Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
File: HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft (raw, json)
Hash identifier: aQNt1KOOBEz6/S40ALtikViFHV2w659YsGfu77XBeZ0=
Subject key identifier: D4:5C:18:31:F2:57:07:E4:1A:88:B7:61:F9:72:78:DA:4D:8D:81:77
Authority key identifier: 1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
Certificate issuer: /CN=1dd7088d9da221f0565eb178443600171e7977aa
Certificate serial: 019DCFAC0AE1B118FBF6573DDD14EB25A40F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
Manifest number: 03E3
Signing time: Mon 27 Apr 2026 16:00:51 +0000
Manifest this update: Mon 27 Apr 2026 16:00:51 +0000
Manifest next update: Tue 28 Apr 2026 16:00:51 +0000
Files and hashes: 1: CjgS_b2r-3qplZ5KDVZa8VStIhQ.roa (hash: 243j3TvIuSB1M/hUhuu8ZLn+QAVeT40RY9rpOYK+p6Q=)
2: HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl (hash: 9fwVN6be3qJjyV0W2li6T+CSX+ApZw6BlAYUysMHu7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ac:0a:e1:b1:18:fb:f6:57:3d:dd:14:eb:25:a4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd7088d9da221f0565eb178443600171e7977aa
Validity
Not Before: Apr 27 16:00:51 2026 GMT
Not After : Apr 28 16:00:51 2026 GMT
Subject: CN=d45c1831f25707e41a88b761f97278da4d8d8177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fd:48:d1:c2:14:bd:e0:cf:03:ad:ae:14:94:
81:bf:aa:07:a7:61:73:3c:98:61:86:c4:7b:18:b7:
06:83:8f:77:98:c4:24:e3:b4:64:c4:1e:d8:42:50:
e6:15:88:a0:3b:9e:a5:64:ee:e3:56:f5:4d:6c:12:
2e:9d:e3:c9:91:a3:44:bb:5f:66:ce:33:9a:8d:f5:
05:c8:9c:e2:45:a4:d2:a1:dc:52:1b:7c:ad:72:79:
98:80:c4:0e:68:9c:41:bd:54:0c:d6:96:2a:48:0d:
03:4c:ee:07:37:a5:34:9e:1b:3a:4e:63:3a:7c:84:
5c:1a:2b:2f:23:c9:68:a9:5c:4a:e6:69:0f:92:26:
71:93:67:3f:10:96:b5:0c:bd:8e:9d:25:2d:2a:60:
2b:ec:a1:46:14:76:bc:ff:02:4b:32:9f:df:cc:a1:
df:94:bd:dc:0e:f9:ed:70:e1:51:6e:b7:8c:4d:ea:
b5:a8:ce:49:ac:77:47:bf:86:8a:75:21:fe:d2:a6:
0b:ef:00:ea:b2:03:4e:74:61:1e:48:82:ca:60:cb:
1e:36:9f:d0:4c:28:12:4c:f4:27:67:55:b0:b3:12:
92:9f:77:80:8a:d4:a8:b3:b2:df:51:d1:4b:17:9e:
73:54:5c:5f:3a:3d:4d:23:60:61:b0:c9:f4:27:65:
c1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5C:18:31:F2:57:07:E4:1A:88:B7:61:F9:72:78:DA:4D:8D:81:77
X509v3 Authority Key Identifier:
keyid:1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:14:24:1a:eb:05:46:cc:46:95:7d:75:23:b2:6b:06:7b:cc:
1c:86:d0:7b:9e:91:dd:ae:6f:4e:5b:8e:fa:fd:06:57:36:3e:
0e:2d:45:46:c9:00:c7:4c:ea:8a:8d:24:2b:07:bb:9e:1f:ae:
b0:23:a0:af:53:cd:fb:69:1f:86:3b:98:e6:4a:2c:ee:13:8f:
1f:b1:c0:22:46:9d:e9:d4:79:e2:31:e0:ad:38:99:a4:48:99:
52:7d:a1:87:5c:21:ea:22:65:ed:8f:43:7c:0a:8e:2e:26:fb:
c3:2e:da:9e:b4:54:dd:5e:9d:db:4e:c0:fc:28:c5:4a:a4:be:
b1:e7:a0:2e:31:2c:4e:28:91:71:0e:5a:09:3a:0a:8a:09:47:
3a:bf:9d:61:d3:b3:f5:83:89:e9:81:82:01:24:05:c3:d8:ad:
90:eb:a2:6b:ed:82:c8:07:a8:fc:3f:85:44:56:64:6f:30:e6:
a6:8c:ae:92:c1:9e:ca:f8:ca:13:ff:6d:97:1f:8c:be:40:dc:
d2:c1:72:b6:26:51:bc:13:8f:e0:6e:e4:48:4f:80:f0:63:5b:
51:99:2a:06:ef:f1:f5:84:d2:af:7d:49:d4:9a:54:98:f5:a9:
ff:f3:72:bb:c3:d5:d1:e1:8c:cb:da:87:6f:ab:58:71:55:d6:
dd:bd:5d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:47:34 2026 by rpki-client