Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
File: H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft (raw, json)
Hash identifier: E1/4c6pPv+KsKoX1B3qr2g+oI4pTJp8PgAviYKINxgo=
Subject key identifier: 8C:66:BA:60:25:68:19:4E:F5:A6:C4:9D:C3:42:1B:9E:DF:52:CB:6D
Authority key identifier: 1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
Certificate issuer: /CN=1f97599f63d787c65b2ef9ff70dd636527404466
Certificate serial: 01A0D9F15EC2A7223CAD9B27B6992DC72CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
Manifest number: 117A
Signing time: Fri 25 Sep 2026 19:01:09 +0000
Manifest this update: Fri 25 Sep 2026 19:01:09 +0000
Manifest next update: Sat 26 Sep 2026 19:01:09 +0000
Files and hashes: 1: H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl (hash: obtyW10JNpfcvTMD3pJzE/CYii/DuC933yK35Va5eH4=)
2: ex-egV2q8xIsoN87xmhf0Beqsx8.roa (hash: yMk8zHkPeRJ7LF6AhIih+Hrdt/inz7ExGAHQpY4Q1X0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:5e:c2:a7:22:3c:ad:9b:27:b6:99:2d:c7:2c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f97599f63d787c65b2ef9ff70dd636527404466
Validity
Not Before: Sep 25 19:01:09 2026 GMT
Not After : Sep 26 19:01:09 2026 GMT
Subject: CN=8c66ba602568194ef5a6c49dc3421b9edf52cb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:88:43:b9:9c:21:e3:b3:5d:97:f5:ea:53:fc:
3a:13:73:3b:1b:43:4c:7d:85:a5:a4:07:79:eb:c7:
43:73:e2:f9:5f:30:d5:0a:d8:9d:e5:a8:ab:35:c7:
26:0c:41:af:44:49:42:07:a4:ca:e6:c7:cf:9f:82:
25:a5:0a:ca:75:5d:a9:1f:75:ce:d4:68:63:65:1f:
50:9e:ae:97:e4:65:ba:ae:b7:16:5a:76:c9:84:e1:
df:a2:f6:9d:2e:90:26:80:d1:19:0c:c6:91:bb:88:
24:10:63:da:a5:fe:12:5b:88:3c:63:49:0e:8e:17:
9d:73:92:18:a7:48:4c:d4:af:79:8f:1f:ff:85:3b:
42:d3:05:aa:87:2c:49:45:2e:c9:e5:9c:07:74:99:
27:84:24:55:d0:3c:fd:35:c0:64:d8:6f:f7:4d:a3:
f8:87:9a:50:25:8c:d5:b1:41:b2:13:15:5c:b0:f8:
6e:43:8d:e5:19:20:5b:09:cf:e0:46:ec:71:a0:ed:
01:6d:a8:b2:c7:b6:97:ea:68:e4:e8:f9:09:74:70:
a6:7b:f1:99:bd:9d:4f:95:6b:cd:a1:23:a4:86:1d:
ae:86:cf:c9:83:eb:bd:02:5b:97:aa:5b:70:10:73:
0b:5d:4c:c3:30:07:e7:a0:9c:59:71:8a:cf:c9:02:
37:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:66:BA:60:25:68:19:4E:F5:A6:C4:9D:C3:42:1B:9E:DF:52:CB:6D
X509v3 Authority Key Identifier:
keyid:1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:fd:d0:fc:f9:0c:0c:b0:bd:a4:cc:79:42:9e:33:e9:72:0a:
96:1f:cd:14:bb:d8:25:f7:8c:ff:13:b2:87:87:aa:88:f3:da:
