Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
File: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft (raw, json)
Hash identifier: 2xGRDwrg5NXdcBy1MNu1+UaGc44XITKr7ICWyrTIBZ8=
Subject key identifier: 4C:EE:22:01:FF:C9:C7:B9:70:1E:60:6D:71:84:EB:7E:51:F1:E3:CC
Authority key identifier: 1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
Certificate issuer: /CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Certificate serial: 01A0D5393E5339816303D72D4187A3F54270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 21:01:33 +0000
Manifest this update: Thu 24 Sep 2026 21:01:33 +0000
Manifest next update: Fri 25 Sep 2026 21:01:33 +0000
Files and hashes: 1: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl (hash: Kezy4s/iFnOE97hobjsbPsoHHxHn37geGBpehDnsOM8=)
2: fA_uTKLLbWG518h0njj_cqP2p6E.roa (hash: 4mY7FOvfpwAUXlFXu+ZK1/hojb4S0OMizyAm+Nun5mU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:3e:53:39:81:63:03:d7:2d:41:87:a3:f5:42:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Validity
Not Before: Sep 24 21:01:33 2026 GMT
Not After : Sep 25 21:01:33 2026 GMT
Subject: CN=4cee2201ffc9c7b9701e606d7184eb7e51f1e3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:43:26:18:bb:06:db:6a:f1:e5:ed:97:c2:23:
3d:1d:65:37:78:8a:85:bd:78:42:d2:35:17:15:d8:
76:9f:6d:0d:24:95:73:72:90:f5:83:b7:58:3d:b9:
ab:f9:f6:f9:06:46:f1:c1:34:2e:71:d1:4c:e7:ce:
6b:e6:25:1b:1b:e6:97:8f:1f:47:4d:bd:e8:c8:58:
7d:e2:17:9e:3c:37:8e:57:80:82:ae:20:da:bb:fc:
4a:99:b9:49:2c:4c:6a:33:51:89:83:13:f8:f2:00:
68:bd:6c:45:b8:33:21:2f:97:cf:fd:d1:b6:83:07:
f7:57:06:bd:21:a7:1b:7b:3a:4e:11:52:1a:98:65:
22:32:fb:f7:4e:d3:5f:34:a3:b7:4d:24:26:d3:bc:
37:50:14:86:b7:4f:fe:f2:41:24:50:34:18:d9:60:
80:c4:e3:1a:93:d8:c7:7f:0d:31:64:b6:e2:cc:d0:
9b:b9:43:d6:6d:f3:1c:c6:37:70:00:8d:3c:99:2e:
ac:46:f8:18:d5:4e:28:36:bb:ce:44:8d:0e:09:40:
4c:7e:7e:b1:f4:7b:3c:a1:11:0d:c4:fa:2a:7e:cf:
bd:f3:38:91:1c:df:b4:0d:00:69:a3:1c:b3:ce:4d:
22:22:45:f4:dd:d6:59:95:24:e8:48:3c:58:20:94:
1b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EE:22:01:FF:C9:C7:B9:70:1E:60:6D:71:84:EB:7E:51:F1:E3:CC
X509v3 Authority Key Identifier:
keyid:1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:89:0a:2b:a2:6e:87:94:3a:e5:25:b2:f1:a7:fd:da:10:ab:
7f:ba:a4:8e:cb:88:a8:37:3e:bb:ed:56:09:84:ed:e6:ee:a0:
7b:27:41:8a:07:a3:d5:ef:bc:89:ca:1e:7d:e8:3b:1f:ba:6e:
a3:5f:b2:e0:88:dc:3a:70:14:4a:c7:83:5e:e1:44:53:cd:33:
64:ae:97:5d:1a:3d:58:02:e2:63:2c:21:d8:47:ff:17:72:b4:
4b:ca:a4:24:e6:22:14:2f:8a:39:05:43:be:c7:5e:94:6c:58:
94:c8:ed:b0:db:4c:bc:46:9f:7a:19:52:82:9b:f3:55:a5:53:
2d:e2:ae:a3:4e:60:d6:82:6f:89:0a:27:e7:08:e2:6b:9d:de:
09:ee:80:c2:11:1a:12:bb:7e:3f:5c:ec:f1:36:40:a4:06:5c:
68:7b:cd:81:5a:bb:7c:64:1f:8a:0a:99:7c:f8:c1:11:8e:9f:
d2:f2:66:1f:ef:a4:e2:38:fd:3d:70:64:a3:64:94:a5:e6:77:
3a:3c:83:70:4b:c1:61:db:4b:b6:eb:d0:e4:28:25:86:70:4a:
c8:ec:4f:55:37:3d:e0:6b:c7:12:26:37:e2:db:dd:39:12:08:
36:83:41:5c:90:57:6a:8e:59:05:7b:da:58:92:51:5c:d7:9c:
bb:89:37:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVOT5TOYFjA9ctQYej9UJwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYWQ3YjlmMWM0OWY4ZDEzZTFhNjdhYmNmMmZiYTM1YjBh
NjZkMTgwHhcNMjYwOTI0MjEwMTMzWhcNMjYwOTI1MjEwMTMzWjAzMTEwLwYDVQQD
Eyg0Y2VlMjIwMWZmYzljN2I5NzAxZTYwNmQ3MTg0ZWI3ZTUxZjFlM2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0MmGLsG22rx5e2XwiM9HWU3eIqF
vXhC0jUXFdh2n20NJJVzcpD1g7dYPbmr+fb5BkbxwTQucdFM585r5iUbG+aXjx9H
Tb3oyFh94heePDeOV4CCriDau/xKmblJLExqM1GJgxP48gBovWxFuDMhL5fP/dG2
gwf3Vwa9IacbezpOEVIamGUiMvv3TtNfNKO3TSQm07w3UBSGt0/+8kEkUDQY2WCA
xOMak9jHfw0xZLbizNCbuUPWbfMcxjdwAI08mS6sRvgY1U4oNrvORI0OCUBMfn6x
9Hs8oRENxPoqfs+98ziRHN+0DQBpoxyzzk0iIkX03dZZlSToSDxYIJQbMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzuIgH/yce5cB5gbXGE635R8ePMMB8GA1UdIwQY
MBaAFB2te58cSfjRPhpnq88vujWwpm0YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGExN254eEotTkUtR21lcnp5LTZOYkNtYlJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zYzM5ZjAtN2U5Ny00ZWY3LTg5NDQt
NWViZDhlYWVlMmM2LzEvSGExN254eEotTkUtR21lcnp5LTZOYkNtYlJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8zYzM5ZjAtN2U5Ny00ZWY3LTg5NDQtNWViZDhlYWVlMmM2
LzEvSGExN254eEotTkUtR21lcnp5LTZOYkNtYlJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdYkKK6Ju
h5Q65SWy8af92hCrf7qkjsuIqDc+u+1WCYTt5u6geydBigej1e+8icoefeg7H7pu
o1+y4IjcOnAUSseDXuFEU80zZK6XXRo9WALiYywh2Ef/F3K0S8qkJOYiFC+KOQVD
vsdelGxYlMjtsNtMvEafehlSgpvzVaVTLeKuo05g1oJviQon5wjia53eCe6AwhEa
Ert+P1zs8TZApAZcaHvNgVq7fGQfigqZfPjBEY6f0vJmH++k4jj9PXBko2SUpeZ3
OjyDcEvBYdtLtuvQ5CglhnBKyOxPVTc94GvHEiY34tvdORIINoNBXJBXao5ZBXva
WJJRXNecu4k3ZQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 00:17:23 2026 by rpki-client