Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
File: HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft (raw, json)
Hash identifier: LV+SqlaPEzWnpjmtAnsm4iKiPDl6AhrV3UGXb63UebY=
Subject key identifier: 72:A9:EE:BD:F8:DC:6F:BC:22:53:0F:0C:FA:4C:E3:74:4C:05:C0:B5
Authority key identifier: 1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
Certificate issuer: /CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Certificate serial: 01A0CF35F392901E82781518CDA152533265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
Manifest number: 13D7
Signing time: Wed 23 Sep 2026 17:00:14 +0000
Manifest this update: Wed 23 Sep 2026 17:00:14 +0000
Manifest next update: Thu 24 Sep 2026 17:00:14 +0000
Files and hashes: 1: 2xP9m1PRgrEVDmtd4i2eqIDsm-A.roa (hash: YQaYHIwFaP+vp12w1AQ2mwIWx2mQt+KNJdo+tWceYBM=)
2: 5hq20ZEzfqPUd8jJerdhQ6lvpnQ.roa (hash: QttHQD+33asdEv7t7iqO8hCmG2Lg/3s4dda2hulSCvo=)
3: HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl (hash: +bXs64tmdo1rQsOn7q4pArwhUtYd4LuYUCVmf1FMG60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:35:f3:92:90:1e:82:78:15:18:cd:a1:52:53:32:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Validity
Not Before: Sep 23 17:00:14 2026 GMT
Not After : Sep 24 17:00:14 2026 GMT
Subject: CN=72a9eebdf8dc6fbc22530f0cfa4ce3744c05c0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ec:5f:50:0a:fa:39:98:0d:68:83:ea:06:13:
9a:81:71:f7:8f:30:42:f4:28:b6:74:2f:fc:75:23:
ad:9b:7a:0c:87:c5:3d:e1:29:96:5b:b7:31:14:a6:
9c:69:d8:e6:2b:35:03:8b:b7:b6:65:cb:f0:f1:fc:
83:ff:e3:bc:3e:06:89:3e:ee:06:55:67:b5:da:fa:
c3:ef:2b:de:bb:38:f6:96:b9:6f:e4:c6:42:c8:4c:
6d:66:06:a5:72:9c:60:e3:d6:37:9c:c0:31:08:13:
9a:b7:ea:ce:21:77:15:6e:81:ff:48:42:51:85:b2:
47:7c:e3:a0:08:f2:f4:45:59:77:43:ae:0e:4a:39:
41:df:0f:13:bc:bf:6f:a0:25:58:a7:d8:3e:d4:f5:
bf:46:b8:71:ea:b0:05:c7:56:17:ee:2d:c2:39:7e:
81:68:c0:61:7f:fc:55:93:a5:95:d6:c8:22:47:62:
ea:04:9d:04:13:94:cb:c0:57:2c:b8:41:57:a3:b3:
1b:7a:c2:30:80:50:01:fd:c0:ed:e5:ee:0c:47:fc:
f4:c3:51:aa:d3:7d:0c:d3:11:ff:a5:93:de:62:9f:
9a:f2:eb:d5:d3:46:d1:5c:23:c8:e1:33:91:97:d0:
de:90:3d:02:e5:ba:63:0e:8e:ba:55:c2:62:1b:ed:
84:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A9:EE:BD:F8:DC:6F:BC:22:53:0F:0C:FA:4C:E3:74:4C:05:C0:B5
X509v3 Authority Key Identifier:
keyid:1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:2b:0e:27:23:e8:57:0a:0a:b6:30:46:ad:b0:3a:e3:b6:77:
57:ce:77:09:d2:f4:86:fa:e4:8f:b4:c0:a3:81:e9:54:26:f3:
a3:24:0d:a4:75:b5:85:5a:0a:25:ca:51:bb:ec:7e:10:c0:7b:
3f:ac:d8:b6:45:53:72:0f:b3:d6:7d:aa:43:3f:b3:be:d2:af:
40:ec:cf:de:f2:2f:4d:10:42:d1:f0:7e:f7:06:17:a5:15:40:
b8:a4:54:32:17:bf:9a:db:77:74:15:21:fd:22:c8:53:64:d8:
42:36:ae:87:d2:36:b6:7a:00:13:e1:5c:0b:d2:59:2b:30:53:
a4:23:fc:5e:0b:ad:64:d9:91:d7:6b:28:13:3a:ba:68:00:d9:
cc:05:0b:80:bc:10:2b:80:21:5b:07:c8:1a:c0:e4:58:1e:53:
a4:8e:23:c8:0e:2d:19:c7:99:38:0c:6c:e3:44:39:5a:80:3a:
05:bf:7f:74:f8:30:6b:49:78:f7:19:6c:4f:1e:7c:99:29:1d:
b3:50:9d:e4:6d:51:f3:8a:0d:35:83:7f:eb:83:3f:3d:3d:4d:
76:76:f0:5c:56:92:7b:7b:fa:db:fc:de:6a:cb:73:62:b8:39:
f6:51:bd:3a:5a:87:5d:56:dd:e9:5c:77:9e:78:d4:18:7e:fe:
30:80:ae:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPNfOSkB6CeBUYzaFSUzJlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMTBlMzhlZDU1ZTMxODVhZWQ2ZjA3OWY4YmI5YmYxMmQ0
NDQ4ZGIwHhcNMjYwOTIzMTcwMDE0WhcNMjYwOTI0MTcwMDE0WjAzMTEwLwYDVQQD
Eyg3MmE5ZWViZGY4ZGM2ZmJjMjI1MzBmMGNmYTRjZTM3NDRjMDVjMGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjexfUAr6OZgNaIPqBhOagXH3jzBC
9Ci2dC/8dSOtm3oMh8U94SmWW7cxFKacadjmKzUDi7e2Zcvw8fyD/+O8PgaJPu4G
VWe12vrD7yveuzj2lrlv5MZCyExtZgalcpxg49Y3nMAxCBOat+rOIXcVboH/SEJR
hbJHfOOgCPL0RVl3Q64OSjlB3w8TvL9voCVYp9g+1PW/Rrhx6rAFx1YX7i3COX6B
aMBhf/xVk6WV1sgiR2LqBJ0EE5TLwFcsuEFXo7MbesIwgFAB/cDt5e4MR/z0w1Gq
030M0xH/pZPeYp+a8uvV00bRXCPI4TORl9DekD0C5bpjDo66VcJiG+2E1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKp7r343G+8IlMPDPpM43RMBcC1MB8GA1UdIwQY
MBaAFB0Q447VXjGFrtbwefi7m/EtREjbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFJEamp0VmVNWVd1MXZCNS1MdWI4UzFFU05zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lMjM5NjktZmZiMC00ZTU3LWEzNmEt
NzYwZjZiNmFhYmMxLzEvSFJEamp0VmVNWVd1MXZCNS1MdWI4UzFFU05zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9lMjM5NjktZmZiMC00ZTU3LWEzNmEtNzYwZjZiNmFhYmMx
LzEvSFJEamp0VmVNWVd1MXZCNS1MdWI4UzFFU05zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUisOJyPo
VwoKtjBGrbA647Z3V853CdL0hvrkj7TAo4HpVCbzoyQNpHW1hVoKJcpRu+x+EMB7
P6zYtkVTcg+z1n2qQz+zvtKvQOzP3vIvTRBC0fB+9wYXpRVAuKRUMhe/mtt3dBUh
/SLIU2TYQjauh9I2tnoAE+FcC9JZKzBTpCP8XgutZNmR12soEzq6aADZzAULgLwQ
K4AhWwfIGsDkWB5TpI4jyA4tGceZOAxs40Q5WoA6Bb9/dPgwa0l49xlsTx58mSkd
s1Cd5G1R84oNNYN/64M/PT1NdnbwXFaSe3v62/zeastzYrg59lG9OlqHXVbd6Vx3
nnjUGH7+MICu4Q==
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:23:44 2026 by rpki-client