Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
File: HdxT0d56LvfrK5DICRVUQUAEJIg.mft (raw, json)
Hash identifier: BOZl+NGMg5z+40WKiuNQi7d+ouyer7NM3zdeD3NMNF4=
Subject key identifier: A3:A0:80:AB:1D:9A:B3:95:30:6A:78:0C:BC:F0:74:DB:65:04:38:AE
Authority key identifier: 1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
Certificate issuer: /CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Certificate serial: 01A0DC84AE16A5386EB75E5D20E3633A77FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
Manifest number: 1A81
Signing time: Sat 26 Sep 2026 07:01:17 +0000
Manifest this update: Sat 26 Sep 2026 07:01:17 +0000
Manifest next update: Sun 27 Sep 2026 07:01:17 +0000
Files and hashes: 1: 1Ht8Y73-Qua7KFMzeIwGJJI8X_I.roa (hash: ZxqBXhEUoWp+X2fpJ9yWN9oEtediIYSRJKK1ooCXLPA=)
2: 1aorfBEtrS5GmOfmJCAhL86Ev9o.roa (hash: nVeN0o0LJkNxID8TEKJoSJ7nvDwzMLsmkaxY6SDeSaE=)
3: HdxT0d56LvfrK5DICRVUQUAEJIg.crl (hash: AdQ1YAid4vzLXE+ycmaXHXc+iYiMBrZRx6Xj+exgp+M=)
4: uySycfiPIwl3qkdAFm_UQY27DIw.roa (hash: ecxPUeUZMRc0M4fLg3pXfQaDZQ4xLa/JpCwaots4UTE=)
5: yc6fB0dTyEp0nOMNxIt14wYewvg.roa (hash: q9oC20lhVIuMqPVEpkCEXpIKxa5TMW49W8VfYHcjYb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:84:ae:16:a5:38:6e:b7:5e:5d:20:e3:63:3a:77:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Validity
Not Before: Sep 26 07:01:17 2026 GMT
Not After : Sep 27 07:01:17 2026 GMT
Subject: CN=a3a080ab1d9ab395306a780cbcf074db650438ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d5:f2:b6:c9:33:84:8d:fb:81:58:69:c9:88:
12:97:45:85:24:c4:23:34:b6:b6:3f:73:bb:f7:86:
57:b9:fd:3d:7d:26:9e:97:37:16:73:45:b1:5f:9f:
4e:15:e5:f8:e3:48:99:98:2d:28:a2:98:e0:14:a5:
19:d9:ae:f2:79:a6:33:b1:cc:25:79:ad:52:f5:12:
3e:b4:54:10:3d:bd:a7:5a:d7:46:94:cc:a8:7a:36:
8e:c9:64:fa:bf:f7:a4:c3:5e:95:52:e7:05:81:67:
30:cb:e7:b9:4b:21:f8:30:c6:c9:a8:f9:15:da:00:
ad:3b:52:9e:0f:cb:82:47:af:74:60:24:aa:b1:d9:
a3:37:9b:5a:c5:45:a8:fa:5a:60:3e:de:20:fa:a0:
99:29:fc:67:83:18:93:2f:49:5f:c3:9c:f6:6f:a7:
e2:93:aa:27:e1:54:4b:58:08:62:85:a8:4e:af:be:
13:2d:06:13:be:9b:2c:7c:dc:73:34:60:9f:05:d9:
64:88:18:95:54:07:9f:52:ea:a1:2a:47:28:74:c5:
4e:8d:3e:bc:16:16:84:0d:a0:07:ef:73:05:a0:73:
23:4e:11:85:ce:c9:76:7d:22:e0:9b:d2:93:3b:33:
29:37:ad:9b:1e:81:a7:e5:44:e7:c7:72:d3:6f:d1:
2e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A0:80:AB:1D:9A:B3:95:30:6A:78:0C:BC:F0:74:DB:65:04:38:AE
X509v3 Authority Key Identifier:
keyid:1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:2c:b7:5f:70:a9:d7:3f:24:82:18:03:99:d9:8f:97:a9:8a:
26:c2:22:6c:b4:39:ce:e3:f4:c8:a7:e0:22:17:41:3f:82:84:
fe:4a:2f:31:15:ad:a1:43:f5:80:aa:2b:cd:b6:3d:30:10:a7:
35:32:82:b9:64:37:d1:f3:f9:ca:0e:4b:3f:de:49:49:a6:d2:
da:27:73:42:5c:bc:49:7b:2b:34:4b:94:cf:79:6b:8c:c5:30:
87:13:48:dc:d9:36:6c:a2:43:33:bd:80:61:59:bf:0b:d8:1f:
6b:83:65:23:f0:60:10:dd:3c:bf:76:7d:a2:2c:b5:0e:b3:ab:
2e:3d:2b:b9:87:dc:a9:3e:e6:56:fe:4e:53:e3:4c:73:df:97:
2d:37:f4:a2:f8:d7:f9:fe:8a:ed:97:bc:e8:6b:37:e9:e6:56:
bf:11:3c:b8:ff:6c:1f:f2:05:24:d2:1c:3f:b2:9d:a9:fe:84:
5c:7c:c7:b1:76:95:4a:49:ff:5d:cd:05:7e:86:e5:79:5f:9c:
a7:18:94:3a:eb:99:c0:33:47:1c:5a:b3:98:db:fe:fd:9d:43:
f9:3c:9b:92:ab:77:05:09:11:b3:ab:97:e4:62:cb:7d:9e:72:
9f:ba:8c:57:47:c2:1b:f9:cb:58:13:bd:0c:9e:43:da:70:2f:
0f:da:ed:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:06:47 2026 by rpki-client