Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
File: HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft (raw, json)
Hash identifier: ONMMNVwu0roT88KOA5R2CVkLqATeD6L+IvhB30Dyvss=
Subject key identifier: 5E:65:56:A4:DC:0C:F3:BC:E0:FE:30:DC:4D:39:B3:92:D6:B7:3B:9B
Authority key identifier: 1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E
Certificate issuer: /CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e
Certificate serial: 019D37C0C7CC23A80B00EB05A139899E111F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:01:14 +0000
Manifest this update: Sun 29 Mar 2026 04:01:14 +0000
Manifest next update: Mon 30 Mar 2026 04:01:14 +0000
Files and hashes: 1: HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl (hash: fZlNwnwyaxUfLBRQ/iW5z8w4QIezXi+jhh8Y53iiSak=)
2: ib3cAwbg8C9r2aqBWyNBb5uSoms.roa (hash: KrmwOWhj2jFqWpLOhPbRuQeJTVBkN+LvN0H+FMdxOSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:c7:cc:23:a8:0b:00:eb:05:a1:39:89:9e:11:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e
Validity
Not Before: Mar 29 04:01:14 2026 GMT
Not After : Mar 30 04:01:14 2026 GMT
Subject: CN=5e6556a4dc0cf3bce0fe30dc4d39b392d6b73b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:55:c6:b0:38:41:37:51:d1:4d:68:38:c9:77:
cd:91:f2:be:c3:60:e2:e2:05:86:9e:ae:96:8e:9e:
20:89:1d:9f:71:8c:da:e7:36:7a:d6:52:6d:80:4e:
75:ff:df:ed:80:ea:86:4d:52:3a:62:b0:cf:09:fe:
77:24:41:6d:49:4f:45:e6:e8:bf:20:6a:6c:a6:20:
d8:01:2e:30:c5:b7:6d:7e:97:d6:eb:9a:0b:37:a0:
06:9b:23:7a:66:67:51:6d:7d:36:20:b4:46:af:5b:
dc:1a:23:f1:66:b0:32:40:81:f1:d5:63:ef:75:bf:
ff:26:fe:09:8b:b3:f2:00:4d:52:cd:5d:e8:27:5d:
17:ba:21:81:58:ac:c3:d7:a3:87:e0:42:6d:df:ba:
7c:61:6d:0c:9b:72:04:df:80:f1:30:96:9f:b8:74:
9e:cc:94:71:56:fa:d2:e9:28:b2:73:47:37:eb:9a:
1c:92:06:0b:85:07:48:0d:89:d4:92:8e:8b:55:65:
27:cd:5c:9a:c6:a1:42:de:c3:75:3d:4d:c7:58:e6:
66:e6:73:c8:e8:b3:96:24:03:b1:51:f7:93:38:44:
23:f7:11:6d:be:34:76:3f:ce:29:fd:48:8e:a4:20:
10:22:fb:c1:df:cb:ad:14:4c:f9:66:06:d9:8e:0d:
2f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:65:56:A4:DC:0C:F3:BC:E0:FE:30:DC:4D:39:B3:92:D6:B7:3B:9B
X509v3 Authority Key Identifier:
keyid:1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5c:36:f6:7f:ad:36:8f:ca:e7:ab:48:44:10:86:b9:b0:4a:
35:4c:88:38:d8:e3:01:46:e6:01:5d:5a:df:8a:e0:b5:94:c5:
3d:cf:87:d8:7c:7c:26:a0:73:95:a6:32:85:a7:ce:ec:7a:05:
a7:54:58:14:df:f8:85:30:a7:90:34:85:6d:66:21:75:96:63:
d9:0a:27:80:f2:50:03:10:b5:bf:dd:1a:13:18:e6:20:3c:81:
db:50:9d:4b:0b:39:5c:2e:a1:d5:6b:ba:6a:9e:dd:86:3b:b3:
84:5e:82:e7:cd:23:da:2a:3d:4d:04:b9:44:56:d1:59:b3:c2:
a6:8e:40:4e:17:b6:8d:82:8d:3b:ca:40:94:a9:38:60:f3:a2:
fb:2d:0d:41:f8:55:9c:c2:dd:49:02:b0:e7:66:4d:0e:c0:29:
f2:c7:ab:ad:3e:98:5e:da:41:3f:ab:a0:9d:66:5e:14:ff:9f:
df:0a:7f:71:c4:19:c8:1d:d8:5e:41:44:ca:83:a0:40:ff:0c:
fd:8e:f3:9c:91:b5:5e:5d:69:03:cc:80:61:df:c7:ff:6b:a3:
fa:39:5d:6b:4e:ad:e8:8b:fa:57:09:dd:36:b0:c0:68:57:cd:
b6:46:1f:d3:3b:fb:11:e4:d0:bc:bf:89:ee:36:70:38:2f:ea:
2f:e0:d4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:05 2026 by rpki-client