Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.mft
File: H9nOye0f1PQcCx4w77lshhVTvjY.mft (raw, json)
Hash identifier: Rh+KWLjpKoxBJc+IxthDaBq2/WsloBcE/ZPlx0b8xLg=
Subject key identifier: 0D:4A:F1:15:04:0C:F0:43:A8:F9:CB:FF:15:04:52:54:96:A4:FC:AD
Authority key identifier: 1F:D9:CE:C9:ED:1F:D4:F4:1C:0B:1E:30:EF:B9:6C:86:15:53:BE:36
Certificate issuer: /CN=1fd9cec9ed1fd4f41c0b1e30efb96c861553be36
Certificate serial: 019FF9ED346775F0F213B95C9777E4DCE41A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9nOye0f1PQcCx4w77lshhVTvjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.mft
Manifest number: 05DF
Signing time: Thu 13 Aug 2026 07:01:39 +0000
Manifest this update: Thu 13 Aug 2026 07:01:39 +0000
Manifest next update: Fri 14 Aug 2026 07:01:39 +0000
Files and hashes: 1: AGVrI7h1W1sZnmEHrQIXxLRxF1Q.roa (hash: K1nbjcJomqgMcH/NVsTCJWhMoSmEDtw4c8u/MMrHlso=)
2: H9nOye0f1PQcCx4w77lshhVTvjY.crl (hash: JNI/Tbf+aLL2VWUHLoUsFthJOoKM/p5IbFxt2LY8+Eo=)
3: fnZsGtHZZ57ibD1bgR7D-kx03A8.asa (hash: gnq6h8vpZgrDrbXWUtlG5+lFKokphaSsAqWL7zsvVig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9nOye0f1PQcCx4w77lshhVTvjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:ed:34:67:75:f0:f2:13:b9:5c:97:77:e4:dc:e4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd9cec9ed1fd4f41c0b1e30efb96c861553be36
Validity
Not Before: Aug 13 07:01:39 2026 GMT
Not After : Aug 14 07:01:39 2026 GMT
Subject: CN=0d4af115040cf043a8f9cbff1504525496a4fcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8d:ca:63:25:0d:48:71:32:d7:7c:64:08:71:
8e:50:63:03:54:af:c0:0a:3a:7d:04:27:82:1f:b6:
35:d2:69:da:82:42:f1:d9:45:41:b0:5e:c8:b5:21:
7c:61:b9:52:33:50:ed:18:91:10:76:86:ba:a4:21:
cf:44:8b:ce:ea:fe:7f:29:b1:d5:c4:c2:c8:50:c4:
7c:79:39:fa:f7:78:c5:78:4b:2e:35:99:56:4e:ac:
fa:2d:0d:20:92:9a:a1:e8:29:a3:55:9a:cc:c1:37:
bc:1f:7b:a2:ab:14:a8:50:8d:d6:fe:d9:b2:46:90:
d0:10:91:8a:8a:ac:ab:a6:d5:f6:5c:0b:53:48:01:
80:3c:2c:01:07:57:60:96:11:61:9c:27:05:7f:1b:
ed:62:14:31:13:fb:41:94:d1:a2:94:d7:87:59:69:
cb:c3:e6:ed:44:b8:11:c7:87:bb:cd:06:a2:92:63:
2c:f4:f4:4e:05:37:3d:e6:fe:41:12:20:74:44:07:
ae:00:ba:1a:53:14:ef:3b:65:cd:e4:b9:a3:eb:f0:
71:06:6c:91:99:52:36:d9:74:5f:08:80:66:c9:41:
72:2f:68:94:d9:cb:e2:2f:2f:f8:09:e8:17:9e:3b:
46:e0:72:35:de:61:4c:f4:31:7f:37:85:c2:8d:fc:
30:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4A:F1:15:04:0C:F0:43:A8:F9:CB:FF:15:04:52:54:96:A4:FC:AD
X509v3 Authority Key Identifier:
