Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
File: HRxS8VUvbqDwZNejt521wc8Wa9A.mft (raw, json)
Hash identifier: vlJMybY8S5tqANeYTxu9IMJw+D4CfXoZIXJfze6t0pg=
Subject key identifier: 3D:F2:8D:2D:80:6E:E5:DB:54:A8:30:67:57:3C:47:33:98:2C:AC:20
Authority key identifier: 1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0
Certificate issuer: /CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0
Certificate serial: 01A0024B48E0C3F4058219A88E11735DFF54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
Manifest number: 1995
Signing time: Fri 14 Aug 2026 22:01:23 +0000
Manifest this update: Fri 14 Aug 2026 22:01:23 +0000
Manifest next update: Sat 15 Aug 2026 22:01:23 +0000
Files and hashes: 1: HGJ3ZEnNk3YpVjp51uFW7fVRLgc.roa (hash: cUV79+nq1UfEgnpECvrj1jXV8gIvKA75fQt4Y8wK7Xg=)
2: HRxS8VUvbqDwZNejt521wc8Wa9A.crl (hash: T/SFXNUvCwNCQt2gdSu8VMzny14VGAC9BPQGBh91rhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4b:48:e0:c3:f4:05:82:19:a8:8e:11:73:5d:ff:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0
Validity
Not Before: Aug 14 22:01:23 2026 GMT
Not After : Aug 15 22:01:23 2026 GMT
Subject: CN=3df28d2d806ee5db54a83067573c4733982cac20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b5:ae:8b:91:9e:f2:bb:83:c9:3d:30:50:cf:
79:6e:0c:e2:88:65:b0:72:76:62:ba:df:ea:d1:e1:
0e:dd:60:2d:59:eb:b2:25:6a:a1:4d:82:5b:14:ac:
16:c1:8e:3b:a6:ac:e2:ac:09:54:0f:bc:29:97:05:
78:bf:cf:4e:ed:5f:65:43:b2:82:5f:cc:a4:d3:4b:
b1:57:09:19:9f:46:34:b9:80:d1:d4:3d:b3:39:0f:
95:02:7c:0e:79:c5:f2:98:47:d1:06:13:52:b7:8e:
9e:76:79:63:32:2f:99:2f:18:96:67:70:ad:5f:22:
70:ad:27:e5:5d:fc:07:67:4e:83:ea:8a:52:b7:0b:
6a:36:54:fe:46:fd:5d:7b:e8:74:19:99:78:e5:a3:
19:7c:08:1b:e7:b8:10:44:5b:58:a4:09:df:f5:5d:
ac:c5:97:27:4e:62:9e:eb:50:bf:8e:fa:5d:dc:ad:
94:89:0a:2d:df:3c:05:eb:0b:5f:83:a4:35:86:e8:
f1:48:ef:0e:e9:dd:07:c3:47:f0:d1:59:14:e9:5b:
90:b7:01:68:83:ed:27:58:99:c3:4b:09:2e:12:fc:
28:5b:b2:b3:f8:00:f2:dc:b4:5b:f6:ba:67:48:b1:
7f:c6:cd:ad:25:cc:4e:ff:8b:0e:f6:d6:6e:e8:da:
35:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F2:8D:2D:80:6E:E5:DB:54:A8:30:67:57:3C:47:33:98:2C:AC:20
X509v3 Authority Key Identifier:
keyid:1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f8:28:f3:87:bf:92:5c:d6:05:fc:87:ac:d3:d5:12:ea:8d:
f3:d8:cd:b1:09:e9:3e:2c:58:b5:ec:52:57:9d:9c:40:8c:58:
