Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
File: HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft (raw, json)
Hash identifier: n8o2jO6wWBdBUvu3LxCacmA44rLlvVnGsdpdq3VjvjI=
Subject key identifier: E1:DA:01:01:4F:56:33:66:62:60:44:FD:81:37:FB:E6:4D:83:6D:92
Authority key identifier: 1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
Certificate issuer: /CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Certificate serial: 01A0D501E2E82BF436AE49796656CE0CF7BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
Manifest number: 13DA
Signing time: Thu 24 Sep 2026 20:01:05 +0000
Manifest this update: Thu 24 Sep 2026 20:01:05 +0000
Manifest next update: Fri 25 Sep 2026 20:01:05 +0000
Files and hashes: 1: 2xP9m1PRgrEVDmtd4i2eqIDsm-A.roa (hash: YQaYHIwFaP+vp12w1AQ2mwIWx2mQt+KNJdo+tWceYBM=)
2: 5hq20ZEzfqPUd8jJerdhQ6lvpnQ.roa (hash: QttHQD+33asdEv7t7iqO8hCmG2Lg/3s4dda2hulSCvo=)
3: HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl (hash: 4zg4/dBsXTA2Mwlvb+IHLtYg1s9br0HPPGIA4dF+JsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:01:e2:e8:2b:f4:36:ae:49:79:66:56:ce:0c:f7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Validity
Not Before: Sep 24 20:01:05 2026 GMT
Not After : Sep 25 20:01:05 2026 GMT
Subject: CN=e1da01014f563366626044fd8137fbe64d836d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:eb:6f:ad:c7:e4:2e:06:64:78:54:73:71:2c:
16:d7:3a:80:a7:ae:ee:40:39:2b:05:16:7d:cb:10:
cb:a4:30:96:c2:d8:25:81:4f:b0:b2:91:70:b2:4e:
2b:c3:d6:57:c8:51:a8:00:ee:06:d5:1d:b5:ea:3d:
4e:3a:43:98:56:fc:e9:40:cf:c9:bb:84:02:5d:19:
d5:7b:41:65:be:0a:f6:3a:f3:f1:b7:a4:b0:39:40:
38:7f:69:6e:65:c6:92:50:e7:66:76:10:b5:f1:6e:
0b:37:ec:d3:4a:9e:ff:eb:20:06:c0:a3:b6:1e:cc:
fd:c0:9d:b1:f2:3b:64:9a:80:a1:42:c0:6e:49:9c:
02:93:c7:98:96:e7:69:76:cd:78:f0:f5:f4:6f:db:
bb:ed:e5:b5:0b:a5:a9:b2:35:02:36:5e:f0:ad:60:
bb:23:a2:19:e3:5b:1c:3c:f9:e9:1d:01:02:2b:db:
dd:01:1d:3a:94:d4:53:c2:53:c0:4c:53:7b:ab:a9:
b2:44:4c:ce:7d:cb:8b:60:5f:cf:8e:8d:65:e5:67:
13:30:da:0c:73:71:2c:3c:73:c7:87:19:38:4c:cc:
93:df:2e:70:c0:a7:cd:7f:90:da:9a:3d:97:49:d1:
49:f3:03:d2:27:8f:90:45:97:00:f2:5a:d2:1b:7c:
2a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DA:01:01:4F:56:33:66:62:60:44:FD:81:37:FB:E6:4D:83:6D:92
X509v3 Authority Key Identifier:
keyid:1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f7:fe:64:7e:3e:f0:fd:a2:d1:16:3c:f9:8b:e5:03:bd:9a:
88:ca:41:4e:ac:ba:56:eb:47:0f:46:77:f0:10:34:3b:af:3f:
2a:42:f2:d5:7b:cd:63:2c:88:77:b5:91:18:87:08:04:ee:19:
ac:cc:b7:4d:78:69:af:7a:a8:dd:ec:78:32:f7:44:7c:1d:60:
51:70:c5:02:01:65:bf:32:31:32:92:53:c4:e8:23:ce:20:ee:
68:0d:fe:55:1f:e3:07:82:5b:8f:82:01:db:db:74:5d:e5:3c:
2e:96:e3:c8:b8:50:d1:bf:87:12:30:bf:a7:6e:5e:70:57:34:
0e:dd:e7:6e:2d:fd:c7:dc:4a:8e:e8:2a:27:66:e0:68:b6:d0:
e1:29:c9:fa:1d:63:e1:fd:46:d7:f2:47:10:6d:1c:81:9d:53:
f2:6b:48:35:01:07:90:63:ef:38:a2:6b:8f:97:26:4c:f0:ec:
ef:d1:95:d3:78:ee:53:1e:dc:8b:5e:fb:25:ea:18:4f:9c:93:
0a:22:02:47:55:60:15:00:02:a1:8d:80:bb:4e:c6:59:40:55:
2b:79:a7:e2:2b:9b:78:1c:3a:b1:b5:47:0a:a3:01:2f:8a:2b:
7b:70:7f:4f:7e:3a:c2:a4:44:ba:1c:7c:21:db:85:18:ef:38:
1e:3f:c1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:49:51 2026 by rpki-client