
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
File: HdXNKgJh4eYGndd1iU2CbuiDbB4.mft (raw, json)
Hash identifier: FWeSMJwicvCb+cCn0BDpC1jPgZR0OH2en4XyeoBNvxk=
Subject key identifier: CC:1F:D9:45:CF:BF:BE:F5:B5:1E:BD:15:1A:8F:32:A1:61:CE:74:51
Authority key identifier: 1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
Certificate issuer: /CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Certificate serial: 019F905AB51224ACE3F614B26EFDA62B83C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 19:01:31 +0000
Manifest this update: Thu 23 Jul 2026 19:01:31 +0000
Manifest next update: Fri 24 Jul 2026 19:01:31 +0000
Files and hashes: 1: 53uXZdGunbCbkFbF5LCIWF6hUow.roa (hash: YdDbEGhWwhK//MEhtCOroEdkE5sIGg0zyX8WVqthVro=)
2: HdXNKgJh4eYGndd1iU2CbuiDbB4.crl (hash: 22zUj0I6r9Zp0ObTd5IGeT1AzyH71NC56mPBK+9GB20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:b5:12:24:ac:e3:f6:14:b2:6e:fd:a6:2b:83:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e
Validity
Not Before: Jul 23 19:01:31 2026 GMT
Not After : Jul 24 19:01:31 2026 GMT
Subject: CN=cc1fd945cfbfbef5b51ebd151a8f32a161ce7451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:95:f5:0c:32:eb:39:8a:82:8b:61:b0:d7:82:
2e:c1:44:22:0d:40:9c:01:8a:fd:d4:0c:b3:39:0d:
fd:7a:f5:cd:59:44:f6:05:f4:25:00:35:a3:39:6c:
79:0e:ce:8e:9b:a8:f3:6d:5f:3c:99:04:55:f5:a3:
01:5b:7c:2a:94:6f:36:8d:66:ab:42:34:d4:11:c7:
42:4a:83:4f:e0:f9:2b:4d:9b:c9:b2:cc:9b:ed:36:
eb:9e:e4:4b:54:14:0c:a2:2d:cd:d4:6c:ec:8f:5a:
d5:7a:9f:9a:56:b2:4a:41:ea:09:d5:95:21:37:71:
9f:ff:6c:82:cb:03:f2:fe:0a:ef:07:20:55:07:37:
77:01:fd:9b:6c:57:84:1f:11:2e:00:e1:35:93:b9:
a3:66:ba:96:b8:38:16:eb:ec:f9:38:05:09:c2:71:
18:cd:bf:c2:0a:18:06:25:74:92:f9:d2:df:fa:9a:
62:6d:05:07:4d:34:a4:43:7d:f4:2f:2c:7a:45:c3:
78:06:1a:ae:bf:0b:b1:18:81:3d:0e:14:22:6d:c0:
51:fd:36:ba:b8:69:37:59:db:38:6f:be:08:78:46:
d8:6c:6c:7b:a1:f4:1e:b8:27:ca:d7:f1:65:b7:93:
e6:b3:7a:22:84:ca:af:f8:da:67:0b:b3:14:9a:d2:
3b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1F:D9:45:CF:BF:BE:F5:B5:1E:BD:15:1A:8F:32:A1:61:CE:74:51
X509v3 Authority Key Identifier:
keyid:1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4f:d9:71:86:64:3d:3d:02:ab:2d:cb:d3:16:ed:f9:dc:69:
43:7a:2c:fe:52:92:1d:3d:c3:d9:4b:a9:48:50:d8:0d:e3:38:
46:d3:9f:d8:ec:59:aa:66:01:3b:26:b1:10:dc:94:85:d5:fc:
6c:43:e4:37:11:7a:e6:d9:c0:09:ac:26:75:27:bc:e1:d5:39:
36:6b:bb:b7:ab:d0:f0:f5:30:7a:06:70:33:64:6a:e5:fb:4e:
87:28:e7:98:ee:e0:2a:a0:60:c1:32:f7:60:0f:4a:3a:a6:de:
b7:c6:de:45:1d:96:6e:f4:62:73:d5:84:4c:fc:ad:33:af:39:
39:84:da:74:f0:d6:1f:00:df:fe:ae:2d:ba:cd:41:4b:89:34:
85:5f:b8:ad:16:11:ca:f6:1a:d5:fa:05:09:02:bc:50:91:f3:
19:2c:0f:1f:78:bd:c2:9c:1d:99:d0:9b:12:b8:28:06:f8:27:
94:82:f7:31:4f:be:8e:aa:af:f1:70:61:61:cc:93:50:9f:0a:
fc:c3:19:c5:51:df:e8:59:34:82:95:f2:4e:fd:1d:0f:7b:ce:
26:81:a7:d3:db:3b:6b:fb:62:5a:d8:20:05:19:70:27:14:bb:
ce:30:ff:78:98:18:1f:40:7f:99:bb:c4:3c:64:74:66:4e:2c:
2e:c3:7e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:15:51 2026 by rpki-client