Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
File: HDepAm5Fto_kc1pGm3VjYTCtElw.mft (raw, json)
Hash identifier: YY+EtGhiiyUGM4O/bwfeNpkd/B48rS+SDSGwwuOAejE=
Subject key identifier: 32:0C:A4:F5:BD:ED:98:E8:ED:1A:0D:EF:2A:DD:7E:B7:CE:E4:E1:0C
Authority key identifier: 1C:37:A9:02:6E:45:B6:8F:E4:73:5A:46:9B:75:63:61:30:AD:12:5C
Certificate issuer: /CN=1c37a9026e45b68fe4735a469b75636130ad125c
Certificate serial: 01A0EEF9B840FF69E0857E7064006F473D16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
Manifest number: 0DB5
Signing time: Tue 29 Sep 2026 21:02:17 +0000
Manifest this update: Tue 29 Sep 2026 21:02:17 +0000
Manifest next update: Wed 30 Sep 2026 21:02:17 +0000
Files and hashes: 1: 2k061tGHc03Ey0V3NX4-GnPnNBc.roa (hash: cqhlKMqnXJOJCr7N4xEDssiNgQoWfirNtnOj+DZf3Xk=)
2: HDepAm5Fto_kc1pGm3VjYTCtElw.crl (hash: QP30guae0q3C9ODyX5TxQ89RImw8LQFmdrj6aIWlRKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 20:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:f9:b8:40:ff:69:e0:85:7e:70:64:00:6f:47:3d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c37a9026e45b68fe4735a469b75636130ad125c
Validity
Not Before: Sep 29 21:02:17 2026 GMT
Not After : Sep 30 21:02:17 2026 GMT
Subject: CN=320ca4f5bded98e8ed1a0def2add7eb7cee4e10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:83:f7:58:85:e5:13:94:64:19:6f:b4:84:0d:
c3:53:9c:74:ca:e3:e2:35:77:16:d7:b3:d7:8a:eb:
41:f7:ad:c9:e6:c0:1d:dd:83:e6:87:01:32:8b:cc:
b3:1d:21:47:44:a2:c3:2f:3b:c3:a6:f7:0a:03:7d:
7e:86:63:b8:22:fd:4c:c0:5e:3f:81:20:eb:6a:55:
80:d8:1d:6e:9c:7c:c3:fd:11:71:2c:12:6b:c6:10:
27:c9:2c:f6:fd:3d:c8:9e:3e:e2:97:d0:36:56:b1:
48:35:e6:cb:0c:85:f4:4f:94:45:89:d1:25:bf:f4:
2f:64:ea:b3:41:ef:73:d2:e1:3f:20:30:dc:a1:f7:
0c:57:23:1c:92:9c:ec:2d:71:26:71:f3:ba:2c:1a:
42:f9:1d:94:42:d0:de:f7:2c:62:a1:8d:84:f2:a3:
40:9f:e5:19:30:fd:5d:41:e1:26:fb:9d:01:3d:a9:
28:36:30:fb:9a:67:f6:21:9e:c5:58:0a:63:2c:08:
7e:2a:f5:a1:94:37:0e:16:be:b6:d1:ae:70:cc:24:
75:ec:77:c6:3a:d3:7c:ae:1f:0f:40:98:15:1a:f1:
4f:03:7e:3f:71:c8:b0:89:11:ff:f1:23:ff:d5:7e:
84:49:cb:b9:93:07:8b:29:19:7b:9e:f8:00:cf:e9:
9e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0C:A4:F5:BD:ED:98:E8:ED:1A:0D:EF:2A:DD:7E:B7:CE:E4:E1:0C
X509v3 Authority Key Identifier:
keyid:1C:37:A9:02:6E:45:B6:8F:E4:73:5A:46:9B:75:63:61:30:AD:12:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:11:94:3a:86:3a:15:b3:1e:00:1b:78:c9:8c:d6:8c:61:50:
3d:38:d7:72:92:25:21:6d:17:13:4a:71:1d:d1:cf:b5:d5:68:
bf:87:1c:3f:2c:c5:16:83:6b:fe:36:43:41:44:bc:71:ff:c9:
3a:78:8b:76:00:e7:23:cc:9a:8a:14:4a:84:6b:1f:38:ff:c0:
48:7a:2c:34:58:47:30:0d:f4:2c:5e:43:78:12:cd:60:02:d6:
1b:81:60:6f:fd:ec:3e:5a:6d:b2:55:89:bc:6a:ef:a1:6f:8f:
68:ea:4c:7d:3e:01:f4:d3:e5:45:a4:bd:70:bf:ab:52:9c:bc:
61:e2:d8:8b:6b:7f:fb:05:7d:55:68:7f:6c:41:19:d5:a6:dd:
b6:fa:24:02:9d:5e:db:bc:a6:c3:85:10:13:f3:e9:58:e1:fa:
ea:0b:bf:c8:0e:6e:b6:93:33:89:46:8d:70:ee:73:55:7c:51:
05:f3:d3:c5:ff:f1:1f:18:7d:cb:fc:3f:bf:8c:00:2f:6b:27:
f6:14:e7:7d:d9:69:78:cf:6d:c6:be:6a:4a:33:0d:ac:69:1d:
c4:61:ff:25:81:db:12:e4:94:66:af:84:ed:b6:83:99:c8:5b:
fd:9c:da:11:2e:27:62:a9:5f:cf:2b:56:5b:25:4d:7a:bb:62:
1f:62:17:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 07:58:23 2026 by rpki-client