Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
File: HdovfibLfXpWrGQF6QxqYakq0tE.mft (raw, json)
Hash identifier: h1XVQqFiF1IoZMsgiA05kB3x5u7SWi5EuxBh3Hf2MtA=
Subject key identifier: 4A:49:17:98:4F:93:08:64:D9:AC:79:B1:EC:41:3E:1D:87:9E:74:39
Authority key identifier: 1D:DA:2F:7E:26:CB:7D:7A:56:AC:64:05:E9:0C:6A:61:A9:2A:D2:D1
Certificate issuer: /CN=1dda2f7e26cb7d7a56ac6405e90c6a61a92ad2d1
Certificate serial: 019D39E5F324D9BEB66CEDF5678271739611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
Manifest number: 1846
Signing time: Sun 29 Mar 2026 14:01:04 +0000
Manifest this update: Sun 29 Mar 2026 14:01:04 +0000
Manifest next update: Mon 30 Mar 2026 14:01:04 +0000
Files and hashes: 1: HdovfibLfXpWrGQF6QxqYakq0tE.crl (hash: mV/Ny09bF6qfgSqQFwLfG7t5bbTwd7av4c9lzNxpmd0=)
2: rEkkspT-t1acu0Gj9pI1cB5NvQM.roa (hash: 90e8BKkH1L1Ce8jWwpqnzgICGLSdnM4iehMTZrxu/+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:f3:24:d9:be:b6:6c:ed:f5:67:82:71:73:96:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dda2f7e26cb7d7a56ac6405e90c6a61a92ad2d1
Validity
Not Before: Mar 29 14:01:04 2026 GMT
Not After : Mar 30 14:01:04 2026 GMT
Subject: CN=4a4917984f930864d9ac79b1ec413e1d879e7439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:09:90:f7:d7:3f:c6:e9:fc:53:1b:a4:01:ee:
c6:db:1f:35:9a:b6:40:12:90:35:9e:89:ea:84:80:
60:1b:79:4b:00:da:f6:d1:e7:23:78:a3:ca:2a:39:
51:af:9a:0d:40:69:5d:21:27:85:06:58:71:c9:0f:
61:f7:b5:25:42:8e:03:fe:11:65:4b:80:14:d1:5d:
8f:5c:14:02:41:6d:b6:63:60:3b:f1:8a:5d:42:8d:
2e:19:e2:f7:76:43:bd:ac:92:ef:4e:34:1c:41:c2:
28:1a:36:bc:1b:72:5f:29:5c:2b:85:a3:48:b7:c6:
f5:e4:8a:b1:ca:0f:77:a6:f6:27:64:a4:e8:2f:da:
14:ee:8f:7e:56:ab:67:aa:e7:db:ee:58:fb:e9:98:
64:47:a4:a0:99:b7:61:cd:39:8f:52:a9:e7:60:04:
24:20:63:9e:00:90:d5:0c:33:05:a4:12:a5:b8:7c:
d6:42:f1:72:82:a5:d5:e6:61:e3:97:d5:6b:66:50:
5b:7e:b8:df:52:17:f0:d5:9e:68:6e:27:4d:79:12:
5e:0a:fd:51:e0:0a:4a:10:ba:0a:24:cd:1b:a2:b4:
53:aa:ff:01:66:29:f1:38:1f:c3:80:24:60:70:bb:
dc:e1:b9:3e:2c:55:c0:96:d7:93:6a:f2:aa:56:1d:
45:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:49:17:98:4F:93:08:64:D9:AC:79:B1:EC:41:3E:1D:87:9E:74:39
X509v3 Authority Key Identifier:
keyid:1D:DA:2F:7E:26:CB:7D:7A:56:AC:64:05:E9:0C:6A:61:A9:2A:D2:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:23:9d:5f:5c:df:21:63:2c:42:f0:3a:1d:71:4c:55:c5:ad:
85:4c:0f:18:6d:b4:dc:7f:4e:a6:65:e5:01:3a:2e:1a:9f:e8:
fe:8c:5a:0a:da:91:5a:4b:1f:ff:fb:0e:9a:f2:b1:c8:86:04:
61:a1:63:38:e8:10:f1:34:2b:85:74:24:ca:60:c7:51:48:33:
a0:a1:2e:a4:c4:c7:ee:93:71:8a:46:bb:41:a8:e5:c1:7b:e4:
49:90:5a:d7:55:e0:ca:92:b8:cc:3a:39:30:54:c1:ac:5c:66:
6e:77:6f:4e:07:a5:94:5b:63:85:ca:6a:0c:b0:4a:b8:9c:e0:
09:d7:9e:b6:68:c1:4b:49:75:ee:88:63:aa:77:f5:19:53:45:
94:47:d5:2a:45:c4:cb:6b:7d:e0:c3:0a:03:81:d4:30:52:6d:
21:5b:1e:35:48:4b:ce:a6:de:d2:21:bd:41:9d:6d:e2:ec:e6:
65:91:b4:ea:8f:2f:b3:0b:5f:26:90:cf:f8:1f:93:9a:7f:2d:
a5:71:be:eb:03:12:bb:6f:1b:48:09:63:7d:c0:7e:7e:eb:84:
57:ef:82:3f:16:f7:28:78:16:d3:d2:67:c5:46:0f:a3:af:c3:
15:4d:a1:07:f8:cd:63:da:ce:92:c6:f8:ed:c6:1a:09:eb:09:
d5:68:69:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:12 2026 by rpki-client