Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
File: HdxT0d56LvfrK5DICRVUQUAEJIg.mft (raw, json)
Hash identifier: qezFfIEUe9GNpcHpkanmebpaabrmEbYFt32/r1m+qa4=
Subject key identifier: 5E:5C:05:AF:0A:6F:7B:3D:2B:FC:1D:95:17:06:C1:51:C1:01:4B:83
Authority key identifier: 1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
Certificate issuer: /CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Certificate serial: 01A17694E45FB450EEB498B9E01A8F98DDD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
Manifest number: 1AD3
Signing time: Mon 26 Oct 2026 05:00:31 +0000
Manifest this update: Mon 26 Oct 2026 05:00:31 +0000
Manifest next update: Tue 27 Oct 2026 05:00:31 +0000
Files and hashes: 1: 1aorfBEtrS5GmOfmJCAhL86Ev9o.roa (hash: nVeN0o0LJkNxID8TEKJoSJ7nvDwzMLsmkaxY6SDeSaE=)
2: 5DufPMgJR0KCs1loVUqNK0rapeQ.roa (hash: 192i2SvpWpyWi6h64yb5tDmNl+WaSoc9u17ywfGC5po=)
3: 9m1NwJ-qcj9VIX9FQ1AIp97VqgU.roa (hash: spz2iILxvpy+3hBPUWRMOBxZkYyROyMfpFUiLGtelIs=)
4: HdxT0d56LvfrK5DICRVUQUAEJIg.crl (hash: rFdXkfua1b25vyY/yYXLY081dS0XiUFk4TVfItBbHfo=)
5: yc6fB0dTyEp0nOMNxIt14wYewvg.roa (hash: q9oC20lhVIuMqPVEpkCEXpIKxa5TMW49W8VfYHcjYb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:94:e4:5f:b4:50:ee:b4:98:b9:e0:1a:8f:98:dd:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Validity
Not Before: Oct 26 05:00:31 2026 GMT
Not After : Oct 27 05:00:31 2026 GMT
Subject: CN=5e5c05af0a6f7b3d2bfc1d951706c151c1014b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f5:33:50:89:56:b2:60:2d:96:1d:44:27:e1:
99:d1:0a:f7:19:ce:21:68:29:69:ec:15:d5:04:3a:
8a:bc:d6:00:37:11:df:d1:2d:24:f0:1b:2a:61:54:
4c:25:35:10:a9:0c:4b:00:c1:4c:9f:1f:5e:a8:b3:
88:6a:07:aa:6f:ce:f2:f4:79:3f:21:61:c2:a6:a8:
ba:3a:01:25:0f:f6:2d:70:99:55:cd:ee:82:48:fa:
40:66:e5:8c:84:fb:ad:fb:fb:19:e9:fb:d6:5a:b2:
6d:42:82:cd:27:10:12:1c:97:49:0e:29:a0:c0:c3:
f2:ec:97:b1:84:83:b3:13:3c:c7:18:f8:7e:6f:32:
36:2a:e4:d7:e5:54:c6:80:c3:3a:74:a1:e3:fd:bd:
78:f4:a6:5b:b4:f5:63:fb:cb:02:64:78:10:6d:8d:
84:dc:fb:c1:a2:cd:05:d9:31:13:5b:5a:c7:f8:e1:
ac:f7:2b:8f:e7:9f:1f:84:74:f2:c1:bd:0f:28:c1:
b2:48:49:71:ef:50:56:fe:99:ab:f1:ac:15:8d:51:
af:05:07:51:e0:7b:c9:9a:70:2e:ee:43:d4:8e:52:
78:a4:de:1e:39:51:4e:a7:b0:14:dd:f9:27:5c:bf:
08:f0:20:38:ed:87:69:de:35:80:42:3d:3d:01:e8:
81:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5C:05:AF:0A:6F:7B:3D:2B:FC:1D:95:17:06:C1:51:C1:01:4B:83
X509v3 Authority Key Identifier:
keyid:1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:89:44:4b:12:5e:5d:db:89:a6:6d:4b:0c:e1:cc:88:48:a3:
78:4a:3f:a6:ce:27:92:31:64:ad:fc:c5:58:3d:76:23:ca:0a:
f0:61:e6:23:f1:8a:94:e5:83:45:f7:9a:94:a8:21:7a:52:69:
31:b5:69:47:96:d8:76:a0:da:b3:5a:63:83:60:45:f3:8c:34:
f1:ed:c5:a0:a2:54:a8:b9:59:3e:5c:bb:ff:4e:ea:c1:65:e7:
99:d2:b0:a9:0e:c7:68:64:b6:81:c5:dc:16:c3:d8:a9:27:28:
50:8b:97:7c:c9:d0:a1:11:34:1d:1c:32:f9:a4:d2:46:c6:a8:
13:d0:19:1d:df:a1:de:d4:ff:ed:59:6e:b2:ee:66:72:cf:89:
e4:ca:de:74:dc:8d:62:fa:2f:56:a7:74:70:79:6f:0b:59:18:
d4:f6:b9:ec:85:b2:89:57:ef:c8:58:7e:b2:34:fe:aa:2e:4e:
01:b4:bb:2f:3d:47:db:82:14:07:63:00:72:36:12:c6:80:f3:
0d:40:16:42:f7:e6:dd:23:1e:ea:40:ea:48:1e:21:9e:23:25:
93:93:08:49:8a:25:74:32:9d:c1:bf:0f:37:2f:63:24:2e:a7:
48:53:46:e2:3b:a9:70:2f:b2:f5:c1:35:f9:32:67:96:02:16:
a4:54:97:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 16:13:30 2026 by rpki-client