keyid:1F:D9:CE:C9:ED:1F:D4:F4:1C:0B:1E:30:EF:B9:6C:86:15:53:BE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9nOye0f1PQcCx4w77lshhVTvjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:14:aa:4f:b0:d7:f5:d7:56:84:2f:3b:f3:25:8d:92:b7:e4:
11:21:bc:01:d8:ab:b6:a4:d8:1b:15:c1:4d:ca:28:4a:48:a8:
8b:bc:b2:7b:04:ba:83:56:36:5f:8f:03:89:9e:d7:18:8e:93:
5d:ed:6a:ae:a5:21:31:37:a5:f8:fc:b4:cc:0f:62:ac:84:bb:
c7:dd:b9:b5:90:fa:71:fe:75:8a:63:11:78:8a:81:05:1a:4e:
c9:98:0a:ef:c5:47:ea:8e:6f:c9:59:4c:fe:77:cd:99:d0:af:
f3:63:26:d1:45:55:fa:72:58:92:70:14:7d:a3:d1:91:80:dd:
20:b1:c9:bf:4b:ab:34:a0:91:8f:2f:ef:b6:58:92:a6:af:5d:
34:b2:7b:2f:2f:ca:2b:0a:40:28:26:63:60:85:b9:af:12:62:
15:12:88:e8:fa:5e:56:8c:ca:78:62:26:4b:7c:46:04:2f:7b:
25:85:7b:0f:cb:3b:91:e8:b1:25:06:ea:e4:2f:05:08:61:84:
6a:88:99:ab:b8:a9:d8:fd:ae:e9:15:26:21:e8:71:0f:a2:eb:
e9:bb:f1:bb:fc:ce:71:67:e3:98:98:72:9d:5b:c8:fb:bf:56:
70:33:bd:da:f7:57:ce:17:39:7f:c8:10:10:03:c9:df:7b:dc:
8d:7c:5c:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/57TRndfDyE7lcl3fk3OQaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZDljZWM5ZWQxZmQ0ZjQxYzBiMWUzMGVmYjk2Yzg2MTU1
M2JlMzYwHhcNMjYwODEzMDcwMTM5WhcNMjYwODE0MDcwMTM5WjAzMTEwLwYDVQQD
EygwZDRhZjExNTA0MGNmMDQzYThmOWNiZmYxNTA0NTI1NDk2YTRmY2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp43KYyUNSHEy13xkCHGOUGMDVK/A
Cjp9BCeCH7Y10mnagkLx2UVBsF7ItSF8YblSM1DtGJEQdoa6pCHPRIvO6v5/KbHV
xMLIUMR8eTn693jFeEsuNZlWTqz6LQ0gkpqh6CmjVZrMwTe8H3uiqxSoUI3W/tmy
RpDQEJGKiqyrptX2XAtTSAGAPCwBB1dglhFhnCcFfxvtYhQxE/tBlNGilNeHWWnL
w+btRLgRx4e7zQaikmMs9PROBTc95v5BEiB0RAeuALoaUxTvO2XN5Lmj6/BxBmyR
mVI22XRfCIBmyUFyL2iU2cviLy/4CegXnjtG4HI13mFM9DF/N4XCjfwwiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1K8RUEDPBDqPnL/xUEUlSWpPytMB8GA1UdIwQY
MBaAFB/ZzsntH9T0HAseMO+5bIYVU742MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDluT3llMGYxUFFjQ3g0dzc3bHNoaFZUdmpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lODFjMWEtMGM4Ny00ODI1LWJjY2Mt
MzZiN2IxZGUwNDVkLzEvSDluT3llMGYxUFFjQ3g0dzc3bHNoaFZUdmpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lODFjMWEtMGM4Ny00ODI1LWJjY2MtMzZiN2IxZGUwNDVk
LzEvSDluT3llMGYxUFFjQ3g0dzc3bHNoaFZUdmpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxSqT7DX
9ddWhC878yWNkrfkESG8AdirtqTYGxXBTcooSkioi7yyewS6g1Y2X48DiZ7XGI6T
Xe1qrqUhMTel+Py0zA9irIS7x925tZD6cf51imMReIqBBRpOyZgK78VH6o5vyVlM
/nfNmdCv82Mm0UVV+nJYknAUfaPRkYDdILHJv0urNKCRjy/vtliSpq9dNLJ7Ly/K
KwpAKCZjYIW5rxJiFRKI6PpeVozKeGImS3xGBC97JYV7D8s7keixJQbq5C8FCGGE
aoiZq7ip2P2u6RUmIehxD6Lr6bvxu/zOcWfjmJhynVvI+79WcDO92vdXzhc5f8gQ
EAPJ33vcjXxcog==
-----END CERTIFICATE-----
Generated at Thu Aug 13 08:02:31 2026 by rpki-client