Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/hD2p5CaP63YPx9FbFdrIBCEAhE0.mft
File: hD2p5CaP63YPx9FbFdrIBCEAhE0.mft (raw, json)
Hash identifier: gYV3RTrDvXKOp7+U4fH+e9HWykqfK7F1BRKAiJBfV/w=
Subject key identifier: 0D:AE:3D:D7:69:B7:43:58:C0:22:DD:00:4C:92:45:B4:D7:22:BD:D1
Authority key identifier: 84:3D:A9:E4:26:8F:EB:76:0F:C7:D1:5B:15:DA:C8:04:21:00:84:4D
Certificate issuer: /CN=843da9e4268feb760fc7d15b15dac8042100844d
Certificate serial: 01A0CA478D03E8D451E342EDD40781E8DA98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hD2p5CaP63YPx9FbFdrIBCEAhE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/hD2p5CaP63YPx9FbFdrIBCEAhE0.mft
Manifest number: E2
Signing time: Tue 22 Sep 2026 18:01:21 +0000
Manifest this update: Tue 22 Sep 2026 18:01:21 +0000
Manifest next update: Wed 23 Sep 2026 18:01:21 +0000
Files and hashes: 1: hD2p5CaP63YPx9FbFdrIBCEAhE0.crl (hash: vro8gkwTbLCsk6Ss+gBaRJmyy77uvpmEd5IOA3cCUJ8=)
2: rr4RQ-DCDBuAfMwBxiVc7Iv6mmA.roa (hash: HtTDo1JiMJWwkQ/8kVU3J37roBmSdVOD0uWibm9pNdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/hD2p5CaP63YPx9FbFdrIBCEAhE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/hD2p5CaP63YPx9FbFdrIBCEAhE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hD2p5CaP63YPx9FbFdrIBCEAhE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:8d:03:e8:d4:51:e3:42:ed:d4:07:81:e8:da:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843da9e4268feb760fc7d15b15dac8042100844d
Validity
Not Before: Sep 22 18:01:21 2026 GMT
Not After : Sep 23 18:01:21 2026 GMT
Subject: CN=0dae3dd769b74358c022dd004c9245b4d722bdd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d9:db:09:fc:3f:cf:d2:5d:9e:e9:56:35:75:
11:15:97:e9:c9:d9:26:f4:cf:ab:69:e8:7d:4c:49:
41:16:63:ab:2e:ad:d9:20:bf:05:0f:26:7a:ce:14:
13:7f:b7:b2:f9:46:24:3b:02:52:da:57:05:e6:ec:
cb:7e:aa:e5:94:0a:ea:1b:08:52:70:67:22:e1:6d:
f5:95:f3:f6:17:0e:e2:f6:9c:42:59:e8:e9:f5:c6:
07:4c:83:ec:fa:15:1a:ca:ac:4c:84:ca:1e:51:37:
e1:45:4d:6b:ac:3c:b9:c2:9a:00:db:d1:b6:3b:89:
7c:ad:d7:bb:91:15:00:92:04:45:db:bf:46:f7:45:
d4:ed:0a:0c:c8:fc:5b:64:90:a5:40:9f:e3:7b:c1:
8b:36:10:df:1e:b9:85:c6:88:6a:6f:88:17:a1:50:
9d:4d:8e:bd:e5:dd:9f:8c:08:b5:ad:81:a9:49:7f:
27:0a:a5:cf:3c:b4:2f:df:5f:9b:17:b4:9a:3a:f9:
85:76:11:1b:20:07:f3:95:91:b3:1f:e9:73:67:9e:
03:53:f4:37:30:96:20:58:b9:0a:4f:b9:62:9d:d1:
05:33:2d:73:7f:e6:eb:3d:25:32:7c:5d:5f:77:0f:
57:84:2c:08:d4:fb:db:eb:3c:ef:29:e2:0e:13:9f:
c2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AE:3D:D7:69:B7:43:58:C0:22:DD:00:4C:92:45:B4:D7:22:BD:D1
X509v3 Authority Key Identifier:
