Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
File: h5tde1dZQJk3xcLCLwrb6OgyoF0.mft (raw, json)
Hash identifier: SkMsuLX2aRjI7Ra7dTkJWjqfnroC+/qhby9RrXvkjLc=
Subject key identifier: A4:E4:E0:B8:9A:B6:E5:80:F8:4B:34:0D:F3:6E:D0:85:B5:EF:D2:7F
Authority key identifier: 87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
Certificate issuer: /CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Certificate serial: 01A089B0523D5B4CA24617EF486D309E3937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 05:00:28 +0000
Manifest this update: Thu 10 Sep 2026 05:00:28 +0000
Manifest next update: Fri 11 Sep 2026 05:00:28 +0000
Files and hashes: 1: h5tde1dZQJk3xcLCLwrb6OgyoF0.crl (hash: Hs+A/3C13KNWgvPWZqa+NJ0ubWljO0qxCXFc9CY6anY=)
2: tIWXntXKAgFX0o2CV5R3EvscJgw.roa (hash: GTihkbWiV/MenNAEieTq6Kt2bzz2nxk2i7D/ILSukLE=)
3: wDl6L6U8gtXF9PxG-RDkEh7vuAA.roa (hash: hIwbqTZcso8+8XAzuEzLE/OzP+u04MNbgmhj7K21Bm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:b0:52:3d:5b:4c:a2:46:17:ef:48:6d:30:9e:39:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Validity
Not Before: Sep 10 05:00:28 2026 GMT
Not After : Sep 11 05:00:28 2026 GMT
Subject: CN=a4e4e0b89ab6e580f84b340df36ed085b5efd27f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:90:53:4f:7d:68:1b:98:cf:bb:08:eb:bf:3f:
c3:25:44:b0:4a:b0:75:db:94:8b:a5:f6:ff:e8:29:
54:f6:8e:76:a6:d1:75:07:d0:0f:5c:3f:16:5e:cc:
6d:8c:82:06:be:1a:83:9c:40:8a:ec:aa:e7:cb:a5:
44:c6:d1:e2:72:82:13:0a:a0:20:d7:1f:b5:f6:61:
e2:e0:21:2b:d0:cb:35:48:18:bb:4d:91:3e:4a:0d:
56:4c:e0:e4:b3:e2:0d:43:2a:27:fe:e7:4b:cc:ef:
54:99:7c:5d:5a:9b:ba:a8:4a:9e:6b:02:5b:7d:8b:
b6:87:3a:3e:c4:84:05:ff:89:6d:c2:dc:85:e4:b3:
77:af:a0:67:fb:26:37:a8:4d:e2:84:49:37:63:12:
c9:bb:70:7b:d7:10:2d:21:74:c5:a4:6a:0d:f1:52:
6e:e3:a6:46:aa:dc:32:b1:f1:23:ac:ba:94:12:f2:
8f:ed:84:87:2a:2b:43:df:17:73:cc:a2:fb:73:cb:
bd:6f:21:ff:73:6c:4b:e4:ae:26:2e:ef:72:6f:10:
cd:67:0e:e8:be:22:a0:55:fb:4b:70:36:c4:8e:86:
1b:a7:e9:21:34:39:fb:74:d3:e9:f5:b2:3f:a9:87:
8e:2f:d1:80:7f:80:7e:80:4f:2f:d1:e7:14:09:57:
26:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E4:E0:B8:9A:B6:E5:80:F8:4B:34:0D:F3:6E:D0:85:B5:EF:D2:7F
X509v3 Authority Key Identifier:
keyid:87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:3e:e8:c9:f8:fd:07:e6:8e:be:c8:c4:24:9b:1b:80:21:b9:
2c:be:7f:96:26:f0:9e:3c:6d:f9:9d:6a:e9:a1:bc:c7:c2:da:
a4:be:1d:68:7f:45:32:9a:52:02:3d:4d:b4:ba:df:c8:89:35:
ec:6b:79:2a:1c:73:b7:8d:cf:dc:54:dd:10:7f:ab:05:a6:ce:
72:6b:09:38:03:04:1b:5d:bf:98:aa:6c:a0:cb:2d:8e:aa:95:
55:ef:a0:b2:97:cc:45:b5:cb:92:18:53:19:2f:01:ef:7e:c5:
d8:ec:03:8e:46:03:62:00:33:fa:34:79:9c:3a:64:59:25:0d:
6e:14:db:af:a2:57:1c:00:c7:77:81:2b:69:cf:f3:70:4f:d9:
e3:f2:19:69:fc:51:e4:e3:66:67:94:34:b8:c4:9f:52:9c:48:
6a:ee:91:52:b7:e7:6c:9b:5b:00:ca:88:2f:c3:4e:1b:23:77:
73:4a:e8:50:bd:cc:a2:8a:8f:ba:5b:8f:c0:3a:79:49:29:da:
10:7a:80:53:48:56:e2:cb:f3:a3:67:d4:ba:9e:1a:20:a8:00:
61:3a:10:76:73:e6:b7:cf:ec:fb:09:f3:b0:2f:9a:2b:28:aa:
16:d1:ea:d6:5e:e6:9f:39:7e:6e:9d:9e:be:74:50:30:ae:fb:
e6:4c:18:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJsFI9W0yiRhfvSG0wnjk3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OWI1ZDdiNTc1OTQwOTkzN2M1YzJjMjJmMGFkYmU4ZTgz
MmEwNWQwHhcNMjYwOTEwMDUwMDI4WhcNMjYwOTExMDUwMDI4WjAzMTEwLwYDVQQD
EyhhNGU0ZTBiODlhYjZlNTgwZjg0YjM0MGRmMzZlZDA4NWI1ZWZkMjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JBTT31oG5jPuwjrvz/DJUSwSrB1
25SLpfb/6ClU9o52ptF1B9APXD8WXsxtjIIGvhqDnECK7Krny6VExtHicoITCqAg
1x+19mHi4CEr0Ms1SBi7TZE+Sg1WTODks+INQyon/udLzO9UmXxdWpu6qEqeawJb
fYu2hzo+xIQF/4ltwtyF5LN3r6Bn+yY3qE3ihEk3YxLJu3B71xAtIXTFpGoN8VJu
46ZGqtwysfEjrLqUEvKP7YSHKitD3xdzzKL7c8u9byH/c2xL5K4mLu9ybxDNZw7o
viKgVftLcDbEjoYbp+khNDn7dNPp9bI/qYeOL9GAf4B+gE8v0ecUCVcm9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTk4LiatuWA+Es0DfNu0IW179J/MB8GA1UdIwQY
MBaAFIebXXtXWUCZN8XCwi8K2+joMqBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDV0ZGUxZFpRSmszeGNMQ0x3cmI2T2d5b0YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi80ZjliODItZjFiMC00ZmU0LWE3OTgt
NWEwNmY3ODg3ZGJkLzEvaDV0ZGUxZFpRSmszeGNMQ0x3cmI2T2d5b0YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi80ZjliODItZjFiMC00ZmU0LWE3OTgtNWEwNmY3ODg3ZGJk
LzEvaDV0ZGUxZFpRSmszeGNMQ0x3cmI2T2d5b0YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAET7oyfj9
B+aOvsjEJJsbgCG5LL5/libwnjxt+Z1q6aG8x8LapL4daH9FMppSAj1NtLrfyIk1
7Gt5Khxzt43P3FTdEH+rBabOcmsJOAMEG12/mKpsoMstjqqVVe+gspfMRbXLkhhT
GS8B737F2OwDjkYDYgAz+jR5nDpkWSUNbhTbr6JXHADHd4Erac/zcE/Z4/IZafxR
5ONmZ5Q0uMSfUpxIau6RUrfnbJtbAMqIL8NOGyN3c0roUL3MooqPuluPwDp5SSna
EHqAU0hW4svzo2fUup4aIKgAYToQdnPmt8/s+wnzsC+aKyiqFtHq1l7mnzl+bp2e
vnRQMK775kwYRg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 09:33:43 2026 by rpki-client