Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
File: HDepAm5Fto_kc1pGm3VjYTCtElw.mft (raw, json)
Hash identifier: qkk5cU8yOkJo4zv4zyYQWe77it1IMCQHNrDXSzArVAA=
Subject key identifier: 6A:A9:D6:1F:25:D7:04:79:4B:13:C8:EC:CD:DB:8B:55:1C:7A:3C:81
Authority key identifier: 1C:37:A9:02:6E:45:B6:8F:E4:73:5A:46:9B:75:63:61:30:AD:12:5C
Certificate issuer: /CN=1c37a9026e45b68fe4735a469b75636130ad125c
Certificate serial: 019F916CAD4DDD66E8BFCF5828CFD3361FFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
Manifest number: 0D00
Signing time: Fri 24 Jul 2026 00:00:46 +0000
Manifest this update: Fri 24 Jul 2026 00:00:46 +0000
Manifest next update: Sat 25 Jul 2026 00:00:46 +0000
Files and hashes: 1: 2k061tGHc03Ey0V3NX4-GnPnNBc.roa (hash: cqhlKMqnXJOJCr7N4xEDssiNgQoWfirNtnOj+DZf3Xk=)
2: HDepAm5Fto_kc1pGm3VjYTCtElw.crl (hash: Va7Eo+MrZbygkmhAsJnxlrv9eNPxK2uInihaxyPNGA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:ad:4d:dd:66:e8:bf:cf:58:28:cf:d3:36:1f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c37a9026e45b68fe4735a469b75636130ad125c
Validity
Not Before: Jul 24 00:00:46 2026 GMT
Not After : Jul 25 00:00:46 2026 GMT
Subject: CN=6aa9d61f25d704794b13c8eccddb8b551c7a3c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bc:76:91:0f:52:6b:d9:f4:35:8f:61:af:3e:
65:fe:5d:c9:f6:36:03:85:ac:95:72:e0:70:22:31:
b3:ed:d7:c6:69:9c:5e:ca:b4:81:25:80:2d:cf:68:
41:a4:f3:2d:14:ce:0b:f9:73:c3:23:36:60:1d:f1:
2e:02:64:06:c2:3d:7c:58:5f:9a:fc:24:1e:b8:c1:
00:eb:3c:5d:38:8f:8f:09:21:33:77:ed:cd:a2:4d:
f1:d9:05:98:26:58:74:6b:a7:3c:44:fe:5b:a2:aa:
11:f2:3d:58:39:36:a0:9a:62:20:86:cd:42:b3:e3:
22:19:71:3b:06:fb:0e:11:96:fe:c4:42:c8:a5:05:
bd:7e:b0:63:39:32:84:87:8f:a1:9d:9e:cd:a8:02:
c7:18:03:86:06:d2:3c:cb:1e:15:83:1b:6a:6d:b5:
80:a1:81:a6:fe:49:8b:2f:25:ba:69:53:58:87:8e:
2a:43:aa:43:88:0f:c9:a9:77:32:8a:45:18:f6:6f:
7c:7e:de:f3:3e:ec:24:26:9e:a4:d1:68:cd:07:0d:
d5:6b:b1:b0:5f:54:60:49:e7:e3:19:0a:2d:19:47:
70:1a:76:45:47:db:81:b5:bc:60:1f:84:41:22:72:
94:05:0a:9f:05:b0:91:7c:93:ee:a6:90:de:d2:fd:
6d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A9:D6:1F:25:D7:04:79:4B:13:C8:EC:CD:DB:8B:55:1C:7A:3C:81
X509v3 Authority Key Identifier:
keyid:1C:37:A9:02:6E:45:B6:8F:E4:73:5A:46:9B:75:63:61:30:AD:12:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:54:3e:5e:e1:ca:a6:23:de:07:5b:d3:2c:9d:60:2b:62:fb:
