Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/HdlIU1Eogmp2v_cI3RcYh0ZPdh0.mft
File: HdlIU1Eogmp2v_cI3RcYh0ZPdh0.mft (raw, json)
Hash identifier: ZUzMmkw/JwDZZIVw2CTQyJZ4ExOalCieclenK2IPsus=
Subject key identifier: 98:66:04:AE:89:07:11:88:C3:0E:27:C2:8D:DF:EC:5A:9E:CC:D0:36
Authority key identifier: 1D:D9:48:53:51:28:82:6A:76:BF:F7:08:DD:17:18:87:46:4F:76:1D
Certificate issuer: /CN=1dd948535128826a76bff708dd171887464f761d
Certificate serial: 019F9549D668840B0E778D3ADB875901A9E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdlIU1Eogmp2v_cI3RcYh0ZPdh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/HdlIU1Eogmp2v_cI3RcYh0ZPdh0.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:01:11 +0000
Manifest this update: Fri 24 Jul 2026 18:01:11 +0000
Manifest next update: Sat 25 Jul 2026 18:01:11 +0000
Files and hashes: 1: 6zhOToGy-7eerSPcD6Zk88bSn-U.roa (hash: StF8qh8Q6ojdAyBVUyhMU+MCp+v6bVi68LDVyNV1XXw=)
2: HdlIU1Eogmp2v_cI3RcYh0ZPdh0.crl (hash: 8OSBdfuYSQkKk+hebpMa/8hCzij6wFk+4sbHis9724c=)
3: ljr5Ev8ltj-Q1WbkGDDvMVsOmYc.roa (hash: BKzDpz91rBGUfq74JahLX4rr+D8vrn+n570lJmbIsaI=)
4: v3tdUAJsUaJo7LGTVWw6rDruSvc.roa (hash: JkCFfO0fYGgVWbmwj7vVnIlee+Xmb7TFcFsfWBDN668=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/HdlIU1Eogmp2v_cI3RcYh0ZPdh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/HdlIU1Eogmp2v_cI3RcYh0ZPdh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdlIU1Eogmp2v_cI3RcYh0ZPdh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:d6:68:84:0b:0e:77:8d:3a:db:87:59:01:a9:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd948535128826a76bff708dd171887464f761d
Validity
Not Before: Jul 24 18:01:11 2026 GMT
Not After : Jul 25 18:01:11 2026 GMT
Subject: CN=986604ae89071188c30e27c28ddfec5a9eccd036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:35:6d:38:c0:a0:ec:a5:59:24:fc:93:a8:7d:
4c:06:87:56:5e:c9:5f:b4:2f:0b:64:11:8e:f6:0b:
70:9b:5a:e1:b6:8a:c8:bb:57:c7:47:23:f0:bd:00:
6b:66:3d:e9:8a:ee:40:53:1f:e8:72:5f:b1:7c:f1:
dd:3e:b8:f8:51:eb:48:60:05:08:6d:dc:c8:10:10:
f2:f2:84:48:2d:b5:a7:3c:53:71:81:1f:22:80:59:
b5:48:ee:94:72:cb:ef:8e:5e:c7:01:74:58:e0:1f:
be:16:4d:97:f2:bc:71:2b:5b:02:f4:70:e6:9a:ec:
81:03:9f:a9:df:51:c9:a1:e9:19:41:2a:fd:dc:d9:
fd:e9:7c:b4:aa:e6:a3:b7:3b:28:4c:74:b6:48:12:
3a:80:09:62:20:bc:1c:df:aa:46:91:e8:e6:36:df:
55:62:31:c6:4c:79:62:ed:e4:3d:ec:76:1a:53:f0:
24:18:16:d2:cd:ee:78:95:62:23:a6:1d:1f:78:8d:
f0:2b:6e:6b:ec:7f:ab:11:e7:5b:84:72:11:55:95:
a6:e0:2f:f8:3a:1f:4f:fa:63:22:1a:28:84:ad:7a:
23:6b:9b:99:44:7c:27:f4:7c:ed:bd:fb:4c:09:75:
21:b6:da:55:f4:8d:7b:ec:35:47:e2:c6:af:f5:62:
89:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:66:04:AE:89:07:11:88:C3:0E:27:C2:8D:DF:EC:5A:9E:CC:D0:36
X509v3 Authority Key Identifier:
keyid:1D:D9:48:53:51:28:82:6A:76:BF:F7:08:DD:17:18:87:46:4F:76:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdlIU1Eogmp2v_cI3RcYh0ZPdh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/HdlIU1Eogmp2v_cI3RcYh0ZPdh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/HdlIU1Eogmp2v_cI3RcYh0ZPdh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e7:8d:f0:18:2b:da:c8:e0:67:92:15:51:f2:56:f3:22:da:
51:a7:04:c2:c9:d8:62:de:1b:9f:93:02:00:70:f5:06:95:e7:
a7:dd:e1:55:14:f0:7d:6a:db:f1:8d:79:1e:26:cf:32:8d:8a:
dc:4f:bd:c4:47:a2:9f:07:2f:17:91:0b:9c:6d:10:c1:72:04:
f9:5d:ee:08:4e:0a:63:61:2f:cf:25:7c:cc:1f:38:59:89:6d:
15:a4:01:7b:44:f7:76:9e:ab:c3:42:05:77:f7:70:75:3c:35:
6e:d0:70:65:bd:90:5d:41:c5:de:d9:1a:e6:12:b4:59:aa:0f:
00:3f:5b:2a:36:38:aa:cf:3e:1d:e3:25:e6:77:d9:9e:f5:bc:
32:69:b3:07:e6:ae:7b:f8:c6:c0:ed:0d:fd:a6:75:a5:60:04:
22:54:78:9d:f3:cf:26:79:7a:cb:3f:d5:8d:51:81:20:af:6b:
8f:80:06:9d:ee:89:13:86:94:d2:09:c9:ab:dd:60:ca:88:b9:
f8:e6:27:35:cb:68:82:ec:c0:22:86:25:76:6a:22:e2:a5:7c:
d0:bf:80:1b:08:0b:a8:cc:34:d1:d9:9a:83:f7:1f:85:32:2f:
38:0f:57:5a:93:7f:df:64:62:31:7a:0c:70:94:c2:3a:56:d7:
5e:52:df:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:06:11 2026 by rpki-client