Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
File: HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft (raw, json)
Hash identifier: p3f7lXcyjDpoqsemq49T168WD4Da9CVZNWCESG1m36I=
Subject key identifier: CE:80:B2:7A:2F:EA:D8:0E:E2:28:8F:40:0D:40:D9:05:33:5D:2B:44
Authority key identifier: 1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
Certificate issuer: /CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Certificate serial: 01A08D8D3EA5571E35A1AE351B6B9AE0E995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
Manifest number: 13B5
Signing time: Thu 10 Sep 2026 23:00:39 +0000
Manifest this update: Thu 10 Sep 2026 23:00:39 +0000
Manifest next update: Fri 11 Sep 2026 23:00:39 +0000
Files and hashes: 1: 2xP9m1PRgrEVDmtd4i2eqIDsm-A.roa (hash: YQaYHIwFaP+vp12w1AQ2mwIWx2mQt+KNJdo+tWceYBM=)
2: 5hq20ZEzfqPUd8jJerdhQ6lvpnQ.roa (hash: QttHQD+33asdEv7t7iqO8hCmG2Lg/3s4dda2hulSCvo=)
3: HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl (hash: gofwR2mGD4n9kDAVtT8MOKokuDfxfgWOkJr1gc4ocps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:8d:3e:a5:57:1e:35:a1:ae:35:1b:6b:9a:e0:e9:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Validity
Not Before: Sep 10 23:00:39 2026 GMT
Not After : Sep 11 23:00:39 2026 GMT
Subject: CN=ce80b27a2fead80ee2288f400d40d905335d2b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:93:d8:36:d3:5b:0f:6c:62:56:39:a4:e0:e2:
76:64:be:c4:b8:ae:bc:03:eb:63:49:c1:84:0d:e9:
51:96:f5:98:c8:97:43:ad:56:7f:ec:9e:4b:c4:10:
14:87:b4:f2:3a:77:33:15:de:02:7b:15:17:65:ac:
59:f5:f3:b0:28:af:c4:67:d9:7c:13:96:3b:70:bb:
6a:a4:7d:06:aa:7c:21:68:0a:a2:21:f1:64:22:90:
ff:de:d5:a1:21:b8:3e:0a:9b:89:c6:ba:b9:65:55:
1d:e8:c1:a5:b5:1d:5e:5f:66:fd:ee:f2:37:37:99:
06:43:31:1d:a7:67:33:06:fd:3b:5d:4d:19:fb:13:
9c:5e:43:11:87:7f:e6:7c:53:e4:5e:00:ad:fd:86:
7a:5d:b6:df:7c:e0:65:aa:09:58:74:95:8f:51:4e:
bd:e1:83:f7:7f:e0:72:9b:be:49:61:e0:f0:ce:5e:
d9:9f:c9:e1:17:54:2b:ff:36:95:14:db:61:29:31:
4e:ec:9c:6d:02:33:8e:10:de:34:08:18:20:6a:d9:
36:09:01:5d:5b:68:d6:bf:50:26:93:37:29:ff:d1:
a5:8e:3e:15:dc:5d:de:e6:72:5b:b4:24:72:a8:0e:
4c:07:be:5a:d0:f2:1e:85:05:a2:d3:8d:3c:92:c2:
ee:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:80:B2:7A:2F:EA:D8:0E:E2:28:8F:40:0D:40:D9:05:33:5D:2B:44
X509v3 Authority Key Identifier:
keyid:1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:93:8f:31:06:82:35:a2:b9:d7:7a:c3:3a:dc:53:3e:95:15:
7a:d0:16:b9:39:11:34:d8:07:d8:b9:20:86:ba:67:15:e7:32:
a8:13:d5:f6:25:21:1c:4c:90:9a:88:fe:83:e1:ba:57:60:8e:
0c:a5:37:b0:50:56:38:f1:fb:8c:cd:42:49:3b:e0:52:f9:65:
bf:1b:77:8c:8c:d1:f1:ff:06:a8:35:22:1b:4f:9f:fe:a5:ba:
4c:ab:91:34:a8:09:69:fc:9d:a4:e4:1d:07:e4:aa:28:cf:fd:
d5:17:b5:8b:a3:89:b0:4b:51:ab:e9:2f:30:d7:78:61:a5:86:
6d:a8:24:c3:41:76:8b:aa:a4:0e:b7:8e:f9:ab:9b:1b:c9:0d:
a2:24:db:5a:52:22:fa:17:cb:b8:76:3f:0e:1a:ae:26:1c:f8:
cb:b8:ab:e3:e3:61:cf:39:50:67:0b:74:db:0d:38:08:ab:c7:
6e:b7:fc:dd:b9:ce:7c:5d:ab:b3:a0:35:68:6a:f5:82:ad:f8:
72:9d:bd:5d:98:23:f8:65:df:bf:48:bf:9b:fd:8c:d5:82:31:
43:90:4a:a5:8e:2e:f8:45:0c:1f:c8:8a:97:8d:58:bc:c9:11:
e8:68:b3:fe:32:6f:d5:71:c0:ef:1b:49:c5:af:d1:ce:0f:8b:
30:f3:2d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 07:06:41 2026 by rpki-client