Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
File: hTodtQq3cdy1KTZ92VGmfKzEhSc.mft (raw, json)
Hash identifier: CJsmIWVAHb0PbBUvltIQQny/Z0yGF4JUVZOcfgJ9Ftk=
Subject key identifier: D1:03:7C:5B:B1:13:6C:B3:DF:AA:7F:2B:F6:A3:E1:C0:10:14:CC:23
Authority key identifier: 85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27
Certificate issuer: /CN=853a1db50ab771dcb529367dd951a67cacc48527
Certificate serial: 01A0CA0FC377853C5AA8A69AC10EEDEF3597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 17:00:25 +0000
Manifest this update: Tue 22 Sep 2026 17:00:25 +0000
Manifest next update: Wed 23 Sep 2026 17:00:25 +0000
Files and hashes: 1: ClZipqAtGVJ2H4srpt_UxqUYg7k.roa (hash: gRSN7asX/fb1bF2/3SBjZi8n62BnbOxEncNI/Hx/1K0=)
2: hTodtQq3cdy1KTZ92VGmfKzEhSc.crl (hash: bUfR2b9qs71KRJr+5L/5B2Q2tP5P3dT95bA6YNG7AK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:0f:c3:77:85:3c:5a:a8:a6:9a:c1:0e:ed:ef:35:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853a1db50ab771dcb529367dd951a67cacc48527
Validity
Not Before: Sep 22 17:00:25 2026 GMT
Not After : Sep 23 17:00:25 2026 GMT
Subject: CN=d1037c5bb1136cb3dfaa7f2bf6a3e1c01014cc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a2:fd:cb:5d:be:77:70:76:0e:80:23:57:5b:
1d:cd:6d:c1:e3:63:5f:b4:db:19:d3:7a:98:2b:bc:
31:f3:40:4a:e9:d0:b0:bc:e7:6f:83:50:ac:47:d2:
10:e5:32:51:f1:65:18:f1:4a:60:e7:7f:9a:91:f4:
3b:02:bb:97:34:c6:cc:23:cc:d8:3f:b7:d5:1d:73:
fe:38:4b:fc:5d:ee:9e:2b:ed:cc:5f:ac:ae:a6:66:
fd:75:bd:e2:92:df:34:7c:45:91:e5:2d:7a:a2:b4:
96:38:ba:8e:63:eb:1e:2f:7e:14:c6:9c:32:42:3a:
f7:a5:b7:67:d6:24:ec:22:2f:f3:58:cc:57:be:e7:
61:e8:f3:bc:91:3c:1c:f0:78:60:12:54:4d:9b:fc:
60:d1:59:f1:36:a9:ac:38:ff:99:ad:82:c1:52:11:
93:f7:f5:14:e8:6a:31:d0:9c:e8:bc:2e:03:7b:a7:
be:e8:ba:c2:16:7b:c7:e1:a9:e8:3d:d1:17:0b:f9:
e3:89:aa:d4:92:b5:56:2a:36:2f:37:de:39:69:8c:
61:f6:d6:93:d9:fa:6b:7a:32:70:2f:c5:b2:35:8c:
a6:fd:c5:08:78:e5:f9:50:cb:49:6c:db:d5:ef:d4:
d3:fb:9d:39:a0:c5:78:67:e2:bf:80:8d:fe:7d:61:
ae:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:03:7C:5B:B1:13:6C:B3:DF:AA:7F:2B:F6:A3:E1:C0:10:14:CC:23
X509v3 Authority Key Identifier:
keyid:85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:c2:5f:3c:ff:62:75:ee:6b:94:db:f9:6e:ac:9d:bb:5c:67:
5e:4e:d4:5a:22:7b:c7:19:5d:6c:95:2e:88:74:89:c7:a8:fd:
75:4e:92:89:a5:10:a5:bc:da:55:fa:3a:88:55:e9:90:81:fa:
23:2f:25:00:50:bd:f3:d7:b6:7e:c1:1b:ce:73:ee:b9:e3:e3:
3a:a3:37:1f:7a:df:58:2e:38:fb:b8:c0:c5:ce:2e:c6:c9:9c:
97:60:72:c3:55:46:ac:c0:86:85:b2:7f:25:d1:3b:7c:31:75:
f8:35:f3:ff:de:0f:32:11:35:70:77:6a:f4:c9:4a:46:44:c2:
20:6d:d3:cd:3f:ef:4d:2b:af:92:46:6b:71:5a:20:20:1c:b3:
3e:29:aa:a6:0f:72:dc:9a:62:72:e0:c1:52:50:a7:b0:77:fa:
f1:f3:98:10:f2:f5:12:93:bd:03:2c:6f:3a:68:04:00:3b:44:
70:c1:d2:65:6c:59:ff:35:cb:82:1d:aa:67:58:6b:3f:34:7a:
08:18:01:0e:36:cb:22:33:17:43:2a:33:57:33:50:ee:f7:5e:
44:94:bd:a6:32:eb:f2:b7:c8:48:5f:aa:63:25:eb:49:39:9b:
e3:91:aa:b5:40:87:bb:6f:4d:ba:5c:9d:81:c4:5f:83:7d:49:
bb:28:a9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:13:25 2026 by rpki-client