bc:51:8d:63:fd:33:af:41:71:98:77:b9:57:c7:46:a7:b3:33:
8d:de:10:54:c1:1f:8e:cf:b9:e5:b9:0d:74:ae:5a:0f:07:66:
85:1f:89:3b:38:84:3f:19:7f:bd:b8:36:5c:74:6f:0e:56:b1:
48:ab:2f:19:42:e2:18:e3:91:52:fc:9c:82:56:48:b1:b9:d3:
e4:19:45:35:04:fb:24:02:48:9e:d6:43:d7:fc:04:2f:85:d7:
08:bc:55:1d:d1:59:0f:7d:52:1f:94:f4:d6:44:2a:35:3b:07:
2c:85:59:f7:d6:2b:a5:d7:a3:57:d0:2e:40:a1:68:d2:61:99:
e5:51:dc:bd:18:11:a2:89:b3:1c:37:d8:54:2e:5f:d1:54:81:
3a:0f:48:dd:5a:47:14:73:2f:82:b8:e6:5c:44:57:ae:a0:07:
91:76:32:3b:c5:a8:32:1c:84:06:c7:2e:c9:b6:e1:45:2f:ab:
9f:8b:4a:32:3d:08:2b:03:d1:ce:a0:b6:5d:c6:51:82:1e:a3:
8c:eb:94:d7:94:6f:41:56:2b:fe:6b:b7:59:85:76:7f:ef:b5:
8d:a1:ac:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACS0jgw/QFghmojhFzXf9UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMWM1MmYxNTUyZjZlYTBmMDY0ZDdhM2I3OWRiNWMxY2Yx
NjZiZDAwHhcNMjYwODE0MjIwMTIzWhcNMjYwODE1MjIwMTIzWjAzMTEwLwYDVQQD
EygzZGYyOGQyZDgwNmVlNWRiNTRhODMwNjc1NzNjNDczMzk4MmNhYzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbWui5Ge8ruDyT0wUM95bgziiGWw
cnZiut/q0eEO3WAtWeuyJWqhTYJbFKwWwY47pqzirAlUD7wplwV4v89O7V9lQ7KC
X8yk00uxVwkZn0Y0uYDR1D2zOQ+VAnwOecXymEfRBhNSt46ednljMi+ZLxiWZ3Ct
XyJwrSflXfwHZ06D6opStwtqNlT+Rv1de+h0GZl45aMZfAgb57gQRFtYpAnf9V2s
xZcnTmKe61C/jvpd3K2UiQot3zwF6wtfg6Q1hujxSO8O6d0Hw0fw0VkU6VuQtwFo
g+0nWJnDSwkuEvwoW7Kz+ADy3LRb9rpnSLF/xs2tJcxO/4sO9tZu6No1fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3yjS2AbuXbVKgwZ1c8RzOYLKwgMB8GA1UdIwQY
MBaAFB0cUvFVL26g8GTXo7edtcHPFmvQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFJ4UzhWVXZicUR3Wk5lanQ1MjF3YzhXYTlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82NGY1MzktZmVkYS00OWZjLWE5MjIt
MjAxZDVhOWJiOGFhLzEvSFJ4UzhWVXZicUR3Wk5lanQ1MjF3YzhXYTlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS82NGY1MzktZmVkYS00OWZjLWE5MjItMjAxZDVhOWJiOGFh
LzEvSFJ4UzhWVXZicUR3Wk5lanQ1MjF3YzhXYTlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/go84e/
klzWBfyHrNPVEuqN89jNsQnpPixYtexSV52cQIxYvFGNY/0zr0FxmHe5V8dGp7Mz
jd4QVMEfjs+55bkNdK5aDwdmhR+JOziEPxl/vbg2XHRvDlaxSKsvGULiGOORUvyc
glZIsbnT5BlFNQT7JAJIntZD1/wEL4XXCLxVHdFZD31SH5T01kQqNTsHLIVZ99Yr
pdejV9AuQKFo0mGZ5VHcvRgRoomzHDfYVC5f0VSBOg9I3VpHFHMvgrjmXERXrqAH
kXYyO8WoMhyEBscuybbhRS+rn4tKMj0IKwPRzqC2XcZRgh6jjOuU15RvQVYr/mu3
WYV2f++1jaGsig==
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:45:17 2026 by rpki-client