Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft
File: H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft (raw, json)
Hash identifier: 5lgv5MwibwnGzj+sg6UvCWhx0ZV+6FQXshxjc62Djp8=
Subject key identifier: 3D:50:BC:9C:FE:F1:F4:0E:70:81:0D:35:4C:E9:21:73:46:04:EB:BA
Authority key identifier: 1F:FA:55:80:DA:7E:D7:1E:23:DC:6C:36:90:2E:5C:66:B0:E9:3F:92
Certificate issuer: /CN=1ffa5580da7ed71e23dc6c36902e5c66b0e93f92
Certificate serial: 01A0DD970F5FAAF64A4BB61DFE34688CF0F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft
Manifest number: EC
Signing time: Sat 26 Sep 2026 12:00:59 +0000
Manifest this update: Sat 26 Sep 2026 12:00:59 +0000
Manifest next update: Sun 27 Sep 2026 12:00:59 +0000
Files and hashes: 1: H_pVgNp-1x4j3Gw2kC5cZrDpP5I.crl (hash: TH2AiYP5aAOAOGItBHI/AYUoLd6tjYPAHYE59WRiBH4=)
2: V9X49EieL5muWb2FuiaJlUR-F0M.roa (hash: KCwcP0n4ZTZ4GNIBxxk+6aPghXeAJv53hQU1wGojBWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:0f:5f:aa:f6:4a:4b:b6:1d:fe:34:68:8c:f0:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ffa5580da7ed71e23dc6c36902e5c66b0e93f92
Validity
Not Before: Sep 26 12:00:59 2026 GMT
Not After : Sep 27 12:00:59 2026 GMT
Subject: CN=3d50bc9cfef1f40e70810d354ce921734604ebba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:8c:9c:40:3a:24:4f:4a:09:d6:03:71:d4:
d1:4d:f5:59:96:e9:e4:ef:f3:d5:4e:a3:12:6a:2a:
82:08:db:8d:31:ee:37:ff:fb:6a:ec:94:fd:b1:38:
65:d4:2f:33:46:3f:32:92:31:98:d3:b2:df:95:b7:
72:b9:23:a7:d0:3c:02:47:45:1a:7e:bf:f3:e2:8c:
46:27:e8:ce:93:1d:0f:10:5e:10:7d:36:25:84:cd:
ef:11:1a:8f:31:4e:f4:47:e6:16:e0:b4:38:c0:64:
e2:7c:93:56:ec:3d:50:4c:57:05:5c:62:d4:7a:12:
e7:d3:46:74:95:c9:ba:52:2c:dc:63:e3:24:c7:f4:
4c:41:c7:48:81:dd:f1:f5:47:c5:0f:47:ef:2f:ef:
59:f1:bb:93:23:e3:c5:8b:e5:73:e2:19:9b:31:4c:
78:8e:0c:1d:76:2d:3c:25:0a:37:52:5d:7d:ac:c6:
10:50:7d:be:6e:b2:33:8d:cf:98:d3:1d:05:b0:10:
8d:29:0b:3b:bd:bc:32:4f:46:79:24:a0:a4:74:02:
c2:d6:ae:19:6e:7c:df:c7:c4:b4:56:4d:77:19:69:
c2:48:99:85:19:1b:1b:7d:81:0e:54:43:64:9b:74:
53:56:58:ed:b5:44:4d:51:0d:9e:e5:e1:52:9c:6f:
2b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:50:BC:9C:FE:F1:F4:0E:70:81:0D:35:4C:E9:21:73:46:04:EB:BA
X509v3 Authority Key Identifier:
keyid:1F:FA:55:80:DA:7E:D7:1E:23:DC:6C:36:90:2E:5C:66:B0:E9:3F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:fe:42:4d:56:4e:c9:9b:cf:e4:58:fa:af:59:c7:49:7c:4e:
bd:8b:dc:52:94:1c:8f:fc:db:b9:ac:8d:5d:51:92:5b:98:a8:
4b:58:0a:e6:b5:aa:d5:cf:5e:87:30:3f:cb:59:c3:31:21:38:
3b:02:e3:d0:10:ce:79:55:80:c1:ba:b2:17:32:3a:92:1f:12:
fd:16:5b:6a:8b:e1:e6:5c:c0:69:42:51:62:4a:f1:5a:83:fc:
e0:01:d1:1b:06:0e:4a:ce:06:4e:fe:98:82:6b:c7:f5:26:3b:
f1:f4:05:d6:a9:2f:18:22:4f:9e:65:dc:fe:e5:e9:ac:bb:8a:
26:6d:85:6f:4b:66:71:c3:8e:4f:0e:ef:f2:1a:67:19:34:3e:
ca:fb:58:d6:a3:59:85:81:7c:38:14:f3:73:9a:57:1c:c0:6e:
5d:97:53:c0:b0:aa:9e:f9:e2:1f:09:38:9e:5e:e0:56:8a:6a:
93:b4:6b:9b:22:26:cc:fd:cd:0b:92:a4:14:ac:6e:1e:46:b4:
99:13:1c:aa:21:cb:f8:b5:61:cd:07:73:28:3b:66:8d:e4:51:
3e:78:8a:0f:20:4a:e7:78:88:70:9a:c7:32:09:00:ea:c4:78:
6e:8d:15:f9:4e:24:4b:57:7d:fc:16:42:54:93:4d:dc:e3:0a:
3e:57:fd:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdlw9fqvZKS7Yd/jRojPD2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZmE1NTgwZGE3ZWQ3MWUyM2RjNmMzNjkwMmU1YzY2YjBl
OTNmOTIwHhcNMjYwOTI2MTIwMDU5WhcNMjYwOTI3MTIwMDU5WjAzMTEwLwYDVQQD
EygzZDUwYmM5Y2ZlZjFmNDBlNzA4MTBkMzU0Y2U5MjE3MzQ2MDRlYmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJiMnEA6JE9KCdYDcdTRTfVZlunk
7/PVTqMSaiqCCNuNMe43//tq7JT9sThl1C8zRj8ykjGY07LflbdyuSOn0DwCR0Ua
fr/z4oxGJ+jOkx0PEF4QfTYlhM3vERqPMU70R+YW4LQ4wGTifJNW7D1QTFcFXGLU
ehLn00Z0lcm6UizcY+Mkx/RMQcdIgd3x9UfFD0fvL+9Z8buTI+PFi+Vz4hmbMUx4
jgwddi08JQo3Ul19rMYQUH2+brIzjc+Y0x0FsBCNKQs7vbwyT0Z5JKCkdALC1q4Z
bnzfx8S0Vk13GWnCSJmFGRsbfYEOVENkm3RTVljttURNUQ2e5eFSnG8rTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1QvJz+8fQOcIENNUzpIXNGBOu6MB8GA1UdIwQY
MBaAFB/6VYDaftceI9xsNpAuXGaw6T+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSF9wVmdOcC0xeDRqM0d3MmtDNWNackRwUDVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NjU4MjYtZWI5My00NzBlLWI2N2Et
NjRlNTJiOWRkOGQxLzEvSF9wVmdOcC0xeDRqM0d3MmtDNWNackRwUDVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85NjU4MjYtZWI5My00NzBlLWI2N2EtNjRlNTJiOWRkOGQx
LzEvSF9wVmdOcC0xeDRqM0d3MmtDNWNackRwUDVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlv5CTVZO
yZvP5Fj6r1nHSXxOvYvcUpQcj/zbuayNXVGSW5ioS1gK5rWq1c9ehzA/y1nDMSE4
OwLj0BDOeVWAwbqyFzI6kh8S/RZbaovh5lzAaUJRYkrxWoP84AHRGwYOSs4GTv6Y
gmvH9SY78fQF1qkvGCJPnmXc/uXprLuKJm2Fb0tmccOOTw7v8hpnGTQ+yvtY1qNZ
hYF8OBTzc5pXHMBuXZdTwLCqnvniHwk4nl7gVopqk7RrmyImzP3NC5KkFKxuHka0
mRMcqiHL+LVhzQdzKDtmjeRRPniKDyBK53iIcJrHMgkA6sR4bo0V+U4kS1d9/BZC
VJNN3OMKPlf9UQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 13:37:08 2026 by rpki-client