Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
File: hTodtQq3cdy1KTZ92VGmfKzEhSc.mft (raw, json)
Hash identifier: ywOeP9KEXgRfdmiWF/Hi0s+yjOqcyl2VH3IbEarxyZs=
Subject key identifier: 33:2B:29:81:E0:26:75:1F:01:33:52:4D:84:4A:94:DD:32:F7:24:AD
Authority key identifier: 85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27
Certificate issuer: /CN=853a1db50ab771dcb529367dd951a67cacc48527
Certificate serial: 01A06F4C168F6ADBF210462C8F196CDC0423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
Manifest number: 1A38
Signing time: Sat 05 Sep 2026 02:00:52 +0000
Manifest this update: Sat 05 Sep 2026 02:00:52 +0000
Manifest next update: Sun 06 Sep 2026 02:00:52 +0000
Files and hashes: 1: ClZipqAtGVJ2H4srpt_UxqUYg7k.roa (hash: gRSN7asX/fb1bF2/3SBjZi8n62BnbOxEncNI/Hx/1K0=)
2: hTodtQq3cdy1KTZ92VGmfKzEhSc.crl (hash: Jf8O/cTOduyb3eYrxNNL1j/1u4Ec/MeN/I0KiCoRl8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:4c:16:8f:6a:db:f2:10:46:2c:8f:19:6c:dc:04:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853a1db50ab771dcb529367dd951a67cacc48527
Validity
Not Before: Sep 5 02:00:52 2026 GMT
Not After : Sep 6 02:00:52 2026 GMT
Subject: CN=332b2981e026751f0133524d844a94dd32f724ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:81:af:c8:e8:b6:7e:9d:d8:f4:67:3c:d1:e1:
4a:2e:0c:f8:f5:f6:8e:f3:3e:69:18:67:1c:ff:a5:
66:86:df:1c:3a:1d:a1:68:0b:b9:f4:47:b8:c9:c0:
26:eb:91:a0:47:36:b5:1d:2d:ee:2d:11:3e:40:9c:
64:8c:dc:31:bb:6d:0d:b1:3a:4b:38:66:8f:45:16:
23:e9:02:8a:26:ee:48:7b:3e:0d:26:b2:3f:65:34:
9a:d5:f8:93:14:17:52:e5:00:9b:8e:e9:0e:3f:f7:
a4:65:92:f5:84:84:37:a1:b9:77:7d:ac:95:7f:ec:
d6:24:2e:9f:71:39:b8:7a:4b:8c:b1:d2:61:26:2a:
90:7e:b2:d2:43:e1:c9:d9:c6:66:57:0c:ab:59:ac:
3b:7c:91:c5:3d:47:6d:57:ec:64:35:71:52:61:45:
c7:66:eb:11:33:4b:41:9a:79:a0:5e:aa:d3:e9:aa:
00:bb:f6:e9:f3:b0:7b:04:ff:6b:21:3a:d7:0f:6d:
aa:6c:0b:e9:53:5e:b6:b7:e2:4b:56:d6:f8:9a:9e:
47:84:16:59:45:3b:b1:14:be:64:8f:66:51:a2:3e:
b9:40:dd:87:0a:6e:77:7b:3c:0b:eb:46:43:d5:22:
af:5d:25:a6:e6:04:df:18:dc:e7:f4:da:16:7f:93:
e2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2B:29:81:E0:26:75:1F:01:33:52:4D:84:4A:94:DD:32:F7:24:AD
X509v3 Authority Key Identifier:
keyid:85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:77:a1:8a:b2:a7:53:d0:a4:87:9d:fa:0b:ab:f8:d4:0b:53:
df:9c:69:3c:a0:b1:7a:06:05:f2:74:7f:c3:05:87:14:41:f5:
