
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
File: HdXNKgJh4eYGndd1iU2CbuiDbB4.mft (raw, json)
Hash identifier: HlEvwy9A8TYMKpQJsJY0zfiZgsda48RUfjXHOQaigpw=
Subject key identifier: EA:E5:2C:88:B6:73:E8:EF:3F:B3:A2:43:26:2C:E2:FA:92:FC:72:5A
Authority key identifier: 1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
Certificate issuer: /CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Certificate serial: 019EB62100CC4909DB457CD604EA56111284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
Manifest number: 1956
Signing time: Thu 11 Jun 2026 10:01:16 +0000
Manifest this update: Thu 11 Jun 2026 10:01:16 +0000
Manifest next update: Fri 12 Jun 2026 10:01:16 +0000
Files and hashes: 1: 53uXZdGunbCbkFbF5LCIWF6hUow.roa (hash: YdDbEGhWwhK//MEhtCOroEdkE5sIGg0zyX8WVqthVro=)
2: HdXNKgJh4eYGndd1iU2CbuiDbB4.crl (hash: PI7qtjDqsy3zyhplSPqnk3n8hl52p0+T6Vq1IHbGTdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:21:00:cc:49:09:db:45:7c:d6:04:ea:56:11:12:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Validity
Not Before: Jun 11 10:01:16 2026 GMT
Not After : Jun 12 10:01:16 2026 GMT
Subject: CN=eae52c88b673e8ef3fb3a243262ce2fa92fc725a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:14:d7:20:4d:d0:50:18:95:75:01:8f:32:75:
de:4b:ff:52:03:cf:25:06:d3:97:dc:13:3f:b9:2c:
4e:a8:cd:be:88:b9:8f:f0:63:18:24:37:55:4c:d1:
04:7a:17:fa:2c:68:70:4f:ea:11:cb:ec:d4:ed:27:
fe:69:1a:4a:b9:04:ef:98:f0:e2:bc:b3:5a:06:eb:
bc:d1:9c:55:66:7e:f8:5d:15:84:6b:2b:f5:ea:db:
81:e2:59:43:90:38:07:87:6e:e7:41:cc:84:ca:a1:
27:77:20:94:90:c6:5f:1c:5e:e0:b2:b8:f7:2c:3e:
7e:ec:32:40:b8:d2:ff:58:5a:ad:f9:04:15:97:2d:
3c:62:5b:48:be:65:d6:aa:6b:b9:cf:ab:61:67:d1:
36:f5:65:2a:94:fb:69:07:d1:4b:89:41:dd:28:45:
49:56:16:1f:93:7e:2d:e6:25:67:33:c1:fc:b0:2f:
9d:bc:17:45:85:80:14:71:e0:c8:ab:b1:31:55:31:
bb:4b:78:4e:71:a1:99:ba:a3:60:1d:94:60:98:98:
e5:15:ff:8f:69:3b:23:5f:de:92:a1:7d:ff:88:7d:
9f:ed:b5:1e:5e:aa:14:fd:c5:49:67:8a:30:5c:76:
35:a7:fb:ac:9f:df:38:2b:4b:ce:c2:f0:80:d9:2a:
d8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E5:2C:88:B6:73:E8:EF:3F:B3:A2:43:26:2C:E2:FA:92:FC:72:5A
X509v3 Authority Key Identifier:
keyid:1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d6:5f:b0:be:13:53:10:dc:95:09:c6:b9:36:6c:63:a6:e9:
8d:c5:ce:15:2b:9b:bc:4e:70:da:a7:2c:38:34:4e:3b:15:06:
24:9f:26:b6:da:fc:20:a5:54:08:3c:df:ef:19:51:f8:da:33:
63:a5:91:c3:96:e3:98:49:e8:b0:b8:a0:cc:33:a1:cb:b3:c2:
92:1a:af:c3:36:d8:53:27:ee:66:c6:47:35:81:7f:56:c1:4d:
20:b8:21:34:ac:76:d6:1d:49:12:bc:aa:e8:e0:9b:32:d1:50:
32:3c:f3:55:5e:89:0d:f8:31:59:17:b0:77:d8:74:2e:43:f5:
74:c5:6f:7e:fd:bb:96:89:1e:be:82:1a:f3:a5:38:71:a9:9c:
82:37:f8:6b:d0:de:90:15:e8:02:6a:11:27:42:5c:0a:37:0f:
f0:16:03:2d:f9:a1:54:58:cd:6b:1f:70:be:e1:79:c5:a8:f7:
a9:0b:0b:9c:92:6e:44:01:68:e0:c1:b2:9b:29:25:a5:36:6d:
0c:fa:f2:4e:b1:02:2c:60:2a:91:5a:3e:12:70:6d:60:7a:44:
67:ba:8d:e9:ec:88:9a:b6:32:fd:32:fc:36:b5:d4:49:25:e0:
15:16:fc:89:97:2e:69:c1:b1:09:04:aa:e2:f9:bc:04:ea:16:
76:dd:05:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:18:20 2026 by rpki-client