Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
File: HdXNKgJh4eYGndd1iU2CbuiDbB4.mft (raw, json)
Hash identifier: DPuC6wOr7EoKsxcrjuuvG7gjt/KIS52gVi1/hSx49X0=
Subject key identifier: 71:F7:BA:7B:23:2A:48:C8:63:7A:E4:D1:34:35:2C:81:D9:A8:35:93
Authority key identifier: 1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
Certificate issuer: /CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Certificate serial: 019CE2C7A08BA0873C1BF6DF4360CCAA0305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
Manifest number: 1864
Signing time: Thu 12 Mar 2026 16:00:59 +0000
Manifest this update: Thu 12 Mar 2026 16:00:59 +0000
Manifest next update: Fri 13 Mar 2026 16:00:59 +0000
Files and hashes: 1: 53uXZdGunbCbkFbF5LCIWF6hUow.roa (hash: YdDbEGhWwhK//MEhtCOroEdkE5sIGg0zyX8WVqthVro=)
2: HdXNKgJh4eYGndd1iU2CbuiDbB4.crl (hash: /xhDv4E56zIjF1Di+ahfe9F+9G/IPvtvxr9trtuEU10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:c7:a0:8b:a0:87:3c:1b:f6:df:43:60:cc:aa:03:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Validity
Not Before: Mar 12 16:00:59 2026 GMT
Not After : Mar 13 16:00:59 2026 GMT
Subject: CN=71f7ba7b232a48c8637ae4d134352c81d9a83593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ae:9c:a2:b7:ea:34:21:ce:5f:c5:5d:53:ff:
b4:48:0f:99:f1:1f:76:c3:c9:55:75:d7:ea:6f:c5:
9a:ec:a2:f0:b0:c8:5c:3b:f7:a3:04:86:81:14:ef:
a9:39:18:5b:64:61:93:12:a2:94:0f:a4:ea:dd:a7:
48:58:5f:4a:b8:b2:f8:39:ea:0f:fe:a2:91:40:28:
57:ba:52:76:0a:f6:2e:1c:eb:44:95:ea:86:63:52:
bf:d5:8a:ac:66:30:ad:1a:5f:f8:0f:e1:8d:19:0f:
70:ae:21:2d:71:20:da:65:00:f2:84:74:3d:a7:6e:
44:da:9c:62:6b:75:55:f1:a1:f6:4b:26:70:df:18:
6a:b2:84:74:96:f4:38:c7:f8:ee:f9:35:e0:45:51:
cf:2d:e9:30:e7:20:87:a0:bd:0d:63:5a:0e:4c:dc:
db:fb:0e:e7:72:43:2b:9b:65:29:2d:a8:5e:26:b5:
eb:ca:3b:b0:71:d6:b3:ab:3e:cf:92:f7:b0:4e:d7:
51:b7:24:da:20:ce:94:7b:93:53:f6:12:6c:1c:bb:
8d:2d:fa:26:ca:e9:f2:00:57:dc:54:18:73:3b:60:
7a:d7:63:6b:79:43:ee:6a:60:fe:55:df:b9:56:97:
e9:21:0b:47:c3:e5:6c:b3:e7:2e:66:12:11:1b:dc:
0c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F7:BA:7B:23:2A:48:C8:63:7A:E4:D1:34:35:2C:81:D9:A8:35:93
X509v3 Authority Key Identifier:
keyid:1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:68:bb:fe:24:39:fa:db:df:36:c2:b0:1e:5b:1c:99:d8:c9:
bd:c8:ba:c6:28:c9:e5:8b:7d:ff:59:be:24:12:5c:a2:ac:50:
52:f0:70:d1:89:df:8a:50:01:01:27:45:d3:fb:4e:8f:b3:06:
f3:e2:19:bd:7f:ec:af:d9:28:09:c1:24:63:d3:d4:17:f2:0c:
d4:7a:d3:b4:56:be:eb:cd:53:1d:00:81:a8:e7:f9:27:a8:81:
8b:64:bd:73:d5:ec:56:25:35:ba:0f:2e:86:c8:e9:c6:95:fb:
e6:25:52:9f:48:ce:46:ef:46:35:d9:e5:52:a2:68:62:c8:94:
0c:89:37:90:a7:73:04:99:d5:f1:bc:89:b4:f6:04:e7:8f:86:
8f:42:27:f2:c7:23:5c:e9:1a:76:a5:c5:ab:34:c5:57:1a:96:
e9:a0:46:99:7c:24:b3:90:76:56:95:35:d4:9e:2d:7b:9c:57:
6f:33:bc:00:64:fd:49:3c:4d:49:29:1c:91:93:b1:3d:64:09:
86:12:6c:34:ce:ea:29:ec:f1:61:35:e0:40:8f:ab:02:eb:fc:
b0:4e:52:f3:7c:5f:08:fd:c6:9f:16:15:a5:4f:70:47:5b:2a:
c0:80:89:aa:15:ce:43:a0:3e:7f:a0:11:66:18:7a:19:db:2f:
18:96:24:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:43:38 2026 by rpki-client