55:b3:02:db:b0:1c:a6:81:43:bb:a4:71:cc:76:a5:a8:1a:84:
7a:72:8b:8c:96:00:75:37:99:cd:66:b7:33:8d:7d:eb:06:8c:
57:e8:73:d1:96:84:a4:72:00:05:f0:b5:fc:47:fe:cf:44:c6:
8f:3e:b8:f4:58:cc:56:92:61:78:99:d8:a5:2c:40:c9:a0:3c:
25:5b:39:80:b2:45:a3:8e:da:4e:50:83:ab:15:8d:f4:a0:36:
db:f0:9c:54:74:5b:d3:df:4d:f7:1e:57:3b:4b:21:65:38:6f:
70:63:7e:39:85:f7:d5:22:9f:82:f5:93:52:8d:68:8a:00:dd:
a9:b3:92:06:67:bb:58:ce:ed:2f:c3:26:18:31:42:f7:34:a2:
08:e8:26:b6:ad:6b:86:4a:2e:36:99:82:35:9b:f7:f7:36:31:
1e:81:ab:bd:49:38:2a:2c:74:9d:1b:21:98:7c:a0:86:ab:f7:
65:c9:19:54:b8:53:ac:37:08:17:bb:fb:1b:32:63:54:2a:10:
64:38:32:f9:35:42:cb:dd:28:bb:7c:e8:85:d4:77:0c:b9:de:
30:33:83:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZ8V7CpyI8rZsntpktxyykMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmOTc1OTlmNjNkNzg3YzY1YjJlZjlmZjcwZGQ2MzY1Mjc0
MDQ0NjYwHhcNMjYwOTI1MTkwMTA5WhcNMjYwOTI2MTkwMTA5WjAzMTEwLwYDVQQD
Eyg4YzY2YmE2MDI1NjgxOTRlZjVhNmM0OWRjMzQyMWI5ZWRmNTJjYjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYhDuZwh47Ndl/XqU/w6E3M7G0NM
fYWlpAd568dDc+L5XzDVCtid5airNccmDEGvRElCB6TK5sfPn4IlpQrKdV2pH3XO
1GhjZR9Qnq6X5GW6rrcWWnbJhOHfovadLpAmgNEZDMaRu4gkEGPapf4SW4g8Y0kO
jhedc5IYp0hM1K95jx//hTtC0wWqhyxJRS7J5ZwHdJknhCRV0Dz9NcBk2G/3TaP4
h5pQJYzVsUGyExVcsPhuQ43lGSBbCc/gRuxxoO0Bbaiyx7aX6mjk6PkJdHCme/GZ
vZ1PlWvNoSOkhh2uhs/Jg+u9AluXqltwEHMLXUzDMAfnoJxZcYrPyQI38QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxmumAlaBlO9abEncNCG57fUsttMB8GA1UdIwQY
MBaAFB+XWZ9j14fGWy75/3DdY2UnQERmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDVkWm4yUFhoOFpiTHZuX2NOMWpaU2RBUkdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMWE5NWItNGJlOS00OTdlLWJkZjct
N2VjZTdkMDczNjUxLzEvSDVkWm4yUFhoOFpiTHZuX2NOMWpaU2RBUkdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hMWE5NWItNGJlOS00OTdlLWJkZjctN2VjZTdkMDczNjUx
LzEvSDVkWm4yUFhoOFpiTHZuX2NOMWpaU2RBUkdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/3Q/PkM
DLC9pMx5Qp4z6XIKlh/NFLvYJfeM/xOyh4eqiPPaVbMC27AcpoFDu6RxzHalqBqE
enKLjJYAdTeZzWa3M4196waMV+hz0ZaEpHIABfC1/Ef+z0TGjz649FjMVpJheJnY
pSxAyaA8JVs5gLJFo47aTlCDqxWN9KA22/CcVHRb099N9x5XO0shZThvcGN+OYX3
1SKfgvWTUo1oigDdqbOSBme7WM7tL8MmGDFC9zSiCOgmtq1rhkouNpmCNZv39zYx
HoGrvUk4Kix0nRshmHyghqv3ZckZVLhTrDcIF7v7GzJjVCoQZDgy+TVCy90ou3zo
hdR3DLneMDODnw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:32:45 2026 by rpki-client