Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
File: hLDKyDjyguBClI-dKyzVdU0ujEc.mft (raw, json)
Hash identifier: rjVKKvxFutunIwis8aeDWoCcuGMtNsUO16SAR58nUhI=
Subject key identifier: 9D:55:B2:10:0C:12:45:D3:44:1C:9E:A0:C4:EC:7C:BF:02:47:29:0A
Authority key identifier: 84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
Certificate issuer: /CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Certificate serial: 01A1DEA779CC213A0DEB0ABB7207C018AF01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
Manifest number: 1AF8
Signing time: Sun 15 Nov 2026 10:01:19 +0000
Manifest this update: Sun 15 Nov 2026 10:01:19 +0000
Manifest next update: Mon 16 Nov 2026 10:01:19 +0000
Files and hashes: 1: VlpI70dDa3SXtasYtMfEiBmSD6c.roa (hash: ZCpP7KsMiePX2xsWWMvyuZvFGbNzVM1llSJjyzmPYlQ=)
2: cuqHyO4V93ncme-J7Fr8-_3DTvU.roa (hash: RSEzdn3Ri0wlzenvwY/b18Rq2sLeWzRaHbLOuqaUorY=)
3: hLDKyDjyguBClI-dKyzVdU0ujEc.crl (hash: 6ux/EQ8kXqQbsz9vtF+Nfh4r/HjRWX/VdaR+JScjFkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:79:cc:21:3a:0d:eb:0a:bb:72:07:c0:18:af:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Validity
Not Before: Nov 15 10:01:19 2026 GMT
Not After : Nov 16 10:01:19 2026 GMT
Subject: CN=9d55b2100c1245d3441c9ea0c4ec7cbf0247290a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:19:25:33:cb:a7:c2:50:dd:b7:8a:0c:fc:01:
43:2f:06:d9:5a:49:20:a3:77:fc:99:0f:5d:b3:a0:
d6:92:97:44:d0:a3:69:ae:4e:e3:9a:03:5b:43:5e:
7c:a7:30:9e:1b:8d:ec:f7:fd:06:7c:d8:44:ed:36:
48:68:8f:d0:a3:ee:9e:ef:bd:57:d1:08:19:8c:d4:
a6:fc:d1:5b:05:2e:b0:50:05:c8:fd:8d:8b:31:8b:
fd:7b:82:80:3c:ca:c7:e0:b8:30:ec:7b:2e:40:f5:
bd:61:55:4b:f7:b9:76:c6:b2:3c:8f:de:44:ff:a3:
67:20:8a:b8:46:56:15:42:13:77:38:2d:e0:e0:14:
93:10:22:fd:4b:d1:54:20:8f:18:db:84:f4:f0:be:
aa:1c:06:c6:69:93:c5:05:30:fb:4d:b0:23:34:8c:
47:ea:44:87:a3:ed:49:ae:41:9c:ee:34:11:f3:f2:
f8:38:ad:92:15:f3:aa:b3:14:fc:2c:59:c2:1f:57:
8c:c3:32:0e:45:c8:07:21:5e:8b:aa:cc:14:38:03:
2a:2b:7f:fc:17:6f:1f:54:2d:a7:cd:9e:26:32:af:
09:b4:e0:59:83:fa:09:59:20:bf:d1:6d:00:c9:a2:
a8:27:9d:96:42:64:0c:87:88:f7:59:e6:e5:49:76:
ef:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:55:B2:10:0C:12:45:D3:44:1C:9E:A0:C4:EC:7C:BF:02:47:29:0A
X509v3 Authority Key Identifier:
keyid:84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a8:60:ae:54:5b:23:b2:e3:f3:fb:00:a7:6f:35:92:a8:0c:
