Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
File: Ha5HTXlZfbddH01JkBtSVYu_avQ.mft (raw, json)
Hash identifier: wwX/3JEi/+gHI9RviZCeVi9bbXZxPW1286lxVNoeVDU=
Subject key identifier: A3:CF:A7:F0:99:99:DF:D3:85:79:60:70:C6:CE:09:EC:1E:28:89:6C
Authority key identifier: 1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
Certificate issuer: /CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Certificate serial: 01A0C44491CA76F3FCBB2D23EEDDA92B55E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
Manifest number: 1283
Signing time: Mon 21 Sep 2026 14:00:23 +0000
Manifest this update: Mon 21 Sep 2026 14:00:23 +0000
Manifest next update: Tue 22 Sep 2026 14:00:23 +0000
Files and hashes: 1: Ha5HTXlZfbddH01JkBtSVYu_avQ.crl (hash: 3q9VpDy9oBon+yyfp+mTuWvKDAAAeoAvDnnD4tG22ws=)
2: k97xiEPNhhSgqvtrR_5TEOjiPrM.roa (hash: ZH1DGUuXgshBEvHt5egPH/VHWGjZYucZ8h4th9PhsLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:91:ca:76:f3:fc:bb:2d:23:ee:dd:a9:2b:55:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Validity
Not Before: Sep 21 14:00:23 2026 GMT
Not After : Sep 22 14:00:23 2026 GMT
Subject: CN=a3cfa7f09999dfd385796070c6ce09ec1e28896c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:58:ac:46:87:88:02:66:14:e8:df:16:3a:
02:a1:31:cd:9f:e0:46:66:28:ae:a7:fc:ca:a8:f6:
bb:ab:20:42:8e:7e:e2:8d:e2:78:17:3c:43:8b:e0:
2d:a6:95:64:be:95:84:de:87:0d:dc:c5:45:0f:89:
ef:0a:5c:fa:29:b5:e6:f0:a6:6f:18:36:53:74:a6:
40:aa:df:5a:ed:2b:ba:bf:e0:b0:63:09:f6:7f:56:
71:62:5b:13:58:b4:9d:7e:69:a8:96:70:f7:5c:6f:
cd:44:9d:ae:7a:b8:63:d2:89:a8:11:d4:95:bc:74:
c9:15:09:3c:16:91:4c:61:75:4a:00:66:5f:66:2e:
3c:21:20:1d:3a:4e:63:80:a0:82:e5:0e:03:36:7b:
55:f4:8c:e4:3a:fa:f7:9f:6a:7a:ac:47:05:58:62:
8e:fe:8b:40:6c:a9:2c:bd:15:dd:df:c2:a6:9d:47:
a2:9e:17:8c:c3:79:15:c6:74:5e:ce:ce:c2:95:43:
97:97:d9:35:1c:86:e6:6f:7d:bc:6f:ce:25:da:87:
25:9d:df:8a:a0:82:20:05:ea:97:78:d9:72:d1:3e:
32:40:4e:65:49:88:a9:88:74:c2:65:8a:7a:05:92:
82:87:8c:14:72:e8:77:98:5a:44:d0:8a:73:90:49:
3c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CF:A7:F0:99:99:DF:D3:85:79:60:70:C6:CE:09:EC:1E:28:89:6C
X509v3 Authority Key Identifier:
keyid:1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:6e:e9:61:1d:10:e1:6e:44:06:bf:4d:ed:3b:a5:42:12:15:
9c:b3:5b:3b:76:e0:42:6c:02:4e:c0:60:48:36:d1:b0:dc:45:
53:6a:a3:2d:c5:66:37:bc:e5:d6:95:74:99:14:dd:0c:93:ff:
92:5b:3b:9e:b2:03:aa:de:34:f8:c1:3f:88:9a:cb:b5:90:71:
29:3a:73:77:79:bb:2a:a9:92:b4:49:0b:4b:1e:7c:26:29:c1:
4c:87:94:0d:fb:4d:d8:de:54:ec:70:28:a0:64:22:10:74:fe:
ac:57:34:83:cf:a5:0c:d1:0c:46:3f:53:4c:84:8f:67:51:3f:
0a:f3:78:3f:07:e7:bf:20:1d:fb:69:c8:15:1e:86:9d:e6:2a:
a0:61:4b:91:9a:55:58:50:80:2b:98:52:0b:97:6a:9c:c8:8d:
30:91:88:d4:d6:da:6d:c4:a3:0d:f5:8b:0b:ce:1a:3b:74:cf:
51:db:3b:68:16:91:56:c6:89:16:ab:ea:90:12:a1:30:68:c9:
71:28:a4:a5:bb:5d:61:b5:00:19:9a:9a:ea:8d:be:aa:02:21:
71:7e:2f:e5:8a:6c:4e:a1:a2:d5:be:0c:6b:df:de:77:2a:c6:
fe:5f:97:08:d2:7f:1a:4d:fb:f3:1a:fc:ea:3f:81:a8:ec:83:
86:61:ed:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDERJHKdvP8uy0j7t2pK1XpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYWU0NzRkNzk1OTdkYjc1ZDFmNGQ0OTkwMWI1MjU1OGJi
ZjZhZjQwHhcNMjYwOTIxMTQwMDIzWhcNMjYwOTIyMTQwMDIzWjAzMTEwLwYDVQQD
EyhhM2NmYTdmMDk5OTlkZmQzODU3OTYwNzBjNmNlMDllYzFlMjg4OTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYlYrEaHiAJmFOjfFjoCoTHNn+BG
Ziiup/zKqPa7qyBCjn7ijeJ4FzxDi+AtppVkvpWE3ocN3MVFD4nvClz6KbXm8KZv
GDZTdKZAqt9a7Su6v+CwYwn2f1ZxYlsTWLSdfmmolnD3XG/NRJ2uerhj0omoEdSV
vHTJFQk8FpFMYXVKAGZfZi48ISAdOk5jgKCC5Q4DNntV9IzkOvr3n2p6rEcFWGKO
/otAbKksvRXd38KmnUeinheMw3kVxnRezs7ClUOXl9k1HIbmb328b84l2oclnd+K
oIIgBeqXeNly0T4yQE5lSYipiHTCZYp6BZKCh4wUcuh3mFpE0IpzkEk8dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPPp/CZmd/ThXlgcMbOCeweKIlsMB8GA1UdIwQY
MBaAFB2uR015WX23XR9NSZAbUlWLv2r0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS85OTZjZWUtMGFjYi00ZWI4LWE3N2Et
MjdmOTBiOGQ4NWU2LzEvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS85OTZjZWUtMGFjYi00ZWI4LWE3N2EtMjdmOTBiOGQ4NWU2
LzEvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIm7pYR0Q
4W5EBr9N7TulQhIVnLNbO3bgQmwCTsBgSDbRsNxFU2qjLcVmN7zl1pV0mRTdDJP/
kls7nrIDqt40+ME/iJrLtZBxKTpzd3m7KqmStEkLSx58JinBTIeUDftN2N5U7HAo
oGQiEHT+rFc0g8+lDNEMRj9TTISPZ1E/CvN4PwfnvyAd+2nIFR6GneYqoGFLkZpV
WFCAK5hSC5dqnMiNMJGI1NbabcSjDfWLC84aO3TPUds7aBaRVsaJFqvqkBKhMGjJ
cSikpbtdYbUAGZqa6o2+qgIhcX4v5YpsTqGi1b4Ma9/edyrG/l+XCNJ/Gk378xr8
6j+BqOyDhmHtCA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:51:35 2026 by rpki-client