
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
File: hds5fcdkjw_TPGMfNcwgdOTuMy4.mft (raw, json)
Hash identifier: vwV5e4BSzFtzxXUKV3slVVgKcYy3ZkQtEkcSJSOtqlc=
Subject key identifier: A6:A0:B5:E7:67:E1:68:F9:E9:1D:9A:74:5E:83:17:30:58:B7:A8:36
Authority key identifier: 85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
Certificate issuer: /CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Certificate serial: 01A0F1C3D727100DE75786EBB6557708B994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
Manifest number: 0D95
Signing time: Wed 30 Sep 2026 10:02:18 +0000
Manifest this update: Wed 30 Sep 2026 10:02:18 +0000
Manifest next update: Thu 01 Oct 2026 10:02:18 +0000
Files and hashes: 1: VTGNe0wLMZV0ZCvK8WlwuJb3oIU.roa (hash: xQJpTfnGU7sVo8llzufhQdICBBAxKZdw2Wu7Ywev7hE=)
2: hds5fcdkjw_TPGMfNcwgdOTuMy4.crl (hash: +bh56NxjmT7KThBrzVevTHREWOiIL7GnbGNJrazCdBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 10:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:c3:d7:27:10:0d:e7:57:86:eb:b6:55:77:08:b9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Validity
Not Before: Sep 30 10:02:18 2026 GMT
Not After : Oct 1 10:02:18 2026 GMT
Subject: CN=a6a0b5e767e168f9e91d9a745e83173058b7a836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:73:a9:9c:33:47:c0:a6:69:bd:01:ab:6d:d2:
02:b8:6a:d0:28:81:49:5c:0d:c9:62:97:3a:e1:ab:
ec:ff:a0:23:dd:ff:80:bb:20:92:ef:9a:cc:0a:70:
22:d9:9f:3e:f6:8c:21:1f:7c:73:b0:1f:d7:a1:fd:
6c:93:35:a7:98:17:d6:45:fa:f0:d9:70:ca:89:6c:
be:8a:d2:84:1f:b8:54:61:2e:e2:0a:58:c1:f0:59:
01:2e:d4:84:50:da:ff:32:6b:21:b6:26:18:4d:c5:
a6:d0:7f:bf:aa:9f:70:c1:cd:28:5b:28:de:48:6b:
36:d9:56:f1:bf:ce:31:be:09:f1:6c:4b:90:95:1b:
16:63:bc:ff:7f:a5:ff:3f:7f:69:82:fc:95:d0:ae:
5f:22:30:fb:1f:ee:68:54:ef:25:7b:de:b6:0f:c1:
93:9d:51:26:d5:35:17:3e:66:f8:58:21:94:ee:a5:
ba:88:70:0c:b4:c8:a9:81:1d:d9:12:47:65:50:01:
d4:c7:0c:f3:19:42:f8:e5:54:14:3a:b2:33:83:f5:
1e:77:26:e6:10:dc:30:af:eb:0f:75:b6:1a:cf:2a:
95:41:7c:99:4b:eb:6f:bc:72:f5:8d:83:31:cd:53:
38:e3:6c:b6:3b:89:db:79:b8:d1:aa:2d:f2:07:56:
fd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A0:B5:E7:67:E1:68:F9:E9:1D:9A:74:5E:83:17:30:58:B7:A8:36
X509v3 Authority Key Identifier:
keyid:85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:8c:a2:c1:c6:04:e2:d7:84:af:c5:a2:3b:da:48:e5:52:7f:
b5:f3:29:76:10:44:c5:59:3d:07:23:63:52:74:e5:49:e0:ed:
