Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
File: Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft (raw, json)
Hash identifier: aJ3Q1cB7t5hvxkHybTKMGJWYYKbr7RUA9Z1eY70Qos0=
Subject key identifier: CD:65:70:D8:B9:1E:28:6B:D7:9E:17:FC:0E:51:95:EE:04:AB:7D:B5
Authority key identifier: 1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2
Certificate issuer: /CN=1dde7463ed8498020dd392322459d2cf40f226b2
Certificate serial: 01A17C60247D010A5553421C5CAFEBE359F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
Manifest number: 0EFA
Signing time: Tue 27 Oct 2026 08:00:37 +0000
Manifest this update: Tue 27 Oct 2026 08:00:37 +0000
Manifest next update: Wed 28 Oct 2026 08:00:37 +0000
Files and hashes: 1: EPIHsxcfLuChPC0N3L4_ybUFOk0.roa (hash: 1xlVkrwEe8dHdyY6GUfJC8Bthh85BMj9UMn+rmdsApg=)
2: Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl (hash: sGg3TS+J4sV52Os56pQ093rh1z74/gkz/6ERnoOxHmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:24:7d:01:0a:55:53:42:1c:5c:af:eb:e3:59:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dde7463ed8498020dd392322459d2cf40f226b2
Validity
Not Before: Oct 27 08:00:37 2026 GMT
Not After : Oct 28 08:00:37 2026 GMT
Subject: CN=cd6570d8b91e286bd79e17fc0e5195ee04ab7db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9c:72:15:1c:56:cf:4c:b8:e5:ea:30:fb:df:
fa:1b:f8:9c:4e:36:e5:b4:d5:fb:87:a9:4f:22:a7:
f1:7b:04:b5:d0:d2:1d:fe:6e:22:e0:59:33:b7:7d:
ce:bd:df:b9:ae:f7:8b:ac:8f:d7:17:77:a3:42:15:
d8:d5:65:ec:e6:17:de:c1:0e:84:39:02:bd:ce:56:
28:8b:eb:f7:f7:c8:61:de:40:b5:0b:3a:cf:00:54:
e9:8f:90:55:2b:62:28:46:c6:ed:e7:b9:24:24:8a:
d0:41:52:61:d4:6c:db:39:1b:54:b6:ea:ec:5b:84:
1a:ed:f5:a3:4e:3b:32:fd:8b:7b:28:46:24:68:99:
1f:24:f9:9e:78:a8:13:cd:e6:f9:1e:6c:c9:95:ad:
3f:7b:21:e9:0c:6a:6e:da:62:0c:71:ac:bb:04:18:
85:0f:37:58:76:aa:4e:e2:bf:51:d6:32:10:0e:4d:
bc:90:74:87:18:3a:7f:da:46:fe:98:ac:bc:d5:c9:
79:40:78:c6:ad:3b:f0:c5:47:bd:e6:cd:19:86:bc:
b6:83:11:ec:be:44:99:48:97:66:af:26:1d:bc:33:
39:7f:67:29:63:78:4b:59:44:6f:59:b7:5f:34:81:
2d:20:83:26:15:be:c4:4b:e1:a7:31:0c:45:db:16:
e4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:65:70:D8:B9:1E:28:6B:D7:9E:17:FC:0E:51:95:EE:04:AB:7D:B5
X509v3 Authority Key Identifier:
keyid:1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:06:14:cd:7b:01:fb:d2:52:61:a2:3e:f8:fa:5e:8a:5c:f2:
50:1a:98:78:cf:bd:c2:5f:b4:51:c0:43:e5:5b:5d:c2:fe:21:
99:51:ba:b2:49:81:f5:dd:ce:42:ce:9f:68:0c:19:7b:fe:10:
0f:9c:82:87:c0:a0:f4:af:16:96:7e:b1:e9:40:2a:10:77:79:
e6:9a:cb:bb:0e:43:ab:21:c1:29:d2:46:60:9d:b6:ad:43:0e:
db:37:7f:da:54:2e:35:e4:66:74:6e:66:c9:7f:06:79:b5:68:
8d:02:a7:8c:4c:08:fa:07:90:9b:a6:1e:94:1a:19:86:59:b3:
e1:61:b7:09:30:06:b5:cd:35:ea:bc:d1:dc:82:bc:02:9f:29:
4e:85:0f:50:ee:e3:87:11:11:b4:3c:46:ee:89:13:cb:89:1e:
80:2b:5f:ad:3b:75:19:ff:2a:32:75:cd:35:22:10:ad:e2:52:
ba:41:be:e3:01:57:b1:34:12:a0:fb:15:11:4f:45:3d:7e:82:
f7:d8:5c:fc:80:12:a1:e6:70:bc:3d:5d:30:0a:38:fb:ee:b6:
c0:e9:57:d9:95:1e:34:a0:3d:4f:7d:a7:13:7b:d0:ee:d3:a6:
35:b2:81:64:21:3c:f4:1c:3d:35:c0:1e:f3:0b:e4:7e:de:6f:
57:20:e9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:41:41 2026 by rpki-client