Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
File: HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft (raw, json)
Hash identifier: YQuiEagmUS1/r5YqiKf1IOVK8rk/0RtR9PmLrXTRfqM=
Subject key identifier: 44:EA:C2:B7:A6:08:76:33:34:FC:51:A6:CA:1A:5C:D0:AC:16:12:02
Authority key identifier: 1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
Certificate issuer: /CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Certificate serial: 019DD087D5896C132D4D4A90314CCCDB77B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
Manifest number: 124A
Signing time: Mon 27 Apr 2026 20:00:56 +0000
Manifest this update: Mon 27 Apr 2026 20:00:56 +0000
Manifest next update: Tue 28 Apr 2026 20:00:56 +0000
Files and hashes: 1: 2xP9m1PRgrEVDmtd4i2eqIDsm-A.roa (hash: YQaYHIwFaP+vp12w1AQ2mwIWx2mQt+KNJdo+tWceYBM=)
2: 5hq20ZEzfqPUd8jJerdhQ6lvpnQ.roa (hash: QttHQD+33asdEv7t7iqO8hCmG2Lg/3s4dda2hulSCvo=)
3: HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl (hash: P3p1vmYdCG3SXX8HtUfYFe/LIF7pKNMYHpvr3L4C538=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:87:d5:89:6c:13:2d:4d:4a:90:31:4c:cc:db:77:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Validity
Not Before: Apr 27 20:00:56 2026 GMT
Not After : Apr 28 20:00:56 2026 GMT
Subject: CN=44eac2b7a608763334fc51a6ca1a5cd0ac161202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d4:17:21:61:f1:e0:31:4d:83:20:3f:6b:29:
39:53:b3:e9:77:14:6a:29:bc:43:00:e1:ec:a0:54:
e3:20:84:de:6a:a0:18:67:25:0c:f9:53:57:15:10:
f8:7b:13:3b:a3:8b:af:4e:6f:22:40:ca:ef:fd:77:
32:9d:91:47:4b:c7:ba:e3:37:0d:ef:d0:48:0d:0a:
96:bb:a2:46:b4:39:7f:21:13:b0:55:3d:5a:4a:d0:
8c:be:74:76:b7:d3:bd:16:89:25:b7:ec:50:f6:e6:
47:ef:24:a6:0e:ab:38:78:31:66:e7:e7:78:93:39:
13:63:3a:44:ed:91:53:1b:5f:83:6f:32:2a:a6:d6:
49:99:89:59:39:b4:96:50:2e:a4:d1:c8:eb:6f:6e:
c9:18:b3:39:43:11:ec:ec:35:6f:6e:12:34:70:30:
3a:9e:72:cc:6c:c3:b8:9d:04:4e:b5:b8:ae:a3:c1:
3f:08:03:71:b8:2b:34:65:d0:7d:27:5c:0d:bc:f7:
40:5e:80:dc:6b:33:ab:b4:58:34:fe:91:ce:7d:2a:
4a:2f:67:87:7f:b2:0d:34:d5:4d:60:3c:f7:c6:cb:
75:51:63:07:64:b9:bb:31:35:de:69:36:5d:15:5a:
e5:1b:46:e4:f7:ff:dc:7f:27:4f:f1:87:8e:ac:1e:
3a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EA:C2:B7:A6:08:76:33:34:FC:51:A6:CA:1A:5C:D0:AC:16:12:02
X509v3 Authority Key Identifier:
keyid:1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:77:96:a6:af:d4:42:17:e0:59:33:50:0c:95:2a:d4:2a:99:
8e:31:17:c1:b4:78:92:cf:ec:ed:17:23:e0:69:32:bb:db:42:
34:7e:12:e9:72:d4:35:31:be:08:b3:6e:7e:eb:f0:f3:4d:8e:
64:be:81:ba:6d:f4:b3:49:89:4e:f7:7b:4a:0a:76:8f:9f:c8:
3f:8b:a9:f9:ff:d8:4d:31:19:67:26:51:c3:de:67:c8:29:16:
32:03:bf:1f:af:a8:fe:e7:87:87:b7:9c:64:0f:bf:49:6e:23:
48:5d:d0:88:b9:89:5a:6e:10:d9:b1:77:f7:7b:1b:10:4e:9b:
ab:1f:42:55:cf:74:b1:09:38:7b:cc:52:23:a5:c6:33:26:65:
b1:ed:62:f3:8c:84:b1:5e:d8:4b:33:33:a5:c3:32:f3:c3:3a:
ef:5b:35:e8:93:5b:e7:c6:8d:98:e3:57:1c:bd:ef:83:b6:be:
81:6b:86:2f:33:8c:8b:8a:7d:ee:1c:12:6c:17:ec:11:73:29:
d8:d4:d9:48:c8:b1:cd:76:cb:8f:8e:a1:6c:c6:29:c5:c1:33:
d2:f4:d8:da:17:4b:0a:43:d0:27:7e:c1:e0:e3:ad:47:83:e7:
af:34:5c:84:ba:c5:89:f2:d5:54:a1:61:11:c5:69:42:fb:3c:
e7:fd:2b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 05:46:49 2026 by rpki-client