Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
File: HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft (raw, json)
Hash identifier: d7n2B1i3eLSrYkfqXaZfs+tMbhYYQd6vyeuMrt8CSJQ=
Subject key identifier: FD:9D:BB:51:94:C2:4F:98:05:BE:9A:28:B1:1F:DE:5F:A5:04:31:A2
Authority key identifier: 1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
Certificate issuer: /CN=1dd7088d9da221f0565eb178443600171e7977aa
Certificate serial: 019EB76AD7FFAFA6600A4CFE3D013D18B745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
Manifest number: 045B
Signing time: Thu 11 Jun 2026 16:01:33 +0000
Manifest this update: Thu 11 Jun 2026 16:01:33 +0000
Manifest next update: Fri 12 Jun 2026 16:01:33 +0000
Files and hashes: 1: CjgS_b2r-3qplZ5KDVZa8VStIhQ.roa (hash: 243j3TvIuSB1M/hUhuu8ZLn+QAVeT40RY9rpOYK+p6Q=)
2: HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl (hash: 8KHG72JEmValUDfTSXsQ9idePozmIizhMxkUtsebEvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 16:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:d7:ff:af:a6:60:0a:4c:fe:3d:01:3d:18:b7:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd7088d9da221f0565eb178443600171e7977aa
Validity
Not Before: Jun 11 16:01:33 2026 GMT
Not After : Jun 12 16:01:33 2026 GMT
Subject: CN=fd9dbb5194c24f9805be9a28b11fde5fa50431a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:24:15:46:4b:4a:cb:4a:ff:4e:5c:e1:10:
4c:8b:e1:d6:06:42:90:36:c5:85:65:d5:9c:d9:0c:
50:26:12:ac:60:58:10:6c:09:c5:9d:0f:bc:5a:4f:
13:4b:dc:03:b5:90:fe:c3:00:1c:6b:95:b8:07:a8:
74:4c:1f:46:b8:1e:3d:a8:72:b3:6e:4e:e6:0e:0e:
71:de:af:03:ce:f6:1f:51:29:d0:62:9a:42:ff:85:
13:86:f6:26:97:55:98:87:a5:c9:82:fd:b4:6a:af:
e6:a7:ad:95:10:63:19:83:b2:b7:56:4b:ed:2b:3e:
56:09:f0:37:c2:ad:e5:c7:f8:b1:32:6b:e5:d3:0f:
e3:ad:08:d5:7b:d4:2d:9e:1b:8d:f5:b5:8f:7f:25:
8b:73:be:25:b9:cf:2f:83:c7:a0:de:64:42:0e:7e:
80:e1:76:9b:b7:2c:ad:1b:a7:a6:0e:a0:7e:84:42:
f7:25:ed:5e:73:f4:48:ed:9a:a3:03:80:12:f8:e9:
47:b5:ba:14:78:2d:c5:f2:5c:6d:8d:82:ef:9e:24:
7e:53:ae:ea:d0:62:a9:a7:11:37:2a:53:39:83:13:
04:b7:9f:ce:c8:07:5c:22:d2:70:c1:cf:e6:2a:84:
43:ed:39:eb:b6:00:05:f4:4f:87:43:37:5a:e8:c7:
73:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9D:BB:51:94:C2:4F:98:05:BE:9A:28:B1:1F:DE:5F:A5:04:31:A2
X509v3 Authority Key Identifier:
keyid:1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:57:39:36:5d:7c:31:b2:c2:b2:74:e4:30:ed:56:2c:22:c5:
4b:5c:04:6b:4f:84:92:d5:52:4c:27:9f:63:77:64:05:70:06:
11:96:77:48:5a:a6:4a:c8:87:0a:08:54:a3:d2:48:13:87:5f:
20:08:bb:34:b4:5f:09:ca:c6:34:43:c0:61:f9:12:2d:fb:fd:
9a:cc:48:57:d5:27:ac:ec:5f:46:39:34:b2:8f:4f:fd:b7:a6:
bf:84:09:30:d7:c9:8d:31:d7:0e:60:9f:80:4d:ee:b5:eb:0f:
1f:5e:12:e8:10:e9:83:cf:66:7b:f9:3a:7d:59:4d:c9:c9:3b:
bc:ae:ae:77:dc:d1:4b:6f:9e:30:95:cf:ee:80:9e:9e:6a:da:
6e:19:3e:93:e3:e4:2e:c2:f4:2f:76:c8:4e:a2:3a:31:1c:cf:
85:f2:bd:91:16:c4:d4:e1:b6:ee:68:1e:56:59:cb:f0:06:03:
92:f6:16:c2:86:75:77:fb:6f:c0:f1:fa:9f:16:1b:fe:7b:0b:
ed:e3:40:24:9d:b0:2c:f1:6c:67:2a:93:f9:42:d4:a8:63:a8:
28:e7:5b:b4:04:6d:c1:19:6a:f1:06:0e:55:96:5e:d4:51:ec:
57:17:4f:6e:0e:40:b6:ca:86:65:d2:ce:62:68:76:bc:c5:79:
86:4d:67:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:33:12 2026 by rpki-client