Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
File: Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft (raw, json)
Hash identifier: P+CP9OCOyZeQFYq3FrR+6QFPzIIeOylJ6/7ownsBCj4=
Subject key identifier: B5:CE:36:D5:D8:85:26:A8:4C:9E:4A:72:40:B0:D9:8C:55:AA:AA:9E
Authority key identifier: 1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2
Certificate issuer: /CN=1dde7463ed8498020dd392322459d2cf40f226b2
Certificate serial: 01A0D64C046AF514AD211BFEABC40256A6B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
Manifest number: 0EA4
Signing time: Fri 25 Sep 2026 02:01:41 +0000
Manifest this update: Fri 25 Sep 2026 02:01:41 +0000
Manifest next update: Sat 26 Sep 2026 02:01:41 +0000
Files and hashes: 1: EPIHsxcfLuChPC0N3L4_ybUFOk0.roa (hash: 1xlVkrwEe8dHdyY6GUfJC8Bthh85BMj9UMn+rmdsApg=)
2: Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl (hash: P/nj3pOF5rL4YpkjvxnmNtIU10vxN0E4BND8YjyXr0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4c:04:6a:f5:14:ad:21:1b:fe:ab:c4:02:56:a6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dde7463ed8498020dd392322459d2cf40f226b2
Validity
Not Before: Sep 25 02:01:41 2026 GMT
Not After : Sep 26 02:01:41 2026 GMT
Subject: CN=b5ce36d5d88526a84c9e4a7240b0d98c55aaaa9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:03:09:2e:51:8b:4a:32:fa:66:77:84:0b:3f:
43:a9:1c:91:78:37:6a:0b:46:e1:8e:b7:98:62:e7:
84:c4:8a:c8:05:1e:5c:ab:8e:71:c0:a5:0a:e1:68:
c5:d8:04:ff:df:61:4f:0d:9f:9a:ea:61:83:2c:d9:
a7:c8:63:6f:30:89:59:63:26:d8:41:9f:08:7f:b7:
68:1a:8a:b3:3d:bb:21:22:1f:bf:83:34:da:f8:3f:
2c:2b:84:7a:93:13:ae:49:63:9e:d6:31:ca:ba:f8:
c5:18:e7:41:2b:ca:4b:d6:70:53:e8:82:b3:32:e4:
70:05:5a:d3:40:5a:15:50:84:d7:8d:23:27:ec:38:
3f:d9:96:73:5a:cf:1d:fa:b6:6d:58:d4:56:a3:6b:
e6:a2:f5:6f:70:39:45:8d:fa:5c:c5:d1:06:04:3a:
0f:a6:0f:24:40:bb:b0:8f:1f:fc:7c:0c:c7:cf:aa:
fd:3a:0b:43:e5:6d:2f:2f:e8:ab:c1:d7:ac:de:9f:
33:ef:0e:93:9a:db:9d:72:3d:6d:27:19:21:04:1b:
28:e9:1e:b7:f1:f9:5d:38:f6:9a:2e:cd:8a:31:5e:
e1:df:6a:a2:e4:f9:4f:29:55:ef:9b:7e:d2:97:e4:
f4:5c:22:4c:6b:bf:8c:f4:80:75:e2:0f:af:9a:fa:
f5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CE:36:D5:D8:85:26:A8:4C:9E:4A:72:40:B0:D9:8C:55:AA:AA:9E
X509v3 Authority Key Identifier:
keyid:1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:18:ed:c7:b0:6d:8b:13:19:a5:db:3f:55:4b:71:40:69:6f:
f2:4c:ff:72:ab:fb:a3:67:7d:1c:85:99:d6:69:bb:84:b4:e7:
1e:90:52:fa:c3:2a:8b:5d:8c:f6:72:72:ee:ae:84:24:9a:63:
61:bd:71:68:25:9a:42:44:d4:47:2b:64:7b:89:be:aa:33:b7:
09:4e:bf:67:f7:64:73:c7:d0:ab:59:00:df:03:4b:c9:79:5a:
ab:89:70:25:16:d0:5d:a3:39:b8:72:d1:94:f0:94:1f:c7:97:
56:48:08:7f:b3:39:1c:bb:ac:b1:25:3b:cf:bd:a3:66:cc:01:
b1:d4:8a:03:72:d8:de:99:3e:0f:a9:ec:5d:d9:f5:94:68:50:
c1:23:6d:86:88:a5:29:46:e7:1c:76:fd:34:00:38:51:4b:d4:
fe:15:02:de:4a:07:1b:dc:59:6f:75:8c:c5:bf:48:93:86:c7:
fd:eb:01:f0:fc:a3:08:ca:d5:1b:79:fc:c3:d2:5e:58:bf:89:
d4:15:49:29:0a:3d:92:fe:19:16:d7:13:9f:36:8a:b6:24:3a:
9f:b5:e0:65:7f:72:2f:48:cd:5d:ba:d8:ae:03:20:21:cb:57:
69:08:62:40:87:1f:24:d5:9a:46:4e:25:d5:85:e3:f4:af:a4:
63:a3:c2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:44:17 2026 by rpki-client