Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
File: hEcK8NideFuhi6YX3Anj9yxZlvM.mft (raw, json)
Hash identifier: uYCczvTzcxve+MAM8MNKZoQOnLaA1mbT62n8gdeWCww=
Subject key identifier: BB:98:EA:E2:52:66:04:AD:A9:6C:91:B3:82:22:B0:99:FE:77:C4:CE
Authority key identifier: 84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
Certificate issuer: /CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Certificate serial: 01A0D34B219417B5A65FA01FBE0BF67538E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
Manifest number: 0BFC
Signing time: Thu 24 Sep 2026 12:01:51 +0000
Manifest this update: Thu 24 Sep 2026 12:01:51 +0000
Manifest next update: Fri 25 Sep 2026 12:01:51 +0000
Files and hashes: 1: P0H9mn8azX8J6K-hdAfHiYeHr48.roa (hash: E4c9kuinUCaG0thWwOJajTUQL7VeKxkEvaLK1sfiV8U=)
2: hEcK8NideFuhi6YX3Anj9yxZlvM.crl (hash: HqfL+5ZABMxfk+Y06R6x2tLOWHH+1UAOwtCleI8U2CY=)
3: tdjIiHG6aRg6RaOSgsb_E64QRco.roa (hash: rpGb1Qz22L2bS8euMlwSPzOxpxsFd6dx18fW4QaBOow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4b:21:94:17:b5:a6:5f:a0:1f:be:0b:f6:75:38:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Validity
Not Before: Sep 24 12:01:51 2026 GMT
Not After : Sep 25 12:01:51 2026 GMT
Subject: CN=bb98eae2526604ada96c91b38222b099fe77c4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d1:88:e1:a9:55:b2:f8:18:2e:d9:26:b9:e9:
af:3d:79:e8:82:83:cb:24:fe:60:db:e5:b4:40:19:
ee:55:eb:30:59:e2:b7:80:c1:78:58:47:a6:ef:ba:
9f:9c:ca:87:81:93:12:c1:1b:62:d6:8f:b6:31:3e:
dd:49:84:6a:69:43:72:c9:bc:91:dd:9d:99:a4:3c:
a0:bb:82:20:97:9c:78:98:50:2a:01:47:8e:40:34:
b4:6a:c3:85:76:63:c0:b7:82:d4:e3:54:11:64:e7:
e3:1f:55:37:eb:5d:92:b6:f9:c4:74:89:46:4c:ba:
2e:e3:e5:29:c2:88:c2:2e:a1:34:e1:3c:80:3c:44:
ce:1a:69:1a:c2:38:83:9e:b5:eb:42:b4:c6:9d:dd:
5b:65:68:e2:cf:94:c8:ea:7a:b9:eb:28:43:20:a3:
fc:f1:a8:62:77:5b:ec:b6:16:3f:a3:9f:9c:b6:64:
35:6f:1c:e8:68:82:d9:54:17:77:83:89:d3:ea:89:
50:fb:b9:db:2e:be:34:8d:53:b0:ce:f0:70:18:6a:
de:f4:02:4f:9a:0a:bf:15:c9:f8:5b:85:ee:4b:0c:
0b:7d:83:26:11:ce:af:bb:ba:d4:c8:a6:1d:37:6c:
17:5f:84:0d:ab:a0:15:83:b1:7d:f0:b4:b4:ab:f8:
d1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:98:EA:E2:52:66:04:AD:A9:6C:91:B3:82:22:B0:99:FE:77:C4:CE
X509v3 Authority Key Identifier:
keyid:84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:00:39:ef:6c:6d:ee:ff:14:56:20:76:a0:cc:3b:fd:62:6d:
2f:c1:43:e6:47:c0:6a:45:52:c8:1e:55:11:8e:a7:6e:80:17:
41:ef:b6:74:ef:80:c1:08:3e:bc:df:99:43:df:bb:ed:70:9c:
d9:e3:f6:e1:ea:9b:b0:43:9c:85:8f:e8:4a:24:5f:69:3f:08:
2a:66:b9:f6:4c:82:28:8c:68:3a:00:d4:b5:fd:8c:90:80:4e:
b5:86:6b:9a:48:c4:06:9f:78:f3:9a:b1:1e:20:af:00:7a:ea:
c9:57:35:5e:bb:66:b3:74:b3:f3:e9:b4:24:73:2f:18:fe:cb:
9b:9e:18:d2:5d:8b:0f:6b:d0:b6:46:ab:0c:a9:30:8b:ea:38:
be:d2:31:af:20:1f:49:d9:51:16:e5:13:03:38:d0:98:02:39:
bc:35:a0:29:1f:10:c8:a9:b4:9a:07:3a:6f:ab:b0:b4:35:56:
ab:00:0e:35:29:d2:d0:a9:5b:d0:d9:75:ba:6f:a4:f8:88:f8:
aa:be:ec:fc:cd:b1:81:0c:d0:da:b8:44:d6:89:9b:e4:5d:ed:
a0:52:bc:2e:2e:f3:35:4c:c8:5d:2a:bd:d9:39:e5:5f:d0:d0:
fb:51:5f:a8:c9:8b:4c:f7:61:c8:e1:f5:6a:5b:25:f8:b2:f0:
29:6b:c9:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTSyGUF7WmX6Afvgv2dTjmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NDcwYWYwZDg5ZDc4NWJhMThiYTYxN2RjMDllM2Y3MmM1
OTk2ZjMwHhcNMjYwOTI0MTIwMTUxWhcNMjYwOTI1MTIwMTUxWjAzMTEwLwYDVQQD
EyhiYjk4ZWFlMjUyNjYwNGFkYTk2YzkxYjM4MjIyYjA5OWZlNzdjNGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNGI4alVsvgYLtkmuemvPXnogoPL
JP5g2+W0QBnuVeswWeK3gMF4WEem77qfnMqHgZMSwRti1o+2MT7dSYRqaUNyybyR
3Z2ZpDygu4Igl5x4mFAqAUeOQDS0asOFdmPAt4LU41QRZOfjH1U3612StvnEdIlG
TLou4+UpwojCLqE04TyAPETOGmkawjiDnrXrQrTGnd1bZWjiz5TI6nq56yhDIKP8
8ahid1vsthY/o5+ctmQ1bxzoaILZVBd3g4nT6olQ+7nbLr40jVOwzvBwGGre9AJP
mgq/Fcn4W4XuSwwLfYMmEc6vu7rUyKYdN2wXX4QNq6AVg7F98LS0q/jRrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLuY6uJSZgStqWyRs4IisJn+d8TOMB8GA1UdIwQY
MBaAFIRHCvDYnXhboYumF9wJ4/csWZbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEVjSzhOaWRlRnVoaTZZWDNBbmo5eXhabHZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS82NjBmMWQtNTc1My00NTE2LTgwMDIt
ZTc2ZTNlMjkzZTAyLzEvaEVjSzhOaWRlRnVoaTZZWDNBbmo5eXhabHZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS82NjBmMWQtNTc1My00NTE2LTgwMDItZTc2ZTNlMjkzZTAy
LzEvaEVjSzhOaWRlRnVoaTZZWDNBbmo5eXhabHZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZwA572xt
7v8UViB2oMw7/WJtL8FD5kfAakVSyB5VEY6nboAXQe+2dO+AwQg+vN+ZQ9+77XCc
2eP24eqbsEOchY/oSiRfaT8IKma59kyCKIxoOgDUtf2MkIBOtYZrmkjEBp9485qx
HiCvAHrqyVc1Xrtms3Sz8+m0JHMvGP7Lm54Y0l2LD2vQtkarDKkwi+o4vtIxryAf
SdlRFuUTAzjQmAI5vDWgKR8QyKm0mgc6b6uwtDVWqwAONSnS0Klb0Nl1um+k+Ij4
qr7s/M2xgQzQ2rhE1omb5F3toFK8Li7zNUzIXSq92TnlX9DQ+1FfqMmLTPdhyOH1
alsl+LLwKWvJDQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:33:43 2026 by rpki-client