Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
File: HtVdI1ecZBJxVa72UGlueVMdUI0.mft (raw, json)
Hash identifier: J/s8gMOc6fwdj5SYVYZEowrea9uNC9MUFykTJUrAEIY=
Subject key identifier: 45:37:35:D8:FE:31:63:88:97:27:BA:53:42:D1:52:FA:09:63:29:2C
Authority key identifier: 1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D
Certificate issuer: /CN=1ed55d23579c64127155aef650696e79531d508d
Certificate serial: 019D38D3108FBEA60F196F6D816C181E660C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
Manifest number: 14DE
Signing time: Sun 29 Mar 2026 09:00:49 +0000
Manifest this update: Sun 29 Mar 2026 09:00:49 +0000
Manifest next update: Mon 30 Mar 2026 09:00:49 +0000
Files and hashes: 1: HtVdI1ecZBJxVa72UGlueVMdUI0.crl (hash: u69//HduSJEkQlzlVNH0EZJlCk9Q8fQUnKeWidYQoSo=)
2: T_J2gttaZHfPXFwYPEnqU4DuSH0.roa (hash: ehbYh6/mcaifo0NfLUxIkQ+Z4QysKZUHdNB+6ZGBtPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:10:8f:be:a6:0f:19:6f:6d:81:6c:18:1e:66:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed55d23579c64127155aef650696e79531d508d
Validity
Not Before: Mar 29 09:00:49 2026 GMT
Not After : Mar 30 09:00:49 2026 GMT
Subject: CN=453735d8fe3163889727ba5342d152fa0963292c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:74:d9:35:ff:9a:15:e7:5a:94:8d:50:6b:87:
96:27:17:af:be:fb:75:7a:39:17:42:4a:fb:34:69:
35:e6:30:13:c3:29:a3:03:55:21:07:9e:57:19:64:
c1:e1:dd:2a:ea:98:b3:ed:54:2b:ef:1b:9d:de:d7:
e8:50:ed:83:a8:f2:04:39:2a:3b:95:c9:f9:ee:33:
4e:59:c4:c6:5a:25:8c:8b:92:5c:de:ea:43:1e:70:
ae:8f:24:07:c7:f0:91:ad:f9:29:68:14:82:5a:75:
d6:f6:6d:da:2a:c3:46:a9:05:38:e9:f5:14:ce:70:
60:67:41:ae:15:a1:bf:b2:3c:5b:4d:31:05:43:af:
10:65:d1:c1:07:bb:5f:3b:e7:64:53:05:ae:d0:d8:
33:b9:38:e5:0c:5d:16:07:d8:30:46:dc:a4:af:04:
9d:3e:d2:8e:25:7a:34:a4:e1:c4:67:c9:ca:41:4b:
5f:18:fd:24:9a:67:06:0b:cf:c9:04:63:38:9b:68:
87:ad:16:e8:ac:0d:09:e5:3f:9a:18:b9:7d:37:d8:
6d:d8:46:92:aa:fc:39:12:31:f0:87:a0:de:1c:dc:
51:ab:0e:e1:c2:78:2d:6c:bd:68:51:75:6e:bf:3e:
44:13:b9:4c:24:20:3d:de:5f:24:65:ff:53:e3:05:
4f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:37:35:D8:FE:31:63:88:97:27:BA:53:42:D1:52:FA:09:63:29:2C
X509v3 Authority Key Identifier:
keyid:1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:6a:0e:0b:7c:a7:d7:30:33:7f:60:1c:7e:0e:e3:b2:9f:04:
ae:05:11:e0:cd:0c:9c:08:dc:a2:62:86:30:85:91:1a:ce:c8:
e7:cd:d6:d6:d5:63:f2:7a:de:34:16:87:6d:60:a7:b0:78:5a:
dd:16:84:fe:36:ef:c3:a3:2b:f9:12:fe:3c:5f:24:db:06:ca:
9c:38:52:8e:15:60:21:12:23:d7:3d:28:3d:96:b7:0b:8a:81:
0e:40:73:db:15:b4:a9:79:7c:0f:8d:f7:50:27:c3:59:d5:fb:
7c:67:a6:5a:d8:0c:a8:22:b0:5c:ba:bc:02:98:50:85:07:f5:
72:b2:a0:13:af:9e:07:ca:0d:17:db:08:fb:16:62:5e:2a:61:
d4:e7:54:df:1b:57:08:b0:8f:51:3c:7a:98:08:76:c2:55:1c:
9a:8b:e7:fb:76:cf:a0:35:c9:be:40:61:7f:04:7b:41:e9:ef:
8e:54:85:86:b3:86:83:bc:58:ec:19:3e:ce:1d:6d:ba:82:33:
ce:02:55:d0:73:db:00:c0:8d:00:5b:62:4f:ff:6e:6c:eb:8d:
81:5f:66:47:8f:25:03:6d:6f:80:c2:62:27:d5:06:f7:9c:c1:
bf:28:7a:51:65:05:30:be:8d:6c:04:9a:c7:1e:92:33:27:03:
5b:69:09:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:34 2026 by rpki-client