Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
File: HdXNKgJh4eYGndd1iU2CbuiDbB4.mft (raw, json)
Hash identifier: 5aNM8/EIXaAgDkbKTxMJUQUAdaUwXAfsUTdbEMkM7gk=
Subject key identifier: 27:EE:51:09:0B:34:01:D0:5D:38:29:B8:F7:C0:E3:57:3C:26:C0:98
Authority key identifier: 1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
Certificate issuer: /CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Certificate serial: 019F9FCDCA79B8FEB1A60D05244573600553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
Manifest number: 19CF
Signing time: Sun 26 Jul 2026 19:01:31 +0000
Manifest this update: Sun 26 Jul 2026 19:01:31 +0000
Manifest next update: Mon 27 Jul 2026 19:01:31 +0000
Files and hashes: 1: 53uXZdGunbCbkFbF5LCIWF6hUow.roa (hash: YdDbEGhWwhK//MEhtCOroEdkE5sIGg0zyX8WVqthVro=)
2: HdXNKgJh4eYGndd1iU2CbuiDbB4.crl (hash: sg7KjPEMIQ24IFASk9UnLw5eLow34fHSQtP7Y+jMtm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:cd:ca:79:b8:fe:b1:a6:0d:05:24:45:73:60:05:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Validity
Not Before: Jul 26 19:01:31 2026 GMT
Not After : Jul 27 19:01:31 2026 GMT
Subject: CN=27ee51090b3401d05d3829b8f7c0e3573c26c098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cb:8b:c0:24:9c:11:c6:09:4a:9b:6c:f1:23:
fd:d4:b1:32:4a:ce:78:56:a3:31:0f:f0:a6:2b:36:
80:84:70:35:2b:0a:3a:99:ec:05:81:3f:93:78:dd:
ca:ef:60:c5:ad:9d:f9:77:6f:91:1d:b4:68:fe:44:
1e:4a:8a:ec:ca:e1:a2:13:51:46:87:9c:3b:69:e8:
76:2a:e4:d4:64:4d:f7:4b:ef:46:34:e3:e6:8a:5d:
24:bf:69:15:a3:4e:e9:3f:de:bd:d3:c7:a3:dd:2a:
27:52:95:3d:f1:0c:5d:36:a7:5f:9f:b3:92:07:32:
56:35:01:19:ff:db:78:e8:80:20:da:b6:89:0c:91:
cb:66:12:7b:3a:a2:24:56:6a:9c:3f:5f:7f:f3:2d:
35:31:3c:ef:59:87:08:34:71:59:7d:f9:13:8c:eb:
68:fd:9b:4f:a6:b8:87:c3:72:56:b6:0e:81:9c:5b:
38:c2:e3:6a:8a:a7:f8:9c:c7:a3:fb:82:be:94:83:
e0:43:a4:b1:61:94:4b:ff:15:70:02:d0:aa:f4:0e:
24:a3:29:fa:0e:61:dc:f8:8a:bf:e9:ba:0d:72:63:
59:8d:9f:37:a2:c1:d4:e8:e8:4d:19:ee:23:f2:51:
25:13:06:11:e6:ce:84:3e:73:09:60:6d:f8:d4:30:
77:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:EE:51:09:0B:34:01:D0:5D:38:29:B8:F7:C0:E3:57:3C:26:C0:98
X509v3 Authority Key Identifier:
keyid:1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ba:30:50:25:e3:d8:0e:8d:6b:ed:20:bf:9c:74:8d:79:91:
0a:18:42:86:87:78:dd:19:70:ba:c8:f1:96:da:ec:d7:38:37:
ec:e0:c6:91:34:53:7d:2a:1c:89:42:fe:81:5d:f2:4f:15:3b:
06:a4:eb:5e:5a:ca:96:c4:91:09:29:b4:2b:be:13:c6:d8:26:
85:84:31:aa:c3:43:9a:98:08:6c:b2:45:e7:48:51:4e:d4:14:
4f:42:69:fa:c4:48:f7:e0:d8:a9:63:55:17:3d:62:69:89:7f:
54:9b:45:81:15:62:78:f3:c7:f7:23:46:99:d3:ba:bf:cd:22:
f8:56:16:4b:85:2e:e1:a8:f2:df:d5:aa:34:bc:f8:dd:b8:06:
51:c4:5b:86:2d:fc:e4:6d:1a:9a:44:50:ac:5c:6c:d3:00:0f:
81:04:6b:20:67:25:a8:12:a0:f5:19:fc:3c:7b:31:00:fd:8e:
dc:c2:d8:f7:c1:a3:7b:bf:2a:34:39:33:00:51:66:90:6c:5e:
c3:95:c6:ac:0e:c4:39:c4:29:6a:cc:73:9f:c1:48:84:1a:da:
7c:9e:2c:42:7b:cb:11:38:52:91:16:45:f2:cc:1c:7b:7a:95:
47:6b:74:f2:b1:56:16:4e:85:be:b0:35:52:fb:97:d9:b8:c8:
44:58:50:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+fzcp5uP6xpg0FJEVzYAVTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZDVjZDJhMDI2MWUxZTYwNjlkZDc3NTg5NGQ4MjZlZTg4
MzZjMWUwHhcNMjYwNzI2MTkwMTMxWhcNMjYwNzI3MTkwMTMxWjAzMTEwLwYDVQQD
EygyN2VlNTEwOTBiMzQwMWQwNWQzODI5YjhmN2MwZTM1NzNjMjZjMDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsuLwCScEcYJSpts8SP91LEySs54
VqMxD/CmKzaAhHA1Kwo6mewFgT+TeN3K72DFrZ35d2+RHbRo/kQeSorsyuGiE1FG
h5w7aeh2KuTUZE33S+9GNOPmil0kv2kVo07pP96908ej3SonUpU98QxdNqdfn7OS
BzJWNQEZ/9t46IAg2raJDJHLZhJ7OqIkVmqcP19/8y01MTzvWYcINHFZffkTjOto
/ZtPpriHw3JWtg6BnFs4wuNqiqf4nMej+4K+lIPgQ6SxYZRL/xVwAtCq9A4koyn6
DmHc+Iq/6boNcmNZjZ83osHU6OhNGe4j8lElEwYR5s6EPnMJYG341DB3SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfuUQkLNAHQXTgpuPfA41c8JsCYMB8GA1UdIwQY
MBaAFB3VzSoCYeHmBp3XdYlNgm7og2weMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGRYTktnSmg0ZVlHbmRkMWlVMkNidWlEYkI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi80ZmU5ODMtNzE1Mi00OTMzLTlmMzYt
ZDg2Y2FkZDYxMGI4LzEvSGRYTktnSmg0ZVlHbmRkMWlVMkNidWlEYkI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi80ZmU5ODMtNzE1Mi00OTMzLTlmMzYtZDg2Y2FkZDYxMGI4
LzEvSGRYTktnSmg0ZVlHbmRkMWlVMkNidWlEYkI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYrowUCXj
2A6Na+0gv5x0jXmRChhChod43Rlwusjxltrs1zg37ODGkTRTfSociUL+gV3yTxU7
BqTrXlrKlsSRCSm0K74TxtgmhYQxqsNDmpgIbLJF50hRTtQUT0Jp+sRI9+DYqWNV
Fz1iaYl/VJtFgRViePPH9yNGmdO6v80i+FYWS4Uu4ajy39WqNLz43bgGUcRbhi38
5G0amkRQrFxs0wAPgQRrIGclqBKg9Rn8PHsxAP2O3MLY98Gje78qNDkzAFFmkGxe
w5XGrA7EOcQpasxzn8FIhBrafJ4sQnvLEThSkRZF8swce3qVR2t08rFWFk6FvrA1
UvuX2bjIRFhQGQ==
-----END CERTIFICATE-----
Generated at Sun Jul 26 20:28:25 2026 by rpki-client