60:57:14:a5:ef:23:9b:98:7c:9f:01:39:de:3c:39:36:a8:81:
e7:41:7d:c4:f5:fa:e5:77:a0:9e:be:a4:28:8a:40:5e:f3:ce:
c1:21:bd:ba:8d:14:d5:47:16:d5:4d:87:f9:fe:a0:99:a6:9a:
79:b1:c7:b4:38:5e:22:99:fe:69:75:b9:d2:87:7c:78:c6:f5:
c4:2b:b0:33:89:34:66:22:4f:9d:7f:8b:03:7c:84:58:30:0f:
91:1a:5b:79:b5:8d:70:20:e7:eb:a7:15:ca:b2:a6:ea:11:9e:
d5:b6:22:38:3e:30:9c:97:83:06:3b:a5:39:c7:fa:b6:1f:cb:
17:73:a7:90:80:e6:5f:4a:23:69:5e:52:67:69:a7:57:03:5a:
1e:0c:a4:8f:24:42:31:b2:2f:7a:79:3a:04:c4:ce:0b:07:55:
17:87:d7:29:fb:02:e5:35:30:fb:07:59:bc:76:1a:58:2e:4c:
53:45:42:60:7f:47:8a:31:45:05:ce:37:dc:23:6e:21:11:97:
82:eb:f8:a5:6b:cf:f6:b7:6c:67:a5:d9:83:e0:94:d9:8b:c0:
08:c6:18:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDxw9cnEA3nV4brtlV3CLmUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZGIzOTdkYzc2NDhmMGZkMzNjNjMxZjM1Y2MyMDc0ZTRl
ZTMzMmUwHhcNMjYwOTMwMTAwMjE4WhcNMjYxMDAxMTAwMjE4WjAzMTEwLwYDVQQD
EyhhNmEwYjVlNzY3ZTE2OGY5ZTkxZDlhNzQ1ZTgzMTczMDU4YjdhODM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3OpnDNHwKZpvQGrbdICuGrQKIFJ
XA3JYpc64avs/6Aj3f+AuyCS75rMCnAi2Z8+9owhH3xzsB/Xof1skzWnmBfWRfrw
2XDKiWy+itKEH7hUYS7iCljB8FkBLtSEUNr/MmshtiYYTcWm0H+/qp9wwc0oWyje
SGs22Vbxv84xvgnxbEuQlRsWY7z/f6X/P39pgvyV0K5fIjD7H+5oVO8le962D8GT
nVEm1TUXPmb4WCGU7qW6iHAMtMipgR3ZEkdlUAHUxwzzGUL45VQUOrIzg/Uedybm
ENwwr+sPdbYazyqVQXyZS+tvvHL1jYMxzVM442y2O4nbebjRqi3yB1b9yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKagtedn4Wj56R2adF6DFzBYt6g2MB8GA1UdIwQY
MBaAFIXbOX3HZI8P0zxjHzXMIHTk7jMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGRzNWZjZGtqd19UUEdNZk5jd2dkT1R1TXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ODc3MmMtYjExYS00OWM5LTkwN2Yt
NGVkMWQwNzViNjM3LzEvaGRzNWZjZGtqd19UUEdNZk5jd2dkT1R1TXk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82ODc3MmMtYjExYS00OWM5LTkwN2YtNGVkMWQwNzViNjM3
LzEvaGRzNWZjZGtqd19UUEdNZk5jd2dkT1R1TXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHoyiwcYE
4teEr8WiO9pI5VJ/tfMpdhBExVk9ByNjUnTlSeDtYFcUpe8jm5h8nwE53jw5NqiB
50F9xPX65Xegnr6kKIpAXvPOwSG9uo0U1UcW1U2H+f6gmaaaebHHtDheIpn+aXW5
0od8eMb1xCuwM4k0ZiJPnX+LA3yEWDAPkRpbebWNcCDn66cVyrKm6hGe1bYiOD4w
nJeDBjulOcf6th/LF3OnkIDmX0ojaV5SZ2mnVwNaHgykjyRCMbIvenk6BMTOCwdV
F4fXKfsC5TUw+wdZvHYaWC5MU0VCYH9HijFFBc433CNuIRGXguv4pWvP9rdsZ6XZ
g+CU2YvACMYYVA==
-----END CERTIFICATE-----
Generated at Wed Sep 30 19:38:40 2026 by rpki-client