Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
File: HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft (raw, json)
Hash identifier: xHhyZOYKM2nOooBNYzqeZU31Xkaq66yTvAuH6ZspQEw=
Subject key identifier: 22:15:A0:14:41:21:4C:74:6D:96:1D:3A:87:28:5A:A9:B4:F7:72:AF
Authority key identifier: 1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
Certificate issuer: /CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Certificate serial: 019CE8C9AD399574A7C29E8F56510D10FC04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
Manifest number: 11D2
Signing time: Fri 13 Mar 2026 20:00:57 +0000
Manifest this update: Fri 13 Mar 2026 20:00:57 +0000
Manifest next update: Sat 14 Mar 2026 20:00:57 +0000
Files and hashes: 1: 2xP9m1PRgrEVDmtd4i2eqIDsm-A.roa (hash: YQaYHIwFaP+vp12w1AQ2mwIWx2mQt+KNJdo+tWceYBM=)
2: 5hq20ZEzfqPUd8jJerdhQ6lvpnQ.roa (hash: QttHQD+33asdEv7t7iqO8hCmG2Lg/3s4dda2hulSCvo=)
3: HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl (hash: 0HvPA+hRa5VE6qZb0OIu3ZMd1UWqjPn3wxlhfs15570=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:c9:ad:39:95:74:a7:c2:9e:8f:56:51:0d:10:fc:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Validity
Not Before: Mar 13 20:00:57 2026 GMT
Not After : Mar 14 20:00:57 2026 GMT
Subject: CN=2215a01441214c746d961d3a87285aa9b4f772af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9e:e5:f0:f6:dc:af:17:7f:ce:ac:40:12:01:
5d:4e:45:b4:0e:89:a7:14:74:10:43:dc:9c:93:43:
4a:f0:cd:21:89:e9:fe:d9:6e:e6:9c:a6:c5:6f:d7:
14:09:e0:f4:bf:a0:f0:b3:ae:aa:92:dd:85:56:a3:
e0:d5:9c:3a:10:e3:0f:75:1a:c1:f4:a6:46:a4:c4:
55:8e:ca:1f:05:ee:74:d4:4d:f5:58:c4:01:32:f3:
1e:4f:b7:c2:c5:a3:f9:fe:54:ae:3d:3e:84:eb:3c:
a0:d8:29:c0:ae:83:02:b0:74:24:bc:05:c6:24:17:
69:c7:e7:f6:a8:47:49:c8:49:9f:ca:7c:de:28:14:
4b:d7:58:0d:cb:90:24:c9:60:0b:34:df:14:ef:f6:
50:f7:04:2b:ec:7d:94:70:20:29:bc:4f:79:45:9e:
9e:7e:75:b0:49:6e:26:82:48:8e:bc:14:37:29:d2:
51:7d:b5:09:4e:bf:f4:4b:b0:f6:7c:95:a5:5d:fd:
e3:29:8a:33:3b:09:cc:dc:ea:bc:42:61:ca:90:71:
b7:9c:23:1e:4b:4c:ee:84:af:c7:e2:1f:58:5b:3e:
cf:d2:26:6f:e9:da:23:ce:dc:81:0f:5a:3b:d3:e7:
ba:36:54:c0:8a:ae:58:18:d2:fa:90:bd:53:4d:5b:
76:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:15:A0:14:41:21:4C:74:6D:96:1D:3A:87:28:5A:A9:B4:F7:72:AF
X509v3 Authority Key Identifier:
keyid:1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c2:19:c9:4b:4c:fd:80:db:ee:93:c3:9c:71:f7:80:9c:9c:
0a:55:23:d2:ea:f8:2a:3a:48:ec:57:22:fd:1e:48:8e:7d:84:
4a:3e:dd:e9:94:33:28:77:db:cb:f6:90:94:f3:2d:8d:e5:0d:
2d:fb:da:81:04:ed:b7:07:6c:fa:bd:21:a0:1e:f0:51:34:62:
3d:e4:20:79:b8:86:13:a9:a8:7b:26:21:23:80:5d:28:2b:e9:
78:a9:cf:2b:42:8b:33:e8:f0:84:12:37:66:ef:b8:06:05:c5:
13:1c:80:90:52:2c:13:da:48:12:10:ee:9a:ec:90:69:d2:72:
b4:39:73:52:3c:a5:a5:64:18:63:18:83:08:40:10:0b:14:cd:
ed:eb:66:f1:32:96:ae:05:82:37:b1:d5:39:7b:ed:00:ae:e8:
b7:13:15:13:db:61:6a:ed:83:84:f1:a4:59:3c:89:33:c6:8f:
d9:f7:a8:85:3d:9b:b0:6c:87:90:15:9e:9c:e4:3c:68:9b:38:
f6:81:a8:19:bc:2a:40:b4:cf:52:40:b0:29:56:68:1e:fb:f4:
b5:ed:1f:56:20:b7:46:02:e2:4e:8b:aa:34:f1:43:80:77:7a:
f4:a4:ac:25:33:e1:0b:c8:f6:47:d1:cd:3f:e6:1e:af:01:86:
10:b3:5b:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzoya05lXSnwp6PVlENEPwEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMTBlMzhlZDU1ZTMxODVhZWQ2ZjA3OWY4YmI5YmYxMmQ0
NDQ4ZGIwHhcNMjYwMzEzMjAwMDU3WhcNMjYwMzE0MjAwMDU3WjAzMTEwLwYDVQQD
EygyMjE1YTAxNDQxMjE0Yzc0NmQ5NjFkM2E4NzI4NWFhOWI0Zjc3MmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ7l8Pbcrxd/zqxAEgFdTkW0Domn
FHQQQ9yck0NK8M0hien+2W7mnKbFb9cUCeD0v6Dws66qkt2FVqPg1Zw6EOMPdRrB
9KZGpMRVjsofBe501E31WMQBMvMeT7fCxaP5/lSuPT6E6zyg2CnAroMCsHQkvAXG
JBdpx+f2qEdJyEmfynzeKBRL11gNy5AkyWALNN8U7/ZQ9wQr7H2UcCApvE95RZ6e
fnWwSW4mgkiOvBQ3KdJRfbUJTr/0S7D2fJWlXf3jKYozOwnM3Oq8QmHKkHG3nCMe
S0zuhK/H4h9YWz7P0iZv6dojztyBD1o70+e6NlTAiq5YGNL6kL1TTVt2xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIVoBRBIUx0bZYdOocoWqm093KvMB8GA1UdIwQY
MBaAFB0Q447VXjGFrtbwefi7m/EtREjbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFJEamp0VmVNWVd1MXZCNS1MdWI4UzFFU05zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lMjM5NjktZmZiMC00ZTU3LWEzNmEt
NzYwZjZiNmFhYmMxLzEvSFJEamp0VmVNWVd1MXZCNS1MdWI4UzFFU05zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9lMjM5NjktZmZiMC00ZTU3LWEzNmEtNzYwZjZiNmFhYmMx
LzEvSFJEamp0VmVNWVd1MXZCNS1MdWI4UzFFU05zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKcIZyUtM
/YDb7pPDnHH3gJycClUj0ur4KjpI7Fci/R5Ijn2ESj7d6ZQzKHfby/aQlPMtjeUN
LfvagQTttwds+r0hoB7wUTRiPeQgebiGE6moeyYhI4BdKCvpeKnPK0KLM+jwhBI3
Zu+4BgXFExyAkFIsE9pIEhDumuyQadJytDlzUjylpWQYYxiDCEAQCxTN7etm8TKW
rgWCN7HVOXvtAK7otxMVE9thau2DhPGkWTyJM8aP2feohT2bsGyHkBWenOQ8aJs4
9oGoGbwqQLTPUkCwKVZoHvv0te0fViC3RgLiTouqNPFDgHd69KSsJTPhC8j2R9HN
P+YerwGGELNbVQ==
-----END CERTIFICATE-----
Generated at Sat Mar 14 02:26:47 2026 by rpki-client