Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
File: HdXNKgJh4eYGndd1iU2CbuiDbB4.mft (raw, json)
Hash identifier: USAdAk7YggqSi4By+Pl8Kxd+6MWHsogM5ged3iQr8mA=
Subject key identifier: 89:62:2F:EA:20:0D:80:69:56:81:0A:12:2D:CB:AB:FA:F1:FB:57:71
Authority key identifier: 1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
Certificate issuer: /CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Certificate serial: 019DCC749DDAFE35C96FC3F9189D9092B72B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
Manifest number: 18DD
Signing time: Mon 27 Apr 2026 01:01:27 +0000
Manifest this update: Mon 27 Apr 2026 01:01:27 +0000
Manifest next update: Tue 28 Apr 2026 01:01:27 +0000
Files and hashes: 1: 53uXZdGunbCbkFbF5LCIWF6hUow.roa (hash: YdDbEGhWwhK//MEhtCOroEdkE5sIGg0zyX8WVqthVro=)
2: HdXNKgJh4eYGndd1iU2CbuiDbB4.crl (hash: NFiqNLS5MXfWt2vkH68x0/9YaUqoBpWIW4yRt84zx7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:74:9d:da:fe:35:c9:6f:c3:f9:18:9d:90:92:b7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Validity
Not Before: Apr 27 01:01:27 2026 GMT
Not After : Apr 28 01:01:27 2026 GMT
Subject: CN=89622fea200d806956810a122dcbabfaf1fb5771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:73:13:02:ff:b7:03:c4:3c:9b:cf:e0:21:0d:
5e:de:57:54:13:55:dd:d7:03:1a:e4:d9:4e:06:4c:
6b:71:1f:76:2e:4f:32:dd:92:59:77:80:20:de:0d:
ac:51:94:33:72:eb:3a:22:53:49:e6:40:f2:fd:7e:
66:82:fe:fa:c8:ae:b9:9e:b6:7a:f8:d7:67:2f:5c:
70:81:c5:cf:f8:81:e9:18:9b:a0:97:41:75:5b:d3:
cf:14:18:54:43:f4:bd:9b:27:64:c3:ee:12:55:6c:
23:d5:12:fd:95:3e:bf:00:4f:82:8b:b4:e9:80:1c:
9a:1a:03:0d:8c:08:22:cb:4f:28:64:5c:eb:2c:ff:
59:92:bb:ff:ae:28:aa:5b:09:70:0b:a1:ef:21:c9:
2c:55:54:f3:d1:c1:9f:5a:44:79:79:b6:fa:d8:35:
4a:d2:a1:08:60:7d:1b:98:b3:5d:cb:8e:11:db:8f:
8d:43:6c:25:f1:69:b4:df:e2:de:c0:da:1c:36:7e:
a4:ad:90:4a:00:5a:a4:05:f3:58:af:fb:fc:bd:5f:
bd:d2:f7:44:2f:64:c0:43:49:3e:23:09:71:e3:29:
62:58:43:a6:c0:95:e1:e5:ef:b8:bf:ae:1c:3a:29:
80:28:ed:65:b8:46:f1:1d:c2:b6:b0:f4:a0:31:90:
26:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:62:2F:EA:20:0D:80:69:56:81:0A:12:2D:CB:AB:FA:F1:FB:57:71
X509v3 Authority Key Identifier:
keyid:1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b2:4b:c6:31:03:3d:9e:83:25:f7:db:98:da:f0:5c:a2:4d:
f3:6a:36:3f:18:96:4d:41:9a:66:48:60:dc:78:b7:3c:e3:6f:
f0:09:d0:3c:4d:36:7b:98:98:52:cc:6e:3a:e8:e4:cc:b2:b9:
88:8e:1d:a8:64:25:02:8a:47:50:f2:b8:6f:42:22:fa:08:e7:
ca:59:9b:20:99:0e:01:73:f1:ff:af:fc:f2:7f:11:76:8d:f7:
f6:40:b3:14:dc:8e:d0:ad:78:3b:91:f8:8b:64:c9:ab:b0:c6:
e3:29:11:0d:85:f7:ce:08:4b:b6:db:bf:da:c5:86:34:d4:2e:
29:29:20:e4:ff:a0:67:c1:95:72:73:57:60:86:ae:df:d6:58:
27:ef:0a:af:52:b1:25:7f:71:74:cb:5a:5e:ff:f0:f0:2f:0e:
e5:cf:3b:f0:6e:37:b0:96:dc:b3:fa:b9:ee:50:47:a8:ff:bb:
16:08:40:0f:63:8d:79:70:f3:32:a7:c2:a9:d9:72:73:e2:da:
49:b9:92:00:47:7e:6e:09:ca:c8:4e:1b:e6:55:09:00:4b:8b:
43:91:c1:c8:6b:35:3b:fe:1c:0c:f5:9b:d6:fb:a2:51:3c:be:
d8:43:0c:9c:9f:6a:23:0e:80:32:5d:ca:90:1a:5d:c4:b8:9d:
3a:38:96:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3MdJ3a/jXJb8P5GJ2QkrcrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZDVjZDJhMDI2MWUxZTYwNjlkZDc3NTg5NGQ4MjZlZTg4
MzZjMWUwHhcNMjYwNDI3MDEwMTI3WhcNMjYwNDI4MDEwMTI3WjAzMTEwLwYDVQQD
Eyg4OTYyMmZlYTIwMGQ4MDY5NTY4MTBhMTIyZGNiYWJmYWYxZmI1NzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnMTAv+3A8Q8m8/gIQ1e3ldUE1Xd
1wMa5NlOBkxrcR92Lk8y3ZJZd4Ag3g2sUZQzcus6IlNJ5kDy/X5mgv76yK65nrZ6
+NdnL1xwgcXP+IHpGJugl0F1W9PPFBhUQ/S9mydkw+4SVWwj1RL9lT6/AE+Ci7Tp
gByaGgMNjAgiy08oZFzrLP9Zkrv/riiqWwlwC6HvIcksVVTz0cGfWkR5ebb62DVK
0qEIYH0bmLNdy44R24+NQ2wl8Wm03+LewNocNn6krZBKAFqkBfNYr/v8vV+90vdE
L2TAQ0k+Iwlx4yliWEOmwJXh5e+4v64cOimAKO1luEbxHcK2sPSgMZAmxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIliL+ogDYBpVoEKEi3Lq/rx+1dxMB8GA1UdIwQY
MBaAFB3VzSoCYeHmBp3XdYlNgm7og2weMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGRYTktnSmg0ZVlHbmRkMWlVMkNidWlEYkI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi80ZmU5ODMtNzE1Mi00OTMzLTlmMzYt
ZDg2Y2FkZDYxMGI4LzEvSGRYTktnSmg0ZVlHbmRkMWlVMkNidWlEYkI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi80ZmU5ODMtNzE1Mi00OTMzLTlmMzYtZDg2Y2FkZDYxMGI4
LzEvSGRYTktnSmg0ZVlHbmRkMWlVMkNidWlEYkI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKrJLxjED
PZ6DJffbmNrwXKJN82o2PxiWTUGaZkhg3Hi3PONv8AnQPE02e5iYUsxuOujkzLK5
iI4dqGQlAopHUPK4b0Ii+gjnylmbIJkOAXPx/6/88n8Rdo339kCzFNyO0K14O5H4
i2TJq7DG4ykRDYX3zghLttu/2sWGNNQuKSkg5P+gZ8GVcnNXYIau39ZYJ+8Kr1Kx
JX9xdMtaXv/w8C8O5c878G43sJbcs/q57lBHqP+7FghAD2ONeXDzMqfCqdlyc+La
SbmSAEd+bgnKyE4b5lUJAEuLQ5HByGs1O/4cDPWb1vuiUTy+2EMMnJ9qIw6AMl3K
kBpdxLidOjiW6w==
-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:00 2026 by rpki-client