Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
File: hrIjA95LCocPz-e2VWwCT3XHajQ.mft (raw, json)
Hash identifier: fR5NnMf2bq14QaoSFcAB1B4EsHIJKV0mV+Kmy0s1tXY=
Subject key identifier: B0:20:20:83:00:79:44:AE:51:95:47:C8:16:9C:E5:5E:62:EB:56:80
Authority key identifier: 86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
Certificate issuer: /CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Certificate serial: 01A0E286AA3C8698210540501A915B49DE30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
Manifest number: 1576
Signing time: Sun 27 Sep 2026 11:01:11 +0000
Manifest this update: Sun 27 Sep 2026 11:01:11 +0000
Manifest next update: Mon 28 Sep 2026 11:01:11 +0000
Files and hashes: 1: PreLEhXrBI_UKFJOTXBGTgHoYF0.roa (hash: YyPA9bxM1XffwGYRaKy9yqFp9gB0LZF+tWz17YqGofw=)
2: fW-vmq3lP_3MyQWkZHy-CbMNL3I.roa (hash: tS5uriJcYFbYG/ALXKZnCG1DLjQm/ccSm8DkPwEWxXI=)
3: hrIjA95LCocPz-e2VWwCT3XHajQ.crl (hash: utGC9xPpz0uanV97TbIwyjScZdSXpC3BXz1e4SpPMDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:86:aa:3c:86:98:21:05:40:50:1a:91:5b:49:de:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Validity
Not Before: Sep 27 11:01:11 2026 GMT
Not After : Sep 28 11:01:11 2026 GMT
Subject: CN=b0202083007944ae519547c8169ce55e62eb5680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b3:84:6c:a8:dc:e8:14:b9:3f:b1:4d:08:d7:
6f:18:ed:d0:2d:cd:0e:54:f0:37:6e:e1:fb:47:cc:
ae:a6:80:71:92:b1:d9:60:2a:3d:58:66:2a:e0:77:
4c:81:11:47:31:66:2c:a3:25:2c:1a:45:9f:52:5d:
e3:9b:1f:75:07:77:0c:1b:ed:97:ea:9d:1a:d6:cc:
b7:5e:45:aa:02:1d:6f:23:d8:04:ad:ae:98:c2:00:
a8:35:45:98:fe:a1:dc:5a:64:2e:9c:27:60:a9:83:
90:ba:4b:27:4e:37:e7:74:ad:77:d4:b4:81:e1:f3:
1f:96:28:81:ee:ea:eb:29:c6:13:dd:76:b4:e1:bc:
7b:69:e3:8c:fe:cf:e7:02:84:05:04:2e:78:aa:a2:
87:bd:f8:4c:5b:a0:0d:21:f9:71:f9:7b:b4:d3:ba:
94:8f:e4:3d:9c:59:db:a7:c7:4f:18:0c:b8:00:11:
d3:4b:69:4a:2b:f3:cf:1c:ce:c8:0c:fe:15:5a:e7:
91:93:09:48:03:3d:5f:1f:35:67:77:38:5e:47:b7:
50:10:6a:da:a5:ad:3d:0b:48:51:8d:7f:65:fd:3c:
95:09:49:fb:7a:a1:2c:60:85:e5:8f:ae:42:6e:05:
71:34:f5:16:54:0b:0b:9c:cd:04:08:be:08:38:e2:
e7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:20:20:83:00:79:44:AE:51:95:47:C8:16:9C:E5:5E:62:EB:56:80
X509v3 Authority Key Identifier:
keyid:86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:20:dd:c4:bf:b5:35:b1:38:81:f9:c8:8b:86:9a:1e:81:ec:
