Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
File: Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft (raw, json)
Hash identifier: NY3Ke1A9qZBdBuUbRTz0GTIYy71rl55wz5VRYZgf6KU=
Subject key identifier: 2F:AE:44:11:07:B1:39:93:EB:2F:C3:D9:06:D7:05:D4:48:09:7C:D2
Authority key identifier: 1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2
Certificate issuer: /CN=1dde7463ed8498020dd392322459d2cf40f226b2
Certificate serial: 019D375339D5AB9FF62EAD052CB35FFDF214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
Manifest number: 0CC4
Signing time: Sun 29 Mar 2026 02:01:34 +0000
Manifest this update: Sun 29 Mar 2026 02:01:34 +0000
Manifest next update: Mon 30 Mar 2026 02:01:34 +0000
Files and hashes: 1: EPIHsxcfLuChPC0N3L4_ybUFOk0.roa (hash: 1xlVkrwEe8dHdyY6GUfJC8Bthh85BMj9UMn+rmdsApg=)
2: Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl (hash: sjkQf3PbnB6tOnh/tT675lStPOBav8Wxz4VZpcsfjqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:39:d5:ab:9f:f6:2e:ad:05:2c:b3:5f:fd:f2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dde7463ed8498020dd392322459d2cf40f226b2
Validity
Not Before: Mar 29 02:01:34 2026 GMT
Not After : Mar 30 02:01:34 2026 GMT
Subject: CN=2fae441107b13993eb2fc3d906d705d448097cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:2a:ba:83:e1:05:89:71:87:e1:89:1f:00:
15:ec:b7:a0:14:51:fa:c5:73:a2:5c:30:a6:05:89:
8f:db:ab:7b:83:ab:9f:6b:3a:f3:0f:b6:ba:a3:ad:
18:e8:e3:c9:e3:e0:e1:05:f3:ab:d1:13:f4:ce:3e:
bb:74:0d:1d:ed:e4:15:11:d8:44:bc:e4:8a:ed:bd:
02:e0:b1:0e:c9:1d:ae:86:96:78:18:c6:32:ef:69:
9e:02:72:aa:f2:01:ce:2e:b9:5b:bf:0a:1c:e7:ef:
28:87:78:db:07:c2:12:4b:2e:c2:05:98:89:21:c0:
17:24:11:ad:89:12:d6:41:d0:fd:ad:e0:42:10:ae:
72:27:e5:11:b9:d1:b4:ab:4c:4e:9a:38:b5:08:90:
5c:af:e5:af:ec:b2:79:01:ad:18:58:01:67:ee:0f:
88:32:26:cd:b2:c8:e3:fc:28:90:78:7a:55:e3:a7:
fe:f6:01:02:3a:6f:c4:60:1f:cc:cc:2d:ec:9f:ef:
7a:f8:5a:13:b0:da:84:4d:18:1d:68:0c:c5:8b:f1:
81:f3:ee:0f:d8:be:c6:34:4a:60:69:ea:b4:a7:a9:
fb:74:e8:fc:48:98:08:5d:b5:95:07:36:35:5d:55:
59:d2:bb:c2:83:15:db:6d:da:5f:a4:23:a5:e2:00:
84:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AE:44:11:07:B1:39:93:EB:2F:C3:D9:06:D7:05:D4:48:09:7C:D2
X509v3 Authority Key Identifier:
keyid:1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:cf:09:c2:38:21:6a:83:00:14:c6:7a:f2:9b:50:f7:9e:b1:
34:44:6c:7b:73:bf:fb:e0:8e:ee:88:a2:22:0f:d8:5b:30:6e:
40:d1:2b:b0:58:42:e2:49:62:32:d0:c7:f4:d3:3f:2f:75:e7:
dd:de:5f:60:c2:fd:61:a2:82:ce:ec:be:8f:22:30:71:c2:9f:
05:7d:01:c0:21:2a:f0:b6:62:30:e1:db:82:4d:4a:d8:67:dd:
8e:55:16:b1:61:5c:9e:b1:dc:e1:94:22:e3:85:91:82:8e:86:
f5:92:3b:1d:ee:ac:40:ad:96:21:0a:03:7f:06:9b:de:7c:d0:
f2:e3:ab:fd:d0:ce:08:a9:62:00:d5:66:a4:37:3e:05:8f:1b:
98:41:1f:a2:f0:9e:8a:24:d7:2b:0d:c8:0c:d1:13:9d:03:fa:
14:40:e8:d8:6b:50:90:d7:6b:5f:e3:c7:82:3c:c2:53:3f:d6:
e6:47:08:87:6f:32:eb:b1:f1:98:1c:1f:b5:af:33:fd:4a:c6:
5f:71:d9:02:ad:61:1c:75:b0:18:1d:7b:ce:4c:7a:9f:06:15:
e2:df:a5:94:df:9a:6a:ac:a3:d7:6a:60:ee:91:b4:9f:a9:ef:
2c:f3:e3:7a:0b:30:17:27:22:09:9c:c0:bd:12:00:2e:d5:9d:
03:23:21:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:49 2026 by rpki-client