18:88:23:cb:00:ba:66:aa:d7:64:cc:82:d6:1e:8b:dc:95:35:
f6:b0:68:41:30:78:b9:b6:09:2b:4f:59:f6:89:b3:9a:d3:de:
83:f8:3e:cd:b1:2d:96:c6:59:dd:38:c5:c9:f9:a3:70:aa:53:
fb:9f:59:a6:22:63:b2:de:1a:f0:44:79:bb:cd:98:3e:cb:59:
26:a3:8a:5f:d3:cd:a0:20:93:e7:95:73:c4:2d:e4:b8:84:ef:
d2:fb:7d:34:c3:8b:4b:91:07:47:dc:21:18:ce:1d:c9:41:40:
f6:8b:b9:02:13:6e:4d:a9:4b:e1:39:14:2b:13:78:37:70:2a:
d9:0c:62:9e:b6:37:f8:ac:17:09:a4:03:d2:d6:d5:fe:42:9a:
e7:bc:e1:34:35:57:75:31:4d:d5:51:7e:fd:97:fa:68:c7:80:
3a:17:4a:7e:c0:4f:a5:9b:b9:45:e6:6e:c0:30:2a:44:33:35:
de:7c:6d:15:20:fb:1d:0a:c0:aa:ae:bd:5b:f0:3b:7b:78:dc:
de:f2:5f:e1:70:a6:85:d3:6d:e4:ee:a2:4e:e7:62:67:40:3c:
a4:46:98:28:43:b0:b8:20:d9:20:b4:90:45:15:b9:4e:b6:d9:
0a:66:e6:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHep3nMIToN6wq7cgfAGK8BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjBjYWM4MzhmMjgyZTA0Mjk0OGY5ZDJiMmNkNTc1NGQy
ZThjNDcwHhcNMjYxMTE1MTAwMTE5WhcNMjYxMTE2MTAwMTE5WjAzMTEwLwYDVQQD
Eyg5ZDU1YjIxMDBjMTI0NWQzNDQxYzllYTBjNGVjN2NiZjAyNDcyOTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RklM8unwlDdt4oM/AFDLwbZWkkg
o3f8mQ9ds6DWkpdE0KNprk7jmgNbQ158pzCeG43s9/0GfNhE7TZIaI/Qo+6e771X
0QgZjNSm/NFbBS6wUAXI/Y2LMYv9e4KAPMrH4Lgw7HsuQPW9YVVL97l2xrI8j95E
/6NnIIq4RlYVQhN3OC3g4BSTECL9S9FUII8Y24T08L6qHAbGaZPFBTD7TbAjNIxH
6kSHo+1JrkGc7jQR8/L4OK2SFfOqsxT8LFnCH1eMwzIORcgHIV6LqswUOAMqK3/8
F28fVC2nzZ4mMq8JtOBZg/oJWSC/0W0AyaKoJ52WQmQMh4j3WeblSXbvrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1VshAMEkXTRByeoMTsfL8CRykKMB8GA1UdIwQY
MBaAFISwysg48oLgQpSPnSss1XVNLoxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExES3lEanlndUJDbEktZEt5elZkVTB1akVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lOTQ4N2YtZmRjNy00MGE3LThhNjct
MWJlNjljYTM5M2JhLzEvaExES3lEanlndUJDbEktZEt5elZkVTB1akVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9lOTQ4N2YtZmRjNy00MGE3LThhNjctMWJlNjljYTM5M2Jh
LzEvaExES3lEanlndUJDbEktZEt5elZkVTB1akVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnqhgrlRb
I7Lj8/sAp281kqgMGIgjywC6ZqrXZMyC1h6L3JU19rBoQTB4ubYJK09Z9omzmtPe
g/g+zbEtlsZZ3TjFyfmjcKpT+59ZpiJjst4a8ER5u82YPstZJqOKX9PNoCCT55Vz
xC3kuITv0vt9NMOLS5EHR9whGM4dyUFA9ou5AhNuTalL4TkUKxN4N3Aq2QxinrY3
+KwXCaQD0tbV/kKa57zhNDVXdTFN1VF+/Zf6aMeAOhdKfsBPpZu5ReZuwDAqRDM1
3nxtFSD7HQrAqq69W/A7e3jc3vJf4XCmhdNt5O6iTudiZ0A8pEaYKEOwuCDZILSQ
RRW5TrbZCmbmMA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:00:42 2026 by rpki-client