
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
File: HtVdI1ecZBJxVa72UGlueVMdUI0.mft (raw, json)
Hash identifier: yUOwHL7cNKI2/sF/klESxcBDZb3iXcfYZoIHZLk1eM0=
Subject key identifier: C6:C9:15:5B:A0:C8:C5:F2:8C:02:B7:9C:DC:54:E4:99:57:F1:0A:8C
Authority key identifier: 1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D
Certificate issuer: /CN=1ed55d23579c64127155aef650696e79531d508d
Certificate serial: 019D27723DD4BDF951639BA7147C8E9F65EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
Manifest number: 14D5
Signing time: Thu 26 Mar 2026 00:01:31 +0000
Manifest this update: Thu 26 Mar 2026 00:01:31 +0000
Manifest next update: Fri 27 Mar 2026 00:01:31 +0000
Files and hashes: 1: HtVdI1ecZBJxVa72UGlueVMdUI0.crl (hash: e/mw/m95VyAxi9EbpLywNYey1q2rDx1mZ2gaHR72Ruc=)
2: T_J2gttaZHfPXFwYPEnqU4DuSH0.roa (hash: ehbYh6/mcaifo0NfLUxIkQ+Z4QysKZUHdNB+6ZGBtPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:3d:d4:bd:f9:51:63:9b:a7:14:7c:8e:9f:65:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed55d23579c64127155aef650696e79531d508d
Validity
Not Before: Mar 26 00:01:31 2026 GMT
Not After : Mar 27 00:01:31 2026 GMT
Subject: CN=c6c9155ba0c8c5f28c02b79cdc54e49957f10a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:92:90:8c:a1:12:07:9c:c1:9b:9d:7a:3c:f4:
03:2f:98:a2:3a:71:44:2e:c1:35:e6:0f:76:55:48:
df:5b:fd:dc:f6:04:78:4e:ad:74:92:33:37:3b:50:
8b:50:19:e4:55:ad:61:68:8b:9d:1b:33:d5:32:22:
dd:88:ac:f0:a8:da:c3:bd:e5:a2:7b:3e:c5:7e:d8:
f0:c6:27:05:3a:d0:f8:55:15:e7:11:47:f0:70:50:
b2:4b:cf:30:dd:57:37:39:ff:22:15:a2:4e:8a:dc:
02:07:84:d7:5c:6d:95:81:f2:5a:87:32:c7:d9:f5:
e4:5e:04:e7:c3:a8:54:22:f3:17:f0:da:cd:4a:ef:
7e:35:05:81:60:0b:cb:5d:86:0e:7f:66:f5:80:61:
de:e1:ae:28:74:62:45:77:78:48:48:c9:a4:52:54:
1e:73:d5:92:58:f4:f0:3c:b2:2f:5e:1b:3e:de:f2:
38:eb:64:12:f5:d5:a2:7a:f4:de:b0:ae:df:2d:26:
ac:43:10:ac:7b:f8:94:7d:34:ed:d6:70:1b:9e:e7:
c7:a8:25:94:a8:04:f5:b9:62:5d:1d:0c:aa:a5:38:
f1:2b:17:e3:29:75:62:f8:b6:ff:92:eb:8b:16:48:
c2:67:84:3d:d7:2e:c6:5b:fc:46:d3:81:dd:a0:f1:
ac:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C9:15:5B:A0:C8:C5:F2:8C:02:B7:9C:DC:54:E4:99:57:F1:0A:8C
X509v3 Authority Key Identifier:
keyid:1E:D5:5D:23:57:9C:64:12:71:55:AE:F6:50:69:6E:79:53:1D:50:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtVdI1ecZBJxVa72UGlueVMdUI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4fb274-d84f-4fba-938e-1e9ff91808c2/1/HtVdI1ecZBJxVa72UGlueVMdUI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:2e:db:b2:41:dc:cd:1a:57:2f:c2:3e:bf:89:f2:6f:bd:3f:
e4:7a:1e:b3:99:16:16:2f:a7:97:ba:97:23:46:44:48:68:91:
fd:9d:f6:09:0d:01:78:7e:d3:72:21:6f:91:af:f1:8a:42:ad:
0e:86:c5:b1:a4:86:0a:56:1c:d2:9c:2f:14:44:51:ed:e2:85:
70:ba:f2:55:10:c1:f1:52:02:1e:a2:31:66:e0:54:71:9a:b1:
ff:f5:2d:bf:cc:c3:73:12:92:f8:8a:e2:ec:86:82:a4:44:64:
c8:87:be:72:a4:2f:8e:e1:27:fc:23:54:fb:0c:e5:98:46:bc:
f7:6d:58:4f:34:5e:62:11:7f:69:3c:e3:76:13:e9:25:3a:a7:
7a:74:ca:ba:d2:6a:42:b7:f4:fd:8a:cc:d2:bb:0c:f9:6c:8a:
b8:37:f4:48:10:8f:77:ff:e6:07:77:11:30:c4:06:78:ab:2d:
5f:a6:fb:3d:c6:8c:df:24:53:26:b8:1c:33:df:f7:fc:d8:98:
bb:5c:a8:1c:ce:c3:0f:dd:2a:47:f9:81:11:85:eb:b5:f1:34:
12:61:45:e6:e1:61:4e:ea:ea:b8:9d:45:74:0b:8a:16:3b:42:
fd:d0:53:82:f9:49:4e:f7:f8:4b:80:f0:09:6a:d1:68:09:44:
67:2f:be:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:56:02 2026 by rpki-client