Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
File: HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft (raw, json)
Hash identifier: YlO1SdNjlnjzBh4t1QNPWQMUKJ7azNrKhBFJP6fkCRA=
Subject key identifier: B8:B8:A8:3D:45:60:EF:1C:84:BF:40:1B:EE:AF:53:7D:9E:F2:0D:8D
Authority key identifier: 1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
Certificate issuer: /CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Certificate serial: 01A19431D54A6C725D877BCFFC9F99E90854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
Manifest number: 143D
Signing time: Sat 31 Oct 2026 23:00:56 +0000
Manifest this update: Sat 31 Oct 2026 23:00:56 +0000
Manifest next update: Sun 01 Nov 2026 23:00:56 +0000
Files and hashes: 1: 2xP9m1PRgrEVDmtd4i2eqIDsm-A.roa (hash: YQaYHIwFaP+vp12w1AQ2mwIWx2mQt+KNJdo+tWceYBM=)
2: 5hq20ZEzfqPUd8jJerdhQ6lvpnQ.roa (hash: QttHQD+33asdEv7t7iqO8hCmG2Lg/3s4dda2hulSCvo=)
3: HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl (hash: HDhBP+O5nCMDKGG3o4Wk4VJ/OpJRYKYKkqlAZBPHIdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:94:31:d5:4a:6c:72:5d:87:7b:cf:fc:9f:99:e9:08:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Validity
Not Before: Oct 31 23:00:56 2026 GMT
Not After : Nov 1 23:00:56 2026 GMT
Subject: CN=b8b8a83d4560ef1c84bf401beeaf537d9ef20d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e1:3b:a8:35:ae:c9:a0:1b:db:62:87:d2:9d:
58:50:e6:50:b3:69:12:f0:ca:57:77:5c:cf:31:c6:
43:41:6c:69:20:71:6c:c1:dd:18:0a:a4:d6:05:9b:
51:b9:3a:b6:ec:df:a2:d7:18:9a:3a:21:79:e3:f3:
8b:6d:67:6e:fc:35:b9:ec:83:72:07:64:32:cc:57:
d5:f5:00:67:ba:3e:54:1a:82:10:85:bb:42:e0:1b:
c7:55:7d:61:b4:b4:37:74:a2:e7:21:d0:57:f8:48:
4e:c7:6a:2b:0f:11:6c:3e:42:e0:2e:3a:cb:06:8a:
d8:86:23:4b:3c:61:52:a2:23:64:33:fc:8e:ac:c9:
f4:ac:6e:f6:43:8e:5a:77:f7:29:2d:39:0f:32:6f:
3a:18:7d:40:7a:32:3e:ee:26:2b:ab:0e:cc:eb:7a:
db:16:4d:da:55:29:f8:01:f6:04:43:af:04:69:8f:
2e:4a:27:00:c8:ae:b5:c0:a4:4c:90:ad:d1:e1:8d:
06:dc:ed:f7:01:da:a3:3e:d2:8a:63:01:0e:50:d5:
45:01:ca:c1:2b:b7:d1:d6:b4:6f:b8:0f:48:98:c9:
7f:be:40:97:3a:c0:5e:38:8c:b1:57:9a:39:9d:27:
78:82:37:bc:2b:02:2b:de:e5:d0:68:4c:1c:5b:10:
11:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B8:A8:3D:45:60:EF:1C:84:BF:40:1B:EE:AF:53:7D:9E:F2:0D:8D
X509v3 Authority Key Identifier:
keyid:1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:57:bc:9d:d0:92:6f:ca:31:e0:49:d8:96:c9:83:a6:8d:0c:
7a:18:51:ad:b6:0a:a4:72:55:8f:a0:04:11:6f:87:cf:8c:21:
57:8f:d0:e6:80:69:f7:40:43:b0:b2:5e:a1:97:f8:c9:ca:47:
0a:67:ed:c5:8a:27:b8:ca:9c:c8:a7:0b:4b:60:30:4f:97:d0:
f9:43:38:91:64:90:3d:8f:db:3f:9f:cc:d0:d9:60:ba:77:94:
52:72:f9:55:61:d4:14:c6:98:51:ab:e0:42:08:44:7a:b4:58:
3f:7f:94:b8:0d:52:11:5c:15:eb:6c:e8:30:80:d0:80:12:8b:
1b:78:58:8c:20:7c:5e:aa:84:96:d8:a6:67:b1:05:23:a7:81:
12:2b:d3:06:ae:33:4c:6a:9b:3f:27:68:65:eb:6c:94:1a:b2:
9f:fb:e2:1e:fd:11:5a:50:79:d1:12:ac:72:87:44:c6:95:f1:
77:d1:6a:de:15:ff:6c:e8:e0:60:14:78:53:4f:f0:28:13:0f:
63:ce:ae:19:5c:cd:e4:05:1e:e8:ef:ba:a8:43:2c:52:35:6c:
1d:36:e4:9c:b0:49:59:99:4c:c1:a7:2b:7e:6c:f6:d8:92:be:
d0:fd:0f:32:20:1e:db:47:49:c7:44:df:6f:24:11:96:64:40:
ac:b8:1b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:35:13 2026 by rpki-client