Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
File: hds5fcdkjw_TPGMfNcwgdOTuMy4.mft (raw, json)
Hash identifier: Pj4GX7bSdtPeUsnYsMuvtmDHR4c8eQrDjjXT4LO2IvM=
Subject key identifier: 7A:F9:37:FE:48:09:9E:BA:E6:D4:D4:2C:32:C7:9E:0B:B2:DD:CC:74
Authority key identifier: 85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
Certificate issuer: /CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Certificate serial: 019DCC73B8A447B9E9857C90C08402D11337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
Manifest number: 0BF4
Signing time: Mon 27 Apr 2026 01:00:29 +0000
Manifest this update: Mon 27 Apr 2026 01:00:29 +0000
Manifest next update: Tue 28 Apr 2026 01:00:29 +0000
Files and hashes: 1: VTGNe0wLMZV0ZCvK8WlwuJb3oIU.roa (hash: xQJpTfnGU7sVo8llzufhQdICBBAxKZdw2Wu7Ywev7hE=)
2: hds5fcdkjw_TPGMfNcwgdOTuMy4.crl (hash: 6k5cJicjNPULT3f5ux4+nDSzGYYmsHMe92Hga2o5nlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:73:b8:a4:47:b9:e9:85:7c:90:c0:84:02:d1:13:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Validity
Not Before: Apr 27 01:00:29 2026 GMT
Not After : Apr 28 01:00:29 2026 GMT
Subject: CN=7af937fe48099ebae6d4d42c32c79e0bb2ddcc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0d:ce:03:4d:10:06:13:1e:cb:f3:e8:d7:43:
dc:20:b9:56:2d:a6:8d:39:a8:db:1c:79:d2:67:df:
99:c8:fd:e7:be:fc:54:7b:71:d3:df:d6:bc:4f:bc:
74:7a:e8:ad:b9:96:4f:7d:59:0b:3f:e9:9d:58:3f:
53:54:60:be:70:8e:3a:85:09:28:8e:3c:ae:e7:a6:
d0:9b:d2:b2:10:85:c0:b6:ec:1a:ee:52:a0:c8:77:
6d:6a:f5:a3:c9:76:42:5b:19:f7:13:74:01:98:df:
c6:e9:07:d9:b8:7c:8d:04:59:26:d9:0d:db:14:1c:
3c:18:3c:19:2a:f1:84:a5:08:2c:7b:79:fe:91:37:
8e:9e:13:e7:5c:d2:b4:be:0d:2f:09:22:1a:d3:48:
66:4f:d6:60:55:75:a8:3f:dc:9e:65:ce:fc:cd:6e:
d2:a0:42:e8:5a:81:10:f1:a3:11:8e:0d:53:bb:8b:
c5:e8:1e:50:0c:05:f2:b2:db:9a:24:ff:d3:15:b6:
9a:15:dc:78:eb:ec:94:86:37:6e:e1:a9:ea:2a:8b:
5f:d6:92:76:45:24:a2:81:57:1e:e1:2f:ad:a5:c3:
9a:81:4c:45:b2:c5:30:6b:d9:12:ba:35:ec:9a:4a:
34:5a:92:b0:cb:d9:13:aa:f5:88:9f:1b:a0:67:d0:
34:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F9:37:FE:48:09:9E:BA:E6:D4:D4:2C:32:C7:9E:0B:B2:DD:CC:74
X509v3 Authority Key Identifier:
keyid:85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ef:3a:f4:f9:29:2f:cc:88:00:52:d3:91:c4:9d:61:ad:86:
c0:17:2e:48:00:20:c2:78:64:a2:92:00:b5:12:b8:61:ed:bb:
04:ec:6b:e0:75:20:15:98:cb:13:fc:c1:e3:c7:3b:15:4c:26:
a7:03:a2:4e:f2:7c:59:3b:ec:98:02:69:28:b5:6e:35:69:9d:
70:18:0f:bc:e9:24:a1:ef:ea:85:be:98:bf:18:0f:f3:7f:78:
a7:cf:57:bb:4d:6b:3c:d4:0e:e9:a2:9a:17:3f:3f:95:06:f2:
d6:08:b9:d1:9e:be:a6:ab:9c:d7:d3:b8:b8:1b:33:34:92:9e:
40:ff:a1:63:a8:3d:80:d6:c3:c7:03:67:ad:71:4b:5c:0a:f3:
47:40:04:3c:5f:cc:13:95:54:b9:cc:64:b0:de:1e:ed:84:a7:
fc:34:22:60:83:d3:7f:d9:cb:76:79:4f:8f:41:4a:b6:f8:08:
fe:c5:a3:12:83:a3:89:41:53:63:ba:f3:83:99:14:6e:10:be:
f7:39:a7:09:bb:6f:16:9d:cb:ab:67:56:3e:ff:1f:21:b2:89:
0a:16:7b:b3:16:8c:f6:2b:bc:2d:e3:bd:0f:8b:04:ee:7e:b3:
df:0c:93:a2:97:35:4a:c7:34:3a:9d:2f:30:01:bb:59:9b:34:
35:06:26:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:17:15 2026 by rpki-client