Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
File: HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft (raw, json)
Hash identifier: lffUIDNRBUHDAv5ncxllWBnoNC4RuOjTiX2KuvKP7sY=
Subject key identifier: 5B:54:3E:DC:60:60:C5:1D:57:9E:C8:EE:E1:5A:6A:A0:45:D5:A3:12
Authority key identifier: 1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
Certificate issuer: /CN=1dd7088d9da221f0565eb178443600171e7977aa
Certificate serial: 019CE41099C27C123DD330AA3E8DC4DD3D04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
Manifest number: 0369
Signing time: Thu 12 Mar 2026 22:00:19 +0000
Manifest this update: Thu 12 Mar 2026 22:00:19 +0000
Manifest next update: Fri 13 Mar 2026 22:00:19 +0000
Files and hashes: 1: CjgS_b2r-3qplZ5KDVZa8VStIhQ.roa (hash: 243j3TvIuSB1M/hUhuu8ZLn+QAVeT40RY9rpOYK+p6Q=)
2: HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl (hash: jY+Wz/qhsadr6x8oJPaCClnVEunwrHgJJkmqP7A6QrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:10:99:c2:7c:12:3d:d3:30:aa:3e:8d:c4:dd:3d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd7088d9da221f0565eb178443600171e7977aa
Validity
Not Before: Mar 12 22:00:19 2026 GMT
Not After : Mar 13 22:00:19 2026 GMT
Subject: CN=5b543edc6060c51d579ec8eee15a6aa045d5a312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6c:2a:04:fd:f2:23:bf:d3:1f:54:0b:73:f9:
5a:c5:ed:fc:12:41:2b:1e:88:02:0b:b6:52:f0:f2:
d2:00:57:19:79:29:c3:6e:18:1b:af:06:13:81:01:
42:46:fa:53:a4:e3:19:3c:25:ad:0d:8d:e1:6a:b4:
1c:d0:1a:f6:9b:76:9c:d9:a4:69:b3:8b:63:06:3d:
07:82:72:9d:7e:80:84:cc:17:1f:16:a9:8a:6d:3c:
44:50:29:69:24:25:77:cd:61:eb:57:d7:80:65:ef:
9a:4b:b5:fe:ce:65:11:45:0d:a4:db:5c:fc:d3:fc:
65:33:3e:c1:0c:32:2d:d6:0b:02:68:65:d6:14:87:
8f:62:1e:23:9e:f5:db:30:8e:d6:ff:c5:15:02:f1:
88:24:9a:a7:32:fd:ac:fe:72:8e:49:99:c0:ac:ea:
e7:c3:19:82:f9:4c:37:9a:79:55:50:ae:b0:b2:61:
48:f3:65:45:0a:a0:6e:56:d1:5d:87:91:4d:4b:d0:
85:cd:e0:61:37:65:17:04:9a:b7:ba:d2:5a:ef:b1:
30:77:78:5e:62:4d:80:8d:8c:c5:e5:f9:24:e8:75:
50:04:79:e6:63:79:c0:01:c5:dd:ab:5e:40:15:d0:
0d:71:ae:33:d0:d9:1f:d0:44:f5:c6:f7:56:29:fa:
63:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:54:3E:DC:60:60:C5:1D:57:9E:C8:EE:E1:5A:6A:A0:45:D5:A3:12
X509v3 Authority Key Identifier:
keyid:1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b6:08:b6:10:95:de:21:79:f6:71:34:09:0b:81:55:19:9b:
16:95:a3:57:6c:7f:f6:99:a8:a4:64:39:65:2c:45:fe:45:07:
1a:b4:5a:ce:ca:71:2d:0c:47:32:36:f7:50:6e:52:f7:0e:be:
4b:f9:b0:fb:1d:43:d6:11:cf:2c:2d:a8:0d:9a:6b:70:93:97:
f5:8a:8e:88:4a:f5:65:7b:7c:58:42:10:ba:42:1a:8e:f2:69:
9c:63:f3:0e:c7:3c:5b:9f:df:03:2b:5d:7a:19:fc:a6:3c:a0:
9c:78:9d:25:23:38:e0:5a:52:59:c4:ff:3c:66:c2:81:4b:01:
9b:14:10:45:ce:20:f9:13:87:9c:b9:81:69:ef:08:08:23:fb:
be:91:89:35:11:3e:9e:84:6e:5a:2d:4a:75:e6:14:1c:06:96:
b7:8f:40:38:65:30:1c:13:05:05:c8:ec:72:bd:f9:18:9f:fa:
9b:c7:51:20:14:39:83:1a:c1:78:31:77:9e:cd:9a:0f:6d:78:
d4:3b:8b:39:11:4a:7e:84:56:52:3e:21:a7:07:f7:e2:14:79:
e7:eb:a1:f3:1b:51:e9:c2:c7:f5:77:2e:94:63:c8:8e:36:19:
be:43:4a:77:75:47:82:5c:e2:aa:29:41:0c:30:7b:ee:ce:53:
02:80:3b:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzkEJnCfBI90zCqPo3E3T0EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZDcwODhkOWRhMjIxZjA1NjVlYjE3ODQ0MzYwMDE3MWU3
OTc3YWEwHhcNMjYwMzEyMjIwMDE5WhcNMjYwMzEzMjIwMDE5WjAzMTEwLwYDVQQD
Eyg1YjU0M2VkYzYwNjBjNTFkNTc5ZWM4ZWVlMTVhNmFhMDQ1ZDVhMzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mwqBP3yI7/TH1QLc/laxe38EkEr
HogCC7ZS8PLSAFcZeSnDbhgbrwYTgQFCRvpTpOMZPCWtDY3harQc0Br2m3ac2aRp
s4tjBj0HgnKdfoCEzBcfFqmKbTxEUClpJCV3zWHrV9eAZe+aS7X+zmURRQ2k21z8
0/xlMz7BDDIt1gsCaGXWFIePYh4jnvXbMI7W/8UVAvGIJJqnMv2s/nKOSZnArOrn
wxmC+Uw3mnlVUK6wsmFI82VFCqBuVtFdh5FNS9CFzeBhN2UXBJq3utJa77Ewd3he
Yk2AjYzF5fkk6HVQBHnmY3nAAcXdq15AFdANca4z0Nkf0ET1xvdWKfpjpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtUPtxgYMUdV57I7uFaaqBF1aMSMB8GA1UdIwQY
MBaAFB3XCI2doiHwVl6xeEQ2ABceeXeqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGRjSWpaMmlJZkJXWHJGNFJEWUFGeDU1ZDZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS82Nzk5NjgtMTFlOS00OWE1LWIxZDEt
ZTBiZTE0OGM0MDk3LzEvSGRjSWpaMmlJZkJXWHJGNFJEWUFGeDU1ZDZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS82Nzk5NjgtMTFlOS00OWE1LWIxZDEtZTBiZTE0OGM0MDk3
LzEvSGRjSWpaMmlJZkJXWHJGNFJEWUFGeDU1ZDZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFrYIthCV
3iF59nE0CQuBVRmbFpWjV2x/9pmopGQ5ZSxF/kUHGrRazspxLQxHMjb3UG5S9w6+
S/mw+x1D1hHPLC2oDZprcJOX9YqOiEr1ZXt8WEIQukIajvJpnGPzDsc8W5/fAytd
ehn8pjygnHidJSM44FpSWcT/PGbCgUsBmxQQRc4g+ROHnLmBae8ICCP7vpGJNRE+
noRuWi1KdeYUHAaWt49AOGUwHBMFBcjscr35GJ/6m8dRIBQ5gxrBeDF3ns2aD214
1DuLORFKfoRWUj4hpwf34hR55+uh8xtR6cLH9XculGPIjjYZvkNKd3VHglziqilB
DDB77s5TAoA7IQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 07:13:28 2026 by rpki-client