a4:f6:b8:9c:87:27:88:5b:22:9a:5f:88:28:65:4a:21:f5:b4:
ef:28:c6:c6:b5:ce:02:2a:43:d1:6b:d2:e9:41:d4:9e:fe:87:
84:6e:50:b9:3d:34:07:86:e7:77:06:1d:e9:38:b8:af:6a:71:
77:fd:dc:30:3a:a7:6c:32:8a:99:05:b8:1f:26:dd:54:8a:8c:
cb:b5:c8:8b:14:3c:b8:78:16:42:c5:a8:ec:34:a6:8e:1d:3b:
c2:92:14:bd:f4:7d:79:04:df:2a:2a:2b:7e:bc:3b:96:01:9c:
cc:0f:2e:7f:2f:e4:b1:72:cf:01:90:64:37:35:4f:35:93:3d:
52:2a:9b:a6:e3:1e:2a:78:cd:10:49:36:c5:6f:aa:99:1b:ae:
a4:e0:70:71:5d:05:5f:c8:13:0b:1f:6c:27:93:fe:f2:63:3b:
b7:1f:0f:17:c5:3b:b1:12:48:e9:2a:d3:1e:52:1b:63:2b:16:
2b:b9:93:7d:1d:c9:91:e1:5c:4c:d1:a8:0f:13:25:a1:48:0e:
47:27:31:3a:92:b5:a2:b4:34:5e:67:8b:5a:7c:09:cc:26:44:
1f:d2:57:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBvTBaPatvyEEYsjxls3AQjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1M2ExZGI1MGFiNzcxZGNiNTI5MzY3ZGQ5NTFhNjdjYWNj
NDg1MjcwHhcNMjYwOTA1MDIwMDUyWhcNMjYwOTA2MDIwMDUyWjAzMTEwLwYDVQQD
EygzMzJiMjk4MWUwMjY3NTFmMDEzMzUyNGQ4NDRhOTRkZDMyZjcyNGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIGvyOi2fp3Y9Gc80eFKLgz49faO
8z5pGGcc/6Vmht8cOh2haAu59Ee4ycAm65GgRza1HS3uLRE+QJxkjNwxu20NsTpL
OGaPRRYj6QKKJu5Iez4NJrI/ZTSa1fiTFBdS5QCbjukOP/ekZZL1hIQ3obl3fayV
f+zWJC6fcTm4ekuMsdJhJiqQfrLSQ+HJ2cZmVwyrWaw7fJHFPUdtV+xkNXFSYUXH
ZusRM0tBmnmgXqrT6aoAu/bp87B7BP9rITrXD22qbAvpU162t+JLVtb4mp5HhBZZ
RTuxFL5kj2ZRoj65QN2HCm53ezwL60ZD1SKvXSWm5gTfGNzn9NoWf5PiqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMrKYHgJnUfATNSTYRKlN0y9yStMB8GA1UdIwQY
MBaAFIU6HbUKt3HctSk2fdlRpnysxIUnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFRvZHRRcTNjZHkxS1RaOTJWR21mS3pFaFNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9kYzY2ZjMtOGFjOS00MWI5LThlYjgt
NzcyOTVjOWNlODY2LzEvaFRvZHRRcTNjZHkxS1RaOTJWR21mS3pFaFNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9kYzY2ZjMtOGFjOS00MWI5LThlYjgtNzcyOTVjOWNlODY2
LzEvaFRvZHRRcTNjZHkxS1RaOTJWR21mS3pFaFNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanehirKn
U9Ckh536C6v41AtT35xpPKCxegYF8nR/wwWHFEH1pPa4nIcniFsiml+IKGVKIfW0
7yjGxrXOAipD0WvS6UHUnv6HhG5QuT00B4bndwYd6Ti4r2pxd/3cMDqnbDKKmQW4
HybdVIqMy7XIixQ8uHgWQsWo7DSmjh07wpIUvfR9eQTfKiorfrw7lgGczA8ufy/k
sXLPAZBkNzVPNZM9UiqbpuMeKnjNEEk2xW+qmRuupOBwcV0FX8gTCx9sJ5P+8mM7
tx8PF8U7sRJI6SrTHlIbYysWK7mTfR3JkeFcTNGoDxMloUgORycxOpK1orQ0XmeL
WnwJzCZEH9JXtA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:56:55 2026 by rpki-client