Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
File: HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft (raw, json)
Hash identifier: I3VVq8c8/Vo1W4SAQwf2tw4q39iexW438ZVtFsWCg8k=
Subject key identifier: 50:AF:CD:DD:1D:2C:82:D5:27:54:6F:42:8F:6E:E9:67:49:E5:DF:58
Authority key identifier: 1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
Certificate issuer: /CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Certificate serial: 019F946DF58BC7A353DDE2D97365928D5C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
Manifest number: 1334
Signing time: Fri 24 Jul 2026 14:01:01 +0000
Manifest this update: Fri 24 Jul 2026 14:01:01 +0000
Manifest next update: Sat 25 Jul 2026 14:01:01 +0000
Files and hashes: 1: 2xP9m1PRgrEVDmtd4i2eqIDsm-A.roa (hash: YQaYHIwFaP+vp12w1AQ2mwIWx2mQt+KNJdo+tWceYBM=)
2: 5hq20ZEzfqPUd8jJerdhQ6lvpnQ.roa (hash: QttHQD+33asdEv7t7iqO8hCmG2Lg/3s4dda2hulSCvo=)
3: HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl (hash: gKDwwSmgevvRo1uUxnOBr6Hmro+45Q7fiy3EaY/5xkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:f5:8b:c7:a3:53:dd:e2:d9:73:65:92:8d:5c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Validity
Not Before: Jul 24 14:01:01 2026 GMT
Not After : Jul 25 14:01:01 2026 GMT
Subject: CN=50afcddd1d2c82d527546f428f6ee96749e5df58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7d:53:6e:34:c5:d7:9c:a3:7b:fa:f1:5d:dc:
60:cd:7f:3e:04:19:ce:74:9c:0e:87:88:76:f3:47:
87:6c:84:e1:fb:69:0d:0a:07:7d:4c:c3:07:0d:e7:
e7:e5:35:a6:01:37:bb:7d:15:0c:7f:f1:f1:bc:7d:
8f:10:40:67:48:68:97:2e:68:7a:ca:ff:fe:cc:10:
8a:d1:8b:1e:11:7c:ee:d7:25:9d:4d:9c:4f:f0:99:
f3:87:8e:08:c6:cb:94:24:64:3d:58:8e:01:0c:0d:
25:aa:26:da:a1:59:7d:a2:ed:08:1e:22:bd:c8:7c:
c6:96:c8:79:42:77:56:88:d9:72:ad:3b:e5:1a:b9:
1d:dd:82:46:7a:c5:1e:b6:80:94:ac:82:3b:06:19:
ad:94:b7:b1:28:cd:fb:b2:e5:06:63:bd:f8:2b:ec:
92:23:fa:52:76:15:81:68:d5:2d:02:2b:3a:2d:99:
16:93:e0:69:8f:ca:fd:37:59:07:05:77:1a:4a:9a:
20:0a:04:21:f6:d8:db:99:8f:36:73:0e:6c:07:14:
04:09:a4:05:4a:d9:81:25:aa:5b:80:cc:18:dd:f1:
67:c9:f5:17:b7:5e:b4:f6:eb:59:63:95:39:cd:73:
87:40:68:c7:d5:f6:f0:ab:06:60:72:07:8b:c0:cb:
c9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AF:CD:DD:1D:2C:82:D5:27:54:6F:42:8F:6E:E9:67:49:E5:DF:58
X509v3 Authority Key Identifier:
keyid:1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:2b:aa:72:25:91:a3:be:88:6f:f8:98:41:b0:ba:0d:79:a8:
a7:ff:a3:75:10:24:d4:80:4e:f9:d5:03:06:5c:79:d4:e6:19:
e8:c0:0d:36:5c:9a:13:22:9f:6b:fa:a0:8e:48:f4:5e:c6:ce:
ad:da:8e:6d:d1:58:77:8f:37:48:4d:61:ae:c1:e0:88:3e:64:
01:a2:07:b2:fa:d5:f1:ba:85:0f:61:4f:b8:12:95:d0:e3:e9:
1c:43:f6:02:80:3e:a8:03:fd:a5:27:e5:5b:b7:84:48:92:c5:
79:69:a5:2e:98:db:32:79:fd:b5:aa:ea:b4:d0:7d:6e:13:ab:
ab:ea:72:53:f2:8f:26:ad:94:25:f0:05:d0:57:44:59:b2:46:
9d:7b:62:48:63:32:be:89:28:7e:05:ad:2d:51:98:5a:64:ac:
cd:dd:2a:da:ab:59:53:a8:89:08:38:b7:59:89:d7:9e:c8:38:
64:9f:08:a9:b1:65:cb:aa:45:23:34:7f:2b:ab:99:18:b4:80:
8d:74:4f:49:30:c7:32:73:42:1f:5c:14:57:cf:f3:37:f8:76:
ed:ec:71:41:20:ff:18:44:ff:3d:89:cc:6d:4d:40:c8:8b:82:
4f:f6:06:72:48:2b:a3:c5:93:55:b8:98:84:c8:57:89:53:2c:
7e:9b:59:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UbfWLx6NT3eLZc2WSjVwCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMTBlMzhlZDU1ZTMxODVhZWQ2ZjA3OWY4YmI5YmYxMmQ0
NDQ4ZGIwHhcNMjYwNzI0MTQwMTAxWhcNMjYwNzI1MTQwMTAxWjAzMTEwLwYDVQQD
Eyg1MGFmY2RkZDFkMmM4MmQ1Mjc1NDZmNDI4ZjZlZTk2NzQ5ZTVkZjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwn1TbjTF15yje/rxXdxgzX8+BBnO
dJwOh4h280eHbITh+2kNCgd9TMMHDefn5TWmATe7fRUMf/HxvH2PEEBnSGiXLmh6
yv/+zBCK0YseEXzu1yWdTZxP8Jnzh44IxsuUJGQ9WI4BDA0lqibaoVl9ou0IHiK9
yHzGlsh5QndWiNlyrTvlGrkd3YJGesUetoCUrII7BhmtlLexKM37suUGY734K+yS
I/pSdhWBaNUtAis6LZkWk+Bpj8r9N1kHBXcaSpogCgQh9tjbmY82cw5sBxQECaQF
StmBJapbgMwY3fFnyfUXt1609utZY5U5zXOHQGjH1fbwqwZgcgeLwMvJVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCvzd0dLILVJ1RvQo9u6WdJ5d9YMB8GA1UdIwQY
MBaAFB0Q447VXjGFrtbwefi7m/EtREjbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFJEamp0VmVNWVd1MXZCNS1MdWI4UzFFU05zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lMjM5NjktZmZiMC00ZTU3LWEzNmEt
NzYwZjZiNmFhYmMxLzEvSFJEamp0VmVNWVd1MXZCNS1MdWI4UzFFU05zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9lMjM5NjktZmZiMC00ZTU3LWEzNmEtNzYwZjZiNmFhYmMx
LzEvSFJEamp0VmVNWVd1MXZCNS1MdWI4UzFFU05zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQyuqciWR
o76Ib/iYQbC6DXmop/+jdRAk1IBO+dUDBlx51OYZ6MANNlyaEyKfa/qgjkj0XsbO
rdqObdFYd483SE1hrsHgiD5kAaIHsvrV8bqFD2FPuBKV0OPpHEP2AoA+qAP9pSfl
W7eESJLFeWmlLpjbMnn9tarqtNB9bhOrq+pyU/KPJq2UJfAF0FdEWbJGnXtiSGMy
vokofgWtLVGYWmSszd0q2qtZU6iJCDi3WYnXnsg4ZJ8IqbFly6pFIzR/K6uZGLSA
jXRPSTDHMnNCH1wUV8/zN/h27exxQSD/GET/PYnMbU1AyIuCT/YGckgro8WTVbiY
hMhXiVMsfptZdw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:54:02 2026 by rpki-client