Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
File: Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft (raw, json)
Hash identifier: jOt36UyDQxd3YW0ChGpiMt88hBV2BhIfcID/WjdvgcQ=
Subject key identifier: FA:9B:4D:1A:60:9D:BA:4D:32:B6:FE:C3:3D:C0:7C:48:7D:3B:A3:5A
Authority key identifier: 1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2
Certificate issuer: /CN=1dde7463ed8498020dd392322459d2cf40f226b2
Certificate serial: 019EB98F07619B784E8A266BFDACB5D781C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
Manifest number: 0D8C
Signing time: Fri 12 Jun 2026 02:00:18 +0000
Manifest this update: Fri 12 Jun 2026 02:00:18 +0000
Manifest next update: Sat 13 Jun 2026 02:00:18 +0000
Files and hashes: 1: EPIHsxcfLuChPC0N3L4_ybUFOk0.roa (hash: 1xlVkrwEe8dHdyY6GUfJC8Bthh85BMj9UMn+rmdsApg=)
2: Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl (hash: RK70CLIPssLY/XRVwhpLOgSmPKNIijcDkOCIfDL2p20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:07:61:9b:78:4e:8a:26:6b:fd:ac:b5:d7:81:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dde7463ed8498020dd392322459d2cf40f226b2
Validity
Not Before: Jun 12 02:00:18 2026 GMT
Not After : Jun 13 02:00:18 2026 GMT
Subject: CN=fa9b4d1a609dba4d32b6fec33dc07c487d3ba35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:69:88:e6:7d:7a:2b:f1:bf:46:4a:25:e9:44:
74:da:af:6f:0e:2e:de:de:33:e4:f4:71:86:af:02:
88:04:36:5c:d5:16:48:88:52:9c:f2:65:30:19:21:
f8:4a:92:9d:7a:d3:38:a8:41:32:9c:4f:df:39:8c:
01:1f:92:e9:d8:53:d6:18:57:8f:5a:d1:95:e3:fc:
34:cd:1b:f6:e1:7d:bf:28:13:52:c4:3f:10:f2:55:
bf:5e:e2:9e:0f:0e:41:64:b0:57:45:6d:4c:ce:c3:
d8:20:24:95:73:a6:31:34:04:ed:76:4f:6f:0f:83:
0d:c4:44:13:11:fa:bf:61:b6:e5:5f:f2:2e:96:75:
8b:61:4a:00:67:72:93:5c:c3:05:92:b0:55:f0:dc:
24:8c:da:6a:6a:56:17:0b:b9:90:53:3c:b2:fe:0a:
2d:c6:a3:68:1d:9b:22:2f:b6:63:0c:00:3d:cd:58:
17:0b:7b:fc:62:b0:be:62:d4:99:d9:cd:60:7c:dc:
41:71:99:ef:94:e5:8a:df:18:ab:e7:e2:78:88:6c:
e7:8c:58:73:03:59:a5:c9:98:13:96:94:e4:2e:4f:
81:b4:d3:e1:e6:da:d2:96:c7:55:c4:13:db:75:9e:
f7:a1:82:85:92:c9:35:2b:7a:9b:74:65:43:93:bd:
45:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9B:4D:1A:60:9D:BA:4D:32:B6:FE:C3:3D:C0:7C:48:7D:3B:A3:5A
X509v3 Authority Key Identifier:
keyid:1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:62:ea:fc:e5:b9:dd:49:ba:57:42:f5:26:dc:2d:ec:d0:38:
d0:0b:39:12:c2:44:8f:2e:77:63:ec:7a:80:8c:4f:5c:34:08:
