Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
File: HDP7O3JSC4FpopKNU4LknWda0GA.mft (raw, json)
Hash identifier: WqAjiujWhq5CnciKoGazDlfTRk87Qbh3XfanZPC62Ic=
Subject key identifier: 70:1F:A7:B9:AA:F2:60:AA:C4:98:E6:29:F2:E4:F4:A5:37:62:93:1E
Authority key identifier: 1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60
Certificate issuer: /CN=1c33fb3b72520b8169a2928d5382e49d675ad060
Certificate serial: 01A0E1750EA1D7134C3614EC01C8671CC62C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
Manifest number: 1822
Signing time: Sun 27 Sep 2026 06:02:20 +0000
Manifest this update: Sun 27 Sep 2026 06:02:20 +0000
Manifest next update: Mon 28 Sep 2026 06:02:20 +0000
Files and hashes: 1: Gy7ZxbulJ_7Y0tx78zpcZAOHO2I.roa (hash: 8PQOWmSZ9/1/Et2ot0KAAdAS2aYMSpPnN0AQzm11bWE=)
2: HDP7O3JSC4FpopKNU4LknWda0GA.crl (hash: +p6w8C+ggRi8XAqrqc1dqkii5EWA0G7uLiRiGQFmFwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:75:0e:a1:d7:13:4c:36:14:ec:01:c8:67:1c:c6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c33fb3b72520b8169a2928d5382e49d675ad060
Validity
Not Before: Sep 27 06:02:20 2026 GMT
Not After : Sep 28 06:02:20 2026 GMT
Subject: CN=701fa7b9aaf260aac498e629f2e4f4a53762931e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6c:d7:69:2d:84:99:83:c7:6e:08:02:37:22:
29:8c:3f:bb:e8:77:53:67:18:2f:f5:40:ee:01:b0:
7b:2f:a5:8e:15:46:d4:57:6e:f1:1f:8b:bb:d1:60:
fe:d9:0b:dd:cd:d5:00:4f:67:7f:93:b0:3c:91:e0:
31:05:a2:4b:21:0f:28:cd:fe:21:b6:61:48:f4:4e:
94:73:f1:a2:cc:43:48:b2:e4:7a:89:df:b3:9c:e0:
56:80:c8:96:dc:99:5e:70:67:e8:8b:6c:85:c0:3f:
0b:9a:9c:47:23:21:50:2f:ce:0a:ae:be:99:de:93:
78:1c:f3:03:7d:e5:8a:ea:35:f7:38:ad:c0:cb:d5:
3b:7d:f5:b1:ae:03:60:04:d8:3a:bf:61:dd:8e:90:
68:59:4c:3d:c4:8f:88:83:03:0c:35:d8:1f:ec:ec:
c9:26:f9:21:0e:1c:50:c9:3f:75:0a:c6:04:05:b6:
13:f2:25:d2:70:e7:16:2a:43:cd:b3:9e:71:ba:1f:
ca:1d:51:ef:89:fe:41:82:a4:f2:1e:83:97:4b:9d:
5e:39:b0:16:08:29:ed:ba:0b:cc:18:98:4f:0d:85:
5f:2b:51:bd:e9:75:f6:1d:6e:e2:d0:69:11:be:cb:
f0:37:93:0d:aa:d6:c9:98:0e:47:66:0f:fe:04:4c:
bc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1F:A7:B9:AA:F2:60:AA:C4:98:E6:29:F2:E4:F4:A5:37:62:93:1E
X509v3 Authority Key Identifier:
keyid:1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:aa:d8:5e:aa:46:9b:d8:2b:4a:96:c6:c2:89:f4:67:67:05:
a8:5f:14:c7:36:03:0f:38:c6:f5:70:33:8a:2d:44:bf:a4:da:
fe:80:54:fc:83:a3:dc:4c:cc:8f:a3:ad:bf:84:0f:97:4d:4a:
67:1f:9e:de:63:7a:17:64:97:e8:8a:62:b5:ff:d4:62:d6:eb:
1d:a4:41:bb:2c:d6:df:60:0a:af:ee:13:18:d3:3c:46:0e:cf:
9c:45:99:56:70:b3:da:0b:5c:26:73:b5:b3:e2:e8:28:95:3a:
89:54:d9:e1:9b:c6:89:98:6a:f4:fb:fc:36:21:eb:b3:e1:86:
b3:e1:4c:b3:08:b9:40:4d:f3:f1:f3:79:23:d2:74:49:fc:0a:
d9:b1:f0:7c:a8:02:e6:70:e1:e9:6f:d1:00:aa:7e:94:7d:6a:
06:3b:30:95:12:c1:ba:27:b0:f7:54:85:2e:ee:23:02:e1:10:
50:2c:d8:96:91:9d:48:8a:19:3d:0c:a9:70:c0:9c:26:e0:8e:
01:d0:00:4e:25:7a:ea:a3:37:cc:83:9e:a4:0a:ed:15:ce:9a:
9b:c4:bf:43:7c:d9:6c:f2:e4:0c:14:a8:be:ef:86:98:eb:1d:
00:c6:67:fb:c9:c9:58:0d:5f:67:d0:8d:05:aa:5d:18:8f:9c:
e3:1c:f0:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhdQ6h1xNMNhTsAchnHMYsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMzNmYjNiNzI1MjBiODE2OWEyOTI4ZDUzODJlNDlkNjc1
YWQwNjAwHhcNMjYwOTI3MDYwMjIwWhcNMjYwOTI4MDYwMjIwWjAzMTEwLwYDVQQD
Eyg3MDFmYTdiOWFhZjI2MGFhYzQ5OGU2MjlmMmU0ZjRhNTM3NjI5MzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22zXaS2EmYPHbggCNyIpjD+76HdT
Zxgv9UDuAbB7L6WOFUbUV27xH4u70WD+2QvdzdUAT2d/k7A8keAxBaJLIQ8ozf4h
tmFI9E6Uc/GizENIsuR6id+znOBWgMiW3JlecGfoi2yFwD8LmpxHIyFQL84Krr6Z
3pN4HPMDfeWK6jX3OK3Ay9U7ffWxrgNgBNg6v2HdjpBoWUw9xI+IgwMMNdgf7OzJ
JvkhDhxQyT91CsYEBbYT8iXScOcWKkPNs55xuh/KHVHvif5BgqTyHoOXS51eObAW
CCntugvMGJhPDYVfK1G96XX2HW7i0GkRvsvwN5MNqtbJmA5HZg/+BEy89QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAfp7mq8mCqxJjmKfLk9KU3YpMeMB8GA1UdIwQY
MBaAFBwz+ztyUguBaaKSjVOC5J1nWtBgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSERQN08zSlNDNEZwb3BLTlU0TGtuV2RhMEdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80MjFlOWUtNTI0My00ZDIwLWI0NDct
OTUwNDU1ODY4MDJlLzEvSERQN08zSlNDNEZwb3BLTlU0TGtuV2RhMEdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80MjFlOWUtNTI0My00ZDIwLWI0NDctOTUwNDU1ODY4MDJl
LzEvSERQN08zSlNDNEZwb3BLTlU0TGtuV2RhMEdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJqrYXqpG
m9grSpbGwon0Z2cFqF8UxzYDDzjG9XAzii1Ev6Ta/oBU/IOj3EzMj6Otv4QPl01K
Zx+e3mN6F2SX6Ipitf/UYtbrHaRBuyzW32AKr+4TGNM8Rg7PnEWZVnCz2gtcJnO1
s+LoKJU6iVTZ4ZvGiZhq9Pv8NiHrs+GGs+FMswi5QE3z8fN5I9J0SfwK2bHwfKgC
5nDh6W/RAKp+lH1qBjswlRLBuiew91SFLu4jAuEQUCzYlpGdSIoZPQypcMCcJuCO
AdAATiV66qM3zIOepArtFc6am8S/Q3zZbPLkDBSovu+GmOsdAMZn+8nJWA1fZ9CN
BapdGI+c4xzwkw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:08:30 2026 by rpki-client