Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
File: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft (raw, json)
Hash identifier: 0f3tz64gi0PelCxUhXxxoXRhGXX73opLvcNMJtDH070=
Subject key identifier: 6C:8C:A8:4F:68:EF:82:0D:AB:BD:D1:39:41:5A:93:6B:CC:A5:97:05
Authority key identifier: D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE
Certificate issuer: /CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
Certificate serial: 01A08A8D00100D7DAAC1250BED39185DE694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
Manifest number: 09DB
Signing time: Thu 10 Sep 2026 09:01:31 +0000
Manifest this update: Thu 10 Sep 2026 09:01:31 +0000
Manifest next update: Fri 11 Sep 2026 09:01:31 +0000
Files and hashes: 1: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl (hash: D/oXYedUmNVSX9bga3xXZwM4hmf31Kp9ST7kE3EsKUs=)
2: HvbqYPMAVepvi6ZtkrW2fUxUxMM.roa (hash: kj2P3vyd4ShtsXAZbQsRTziSHIgT6QC6RQY8zqv9EFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:00:10:0d:7d:aa:c1:25:0b:ed:39:18:5d:e6:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
Validity
Not Before: Sep 10 09:01:31 2026 GMT
Not After : Sep 11 09:01:31 2026 GMT
Subject: CN=6c8ca84f68ef820dabbdd139415a936bcca59705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:00:bc:6f:3e:ab:e5:3c:11:94:77:c6:ac:ec:
aa:de:ac:94:17:a3:e8:f6:e8:42:e4:4c:ae:56:c8:
81:5c:0e:16:21:f9:90:bc:be:86:00:ac:f7:4f:db:
37:c9:63:15:c5:20:9e:dc:b7:4d:7d:0f:a4:8c:7b:
03:4d:97:b4:6b:22:4b:0a:15:6c:cb:4a:df:82:db:
6b:ec:fa:22:a0:b3:ae:38:b8:39:8f:c2:51:a0:e5:
99:7a:f8:2b:49:a8:7b:23:0f:ef:77:01:28:c3:3a:
35:4d:cf:98:e7:73:3c:72:b6:2d:28:15:11:fb:ff:
73:06:43:8a:24:3e:25:5f:7d:21:99:3d:1d:cc:03:
41:ca:d9:2b:71:72:24:7a:fc:53:35:c3:4a:3a:6b:
64:fd:87:ea:b1:0c:96:91:28:51:a9:e6:42:82:13:
05:f8:ff:80:54:03:0c:09:12:81:6b:e0:98:af:b3:
b9:e7:e5:dc:ae:25:3e:c9:06:54:d3:73:90:6e:d1:
4a:51:e6:eb:b1:e3:7d:e7:39:49:04:91:6a:d3:69:
ba:81:38:e0:83:07:77:b3:fc:07:1f:60:83:50:c5:
a4:41:fd:16:13:1a:b1:21:49:08:39:b5:48:54:88:
c1:46:1e:f3:d9:53:0f:55:61:37:cc:ea:eb:91:89:
d5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8C:A8:4F:68:EF:82:0D:AB:BD:D1:39:41:5A:93:6B:CC:A5:97:05
X509v3 Authority Key Identifier:
keyid:D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:46:91:36:86:6d:03:f9:83:be:9a:31:77:57:aa:57:73:fc:
e7:2e:a3:6b:74:d6:e5:63:15:02:e5:95:7c:8e:ef:a3:88:8e:
71:a1:7d:ee:73:69:0d:b8:55:f4:02:e0:b5:75:93:03:93:90:
ac:06:8f:dc:34:c9:1e:78:42:05:b2:4a:35:a1:9e:df:d9:8b:
92:04:aa:74:41:f6:a6:6e:6a:fe:66:25:11:fb:6d:2a:d9:3c:
7f:fe:15:81:a7:de:d8:57:5b:95:00:1f:ed:4e:d6:76:a9:f2:
60:e3:0d:03:3b:b3:32:5e:d0:92:2f:6b:bf:aa:f5:92:05:ae:
79:64:ba:bd:38:18:39:36:5a:70:92:69:b5:79:1b:ab:66:20:
55:60:65:ab:68:ba:a8:f5:d2:10:09:a7:6d:17:d7:af:24:62:
73:a3:b0:f9:11:f1:14:73:55:a2:95:23:1d:f5:ba:69:df:98:
ec:34:ec:d4:b0:9d:5b:1c:d7:73:50:36:30:f1:f7:57:e3:6a:
ef:35:0f:dc:71:e1:5c:3c:12:54:5c:a2:98:74:e6:ec:60:af:
e1:90:1f:92:aa:c1:0e:a9:4e:16:dc:b3:95:50:5d:23:9d:56:
03:0d:a0:a8:19:9e:da:4c:5c:6f:bb:0c:13:f5:1f:3e:a0:3e:
e0:eb:78:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKjQAQDX2qwSUL7TkYXeaUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0N2U2MmNiZjVmZWYzMzc3ZjllN2NkNTg1NThmNDRlMmVl
YTliY2UwHhcNMjYwOTEwMDkwMTMxWhcNMjYwOTExMDkwMTMxWjAzMTEwLwYDVQQD
Eyg2YzhjYTg0ZjY4ZWY4MjBkYWJiZGQxMzk0MTVhOTM2YmNjYTU5NzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAC8bz6r5TwRlHfGrOyq3qyUF6Po
9uhC5EyuVsiBXA4WIfmQvL6GAKz3T9s3yWMVxSCe3LdNfQ+kjHsDTZe0ayJLChVs
y0rfgttr7PoioLOuOLg5j8JRoOWZevgrSah7Iw/vdwEowzo1Tc+Y53M8crYtKBUR
+/9zBkOKJD4lX30hmT0dzANBytkrcXIkevxTNcNKOmtk/YfqsQyWkShRqeZCghMF
+P+AVAMMCRKBa+CYr7O55+XcriU+yQZU03OQbtFKUebrseN95zlJBJFq02m6gTjg
gwd3s/wHH2CDUMWkQf0WExqxIUkIObVIVIjBRh7z2VMPVWE3zOrrkYnVBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGyMqE9o74INq73ROUFak2vMpZcFMB8GA1UdIwQY
MBaAFNR+Ysv1/vM3f5581YVY9E4u6pvOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUg1aXlfWC04emRfbm56VmhWajBUaTdxbTg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hYTlkNGUtMTIyNi00MGU3LWE5YzEt
NDY5ZDNhNTFkNDdkLzEvMUg1aXlfWC04emRfbm56VmhWajBUaTdxbTg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9hYTlkNGUtMTIyNi00MGU3LWE5YzEtNDY5ZDNhNTFkNDdk
LzEvMUg1aXlfWC04emRfbm56VmhWajBUaTdxbTg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADEaRNoZt
A/mDvpoxd1eqV3P85y6ja3TW5WMVAuWVfI7vo4iOcaF97nNpDbhV9ALgtXWTA5OQ
rAaP3DTJHnhCBbJKNaGe39mLkgSqdEH2pm5q/mYlEfttKtk8f/4Vgafe2FdblQAf
7U7WdqnyYOMNAzuzMl7Qki9rv6r1kgWueWS6vTgYOTZacJJptXkbq2YgVWBlq2i6
qPXSEAmnbRfXryRic6Ow+RHxFHNVopUjHfW6ad+Y7DTs1LCdWxzXc1A2MPH3V+Nq
7zUP3HHhXDwSVFyimHTm7GCv4ZAfkqrBDqlOFtyzlVBdI51WAw2gqBme2kxcb7sM
E/UfPqA+4Ot4aw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:27:39 2026 by rpki-client