Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
File: HdXNKgJh4eYGndd1iU2CbuiDbB4.mft (raw, json)
Hash identifier: QdGVR2gXpqpPCcSUAbT1+P9FksvD3Y9asX5JeTEjEE8=
Subject key identifier: C0:3F:E7:59:CA:93:DF:75:14:EF:BE:4B:A5:86:E2:DE:D4:68:F8:79
Authority key identifier: 1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
Certificate issuer: /CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Certificate serial: 01A0897A3B38E43D9B335C642AAC550CBEFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 04:01:24 +0000
Manifest this update: Thu 10 Sep 2026 04:01:24 +0000
Manifest next update: Fri 11 Sep 2026 04:01:24 +0000
Files and hashes: 1: HdXNKgJh4eYGndd1iU2CbuiDbB4.crl (hash: Kbv52Cjzy0Iv+mPsKcB2zps1fsAHARDnjKBzOzNPDLA=)
2: lF6xMupUMlipMq7GMpM0r0z9I7w.roa (hash: 0Res1n1L0Nd2qqeKb1zoNe5I0Gf7UP1O9DGe+CZxdzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:7a:3b:38:e4:3d:9b:33:5c:64:2a:ac:55:0c:be:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Validity
Not Before: Sep 10 04:01:24 2026 GMT
Not After : Sep 11 04:01:24 2026 GMT
Subject: CN=c03fe759ca93df7514efbe4ba586e2ded468f879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8c:0b:98:8a:b4:4b:97:9b:7e:c2:82:ff:a6:
db:a5:0b:f2:d7:b6:38:e2:f7:d7:be:70:ef:ab:c7:
12:b5:87:ca:82:22:9d:a2:ca:98:ae:ec:f1:a0:d5:
86:76:81:12:31:1c:d4:c7:8f:25:f2:fc:cb:2b:d1:
a1:57:67:c0:e6:14:80:26:26:32:ec:f9:3e:9a:30:
d4:d8:be:22:76:78:b0:94:b9:90:83:1d:be:22:83:
7e:2b:68:e1:cc:f0:96:49:5e:92:6f:4e:4d:64:69:
d8:0b:16:7b:d2:91:f4:cc:a5:5a:35:fd:2a:0e:21:
3d:f2:aa:11:00:94:8d:96:0f:37:ad:c4:e4:04:2f:
e3:07:46:ff:9d:7f:c5:58:eb:23:8e:52:53:d4:22:
aa:ec:42:1b:49:39:b9:28:5a:87:6a:b1:05:7f:53:
82:ad:03:d6:08:2a:72:d8:72:4d:fe:c8:ff:d5:7f:
73:62:d6:44:da:4f:7d:74:8f:89:c6:ee:b8:76:e1:
4b:b3:fa:42:51:04:94:ca:a1:8b:37:01:c7:3d:d5:
07:36:86:b5:69:dd:bd:ce:a9:88:99:c0:f2:9e:c0:
7f:cb:56:12:19:8f:44:c2:ae:ee:7e:49:c2:ef:8c:
30:75:22:a6:b6:68:7a:ca:66:14:04:b4:77:98:84:
76:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3F:E7:59:CA:93:DF:75:14:EF:BE:4B:A5:86:E2:DE:D4:68:F8:79
X509v3 Authority Key Identifier:
keyid:1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:24:d1:d0:39:cf:13:ba:b9:38:f9:db:70:ce:f2:75:97:27:
00:16:48:23:73:01:fc:29:b6:1a:5a:37:92:e4:f7:70:c5:79:
63:7a:7b:85:89:7a:d0:4d:84:98:ca:27:67:fd:05:d2:cb:ec:
b2:84:ca:54:59:de:90:52:b0:61:56:6e:d8:68:db:d9:b2:6d:
9a:8e:ed:6c:b1:58:43:d4:96:17:64:95:50:12:5c:5c:c2:bb:
b3:36:cc:11:c8:2a:95:75:3b:dd:bd:f6:6e:2c:a5:80:86:45:
b1:d7:a9:b8:8c:82:1a:82:e8:9b:2e:fe:95:d9:93:e1:f6:41:
5e:ed:2f:45:e6:ad:5a:28:17:e6:71:8e:97:e8:d7:5e:4a:7f:
66:c1:74:b7:45:a2:4b:28:4b:11:44:f0:4f:a1:90:a8:c6:0f:
57:13:53:b1:75:2c:8b:9b:94:24:dd:f1:f0:e0:e3:fb:0c:08:
d6:f2:f0:7a:90:a3:77:ef:e7:da:76:ff:c7:11:cc:cd:f3:de:
0b:d6:17:d5:0f:1e:98:ad:61:b1:31:f4:15:87:42:76:4f:df:
c0:7f:44:d1:ad:18:32:12:fe:f9:d0:17:da:47:c8:6a:29:9a:
49:32:0a:9b:61:be:28:e8:96:f2:1b:fa:99:9b:5d:75:fe:d6:
6f:79:60:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 07:31:52 2026 by rpki-client