Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/heSsHuWPsBZEjd0bp6W6mkizPsw.mft
File: heSsHuWPsBZEjd0bp6W6mkizPsw.mft (raw, json)
Hash identifier: L92At68CFPMQMr5YMtj4miIHD3umOxNMuMvZ7oWYCjo=
Subject key identifier: 66:27:E3:BA:2C:24:13:8A:DE:34:56:81:E8:CC:1F:6E:63:E5:CB:76
Authority key identifier: 85:E4:AC:1E:E5:8F:B0:16:44:8D:DD:1B:A7:A5:BA:9A:48:B3:3E:CC
Certificate issuer: /CN=85e4ac1ee58fb016448ddd1ba7a5ba9a48b33ecc
Certificate serial: 01A10BF007DC875DD5D373812D33411567D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/heSsHuWPsBZEjd0bp6W6mkizPsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/heSsHuWPsBZEjd0bp6W6mkizPsw.mft
Manifest number: 0104
Signing time: Mon 05 Oct 2026 12:00:42 +0000
Manifest this update: Mon 05 Oct 2026 12:00:42 +0000
Manifest next update: Tue 06 Oct 2026 12:00:42 +0000
Files and hashes: 1: 4s1KFc_pThYjGBdUJLs2Nl1upLE.roa (hash: 4dYHQlFuSRkjK7GHEQ+aA58N3FDz6pXVboUirj4ugs0=)
2: WprdfNGgmVJxl7pKSMorRSpkqxg.asa (hash: 47wTCptNF3CDuUj1JZbNAy/veEaKtcD7HJ1oodwJlcg=)
3: heSsHuWPsBZEjd0bp6W6mkizPsw.crl (hash: UUXLhTep/MO5C2u/xbfHFxcgba+TY2dxP/X6fxuH8fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/heSsHuWPsBZEjd0bp6W6mkizPsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/heSsHuWPsBZEjd0bp6W6mkizPsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/heSsHuWPsBZEjd0bp6W6mkizPsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:f0:07:dc:87:5d:d5:d3:73:81:2d:33:41:15:67:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e4ac1ee58fb016448ddd1ba7a5ba9a48b33ecc
Validity
Not Before: Oct 5 12:00:42 2026 GMT
Not After : Oct 6 12:00:42 2026 GMT
Subject: CN=6627e3ba2c24138ade345681e8cc1f6e63e5cb76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b9:65:2f:cd:b5:68:c8:1e:0c:26:37:26:87:
02:30:47:ec:17:f2:6e:97:05:d2:fc:4a:cc:45:3e:
41:88:c7:15:e2:18:88:4e:4d:f2:57:17:0e:fa:17:
cb:47:c5:76:61:61:c3:f5:4a:ca:33:ca:78:5a:0a:
89:a2:33:34:8d:18:97:56:9c:18:a0:4f:ed:68:f6:
52:64:0a:2f:90:0a:ce:8d:af:b7:f0:e9:51:e2:9a:
b0:4f:97:a9:43:b9:78:7e:df:0b:df:60:fd:33:6b:
55:92:4c:1d:1a:96:8e:f4:06:d2:0f:df:75:0a:cc:
c6:9d:fe:cb:67:38:57:a3:b5:ad:fb:5a:d9:38:2d:
d5:a4:a3:ed:9f:62:a8:5d:26:87:7d:b7:24:d2:80:
9b:c1:d1:a1:97:ab:47:b6:71:b8:4f:95:c5:10:39:
2b:53:2b:b1:14:bb:a5:08:e7:71:37:1b:ec:dc:cc:
48:c8:03:fe:c9:0b:fe:8d:f2:ba:ac:88:73:6e:6c:
ad:d8:7e:fd:0c:d0:12:2c:67:ef:c7:42:36:0a:65:
53:86:17:a5:01:9b:17:7b:ba:13:54:a0:9a:4c:76:
1b:2f:ee:c1:64:2d:fb:f2:a8:9d:43:9f:87:42:28:
6f:16:30:1e:82:19:43:61:48:38:d3:b9:aa:8e:f5:
88:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:27:E3:BA:2C:24:13:8A:DE:34:56:81:E8:CC:1F:6E:63:E5:CB:76
X509v3 Authority Key Identifier:
keyid:85:E4:AC:1E:E5:8F:B0:16:44:8D:DD:1B:A7:A5:BA:9A:48:B3:3E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/heSsHuWPsBZEjd0bp6W6mkizPsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/heSsHuWPsBZEjd0bp6W6mkizPsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/heSsHuWPsBZEjd0bp6W6mkizPsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c4:cc:b5:dc:fb:be:75:db:7b:89:1a:00:b4:c3:33:75:85:
e4:80:97:23:4b:da:19:6d:be:08:0e:b2:00:f2:37:98:46:f5:
14:0e:03:06:4a:9a:b2:6a:e4:59:e0:c3:07:4e:5b:c0:2f:16:
5f:ba:a4:39:35:17:80:74:ee:f5:b4:00:6d:94:b2:5f:46:98:
02:04:78:27:ad:32:e5:06:ec:b0:cd:a7:c1:d8:1a:94:89:36:
a8:4f:7b:66:b9:9a:78:0c:49:29:9f:70:eb:16:66:1b:49:ea:
88:1f:64:5f:8f:6b:4f:4f:e7:ba:1f:e2:3b:5f:b1:cf:b5:6b:
ed:35:84:12:34:e0:04:08:33:de:88:3e:84:2b:2f:1f:f6:5e:
1b:3c:78:7a:3e:d5:13:68:f9:17:6a:55:fd:f5:97:fb:69:c3:
55:1e:1a:f5:29:54:e0:bb:9b:43:10:69:b9:02:61:39:0a:dd:
ee:5d:70:d7:8c:87:fa:01:aa:17:92:94:d3:1c:11:fd:dc:03:
8a:03:c6:73:55:9d:24:03:e7:d6:6b:68:bd:55:19:57:20:26:
fc:0b:7b:9b:04:54:0c:12:9b:17:88:c8:c9:be:df:86:b9:21:
bc:d6:81:b2:c0:c8:9e:73:3e:96:a1:30:7c:48:1c:b2:b3:e8:
66:ca:36:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 15:48:39 2026 by rpki-client