Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
File: h5tde1dZQJk3xcLCLwrb6OgyoF0.mft (raw, json)
Hash identifier: QryVSs78qH+1eFtRkw76fEdva/UOoPWNNsgOmN0i374=
Subject key identifier: AA:17:58:81:00:44:87:BB:C2:E1:F5:3D:84:C7:A2:1C:EE:1E:DC:26
Authority key identifier: 87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
Certificate issuer: /CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Certificate serial: 01A0DACD98C88AE9A1F9BD20A3043FA2B8FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
Manifest number: 1A74
Signing time: Fri 25 Sep 2026 23:01:42 +0000
Manifest this update: Fri 25 Sep 2026 23:01:42 +0000
Manifest next update: Sat 26 Sep 2026 23:01:42 +0000
Files and hashes: 1: h5tde1dZQJk3xcLCLwrb6OgyoF0.crl (hash: nz3tjVeXiZLuR6ShiUkzENeYz5IvYJVd3OfXVwQh3cY=)
2: tIWXntXKAgFX0o2CV5R3EvscJgw.roa (hash: GTihkbWiV/MenNAEieTq6Kt2bzz2nxk2i7D/ILSukLE=)
3: wDl6L6U8gtXF9PxG-RDkEh7vuAA.roa (hash: hIwbqTZcso8+8XAzuEzLE/OzP+u04MNbgmhj7K21Bm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 23:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:98:c8:8a:e9:a1:f9:bd:20:a3:04:3f:a2:b8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Validity
Not Before: Sep 25 23:01:42 2026 GMT
Not After : Sep 26 23:01:42 2026 GMT
Subject: CN=aa175881004487bbc2e1f53d84c7a21cee1edc26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f9:52:19:16:7f:04:2f:58:af:63:f5:70:ed:
15:60:4b:09:2e:20:67:64:72:92:f0:9e:98:46:0c:
08:aa:5d:9f:d3:c9:b4:24:3a:a8:7c:b5:de:02:4b:
ad:6b:55:26:55:e9:0b:ac:27:b3:35:6a:c1:29:92:
72:d0:bf:1c:96:4d:0c:d1:08:6a:e1:34:94:3a:89:
c1:69:f4:f6:2b:e9:3b:1d:89:e8:fe:71:5f:76:d5:
b2:e1:b6:1b:e9:47:5d:41:de:7f:af:2f:d5:69:48:
79:f5:bd:b3:3e:6d:88:0a:0c:c2:ef:74:b2:5c:4a:
62:c2:2e:0c:08:6f:78:ff:1a:f0:9e:06:5e:3a:82:
e1:ba:82:64:fe:d9:e2:e2:92:84:3e:90:d9:7a:48:
e0:5f:67:ad:3b:68:6d:e2:81:0d:4f:47:03:f5:1c:
62:29:be:27:cc:36:c2:1e:3c:5f:d1:3e:60:61:b3:
d0:00:5f:cf:7c:a2:e5:35:65:09:50:a1:2c:45:d8:
2d:88:2a:86:2d:56:f9:8c:3e:e7:c0:60:af:f5:b7:
c6:47:8f:ee:37:36:1a:f0:53:f8:a5:ce:0a:9e:7e:
82:b1:8f:a2:1f:d2:2d:d0:c5:ed:fd:de:37:9c:8d:
ed:a0:9b:e7:ac:b1:59:99:4b:81:7c:37:d0:07:54:
81:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:17:58:81:00:44:87:BB:C2:E1:F5:3D:84:C7:A2:1C:EE:1E:DC:26
X509v3 Authority Key Identifier:
keyid:87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:63:66:eb:dc:6f:01:3d:da:2d:61:81:2e:3c:ab:a2:0e:02:
09:68:02:d6:83:89:1e:6f:f2:57:74:2b:ce:31:14:14:9b:96:
cc:5f:46:b6:e9:eb:1c:ce:03:8f:21:81:82:eb:ed:30:3e:d0:
1f:d5:29:77:72:d3:0e:4a:e0:df:ba:89:ad:7e:e9:7b:96:92:
dc:b8:43:c4:0b:06:1d:39:d0:95:5d:0f:4c:66:85:50:5b:b5:
ba:9d:3f:e6:18:b7:6d:1b:c1:c8:14:17:df:9b:d8:7c:0f:a7:
64:08:f5:fd:ff:c8:ba:1a:42:2f:b9:1d:61:f9:63:63:1a:5b:
aa:11:10:e4:79:36:96:32:41:7d:e9:04:b2:fd:77:15:bc:be:
d0:42:bf:a5:40:75:88:be:07:63:28:40:e8:1e:f0:0c:24:4f:
e3:d9:0b:82:d3:ce:fa:71:ea:19:ba:5b:64:fa:f3:b4:70:62:
ec:d4:cd:d5:78:03:9e:ac:f5:9c:cb:ae:0c:22:45:7e:be:b6:
e9:2d:91:00:86:18:02:87:ef:34:fc:13:4d:03:a3:56:72:94:
ec:66:68:8a:37:c7:5a:3b:43:c2:d2:cd:8c:66:f4:eb:a6:36:
c0:73:58:3a:4a:9a:29:ea:88:9c:07:9f:e0:75:1e:86:7f:d6:
df:61:39:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDazZjIiumh+b0gowQ/orj6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OWI1ZDdiNTc1OTQwOTkzN2M1YzJjMjJmMGFkYmU4ZTgz
MmEwNWQwHhcNMjYwOTI1MjMwMTQyWhcNMjYwOTI2MjMwMTQyWjAzMTEwLwYDVQQD
EyhhYTE3NTg4MTAwNDQ4N2JiYzJlMWY1M2Q4NGM3YTIxY2VlMWVkYzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvlSGRZ/BC9Yr2P1cO0VYEsJLiBn
ZHKS8J6YRgwIql2f08m0JDqofLXeAkuta1UmVekLrCezNWrBKZJy0L8clk0M0Qhq
4TSUOonBafT2K+k7HYno/nFfdtWy4bYb6UddQd5/ry/VaUh59b2zPm2ICgzC73Sy
XEpiwi4MCG94/xrwngZeOoLhuoJk/tni4pKEPpDZekjgX2etO2ht4oENT0cD9Rxi
Kb4nzDbCHjxf0T5gYbPQAF/PfKLlNWUJUKEsRdgtiCqGLVb5jD7nwGCv9bfGR4/u
NzYa8FP4pc4Knn6CsY+iH9It0MXt/d43nI3toJvnrLFZmUuBfDfQB1SBbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKoXWIEARIe7wuH1PYTHohzuHtwmMB8GA1UdIwQY
MBaAFIebXXtXWUCZN8XCwi8K2+joMqBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDV0ZGUxZFpRSmszeGNMQ0x3cmI2T2d5b0YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi80ZjliODItZjFiMC00ZmU0LWE3OTgt
NWEwNmY3ODg3ZGJkLzEvaDV0ZGUxZFpRSmszeGNMQ0x3cmI2T2d5b0YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi80ZjliODItZjFiMC00ZmU0LWE3OTgtNWEwNmY3ODg3ZGJk
LzEvaDV0ZGUxZFpRSmszeGNMQ0x3cmI2T2d5b0YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiWNm69xv
AT3aLWGBLjyrog4CCWgC1oOJHm/yV3QrzjEUFJuWzF9GtunrHM4DjyGBguvtMD7Q
H9Upd3LTDkrg37qJrX7pe5aS3LhDxAsGHTnQlV0PTGaFUFu1up0/5hi3bRvByBQX
35vYfA+nZAj1/f/IuhpCL7kdYfljYxpbqhEQ5Hk2ljJBfekEsv13Fby+0EK/pUB1
iL4HYyhA6B7wDCRP49kLgtPO+nHqGbpbZPrztHBi7NTN1XgDnqz1nMuuDCJFfr62
6S2RAIYYAofvNPwTTQOjVnKU7GZoijfHWjtDwtLNjGb066Y2wHNYOkqaKeqInAef
4HUehn/W32E5zA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:17:57 2026 by rpki-client