5725BBEE85A51A6DED9C827BA4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
Manifest number: 05C2
Signing time: Sun 29 Mar 2026 13:00:44 +0000
Manifest this update: Sun 29 Mar 2026 13:00:44 +0000
Manifest next update: Mon 30 Mar 2026 13:00:44 +0000
Files and hashes: 1: ASskbiBD-ObX8oC040-fCoWvcFA.roa (hash: Sm4y81MRyHGizqogZIaFxikCrX8RLabzmDJ+zETP3zo=)
2: Heds5TXPuOIW7A0k3rV50aTKDgY.crl (hash: LiqoY1JyKMqMvGh7Dz5wRB6XCppuBm0rCHsCwPOIPv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:b5:72:5b:be:e8:5a:51:a6:de:d9:c8:27:ba:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1de76ce535cfb8e216ec0d24deb579d1a4ca0e06
Validity
Not Before: Mar 29 13:00:44 2026 GMT
Not After : Mar 30 13:00:44 2026 GMT
Subject: CN=e853f1d6d084d37649629ee487818c113caac85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1b:18:b4:5d:fb:59:bd:eb:24:c8:d3:dd:e6:
c8:38:9f:d0:c7:34:bc:3a:56:cc:a1:45:87:28:4e:
89:c8:49:0b:97:04:34:a1:c0:a3:8c:3d:05:62:6c:
89:3c:02:a7:eb:2f:01:6c:ab:3c:5b:be:a0:21:4b:
82:07:75:55:78:ce:09:fc:1c:e1:c2:d8:3a:29:c4:
4b:39:e0:76:58:8e:b2:8d:8f:78:de:e1:c4:82:53:
82:e3:e6:8f:d5:08:4f:a8:4d:8e:9a:2a:16:5c:31:
80:b1:e1:b8:d8:ab:41:22:bb:2f:6d:1f:ab:dd:74:
14:ad:87:cb:b9:55:3c:fb:5e:76:10:09:17:d9:ad:
a9:8a:f9:3c:a4:73:f6:f3:ec:0b:ef:4f:55:23:09:
44:1a:b0:33:f3:b1:8d:9f:bf:cf:e4:0f:1d:23:28:
a7:a5:88:bb:61:04:1a:c9:e1:df:7e:d3:d4:5c:1b:
6e:9d:ca:e4:80:3d:99:a4:e5:29:68:b7:9b:31:30:
0c:33:b8:12:36:02:f2:c1:c4:18:e7:48:de:3c:4d:
5e:c8:29:ad:e7:15:70:68:02:0e:9d:87:44:d2:46:
79:be:40:1a:02:8b:3c:6c:1d:e7:09:2f:63:fb:15:
29:23:6e:d8:e9:91:7e:0e:09:f1:a4:dd:85:ee:36:
8f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:53:F1:D6:D0:84:D3:76:49:62:9E:E4:87:81:8C:11:3C:AA:C8:5B
X509v3 Authority Key Identifier:
keyid:1D:E7:6C:E5:35:CF:B8:E2:16:EC:0D:24:DE:B5:79:D1:A4:CA:0E:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Heds5TXPuOIW7A0k3rV50aTKDgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/076add-edfa-4f37-9996-66ce9e3a8c1e/1/Heds5TXPuOIW7A0k3rV50aTKDgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:97:50:e3:36:82:12:6e:e4:5c:aa:4b:0c:77:96:e4:7b:11:
97:3f:22:e2:06:1d:a9:66:8f:b0:b6:15:d8:b7:47:1a:07:83:
5d:bb:88:32:84:ac:ad:85:88:59:87:d0:ff:49:8c:72:e2:28:
9f:98:42:48:2d:5e:c6:1a:3a:45:dd:1d:5f:5a:d9:1a:95:81:
6b:a3:b1:37:14:ba:d2:b6:0a:af:e1:2b:ef:c7:f5:80:4b:91:
7d:4e:f1:6e:15:2c:11:c1:55:98:73:8e:76:f1:a2:cb:43:25:
22:69:04:14:73:c5:18:5f:35:93:64:df:0b:13:d9:99:24:02:
6c:b2:c9:9b:67:45:cc:eb:3f:40:74:39:d5:cc:b3:aa:5f:e9:
5e:2f:ad:f7:b2:a8:70:d2:4f:39:aa:a4:98:16:0d:6e:ff:8b:
c2:e6:93:15:c0:fe:83:9d:01:13:5f:d4:03:3d:5c:4a:ed:81:
42:26:e9:ba:d5:58:03:3e:e2:d3:54:30:f7:07:20:67:72:67:
69:a7:ac:1b:fd:10:e9:7f:b5:a2:c2:39:c5:b7:1f:cd:3e:c4:
02:d5:79:4f:35:17:0a:39:99:0b:f6:c1:e8:08:31:13:33:92:
e4:2b:54:09:d5:e5:30:9d:0b:a1:7e:86:9e:d7:b7:04:6c:c3:
52:01:2e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:40 2026 by rpki-client