keyid:84:3D:A9:E4:26:8F:EB:76:0F:C7:D1:5B:15:DA:C8:04:21:00:84:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hD2p5CaP63YPx9FbFdrIBCEAhE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/hD2p5CaP63YPx9FbFdrIBCEAhE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/hD2p5CaP63YPx9FbFdrIBCEAhE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:05:99:da:7b:fd:34:45:12:dc:f6:1e:e5:27:88:a0:01:f4:
02:6e:a5:c9:09:e5:50:24:8e:ae:50:05:7d:e3:ae:73:1b:d7:
58:e8:aa:41:12:ed:da:e3:c7:fa:3a:69:30:e4:5b:b8:35:ee:
f9:6d:33:da:62:38:10:6e:e0:33:e4:62:51:8a:fe:c2:88:68:
39:a9:bd:cd:9c:1d:91:f6:af:f8:60:ad:6d:4b:6e:9f:43:b4:
a4:c0:42:e8:87:81:92:4b:c3:d7:38:0b:15:e7:22:70:35:03:
8a:a5:bd:5e:a5:00:30:3f:2d:47:36:08:95:83:53:0b:7a:9f:
cf:a6:7c:3d:14:da:c9:b0:84:72:07:50:3d:7b:8c:ba:ce:df:
31:76:4f:26:b5:62:88:ac:92:c1:55:25:92:33:5e:8f:3e:a7:
20:b6:b2:78:35:70:81:c9:91:65:f5:94:39:7f:4c:8b:89:1e:
38:24:9b:e1:5e:e4:bb:2b:02:6a:01:7b:61:d6:c5:2b:61:ff:
c5:c1:e7:58:d1:c8:a0:38:fd:b1:6e:70:f6:98:10:d2:ee:f6:
cd:9f:59:83:c3:50:50:5d:f6:35:ae:8c:aa:b6:6b:d9:62:c2:
df:5a:00:c0:2d:c7:12:14:1f:d4:cb:ee:51:13:b4:06:da:40:
74:56:11:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKR40D6NRR40Lt1AeB6NqYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0M2RhOWU0MjY4ZmViNzYwZmM3ZDE1YjE1ZGFjODA0MjEw
MDg0NGQwHhcNMjYwOTIyMTgwMTIxWhcNMjYwOTIzMTgwMTIxWjAzMTEwLwYDVQQD
EygwZGFlM2RkNzY5Yjc0MzU4YzAyMmRkMDA0YzkyNDViNGQ3MjJiZGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNnbCfw/z9JdnulWNXURFZfpydkm
9M+raeh9TElBFmOrLq3ZIL8FDyZ6zhQTf7ey+UYkOwJS2lcF5uzLfqrllArqGwhS
cGci4W31lfP2Fw7i9pxCWejp9cYHTIPs+hUayqxMhMoeUTfhRU1rrDy5wpoA29G2
O4l8rde7kRUAkgRF279G90XU7QoMyPxbZJClQJ/je8GLNhDfHrmFxohqb4gXoVCd
TY695d2fjAi1rYGpSX8nCqXPPLQv31+bF7SaOvmFdhEbIAfzlZGzH+lzZ54DU/Q3
MJYgWLkKT7lindEFMy1zf+brPSUyfF1fdw9XhCwI1Pvb6zzvKeIOE5/CvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2uPddpt0NYwCLdAEySRbTXIr3RMB8GA1UdIwQY
MBaAFIQ9qeQmj+t2D8fRWxXayAQhAIRNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEQycDVDYVA2M1lQeDlGYkZkcklCQ0VBaEUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xZDI3ODgtZGE0MC00MzFhLTk3ZDAt
ZmJkNDZkOWNhMzcyLzEvaEQycDVDYVA2M1lQeDlGYkZkcklCQ0VBaEUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8xZDI3ODgtZGE0MC00MzFhLTk3ZDAtZmJkNDZkOWNhMzcy
LzEvaEQycDVDYVA2M1lQeDlGYkZkcklCQ0VBaEUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHwWZ2nv9
NEUS3PYe5SeIoAH0Am6lyQnlUCSOrlAFfeOucxvXWOiqQRLt2uPH+jppMORbuDXu
+W0z2mI4EG7gM+RiUYr+wohoOam9zZwdkfav+GCtbUtun0O0pMBC6IeBkkvD1zgL
FecicDUDiqW9XqUAMD8tRzYIlYNTC3qfz6Z8PRTaybCEcgdQPXuMus7fMXZPJrVi
iKySwVUlkjNejz6nILayeDVwgcmRZfWUOX9Mi4keOCSb4V7kuysCagF7YdbFK2H/
xcHnWNHIoDj9sW5w9pgQ0u72zZ9Zg8NQUF32Na6MqrZr2WLC31oAwC3HEhQf1Mvu
URO0BtpAdFYRBA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 00:52:42 2026 by rpki-client