Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
File: Ha5HTXlZfbddH01JkBtSVYu_avQ.mft (raw, json)
Hash identifier: GUwaawJVWYd2tuN6dq5jwfilkVgBfdsFSq2HwfPcif4=
Subject key identifier: 33:87:C8:49:58:57:31:75:86:4F:B8:83:26:06:08:42:D5:25:23:D1
Authority key identifier: 1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
Certificate issuer: /CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Certificate serial: 01A16A59F1EA5C4CDED2B4770DAFD17120A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
Manifest number: 12D9
Signing time: Fri 23 Oct 2026 20:00:41 +0000
Manifest this update: Fri 23 Oct 2026 20:00:41 +0000
Manifest next update: Sat 24 Oct 2026 20:00:41 +0000
Files and hashes: 1: Ha5HTXlZfbddH01JkBtSVYu_avQ.crl (hash: ozjNUToP75kC48z34WsAl24A5/dlacZwgm6TvEJDF+o=)
2: k97xiEPNhhSgqvtrR_5TEOjiPrM.roa (hash: ZH1DGUuXgshBEvHt5egPH/VHWGjZYucZ8h4th9PhsLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:59:f1:ea:5c:4c:de:d2:b4:77:0d:af:d1:71:20:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Validity
Not Before: Oct 23 20:00:41 2026 GMT
Not After : Oct 24 20:00:41 2026 GMT
Subject: CN=3387c84958573175864fb88326060842d52523d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a7:4e:21:74:65:d6:98:05:37:88:67:d5:70:
1b:dd:88:37:be:0c:a5:3c:19:03:2d:f6:ef:be:83:
eb:ac:6e:cf:1d:28:36:27:51:fa:60:0d:23:6e:a9:
99:28:6d:f7:67:ef:80:ec:1b:e8:cb:cd:35:8b:86:
7d:c2:47:60:b0:ad:58:50:f0:0c:3f:5f:6b:8d:54:
21:4c:47:8e:1c:c1:d7:20:9f:f0:af:cc:2e:ec:8c:
ad:65:d8:32:41:b7:a8:fc:bf:7d:4c:ed:d7:f1:a4:
23:79:49:43:57:bc:44:0a:c3:86:c6:dd:d7:38:ee:
fb:2e:8f:44:34:b1:c0:ec:a0:3b:38:cd:b6:cf:da:
a9:bf:0d:09:c9:4f:ec:d5:af:42:07:45:d0:69:d5:
50:f0:ef:13:69:4b:11:49:f6:10:6e:5f:a6:07:26:
2b:62:5b:db:be:fb:11:9e:75:83:4e:20:31:62:73:
82:2d:d2:44:2f:7b:67:a8:46:85:bb:be:1d:ef:15:
13:7d:7e:f0:63:6a:f3:f7:51:d8:60:df:2b:ba:8f:
64:27:e1:0d:9d:e8:c4:7a:3d:db:5a:91:86:2d:ac:
dd:85:fd:ec:8e:26:d3:08:68:a5:6e:32:30:b2:88:
4a:7f:af:f1:99:45:08:c3:be:b1:b7:83:e3:fc:dd:
8a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:87:C8:49:58:57:31:75:86:4F:B8:83:26:06:08:42:D5:25:23:D1
X509v3 Authority Key Identifier:
keyid:1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:54:df:22:4e:f2:66:f3:f4:72:fa:70:7a:3f:96:59:bd:04:
b1:31:ea:6f:3d:42:0a:ea:92:e9:20:13:86:02:cd:f1:97:91:
55:c9:48:a6:dd:b2:4b:2c:6b:30:1a:57:0f:94:4c:b4:00:7f:
73:0d:e7:bc:d5:ab:e5:c5:8a:ba:cb:22:56:50:4c:9c:b3:72:
29:47:60:97:88:84:a9:69:93:6f:e4:e5:ce:19:80:a1:06:08:
d4:0a:e6:6e:35:5d:64:53:08:fe:b4:5f:88:c3:b4:7b:73:33:
ef:60:8e:4b:d9:d9:42:a0:43:44:6f:28:86:f7:23:ed:69:a7:
4a:02:99:1d:17:ec:e9:53:c2:47:ae:3c:e3:b1:f6:b4:33:db:
ae:42:4c:71:0d:94:8f:21:38:08:0c:19:07:68:d3:d0:98:b1:
75:64:ec:c8:4c:df:e9:f9:cf:0f:af:f3:2a:f0:15:5b:5b:a5:
28:6e:a8:b9:26:10:71:e7:95:9a:aa:b4:a6:ca:4f:af:ae:ef:
6c:63:31:ed:2d:ee:f7:6e:1f:2f:35:3b:07:86:21:c6:1b:15:
b6:1e:8f:81:f3:4d:ec:77:b1:ee:80:20:2a:fc:47:11:51:be:
7f:16:c9:90:34:75:e3:e3:58:7a:fa:72:c3:38:f6:14:b0:54:
5c:02:25:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFqWfHqXEze0rR3Da/RcSCmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYWU0NzRkNzk1OTdkYjc1ZDFmNGQ0OTkwMWI1MjU1OGJi
ZjZhZjQwHhcNMjYxMDIzMjAwMDQxWhcNMjYxMDI0MjAwMDQxWjAzMTEwLwYDVQQD
EygzMzg3Yzg0OTU4NTczMTc1ODY0ZmI4ODMyNjA2MDg0MmQ1MjUyM2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKdOIXRl1pgFN4hn1XAb3Yg3vgyl
PBkDLfbvvoPrrG7PHSg2J1H6YA0jbqmZKG33Z++A7Bvoy801i4Z9wkdgsK1YUPAM
P19rjVQhTEeOHMHXIJ/wr8wu7IytZdgyQbeo/L99TO3X8aQjeUlDV7xECsOGxt3X
OO77Lo9ENLHA7KA7OM22z9qpvw0JyU/s1a9CB0XQadVQ8O8TaUsRSfYQbl+mByYr
YlvbvvsRnnWDTiAxYnOCLdJEL3tnqEaFu74d7xUTfX7wY2rz91HYYN8ruo9kJ+EN
nejEej3bWpGGLazdhf3sjibTCGilbjIwsohKf6/xmUUIw76xt4Pj/N2KqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOHyElYVzF1hk+4gyYGCELVJSPRMB8GA1UdIwQY
MBaAFB2uR015WX23XR9NSZAbUlWLv2r0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS85OTZjZWUtMGFjYi00ZWI4LWE3N2Et
MjdmOTBiOGQ4NWU2LzEvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS85OTZjZWUtMGFjYi00ZWI4LWE3N2EtMjdmOTBiOGQ4NWU2
LzEvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1TfIk7y
ZvP0cvpwej+WWb0EsTHqbz1CCuqS6SAThgLN8ZeRVclIpt2ySyxrMBpXD5RMtAB/
cw3nvNWr5cWKussiVlBMnLNyKUdgl4iEqWmTb+TlzhmAoQYI1ArmbjVdZFMI/rRf
iMO0e3Mz72COS9nZQqBDRG8ohvcj7WmnSgKZHRfs6VPCR64847H2tDPbrkJMcQ2U
jyE4CAwZB2jT0JixdWTsyEzf6fnPD6/zKvAVW1ulKG6ouSYQceeVmqq0pspPr67v
bGMx7S3u924fLzU7B4YhxhsVth6PgfNN7Hex7oAgKvxHEVG+fxbJkDR14+NYevpy
wzj2FLBUXAIlUA==
-----END CERTIFICATE-----
Generated at Sat Oct 24 01:44:54 2026 by rpki-client