b9:bc:f6:54:2d:b6:49:0a:70:59:2a:48:05:7b:5f:ec:ea:b6:
e8:0e:d5:71:9b:90:13:ee:78:95:bc:67:87:73:84:dd:c2:56:
fd:90:e0:c4:a2:ff:6d:1a:5b:4c:54:e2:04:34:1d:84:2d:f4:
77:49:0f:64:9f:5b:f4:20:f8:7c:91:a4:bd:c2:d1:dc:88:26:
bb:75:ab:b9:9a:27:2b:71:ae:4f:49:d3:f7:4c:95:e2:b2:e1:
f8:a5:74:b2:5d:be:79:1e:bb:16:15:9f:c6:64:52:4c:2b:a6:
09:1c:42:80:d9:86:ad:09:4b:d7:c3:5e:94:82:9c:48:21:d4:
7b:74:90:d3:0e:39:92:d5:e5:d0:86:58:0c:e6:86:e9:1d:1a:
9d:83:e3:31:6a:0f:4e:4e:77:6a:0b:5f:0d:df:ff:11:27:d5:
cf:bc:eb:08:18:d5:5c:ef:bb:73:f4:24:87:92:78:b2:1b:60:
f8:ce:2f:6a:99:3f:d5:3f:35:80:82:28:af:93:f3:be:e5:96:
40:bd:ea:67:14:3d:e2:b6:c4:71:14:b3:3a:03:79:06:06:15:
f2:e3:7b:8c:2a:d9:25:5d:13:f4:5d:a0:fe:00:e6:76:48:50:
cd:67:1e:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDihqo8hpghBUBQGpFbSd4wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2YjIyMzAzZGU0YjBhODcwZmNmZTdiNjU1NmMwMjRmNzVj
NzZhMzQwHhcNMjYwOTI3MTEwMTExWhcNMjYwOTI4MTEwMTExWjAzMTEwLwYDVQQD
EyhiMDIwMjA4MzAwNzk0NGFlNTE5NTQ3YzgxNjljZTU1ZTYyZWI1NjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrOEbKjc6BS5P7FNCNdvGO3QLc0O
VPA3buH7R8yupoBxkrHZYCo9WGYq4HdMgRFHMWYsoyUsGkWfUl3jmx91B3cMG+2X
6p0a1sy3XkWqAh1vI9gEra6YwgCoNUWY/qHcWmQunCdgqYOQuksnTjfndK131LSB
4fMfliiB7urrKcYT3Xa04bx7aeOM/s/nAoQFBC54qqKHvfhMW6ANIflx+Xu007qU
j+Q9nFnbp8dPGAy4ABHTS2lKK/PPHM7IDP4VWueRkwlIAz1fHzVndzheR7dQEGra
pa09C0hRjX9l/TyVCUn7eqEsYIXlj65CbgVxNPUWVAsLnM0ECL4IOOLn7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAgIIMAeUSuUZVHyBac5V5i61aAMB8GA1UdIwQY
MBaAFIayIwPeSwqHD8/ntlVsAk91x2o0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHJJakE5NUxDb2NQei1lMlZXd0NUM1hIYWpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hZmQ3MGYtYzMwMC00OWNiLWI3Mjkt
NzJhYjU5ODdmNjA5LzEvaHJJakE5NUxDb2NQei1lMlZXd0NUM1hIYWpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hZmQ3MGYtYzMwMC00OWNiLWI3MjktNzJhYjU5ODdmNjA5
LzEvaHJJakE5NUxDb2NQei1lMlZXd0NUM1hIYWpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgiDdxL+1
NbE4gfnIi4aaHoHsubz2VC22SQpwWSpIBXtf7Oq26A7VcZuQE+54lbxnh3OE3cJW
/ZDgxKL/bRpbTFTiBDQdhC30d0kPZJ9b9CD4fJGkvcLR3Igmu3WruZonK3GuT0nT
90yV4rLh+KV0sl2+eR67FhWfxmRSTCumCRxCgNmGrQlL18NelIKcSCHUe3SQ0w45
ktXl0IZYDOaG6R0anYPjMWoPTk53agtfDd//ESfVz7zrCBjVXO+7c/Qkh5J4shtg
+M4vapk/1T81gIIor5PzvuWWQL3qZxQ94rbEcRSzOgN5BgYV8uN7jCrZJV0T9F2g
/gDmdkhQzWceaw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 18:54:48 2026 by rpki-client