Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
File: Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft (raw, json)
Hash identifier: iSTfATvRQpL8vgOWjkSN/O5Fwgt2z7cYVH2Cvut7pqw=
Subject key identifier: C1:95:3C:35:C7:ED:07:BC:69:09:75:AD:B2:AB:EC:47:3F:04:05:AF
Authority key identifier: 1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2
Certificate issuer: /CN=1dde7463ed8498020dd392322459d2cf40f226b2
Certificate serial: 019FA33C0BDF3929218ADE5B12E7E2957588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
Manifest number: 0E05
Signing time: Mon 27 Jul 2026 11:00:49 +0000
Manifest this update: Mon 27 Jul 2026 11:00:49 +0000
Manifest next update: Tue 28 Jul 2026 11:00:49 +0000
Files and hashes: 1: EPIHsxcfLuChPC0N3L4_ybUFOk0.roa (hash: 1xlVkrwEe8dHdyY6GUfJC8Bthh85BMj9UMn+rmdsApg=)
2: Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl (hash: jIlTIW1Huzw5VTIS4Ck9AbNaoGdHuuOfJ5r280qNe+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:0b:df:39:29:21:8a:de:5b:12:e7:e2:95:75:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dde7463ed8498020dd392322459d2cf40f226b2
Validity
Not Before: Jul 27 11:00:49 2026 GMT
Not After : Jul 28 11:00:49 2026 GMT
Subject: CN=c1953c35c7ed07bc690975adb2abec473f0405af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e1:90:93:19:7d:63:97:cb:ab:b9:d5:8c:94:
d1:b2:2f:99:8e:53:13:b1:8d:7a:39:66:1c:8d:7a:
29:df:1f:b6:50:6d:df:54:7e:9c:3c:a7:61:6e:87:
62:07:21:d2:3e:a7:15:58:79:45:75:59:e6:62:81:
d2:ed:38:13:74:c7:52:2d:42:93:3e:0a:a2:f2:a6:
bb:91:e7:e1:a0:22:bb:c8:7a:2f:44:d9:99:71:0b:
5c:16:ce:2f:59:1c:e8:d2:91:9b:bf:0b:aa:08:5e:
89:dd:9e:0d:1d:07:39:c4:58:e3:72:2e:fc:59:22:
b5:8c:cb:34:1c:7e:dd:fd:37:a7:9c:92:9e:8b:cc:
a1:26:0c:a7:e2:2c:f9:d5:fd:9b:1d:c0:46:e4:1d:
63:37:dd:f8:3e:87:0f:5b:8a:cb:9a:c8:24:75:9d:
5f:41:e8:22:e5:b8:07:d5:ff:97:3a:17:d1:1d:69:
4b:1d:39:09:19:f8:c0:eb:59:e2:b0:db:b0:af:88:
4d:65:9f:ee:2e:bb:41:b4:50:01:0c:68:1e:44:95:
46:41:d6:2e:cf:55:9b:60:ce:ac:c1:dd:7a:fd:81:
65:aa:04:dc:2c:d6:80:c8:dd:d8:b7:87:22:99:7b:
49:1b:2e:4b:98:71:ad:3b:c4:c0:f9:b8:6c:83:7b:
46:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:95:3C:35:C7:ED:07:BC:69:09:75:AD:B2:AB:EC:47:3F:04:05:AF
X509v3 Authority Key Identifier:
keyid:1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:76:83:a8:2e:d6:69:22:75:6e:57:93:44:19:ce:33:38:bc:
eb:c3:29:20:50:82:ca:f4:95:31:6a:56:37:a4:d3:52:b6:98:
b2:0a:87:34:7f:2a:bb:6a:0c:16:53:36:c7:3b:ce:e0:f7:40:
4a:7b:83:7a:27:7c:22:b8:7a:a1:86:da:0c:f5:f2:39:70:aa:
6b:00:5b:1a:89:cb:14:05:13:94:ef:92:2a:8a:b5:cb:54:be:
ea:91:a4:24:bf:57:18:98:0f:b0:45:88:52:2c:b1:0b:67:6e:
d8:53:ed:46:93:c6:b7:e8:63:34:a1:d1:12:5b:8e:8f:fe:c3:
b6:73:12:73:56:b0:e1:fc:b7:6f:0d:69:7a:00:a8:bc:c7:51:
6b:66:04:23:1f:01:3d:a0:7e:85:01:ba:f3:a6:15:76:6d:8b:
8f:ee:5d:c2:fd:d8:2f:5f:32:73:17:2e:3e:ad:e3:3f:22:c4:
1b:c6:16:49:37:f2:3f:27:d9:b1:30:94:3c:fe:0a:e9:9f:e5:
25:5b:84:1d:66:53:4f:bb:d4:59:4e:c4:9b:b8:ee:05:dc:68:
c5:46:5c:9b:84:81:50:51:b6:9f:c5:d1:80:3d:a3:90:bb:9c:
92:6d:13:d1:ea:70:96:f5:0e:55:18:70:63:82:bb:4e:93:0a:
78:61:8c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:54:21 2026 by rpki-client