62:1a:e6:71:a3:5d:d0:d4:4c:1e:11:67:11:21:cb:c8:08:b8:
44:8b:b7:a8:82:f7:ec:3e:5b:53:61:47:4b:dd:ae:6f:b3:e0:
a4:1c:a4:d2:32:4e:3e:e4:9b:a8:77:54:b0:7b:7c:c8:53:98:
b4:f8:d7:af:73:e7:2e:7a:cd:64:fd:18:fe:65:9e:0d:fb:10:
62:c7:b2:7a:de:78:6e:15:81:44:fa:06:c7:6b:3a:f4:9b:b4:
05:e9:ab:c8:fb:5f:e3:3c:eb:39:28:ce:ec:1a:05:47:03:4a:
87:18:d9:e8:6e:14:09:6b:81:07:6e:70:c8:74:20:12:9e:02:
e1:15:de:b0:45:7b:15:f4:73:e9:ee:19:e9:75:a0:07:2f:f1:
98:4f:fb:73:a3:a2:71:8f:df:c4:46:fb:08:8a:81:0c:56:a4:
5a:24:01:d8:f1:45:67:af:29:ad:1e:e9:47:23:89:e0:e0:9a:
7d:6e:2c:9e:df:ab:b0:09:5b:34:99:c9:8c:27:d2:f1:44:d3:
80:7e:98:8f:ad:1c:a5:de:da:3a:ca:d0:d0:ef:22:93:b9:f9:
89:46:b0:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65jwdhm3hOiiZr/ay114HDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZGU3NDYzZWQ4NDk4MDIwZGQzOTIzMjI0NTlkMmNmNDBm
MjI2YjIwHhcNMjYwNjEyMDIwMDE4WhcNMjYwNjEzMDIwMDE4WjAzMTEwLwYDVQQD
EyhmYTliNGQxYTYwOWRiYTRkMzJiNmZlYzMzZGMwN2M0ODdkM2JhMzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGmI5n16K/G/Rkol6UR02q9vDi7e
3jPk9HGGrwKIBDZc1RZIiFKc8mUwGSH4SpKdetM4qEEynE/fOYwBH5Lp2FPWGFeP
WtGV4/w0zRv24X2/KBNSxD8Q8lW/XuKeDw5BZLBXRW1MzsPYICSVc6YxNATtdk9v
D4MNxEQTEfq/YbblX/IulnWLYUoAZ3KTXMMFkrBV8NwkjNpqalYXC7mQUzyy/got
xqNoHZsiL7ZjDAA9zVgXC3v8YrC+YtSZ2c1gfNxBcZnvlOWK3xir5+J4iGznjFhz
A1mlyZgTlpTkLk+BtNPh5trSlsdVxBPbdZ73oYKFksk1K3qbdGVDk71FLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqbTRpgnbpNMrb+wz3AfEh9O6NaMB8GA1UdIwQY
MBaAFB3edGPthJgCDdOSMiRZ0s9A8iayMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGQ1MFktMkVtQUlOMDVJeUpGblN6MER5SnJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81NTI4M2EtMDlhMC00ZGE4LWE5Njgt
NDNjN2YwMjdjNmU0LzEvSGQ1MFktMkVtQUlOMDVJeUpGblN6MER5SnJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81NTI4M2EtMDlhMC00ZGE4LWE5NjgtNDNjN2YwMjdjNmU0
LzEvSGQ1MFktMkVtQUlOMDVJeUpGblN6MER5SnJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmLq/OW5
3Um6V0L1Jtwt7NA40As5EsJEjy53Y+x6gIxPXDQIYhrmcaNd0NRMHhFnESHLyAi4
RIu3qIL37D5bU2FHS92ub7PgpByk0jJOPuSbqHdUsHt8yFOYtPjXr3PnLnrNZP0Y
/mWeDfsQYseyet54bhWBRPoGx2s69Ju0BemryPtf4zzrOSjO7BoFRwNKhxjZ6G4U
CWuBB25wyHQgEp4C4RXesEV7FfRz6e4Z6XWgBy/xmE/7c6OicY/fxEb7CIqBDFak
WiQB2PFFZ68prR7pRyOJ4OCafW4snt+rsAlbNJnJjCfS8UTTgH6Yj60cpd7aOsrQ
0O8ik7n5iUaw2A==
-----END CERTIFICATE-----
Generated at Fri Jun 12 10:10:16 2026 by rpki-client