Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
File: H0rytHmBXwfNgun4K6sv6hP7IbE.mft (raw, json)
Hash identifier: a7kvc3D5ffAZxCZhbu+OCIlWYhgpKAoy6Xf2+JaAzgU=
Subject key identifier: B7:8E:DD:B9:68:18:1E:80:60:F6:61:E0:B8:6E:9D:44:85:74:4D:23
Authority key identifier: 1F:4A:F2:B4:79:81:5F:07:CD:82:E9:F8:2B:AB:2F:EA:13:FB:21:B1
Certificate issuer: /CN=1f4af2b479815f07cd82e9f82bab2fea13fb21b1
Certificate serial: 01A0D5026FA83B939DC397FA0917977DA175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
Manifest number: 1328
Signing time: Thu 24 Sep 2026 20:01:41 +0000
Manifest this update: Thu 24 Sep 2026 20:01:41 +0000
Manifest next update: Fri 25 Sep 2026 20:01:41 +0000
Files and hashes: 1: H0rytHmBXwfNgun4K6sv6hP7IbE.crl (hash: 3Ki5veBVmoYJqr/ilNlcr/29nvlAZ9CaaYO0j/oNOOo=)
2: Vf77xukhBIpUTcfDdQGILMMSa4Q.roa (hash: tmWyKSyKboTPLB52PoBpJE8efgve3egkhQ+0cqtz0+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:6f:a8:3b:93:9d:c3:97:fa:09:17:97:7d:a1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4af2b479815f07cd82e9f82bab2fea13fb21b1
Validity
Not Before: Sep 24 20:01:41 2026 GMT
Not After : Sep 25 20:01:41 2026 GMT
Subject: CN=b78eddb968181e8060f661e0b86e9d4485744d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:db:ec:c8:08:32:4f:57:7b:e1:79:88:03:a2:
ee:6e:f2:f9:de:e3:ca:f9:93:bf:ba:38:ab:4e:39:
18:fc:64:b2:5f:f9:9a:30:9e:33:0a:75:bd:84:65:
62:4a:6f:38:4f:e1:f7:05:a1:03:01:cf:34:11:50:
2c:98:03:55:a0:f1:c8:3b:64:23:cd:31:4c:92:92:
c2:6d:21:7a:b3:9e:9d:10:15:01:46:04:e7:9a:0e:
df:aa:ed:5f:b7:0a:4f:f1:20:f8:b4:5f:79:df:cf:
94:ea:74:ad:af:42:7a:0a:93:92:33:e3:47:17:af:
1f:6e:17:96:71:7e:47:8d:72:3c:45:33:c3:69:4c:
82:f7:7b:65:2d:01:56:78:3d:65:71:98:26:93:59:
b0:28:59:c8:8b:57:60:c0:bb:ac:98:52:d6:86:c9:
86:3a:de:84:39:b3:bb:91:e8:7c:35:65:8e:e6:c3:
f3:b4:e3:89:60:a6:53:2f:d6:31:b2:36:5c:6a:74:
f0:44:e1:8c:cc:cb:18:2b:52:b8:62:9b:c9:c3:24:
df:c1:9e:07:09:46:f1:89:55:32:b2:29:73:e9:1c:
bd:e2:19:6d:91:f9:10:22:11:4b:48:0d:db:f0:4f:
76:2a:7c:7b:eb:fe:b2:e4:90:6e:4e:c7:1e:1d:1f:
49:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8E:DD:B9:68:18:1E:80:60:F6:61:E0:B8:6E:9D:44:85:74:4D:23
X509v3 Authority Key Identifier:
keyid:1F:4A:F2:B4:79:81:5F:07:CD:82:E9:F8:2B:AB:2F:EA:13:FB:21:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:64:7a:09:35:2e:9f:2f:b0:b3:b5:19:24:1e:29:f9:0e:a9:
f2:1f:f6:92:1f:03:8f:76:78:b5:e6:d6:ae:ad:1e:ba:99:64:
2a:42:2e:15:62:7c:0d:6d:d2:d1:54:39:f0:7b:85:f1:9f:7a:
ca:ec:2c:e1:7a:81:2c:6d:70:5d:72:75:21:9f:cd:cb:df:53:
66:d4:9b:6e:c1:17:88:f2:e2:b3:7f:31:86:7f:e7:dc:3a:e4:
00:90:e1:6c:1d:dd:fc:42:95:e6:a4:a5:88:04:41:55:39:b5:
e6:29:59:33:be:31:7b:0b:0b:e2:85:9a:80:15:6a:14:44:8c:
64:1f:74:31:b4:28:23:43:85:30:aa:87:35:bc:6a:f5:a0:2f:
0c:d2:5e:22:50:e9:16:a5:a5:ff:96:61:4f:18:c6:82:24:02:
f4:ef:95:36:95:28:ae:3b:cc:dc:00:8c:9b:e1:28:07:1f:c2:
db:55:a5:1c:df:d0:e9:88:0b:85:9f:74:17:4b:b8:cb:54:ce:
9f:a0:83:4d:75:15:21:c8:dd:60:02:9c:25:ea:5d:cb:73:0c:
29:b2:52:7c:a0:e3:b1:ab:1d:75:54:70:75:09:c5:9f:ce:bb:
54:d2:3b:de:4e:6f:18:aa:49:df:48:99:c1:08:be:16:52:04:
49:3e:9c:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVAm+oO5Odw5f6CReXfaF1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNGFmMmI0Nzk4MTVmMDdjZDgyZTlmODJiYWIyZmVhMTNm
YjIxYjEwHhcNMjYwOTI0MjAwMTQxWhcNMjYwOTI1MjAwMTQxWjAzMTEwLwYDVQQD
EyhiNzhlZGRiOTY4MTgxZTgwNjBmNjYxZTBiODZlOWQ0NDg1NzQ0ZDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19vsyAgyT1d74XmIA6LubvL53uPK
+ZO/ujirTjkY/GSyX/maMJ4zCnW9hGViSm84T+H3BaEDAc80EVAsmANVoPHIO2Qj
zTFMkpLCbSF6s56dEBUBRgTnmg7fqu1ftwpP8SD4tF9538+U6nStr0J6CpOSM+NH
F68fbheWcX5HjXI8RTPDaUyC93tlLQFWeD1lcZgmk1mwKFnIi1dgwLusmFLWhsmG
Ot6EObO7keh8NWWO5sPztOOJYKZTL9YxsjZcanTwROGMzMsYK1K4YpvJwyTfwZ4H
CUbxiVUysilz6Ry94hltkfkQIhFLSA3b8E92Knx76/6y5JBuTsceHR9JOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLeO3bloGB6AYPZh4LhunUSFdE0jMB8GA1UdIwQY
MBaAFB9K8rR5gV8HzYLp+CurL+oT+yGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDByeXRIbUJYd2ZOZ3VuNEs2c3Y2aFA3SWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wZjI1YjctNGY4MS00ZjQxLWExNjIt
MDg2YzE2ZjczNmIxLzEvSDByeXRIbUJYd2ZOZ3VuNEs2c3Y2aFA3SWJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wZjI1YjctNGY4MS00ZjQxLWExNjItMDg2YzE2ZjczNmIx
LzEvSDByeXRIbUJYd2ZOZ3VuNEs2c3Y2aFA3SWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeGR6CTUu
ny+ws7UZJB4p+Q6p8h/2kh8Dj3Z4tebWrq0euplkKkIuFWJ8DW3S0VQ58HuF8Z96
yuws4XqBLG1wXXJ1IZ/Ny99TZtSbbsEXiPLis38xhn/n3DrkAJDhbB3d/EKV5qSl
iARBVTm15ilZM74xewsL4oWagBVqFESMZB90MbQoI0OFMKqHNbxq9aAvDNJeIlDp
FqWl/5ZhTxjGgiQC9O+VNpUorjvM3ACMm+EoBx/C21WlHN/Q6YgLhZ90F0u4y1TO
n6CDTXUVIcjdYAKcJepdy3MMKbJSfKDjsasddVRwdQnFn867VNI73k5vGKpJ30iZ
wQi+FlIEST6crg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 03:02:11 2026 by rpki-client