9e:e4:f3:07:cc:b6:76:07:04:a7:6b:cd:af:7f:ab:bb:d4:c3:
06:e3:3b:82:32:a8:50:82:3d:a5:42:d1:0d:bd:ea:94:a4:72:
47:6e:21:0e:13:79:10:9a:83:b2:a0:cd:b6:18:6f:d3:66:b1:
2f:c5:98:17:82:fd:b8:2f:9e:3b:3a:c1:fe:e4:c6:6e:99:7c:
54:c9:9b:34:2c:2e:93:0a:bc:19:8a:37:7c:29:5d:a2:f8:0b:
33:0c:1d:ae:28:ee:d7:3d:aa:c5:aa:78:fe:d6:f4:77:aa:9d:
b9:2c:e4:6d:c1:94:4e:3a:7f:71:fe:c3:18:77:2b:8d:ae:13:
81:48:47:34:ca:51:af:bb:8a:b2:be:e7:9c:6f:ca:60:21:66:
2b:ca:4d:a4:2f:32:4e:0a:13:fc:19:75:02:24:2d:e6:af:09:
5d:90:d1:a0:83:d6:0d:84:a5:90:05:2e:3d:11:2b:6d:f5:60:
84:64:39:28:78:4c:90:2c:91:dc:b0:ca:9e:d2:f5:8e:7a:a4:
b0:fc:1f:93:36:29:51:1d:4e:57:ec:d0:e7:5a:1d:1f:d6:51:
ba:9e:c1:0a:83:0b:44:e6:5b:aa:02:f1:7c:34:6b:4b:dc:79:
6a:d4:72:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbK1N3Wbov89YKM/TNh/+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMzdhOTAyNmU0NWI2OGZlNDczNWE0NjliNzU2MzYxMzBh
ZDEyNWMwHhcNMjYwNzI0MDAwMDQ2WhcNMjYwNzI1MDAwMDQ2WjAzMTEwLwYDVQQD
Eyg2YWE5ZDYxZjI1ZDcwNDc5NGIxM2M4ZWNjZGRiOGI1NTFjN2EzYzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7x2kQ9Sa9n0NY9hrz5l/l3J9jYD
hayVcuBwIjGz7dfGaZxeyrSBJYAtz2hBpPMtFM4L+XPDIzZgHfEuAmQGwj18WF+a
/CQeuMEA6zxdOI+PCSEzd+3Nok3x2QWYJlh0a6c8RP5boqoR8j1YOTagmmIghs1C
s+MiGXE7BvsOEZb+xELIpQW9frBjOTKEh4+hnZ7NqALHGAOGBtI8yx4VgxtqbbWA
oYGm/kmLLyW6aVNYh44qQ6pDiA/JqXcyikUY9m98ft7zPuwkJp6k0WjNBw3Va7Gw
X1RgSefjGQotGUdwGnZFR9uBtbxgH4RBInKUBQqfBbCRfJPuppDe0v1tHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqp1h8l1wR5SxPI7M3bi1UcejyBMB8GA1UdIwQY
MBaAFBw3qQJuRbaP5HNaRpt1Y2EwrRJcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSERlcEFtNUZ0b19rYzFwR20zVmpZVEN0RWx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8yYmI2MDMtZjQ3OS00MGNiLTgyZDQt
NDhkNjcyOTczYjEzLzEvSERlcEFtNUZ0b19rYzFwR20zVmpZVEN0RWx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8yYmI2MDMtZjQ3OS00MGNiLTgyZDQtNDhkNjcyOTczYjEz
LzEvSERlcEFtNUZ0b19rYzFwR20zVmpZVEN0RWx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADVQ+XuHK
piPeB1vTLJ1gK2L7nuTzB8y2dgcEp2vNr3+ru9TDBuM7gjKoUII9pULRDb3qlKRy
R24hDhN5EJqDsqDNthhv02axL8WYF4L9uC+eOzrB/uTGbpl8VMmbNCwukwq8GYo3
fCldovgLMwwdriju1z2qxap4/tb0d6qduSzkbcGUTjp/cf7DGHcrja4TgUhHNMpR
r7uKsr7nnG/KYCFmK8pNpC8yTgoT/Bl1AiQt5q8JXZDRoIPWDYSlkAUuPRErbfVg
hGQ5KHhMkCyR3LDKntL1jnqksPwfkzYpUR1OV+zQ51odH9ZRup7BCoMLROZbqgLx
fDRrS9x5atRyVA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:41:56 2026 by rpki-client