Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
File: HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft (raw, json)
Hash identifier: mL2GH8PwrTSUEM14PpIYmynXFLdRRqC5Pbp09tB8TDE=
Subject key identifier: B2:A9:5B:00:87:5F:13:CB:5E:BA:4A:24:4A:F8:1E:35:A2:0B:A0:0E
Authority key identifier: 1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
Certificate issuer: /CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Certificate serial: 019FA3E0E23B59DC7B7CE345AD76EEA5DE6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
Manifest number: 133C
Signing time: Mon 27 Jul 2026 14:00:51 +0000
Manifest this update: Mon 27 Jul 2026 14:00:51 +0000
Manifest next update: Tue 28 Jul 2026 14:00:51 +0000
Files and hashes: 1: 2xP9m1PRgrEVDmtd4i2eqIDsm-A.roa (hash: YQaYHIwFaP+vp12w1AQ2mwIWx2mQt+KNJdo+tWceYBM=)
2: 5hq20ZEzfqPUd8jJerdhQ6lvpnQ.roa (hash: QttHQD+33asdEv7t7iqO8hCmG2Lg/3s4dda2hulSCvo=)
3: HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl (hash: VpA+YYm5qvKiAaCNHrajGM+WfggLlsSskkreVXUAaVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:e0:e2:3b:59:dc:7b:7c:e3:45:ad:76:ee:a5:de:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Validity
Not Before: Jul 27 14:00:51 2026 GMT
Not After : Jul 28 14:00:51 2026 GMT
Subject: CN=b2a95b00875f13cb5eba4a244af81e35a20ba00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:52:08:a6:45:f1:41:87:70:62:b0:45:c2:
45:02:83:2d:4f:0c:a4:b2:f6:dd:d2:cf:54:89:f1:
c4:e0:17:12:76:ff:ab:00:04:6e:bb:fc:16:e1:c0:
99:9f:b9:41:38:2a:ca:63:cf:32:8b:19:51:92:49:
e0:94:4e:e6:37:4a:97:74:39:08:d0:91:38:97:b8:
fd:ec:98:98:9b:fd:2a:ce:46:5a:b7:a1:19:a5:90:
31:2b:a6:03:99:1e:32:56:f3:ed:c9:17:e4:39:52:
7f:0c:79:7d:85:f6:4c:33:e1:da:fb:c5:54:70:da:
c4:43:46:a1:26:4f:2a:91:bb:eb:3a:41:ec:9f:80:
5c:f6:ad:b8:46:63:46:08:3e:d4:a8:7b:0a:8f:95:
cd:d4:06:f5:aa:ec:01:11:1b:5f:71:f7:10:44:f6:
a7:5d:8a:ae:a6:2f:3e:a2:c4:1b:40:74:1c:5f:a0:
ba:96:40:e9:b1:96:14:53:07:e4:51:0b:d2:42:8c:
70:44:25:aa:af:3b:12:04:d9:37:6d:e5:d3:f2:5c:
6c:ac:e6:6d:bb:4a:9b:a1:c5:e3:f8:f0:f9:56:81:
85:b7:57:94:2c:3b:b8:1c:75:80:6f:d5:30:ed:70:
17:3f:9f:30:25:2e:ed:5b:b1:cb:36:ea:01:a2:93:
c7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A9:5B:00:87:5F:13:CB:5E:BA:4A:24:4A:F8:1E:35:A2:0B:A0:0E
X509v3 Authority Key Identifier:
keyid:1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:72:cb:86:17:00:c1:59:a7:7c:33:4c:28:15:a8:c8:27:07:
d3:c2:45:a0:2c:dc:6d:e2:91:01:32:95:0c:2c:f5:9a:52:62:
e9:95:87:67:24:3f:54:54:89:97:24:40:44:06:c8:8f:50:7e:
ba:b9:3b:2d:1f:87:44:1c:45:27:96:d5:46:4f:d0:50:a9:9c:
7d:38:f7:aa:42:4a:db:15:7c:e3:80:02:7a:5f:09:4b:e9:1b:
e3:3c:e3:53:6c:3e:08:95:53:54:de:9a:da:9d:13:1f:51:fe:
31:5c:a4:e6:ad:55:58:cb:3a:b3:a9:49:ea:c2:c1:33:18:dd:
54:e3:c4:0e:a9:81:e6:6a:4c:cd:0a:8a:f7:84:88:33:f9:32:
f1:97:2e:6d:98:38:6a:11:2a:01:23:a1:48:f5:2f:ed:7f:ca:
69:81:5c:ac:24:6a:b2:1f:f6:ac:3e:94:37:06:c0:9b:ec:b0:
10:be:58:68:28:d4:4d:9f:65:2e:56:84:2e:1c:ee:d4:35:97:
17:9b:0e:a8:e0:36:a3:7a:c4:f3:c9:60:58:41:a2:c2:68:16:
59:79:f6:75:36:8c:e9:ee:d9:09:96:e1:25:42:d5:70:c3:4c:
38:a0:71:b3:2d:d0:e5:8e:67:f2:94:c1:38:7f:7f:e9:5f:52:
94:3a:9e:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+j4OI7Wdx7fONFrXbupd5uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMTBlMzhlZDU1ZTMxODVhZWQ2ZjA3OWY4YmI5YmYxMmQ0
NDQ4ZGIwHhcNMjYwNzI3MTQwMDUxWhcNMjYwNzI4MTQwMDUxWjAzMTEwLwYDVQQD
EyhiMmE5NWIwMDg3NWYxM2NiNWViYTRhMjQ0YWY4MWUzNWEyMGJhMDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTRSCKZF8UGHcGKwRcJFAoMtTwyk
svbd0s9UifHE4BcSdv+rAARuu/wW4cCZn7lBOCrKY88yixlRkknglE7mN0qXdDkI
0JE4l7j97JiYm/0qzkZat6EZpZAxK6YDmR4yVvPtyRfkOVJ/DHl9hfZMM+Ha+8VU
cNrEQ0ahJk8qkbvrOkHsn4Bc9q24RmNGCD7UqHsKj5XN1Ab1quwBERtfcfcQRPan
XYqupi8+osQbQHQcX6C6lkDpsZYUUwfkUQvSQoxwRCWqrzsSBNk3beXT8lxsrOZt
u0qbocXj+PD5VoGFt1eULDu4HHWAb9Uw7XAXP58wJS7tW7HLNuoBopPHhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKpWwCHXxPLXrpKJEr4HjWiC6AOMB8GA1UdIwQY
MBaAFB0Q447VXjGFrtbwefi7m/EtREjbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFJEamp0VmVNWVd1MXZCNS1MdWI4UzFFU05zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lMjM5NjktZmZiMC00ZTU3LWEzNmEt
NzYwZjZiNmFhYmMxLzEvSFJEamp0VmVNWVd1MXZCNS1MdWI4UzFFU05zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9lMjM5NjktZmZiMC00ZTU3LWEzNmEtNzYwZjZiNmFhYmMx
LzEvSFJEamp0VmVNWVd1MXZCNS1MdWI4UzFFU05zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXLLhhcA
wVmnfDNMKBWoyCcH08JFoCzcbeKRATKVDCz1mlJi6ZWHZyQ/VFSJlyRARAbIj1B+
urk7LR+HRBxFJ5bVRk/QUKmcfTj3qkJK2xV844ACel8JS+kb4zzjU2w+CJVTVN6a
2p0TH1H+MVyk5q1VWMs6s6lJ6sLBMxjdVOPEDqmB5mpMzQqK94SIM/ky8ZcubZg4
ahEqASOhSPUv7X/KaYFcrCRqsh/2rD6UNwbAm+ywEL5YaCjUTZ9lLlaELhzu1DWX
F5sOqOA2o3rE88lgWEGiwmgWWXn2dTaM6e7ZCZbhJULVcMNMOKBxsy3Q5Y5n8pTB
OH9/6V9SlDqeTg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 18:47:00 2026 by rpki-client