Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.mft
File: HTHgIH7TynaEoD6I-aHeKSLdRd4.mft (raw, json)
Hash identifier: +oWVKwIS9W7R1b7bg8sL400vAre6p5lgw/zLtGC310A=
Subject key identifier: 5E:29:D9:7F:97:51:3F:A7:0F:90:DC:EF:38:9E:CF:20:85:0E:16:0B
Authority key identifier: 1D:31:E0:20:7E:D3:CA:76:84:A0:3E:88:F9:A1:DE:29:22:DD:45:DE
Certificate issuer: /CN=1d31e0207ed3ca7684a03e88f9a1de2922dd45de
Certificate serial: 01A0EEF8B65DDA73B744584F599BBEAE3866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTHgIH7TynaEoD6I-aHeKSLdRd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.mft
Manifest number: 0624
Signing time: Tue 29 Sep 2026 21:01:12 +0000
Manifest this update: Tue 29 Sep 2026 21:01:12 +0000
Manifest next update: Wed 30 Sep 2026 21:01:12 +0000
Files and hashes: 1: HTHgIH7TynaEoD6I-aHeKSLdRd4.crl (hash: YzGWEkeQzv77AgfOGnCeoSXsDn5QArUrJ4CkUdxmUdk=)
2: JF1S5nChkcbeHK1YmZzl8eEwqB8.roa (hash: wmxaRB1M5Kn+LV3DtXz/lQpX7fY1n782f7y8VXUfVvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HTHgIH7TynaEoD6I-aHeKSLdRd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 20:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:f8:b6:5d:da:73:b7:44:58:4f:59:9b:be:ae:38:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d31e0207ed3ca7684a03e88f9a1de2922dd45de
Validity
Not Before: Sep 29 21:01:12 2026 GMT
Not After : Sep 30 21:01:12 2026 GMT
Subject: CN=5e29d97f97513fa70f90dcef389ecf20850e160b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:24:a8:7a:15:65:46:05:2b:e7:8b:ac:ea:03:
a8:1b:a9:cb:64:ec:6d:2f:c8:8c:da:5a:30:1b:32:
1c:43:93:cf:05:8e:2e:3b:5c:e7:22:6f:b8:69:34:
4a:92:d3:a6:c6:25:8a:98:ad:73:f0:f2:90:d0:33:
09:f5:39:e7:e4:c6:dc:65:e1:30:be:4e:fd:2d:bd:
c2:85:83:78:20:21:0e:89:eb:2b:a2:98:b5:39:b5:
90:7e:64:9f:9f:3e:73:5e:3c:5f:81:c1:47:de:d5:
b1:be:66:52:81:55:19:e9:60:1f:d5:da:31:89:03:
b7:2e:c6:0d:5e:cb:a4:b0:70:82:08:28:f7:fd:10:
93:87:c2:31:66:9d:31:cd:8c:50:9e:f3:99:df:1d:
4f:ac:ed:97:4f:ff:90:41:9b:02:c7:8a:d2:05:c4:
af:8d:34:73:93:4a:0c:4c:4c:62:7f:75:58:10:6e:
b4:dc:f8:f4:ad:fc:49:a5:f3:07:e2:24:be:7e:e0:
c9:25:53:14:b2:61:6d:b1:0c:df:06:b3:9a:16:65:
10:06:5f:b3:ec:3a:41:dc:6e:00:3e:d3:0b:fb:ee:
c5:09:3c:8f:74:e2:5c:20:1a:32:cd:f3:00:ca:3f:
69:01:42:e8:e1:55:29:27:e0:19:27:eb:a3:e6:30:
d6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:29:D9:7F:97:51:3F:A7:0F:90:DC:EF:38:9E:CF:20:85:0E:16:0B
X509v3 Authority Key Identifier:
keyid:1D:31:E0:20:7E:D3:CA:76:84:A0:3E:88:F9:A1:DE:29:22:DD:45:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTHgIH7TynaEoD6I-aHeKSLdRd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/730e38-ff89-43e1-94fe-a1b778f4d07d/1/HTHgIH7TynaEoD6I-aHeKSLdRd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ee:fd:69:16:0f:61:a6:de:ef:ae:5a:d1:40:1f:73:fa:90:
0f:c3:3a:b1:2e:7d:07:78:6a:77:77:2d:57:94:d7:1b:7e:78:
22:a7:ab:52:9b:a6:d4:a9:b3:65:1a:8c:15:67:d7:6c:d1:6b:
86:68:d8:4b:ed:2a:80:b0:b2:fe:dc:a0:43:fb:ea:28:ce:a3:
52:cc:bb:86:0b:44:2c:65:09:51:96:b6:8f:b0:b5:55:91:c2:
4b:f9:ec:d9:54:5e:bf:13:cf:5f:1d:57:d7:fb:e8:9a:95:f0:
01:5e:e9:71:c5:d0:d6:24:94:55:c5:99:7c:2f:70:47:a1:dc:
5c:f3:4c:5f:ae:a6:f9:44:77:9b:fb:8a:9b:28:5f:e1:85:e5:
d0:99:81:3e:95:08:5c:95:71:32:0f:4b:b2:6b:19:ba:01:5a:
96:e2:78:dc:ec:57:ad:68:ef:64:2f:83:b9:84:92:f7:1f:c2:
f9:32:a8:9c:57:20:cf:b8:7c:fe:dd:a0:9c:03:99:6f:f1:d4:
b4:5e:13:6e:e6:92:df:91:c4:0a:11:b1:28:99:02:ed:98:de:
71:41:f4:7f:c7:7f:5e:2f:40:88:13:c7:1d:df:02:0e:45:02:
76:d5:79:4b:c8:a6:9f:79:ae:92:5c:f4:74:de:bf:73:69:78:
a3:fb:dd:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDu+LZd2nO3RFhPWZu+rjhmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMzFlMDIwN2VkM2NhNzY4NGEwM2U4OGY5YTFkZTI5MjJk
ZDQ1ZGUwHhcNMjYwOTI5MjEwMTEyWhcNMjYwOTMwMjEwMTEyWjAzMTEwLwYDVQQD
Eyg1ZTI5ZDk3Zjk3NTEzZmE3MGY5MGRjZWYzODllY2YyMDg1MGUxNjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArySoehVlRgUr54us6gOoG6nLZOxt
L8iM2lowGzIcQ5PPBY4uO1znIm+4aTRKktOmxiWKmK1z8PKQ0DMJ9Tnn5MbcZeEw
vk79Lb3ChYN4ICEOiesropi1ObWQfmSfnz5zXjxfgcFH3tWxvmZSgVUZ6WAf1dox
iQO3LsYNXsuksHCCCCj3/RCTh8IxZp0xzYxQnvOZ3x1PrO2XT/+QQZsCx4rSBcSv
jTRzk0oMTExif3VYEG603Pj0rfxJpfMH4iS+fuDJJVMUsmFtsQzfBrOaFmUQBl+z
7DpB3G4APtML++7FCTyPdOJcIBoyzfMAyj9pAULo4VUpJ+AZJ+uj5jDWNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4p2X+XUT+nD5Dc7ziezyCFDhYLMB8GA1UdIwQY
MBaAFB0x4CB+08p2hKA+iPmh3iki3UXeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFRIZ0lIN1R5bmFFb0Q2SS1hSGVLU0xkUmQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My83MzBlMzgtZmY4OS00M2UxLTk0ZmUt
YTFiNzc4ZjRkMDdkLzEvSFRIZ0lIN1R5bmFFb0Q2SS1hSGVLU0xkUmQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My83MzBlMzgtZmY4OS00M2UxLTk0ZmUtYTFiNzc4ZjRkMDdk
LzEvSFRIZ0lIN1R5bmFFb0Q2SS1hSGVLU0xkUmQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoO79aRYP
Yabe765a0UAfc/qQD8M6sS59B3hqd3ctV5TXG354IqerUpum1KmzZRqMFWfXbNFr
hmjYS+0qgLCy/tygQ/vqKM6jUsy7hgtELGUJUZa2j7C1VZHCS/ns2VRevxPPXx1X
1/vompXwAV7pccXQ1iSUVcWZfC9wR6HcXPNMX66m+UR3m/uKmyhf4YXl0JmBPpUI
XJVxMg9LsmsZugFaluJ43OxXrWjvZC+DuYSS9x/C+TKonFcgz7h8/t2gnAOZb/HU
tF4TbuaS35HEChGxKJkC7ZjecUH0f8d/Xi9AiBPHHd8CDkUCdtV5S8imn3muklz0
dN6/c2l4o/vdAA==
-----END CERTIFICATE-----
Generated at Wed Sep 30 08:53:43 2026 by rpki-client