Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/hD2p5CaP63YPx9FbFdrIBCEAhE0.mft
File: hD2p5CaP63YPx9FbFdrIBCEAhE0.mft (raw, json)
Hash identifier: EpS+4Cs0+86IOV3RJ3ykVmmdZRxAh8te3W/xEeQmzyE=
Subject key identifier: 16:C3:26:CC:80:93:A4:E0:3D:69:24:19:73:5E:19:72:04:FD:5C:46
Authority key identifier: 84:3D:A9:E4:26:8F:EB:76:0F:C7:D1:5B:15:DA:C8:04:21:00:84:4D
Certificate issuer: /CN=843da9e4268feb760fc7d15b15dac8042100844d
Certificate serial: 019FCD4C62C0BC9752477FD90C82813A6D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hD2p5CaP63YPx9FbFdrIBCEAhE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/hD2p5CaP63YPx9FbFdrIBCEAhE0.mft
Manifest number: 5F
Signing time: Tue 04 Aug 2026 15:02:42 +0000
Manifest this update: Tue 04 Aug 2026 15:02:42 +0000
Manifest next update: Wed 05 Aug 2026 15:02:42 +0000
Files and hashes: 1: hD2p5CaP63YPx9FbFdrIBCEAhE0.crl (hash: rQbGzxDY7wQfmiWswJKvtkFFGvngBspJ+D08yjGViY4=)
2: rr4RQ-DCDBuAfMwBxiVc7Iv6mmA.roa (hash: HtTDo1JiMJWwkQ/8kVU3J37roBmSdVOD0uWibm9pNdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/hD2p5CaP63YPx9FbFdrIBCEAhE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/hD2p5CaP63YPx9FbFdrIBCEAhE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hD2p5CaP63YPx9FbFdrIBCEAhE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 15:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:4c:62:c0:bc:97:52:47:7f:d9:0c:82:81:3a:6d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843da9e4268feb760fc7d15b15dac8042100844d
Validity
Not Before: Aug 4 15:02:42 2026 GMT
Not After : Aug 5 15:02:42 2026 GMT
Subject: CN=16c326cc8093a4e03d692419735e197204fd5c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2c:9c:01:64:d2:89:14:88:d3:74:18:34:a2:
0d:d1:dd:d5:4a:79:c6:3e:87:b0:9a:cc:47:f8:da:
4f:45:d1:1e:ad:62:86:48:e1:c7:db:9a:fe:c5:4b:
af:f0:ae:e3:3a:85:83:ac:27:28:90:08:36:ed:21:
1d:2a:20:66:ba:53:91:e3:0d:a5:0a:db:24:08:58:
57:94:d0:76:df:42:59:74:dd:55:ed:39:97:65:54:
91:6d:34:e9:25:6c:68:63:8e:0b:ee:58:ac:2e:62:
8b:d5:92:9f:3f:e9:88:6e:82:95:60:0c:57:ef:94:
36:39:78:96:46:c5:89:ee:ba:79:17:23:ce:0e:62:
b9:1a:28:90:1a:47:4b:d1:08:1c:6e:55:84:90:66:
49:b1:ba:9c:6c:98:f8:53:d1:0f:4c:84:7a:5c:9d:
2b:22:79:71:f9:31:c9:5e:13:76:04:50:fc:41:01:
38:17:88:0f:8e:6c:f6:cd:e0:e3:89:31:bb:bc:60:
0d:e3:d4:8a:ec:40:ac:fa:8e:bd:b3:00:82:4f:3d:
da:ed:85:2e:4d:9b:22:7e:c3:ed:06:36:4b:26:5b:
4e:96:1a:d5:81:f9:b7:88:79:28:b2:ed:8e:d3:4b:
ac:48:9b:a4:d7:94:0e:47:a2:16:3e:3f:e7:51:60:
d4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C3:26:CC:80:93:A4:E0:3D:69:24:19:73:5E:19:72:04:FD:5C:46
X509v3 Authority Key Identifier:
keyid:84:3D:A9:E4:26:8F:EB:76:0F:C7:D1:5B:15:DA:C8:04:21:00:84:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hD2p5CaP63YPx9FbFdrIBCEAhE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/hD2p5CaP63YPx9FbFdrIBCEAhE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/hD2p5CaP63YPx9FbFdrIBCEAhE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:2b:cb:d3:cc:c0:6a:c0:83:84:2f:22:08:2e:73:95:a2:35:
a2:b8:8c:57:68:f9:4b:98:c7:c2:36:68:3b:73:6c:ff:13:51:
d8:5c:0c:6e:d6:21:04:e1:37:63:77:05:93:15:14:cf:c2:d8:
a1:15:c0:14:e5:ac:a9:7f:6a:bd:fc:c3:09:fa:d2:a0:90:a7:
79:ff:32:8d:cf:bb:a3:e5:b0:1d:c9:fa:e6:51:33:0d:e3:c1:
2d:70:29:14:46:16:5a:38:87:c5:e0:ee:92:c0:02:16:31:9c:
a2:eb:76:e3:bb:bf:e9:f2:db:15:62:a3:c7:e8:48:85:c3:a0:
3e:c4:58:52:16:35:a9:52:76:37:42:20:86:23:2d:32:4d:23:
b4:3f:f6:73:c9:ed:33:cc:f4:c8:12:0c:09:f2:4a:91:7d:bb:
ff:dd:14:2e:f1:3c:e1:03:53:bc:e5:2d:7f:b2:bd:4c:7e:cd:
f9:c5:52:e2:2e:96:e6:d7:49:a5:d8:42:a9:ff:4f:88:c6:57:
4c:3f:32:5c:59:16:4d:b3:5b:31:e8:52:4c:2d:c6:c6:84:40:
40:a1:c2:19:c1:5e:38:f2:2a:a2:28:b1:06:d1:7b:20:9e:5c:
ac:e1:56:c0:9f:dc:7f:2d:1d:3e:6c:96:5a:62:7c:8b:6d:5f:
6d:ca:dd:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/NTGLAvJdSR3/ZDIKBOm0RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0M2RhOWU0MjY4ZmViNzYwZmM3ZDE1YjE1ZGFjODA0MjEw
MDg0NGQwHhcNMjYwODA0MTUwMjQyWhcNMjYwODA1MTUwMjQyWjAzMTEwLwYDVQQD
EygxNmMzMjZjYzgwOTNhNGUwM2Q2OTI0MTk3MzVlMTk3MjA0ZmQ1YzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiycAWTSiRSI03QYNKIN0d3VSnnG
PoewmsxH+NpPRdEerWKGSOHH25r+xUuv8K7jOoWDrCcokAg27SEdKiBmulOR4w2l
CtskCFhXlNB230JZdN1V7TmXZVSRbTTpJWxoY44L7lisLmKL1ZKfP+mIboKVYAxX
75Q2OXiWRsWJ7rp5FyPODmK5GiiQGkdL0QgcblWEkGZJsbqcbJj4U9EPTIR6XJ0r
Inlx+THJXhN2BFD8QQE4F4gPjmz2zeDjiTG7vGAN49SK7ECs+o69swCCTz3a7YUu
TZsifsPtBjZLJltOlhrVgfm3iHkosu2O00usSJuk15QOR6IWPj/nUWDUqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbDJsyAk6TgPWkkGXNeGXIE/VxGMB8GA1UdIwQY
MBaAFIQ9qeQmj+t2D8fRWxXayAQhAIRNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEQycDVDYVA2M1lQeDlGYkZkcklCQ0VBaEUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xZDI3ODgtZGE0MC00MzFhLTk3ZDAt
ZmJkNDZkOWNhMzcyLzEvaEQycDVDYVA2M1lQeDlGYkZkcklCQ0VBaEUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8xZDI3ODgtZGE0MC00MzFhLTk3ZDAtZmJkNDZkOWNhMzcy
LzEvaEQycDVDYVA2M1lQeDlGYkZkcklCQ0VBaEUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASyvL08zA
asCDhC8iCC5zlaI1oriMV2j5S5jHwjZoO3Ns/xNR2FwMbtYhBOE3Y3cFkxUUz8LY
oRXAFOWsqX9qvfzDCfrSoJCnef8yjc+7o+WwHcn65lEzDePBLXApFEYWWjiHxeDu
ksACFjGcout247u/6fLbFWKjx+hIhcOgPsRYUhY1qVJ2N0IghiMtMk0jtD/2c8nt
M8z0yBIMCfJKkX27/90ULvE84QNTvOUtf7K9TH7N+cVS4i6W5tdJpdhCqf9PiMZX
TD8yXFkWTbNbMehSTC3GxoRAQKHCGcFeOPIqoiixBtF7IJ5crOFWwJ/cfy0dPmyW
WmJ8i21fbcrdPQ==
-----END CERTIFICATE-----
Generated at Tue Aug 4 19:10:54 2026 by rpki-client