Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
File: HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft (raw, json)
Hash identifier: h4sJ+aBDhVyS3bp5wFBTq0R9v0OAkLEkSXof07qNIGw=
Subject key identifier: 41:47:FA:F2:EF:CA:C6:24:E3:6D:07:E8:EA:B2:4B:69:D8:96:0A:80
Authority key identifier: 1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
Certificate issuer: /CN=1dd7088d9da221f0565eb178443600171e7977aa
Certificate serial: 019F92ED3D846B2B83895D445BAE31B42BAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
Manifest number: 04CE
Signing time: Fri 24 Jul 2026 07:00:49 +0000
Manifest this update: Fri 24 Jul 2026 07:00:49 +0000
Manifest next update: Sat 25 Jul 2026 07:00:49 +0000
Files and hashes: 1: HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl (hash: xsERaWh1K/RY0YwR76/GIRcG0bPKBCbPcrTdSzyLgFs=)
2: jj4p-t17R-_1G4MNsVWsKf7lxt8.roa (hash: gxtd056u5s+5E72I3IyM1AJXXx0KOPdQmubbLYFzxYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:3d:84:6b:2b:83:89:5d:44:5b:ae:31:b4:2b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd7088d9da221f0565eb178443600171e7977aa
Validity
Not Before: Jul 24 07:00:49 2026 GMT
Not After : Jul 25 07:00:49 2026 GMT
Subject: CN=4147faf2efcac624e36d07e8eab24b69d8960a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:ca:46:1d:8e:31:a6:da:0b:c8:2a:cc:cc:
b6:32:2c:86:b8:57:e6:9b:4b:98:ca:9e:9f:93:5a:
26:a4:41:1b:38:f4:ee:77:f9:dd:85:df:f3:b2:d9:
65:7c:86:7f:a4:70:2c:d1:9f:dc:e4:d1:46:b5:68:
5e:37:99:a9:61:1a:2c:37:40:f6:a0:b4:2b:6e:86:
e1:93:49:68:c0:a8:c6:29:ae:df:90:41:ae:16:3f:
44:0e:a1:d5:f6:85:0a:b9:0e:bf:6f:1d:00:23:fb:
2a:21:9e:08:f6:c4:dd:e7:5c:31:20:17:3d:7f:fb:
12:f5:73:de:2e:83:84:3d:05:49:56:36:c9:df:fe:
40:30:52:c8:26:cf:7d:1e:16:94:b4:7e:a7:4c:6d:
14:30:56:f8:d8:26:22:03:cc:14:ba:52:67:8b:93:
33:28:ef:6e:3a:54:3f:dc:26:b2:64:53:a2:81:0a:
03:3e:14:30:d1:42:13:8f:df:07:8e:ca:b2:2e:73:
4c:55:61:61:da:c0:15:14:19:3c:51:59:34:75:5f:
3b:a8:43:12:a0:6a:49:ed:ea:0a:45:c2:df:8c:01:
b9:31:fd:f8:c7:44:fc:b2:96:23:4b:35:9e:4e:f9:
e9:25:5d:9d:56:9a:f4:7d:f4:ab:f3:ff:9d:c7:5d:
d0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:47:FA:F2:EF:CA:C6:24:E3:6D:07:E8:EA:B2:4B:69:D8:96:0A:80
X509v3 Authority Key Identifier:
keyid:1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f9:5a:30:55:87:a1:33:26:dc:f7:48:87:fb:d4:67:04:4b:
5e:7e:ee:af:7d:0f:9f:14:d5:c9:a3:54:aa:0b:df:97:4b:d0:
e4:4c:ba:2c:86:af:68:42:3b:be:bf:24:da:17:8c:00:27:c0:
28:a6:81:78:10:ca:91:96:db:ef:5e:91:b4:f5:d3:ce:c0:ee:
db:bf:da:db:98:63:85:2d:b8:06:04:29:19:14:7a:cd:9d:f9:
bc:fa:39:77:84:f5:bf:14:4b:ff:b4:03:9d:3f:19:2b:83:45:
3c:74:0d:76:0e:d5:4e:b5:9d:62:d3:8e:6f:1a:6c:34:9c:9f:
77:4b:d8:d6:ca:30:70:cd:9b:92:88:05:05:88:f4:4a:ec:39:
5d:26:1b:a2:28:f3:9d:8f:47:0e:a3:2f:73:4c:13:e9:d0:85:
98:7c:cc:b5:57:13:b8:bd:b2:7f:d8:a9:c3:5a:cb:06:b3:88:
2e:0f:30:00:51:29:fb:9b:9b:94:13:54:61:da:b0:fb:03:be:
75:b0:f8:a0:92:62:e2:03:77:42:24:74:3c:d2:dc:ac:f6:2a:
4c:7d:4d:6c:40:15:1c:b9:bb:58:f7:d2:8f:4d:65:8e:bd:ed:
1e:3c:fb:ae:3f:83:7b:18:8b:f8:c3:84:ec:e7:f5:78:f7:7f:
39:90:03:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:01:59 2026 by rpki-client