Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
File: Has2Xsw1BFitorCUnuZ--djG9Nw.mft (raw, json)
Hash identifier: t1BvQkuX0/1sBYQLyHZlsylOrBgXSBINhgkCjEsHXeQ=
Subject key identifier: 14:1F:4D:5A:98:3D:CC:BB:C0:A0:00:01:F7:DA:1B:61:25:4A:CD:67
Authority key identifier: 1D:AB:36:5E:CC:35:04:58:AD:A2:B0:94:9E:E6:7E:F9:D8:C6:F4:DC
Certificate issuer: /CN=1dab365ecc350458ada2b0949ee67ef9d8c6f4dc
Certificate serial: 01A0DA5F2D6F948D239CDE31AC05AE16AF69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
Manifest number: 037A
Signing time: Fri 25 Sep 2026 21:01:05 +0000
Manifest this update: Fri 25 Sep 2026 21:01:05 +0000
Manifest next update: Sat 26 Sep 2026 21:01:05 +0000
Files and hashes: 1: GJ9jq1utAOnfB6vGzK5aQugyYRo.roa (hash: 4LC584iGEYWuEuibcnVRjFRB3sB/Gg71VV3hzTlGieE=)
2: Has2Xsw1BFitorCUnuZ--djG9Nw.crl (hash: Kn30YgS2X82Wd+pyv9SX5RdDE8n5yqtDLTHDL0vfTyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:2d:6f:94:8d:23:9c:de:31:ac:05:ae:16:af:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dab365ecc350458ada2b0949ee67ef9d8c6f4dc
Validity
Not Before: Sep 25 21:01:05 2026 GMT
Not After : Sep 26 21:01:05 2026 GMT
Subject: CN=141f4d5a983dccbbc0a00001f7da1b61254acd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:43:c5:e5:70:ea:8a:9c:74:9c:7e:d4:bb:9f:
59:0a:a6:37:bd:18:34:28:98:8c:52:45:80:54:c8:
79:58:52:4c:64:2b:e6:c2:ad:6c:82:f3:7d:31:f3:
6c:32:7f:2a:4a:ae:22:38:3c:2a:8e:df:16:3c:fd:
d0:12:80:53:f1:70:03:29:5f:10:ce:8d:a1:bc:77:
9d:d2:e3:95:5e:51:0c:98:74:5a:27:ae:87:02:97:
03:77:9c:e2:4a:b4:69:cd:32:3d:7b:08:8a:64:45:
0e:25:34:9f:11:4b:2c:7e:15:6b:68:f0:74:8f:51:
92:12:08:1c:57:d0:18:4a:c0:af:44:4e:30:10:5e:
f6:17:54:dd:70:63:71:c5:d6:99:f5:46:b9:b8:da:
d2:02:e2:18:57:66:40:2e:2e:39:54:63:12:0d:d2:
f4:7a:aa:79:93:ef:d7:59:27:f0:5b:1a:f7:40:f7:
9d:cf:6a:91:8c:6f:68:ff:a7:a3:00:8e:fa:87:66:
c7:f9:cd:0e:a5:e7:49:e9:9c:5a:d5:fd:5c:d5:f8:
4b:95:2e:ff:5b:de:38:9d:d5:4c:3a:3b:46:22:c0:
22:cc:b2:93:38:a8:26:04:b2:34:71:2b:41:bd:32:
98:97:6e:99:7f:d6:02:06:b2:7a:5d:3e:eb:d1:45:
ae:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1F:4D:5A:98:3D:CC:BB:C0:A0:00:01:F7:DA:1B:61:25:4A:CD:67
X509v3 Authority Key Identifier:
keyid:1D:AB:36:5E:CC:35:04:58:AD:A2:B0:94:9E:E6:7E:F9:D8:C6:F4:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:95:7e:85:8f:81:20:d4:b1:9b:ad:fd:7b:d2:f8:17:ec:4b:
57:18:b3:09:3e:ad:a1:62:92:e8:37:b6:0f:84:c4:f1:c7:7c:
07:2d:ac:8e:08:d1:05:eb:86:31:e3:9c:f5:38:e6:f4:a0:d1:
1f:04:3c:1c:94:66:8d:a6:1c:6a:b5:91:ea:92:c1:cc:f9:92:
25:62:4c:ce:58:57:b0:50:4d:97:53:84:23:b6:b8:67:1f:5a:
0e:b4:b0:44:dd:7c:ee:62:72:af:23:cb:a0:a8:26:34:80:d7:
ce:4c:56:c9:91:ef:a1:fe:45:41:31:85:4f:a9:b0:32:51:9f:
a4:91:a9:f1:70:54:21:7e:15:1e:7b:b3:e1:19:87:9d:7b:80:
9c:1a:ca:b3:5d:c6:46:7a:11:4d:2b:fa:2e:d5:30:08:ab:af:
02:24:bd:da:a0:a3:a6:a3:62:ff:c6:14:28:35:66:b8:de:e3:
84:47:fd:fa:d6:53:ea:c9:4b:b7:63:74:87:54:57:f8:6b:5f:
bf:16:c4:77:c2:d0:1b:a8:d0:82:69:f6:fd:58:94:01:11:6a:
41:1f:4e:c9:8d:06:04:2b:a3:fd:b2:99:7a:67:12:45:a1:97:
ca:be:a8:0c:e7:0d:64:02:74:67:d8:c1:36:07:4e:71:e0:e4:
8e:1f:bb:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDaXy1vlI0jnN4xrAWuFq9pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYWIzNjVlY2MzNTA0NThhZGEyYjA5NDllZTY3ZWY5ZDhj
NmY0ZGMwHhcNMjYwOTI1MjEwMTA1WhcNMjYwOTI2MjEwMTA1WjAzMTEwLwYDVQQD
EygxNDFmNGQ1YTk4M2RjY2JiYzBhMDAwMDFmN2RhMWI2MTI1NGFjZDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUPF5XDqipx0nH7Uu59ZCqY3vRg0
KJiMUkWAVMh5WFJMZCvmwq1sgvN9MfNsMn8qSq4iODwqjt8WPP3QEoBT8XADKV8Q
zo2hvHed0uOVXlEMmHRaJ66HApcDd5ziSrRpzTI9ewiKZEUOJTSfEUssfhVraPB0
j1GSEggcV9AYSsCvRE4wEF72F1TdcGNxxdaZ9Ua5uNrSAuIYV2ZALi45VGMSDdL0
eqp5k+/XWSfwWxr3QPedz2qRjG9o/6ejAI76h2bH+c0OpedJ6Zxa1f1c1fhLlS7/
W944ndVMOjtGIsAizLKTOKgmBLI0cStBvTKYl26Zf9YCBrJ6XT7r0UWu2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQfTVqYPcy7wKAAAffaG2ElSs1nMB8GA1UdIwQY
MBaAFB2rNl7MNQRYraKwlJ7mfvnYxvTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGFzMlhzdzFCRml0b3JDVW51Wi0tZGpHOU53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mYThmNzgtNzZlNS00OGE5LWFiYjAt
NjBhZTc2NjQ2ZGQ0LzEvSGFzMlhzdzFCRml0b3JDVW51Wi0tZGpHOU53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mYThmNzgtNzZlNS00OGE5LWFiYjAtNjBhZTc2NjQ2ZGQ0
LzEvSGFzMlhzdzFCRml0b3JDVW51Wi0tZGpHOU53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtZV+hY+B
INSxm639e9L4F+xLVxizCT6toWKS6De2D4TE8cd8By2sjgjRBeuGMeOc9Tjm9KDR
HwQ8HJRmjaYcarWR6pLBzPmSJWJMzlhXsFBNl1OEI7a4Zx9aDrSwRN187mJyryPL
oKgmNIDXzkxWyZHvof5FQTGFT6mwMlGfpJGp8XBUIX4VHnuz4RmHnXuAnBrKs13G
RnoRTSv6LtUwCKuvAiS92qCjpqNi/8YUKDVmuN7jhEf9+tZT6slLt2N0h1RX+Gtf
vxbEd8LQG6jQgmn2/ViUARFqQR9OyY0GBCuj/bKZemcSRaGXyr6oDOcNZAJ0Z9jB
NgdOceDkjh+7+A==
-----END CERTIFICATE-----
Generated at Sat Sep 26 07:53:39 2026 by rpki-client