Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
File: HdovfibLfXpWrGQF6QxqYakq0tE.mft (raw, json)
Hash identifier: 0JbclGAtK+uiPnT3F6ZJ9e7kl3nFd70+uHL2vlmrAtQ=
Subject key identifier: 45:67:EE:67:BA:13:D7:8C:F3:60:99:EA:8D:5D:2F:11:89:62:84:BD
Authority key identifier: 1D:DA:2F:7E:26:CB:7D:7A:56:AC:64:05:E9:0C:6A:61:A9:2A:D2:D1
Certificate issuer: /CN=1dda2f7e26cb7d7a56ac6405e90c6a61a92ad2d1
Certificate serial: 019D28844700FC92BD2CD82F55A32C0426D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
Manifest number: 183D
Signing time: Thu 26 Mar 2026 05:00:50 +0000
Manifest this update: Thu 26 Mar 2026 05:00:50 +0000
Manifest next update: Fri 27 Mar 2026 05:00:50 +0000
Files and hashes: 1: HdovfibLfXpWrGQF6QxqYakq0tE.crl (hash: +wK5q/1eLU1dYjfXTE6mZY/kDWLymwsbqEX4r/BkfG8=)
2: rEkkspT-t1acu0Gj9pI1cB5NvQM.roa (hash: 90e8BKkH1L1Ce8jWwpqnzgICGLSdnM4iehMTZrxu/+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:47:00:fc:92:bd:2c:d8:2f:55:a3:2c:04:26:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dda2f7e26cb7d7a56ac6405e90c6a61a92ad2d1
Validity
Not Before: Mar 26 05:00:50 2026 GMT
Not After : Mar 27 05:00:50 2026 GMT
Subject: CN=4567ee67ba13d78cf36099ea8d5d2f11896284bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:89:93:c9:0b:a8:ff:61:c6:ca:55:69:9b:45:
02:b0:63:dc:c6:72:69:7f:aa:45:0c:47:ec:9c:09:
ef:06:78:4f:2a:df:a0:f4:f4:5e:fe:8c:3e:35:df:
42:88:14:d7:b6:e5:de:f5:00:f3:ba:f9:ce:24:34:
28:de:6f:47:b5:f3:04:c9:0b:f3:a1:50:6e:33:f7:
e7:60:da:a0:fa:af:48:4a:c2:17:a0:bc:85:e1:cb:
c5:74:4c:10:ed:56:92:1b:14:05:9f:cc:f3:43:52:
73:5d:60:82:5c:f3:82:ab:fb:59:8a:84:2f:b4:15:
08:31:3c:13:b0:d4:12:82:e6:6f:57:dc:c8:47:d1:
95:da:0e:0d:dc:6e:a4:2a:9c:4b:14:d0:05:fc:26:
8d:d8:99:80:1d:78:59:ad:1d:9b:44:bd:ca:b2:a9:
5a:cd:a4:7b:d4:a2:13:6d:31:57:8f:a2:14:2a:98:
b4:10:e4:c0:a7:76:33:9f:be:9c:fc:ae:4c:fb:51:
af:88:a1:8c:a1:46:77:9f:eb:91:44:2b:d5:79:26:
6a:b4:3c:d1:9b:29:e5:d4:9a:15:60:24:42:e9:85:
a2:68:58:c9:41:25:cd:3a:cd:d0:0f:d0:ad:07:06:
8c:aa:0f:2d:6e:b5:2d:8e:74:ab:da:7c:2e:8f:1e:
fd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:67:EE:67:BA:13:D7:8C:F3:60:99:EA:8D:5D:2F:11:89:62:84:BD
X509v3 Authority Key Identifier:
keyid:1D:DA:2F:7E:26:CB:7D:7A:56:AC:64:05:E9:0C:6A:61:A9:2A:D2:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:18:5d:a4:e8:87:27:91:3c:52:93:85:5f:cf:86:a3:25:23:
5e:2d:5b:64:4b:f7:b8:98:b5:08:cd:5c:a5:c3:86:14:4c:59:
65:3b:23:3b:10:e6:31:1c:32:08:13:9b:e8:c0:f2:5b:67:e3:
d0:b5:0f:e7:d7:4e:b8:4b:44:23:7b:28:92:97:16:66:b4:ae:
65:8c:31:6d:85:0b:3f:bc:55:27:6f:0d:1e:f1:19:87:0e:44:
88:18:4d:29:9f:31:7a:29:e1:d8:60:fc:f0:f0:ed:81:03:f0:
5a:cd:4f:77:54:60:50:d5:b0:09:6d:83:51:23:d6:0d:e7:30:
f3:6f:ad:28:d0:3b:1c:28:d7:ad:3f:25:d5:10:bb:bd:a6:96:
d6:7f:3c:76:08:90:e8:93:68:70:a5:40:52:34:9e:d9:1e:13:
cc:0c:da:23:bc:51:2e:a8:2c:28:98:93:96:cb:a3:45:15:7a:
22:cb:77:04:73:8b:03:80:b8:6c:38:0b:73:65:54:6d:c3:0e:
77:bb:71:51:6b:0d:6c:7c:25:25:6a:1c:85:9b:3c:3e:fc:a3:
1c:e0:21:14:60:95:8a:13:8e:50:de:7a:1b:c4:c1:57:fa:4b:
b6:d9:02:1a:27:82:06:4a:c0:ae:40:c3:91:70:d7:21:a0:e3:
a2:44:53:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:59 2026 by rpki-client