Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.mft
File: heFWexaBgzyUSl8mQKngO-jvC_Q.mft (raw, json)
Hash identifier: GAg70xp7MeWGOfTFaHi10lCvTSCBbIroycdHVJtL4ww=
Subject key identifier: 9C:E9:33:1F:8B:F2:59:6F:AD:F1:4E:03:59:49:B5:C3:97:78:41:CC
Authority key identifier: 85:E1:56:7B:16:81:83:3C:94:4A:5F:26:40:A9:E0:3B:E8:EF:0B:F4
Certificate issuer: /CN=85e1567b1681833c944a5f2640a9e03be8ef0bf4
Certificate serial: 01A107016CAE6D832B1C3498501D9D84FD74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/heFWexaBgzyUSl8mQKngO-jvC_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.mft
Manifest number: 1396
Signing time: Sun 04 Oct 2026 13:01:36 +0000
Manifest this update: Sun 04 Oct 2026 13:01:36 +0000
Manifest next update: Mon 05 Oct 2026 13:01:36 +0000
Files and hashes: 1: Hh7KFktywM-1-107eqrB5yEmn-8.roa (hash: QGn4U4QC+cKt83SkTXHhg4z++P/aykfUDnj2eiXvebY=)
2: heFWexaBgzyUSl8mQKngO-jvC_Q.crl (hash: cAZ//MNWUDRvs3c9EsamxA3Q57WSb80fe/ubfPAuSZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/heFWexaBgzyUSl8mQKngO-jvC_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:01:6c:ae:6d:83:2b:1c:34:98:50:1d:9d:84:fd:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e1567b1681833c944a5f2640a9e03be8ef0bf4
Validity
Not Before: Oct 4 13:01:36 2026 GMT
Not After : Oct 5 13:01:36 2026 GMT
Subject: CN=9ce9331f8bf2596fadf14e035949b5c3977841cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ad:f9:55:1c:3b:1f:c4:07:53:fa:2a:07:74:
49:6c:3a:a5:92:c7:4c:02:20:3b:e0:3f:7a:1b:1d:
1d:54:51:f7:f9:d3:62:5d:d8:5c:59:14:92:f7:a8:
80:bb:e3:56:b0:fa:60:62:fe:34:64:2b:80:9d:5d:
c8:76:67:1b:aa:94:30:62:a7:0d:28:9d:4f:38:93:
8a:b7:e2:83:3f:66:88:43:52:6e:29:68:c3:48:6c:
a9:92:4d:fc:12:69:13:9b:9e:d9:41:04:16:1a:4d:
4c:b9:eb:74:70:bc:5f:e7:66:55:32:2f:03:63:bb:
a0:bf:81:69:0a:2f:93:03:26:59:ca:3b:48:93:31:
3a:f8:e7:8c:9a:4e:2f:fa:02:b6:d6:2b:18:79:01:
78:47:3a:83:d5:ce:a0:3b:44:2d:23:43:a7:a4:31:
98:f5:d8:4e:95:20:f9:88:4e:d3:07:93:eb:ab:ae:
d1:7e:e7:ff:f0:14:c4:0c:3c:ff:be:a5:08:34:e6:
a7:df:42:0e:8e:96:39:f6:0d:9f:48:d1:06:4d:87:
c6:12:65:9f:0a:b6:e2:7c:e0:04:d6:ee:ed:a4:62:
5e:d6:06:a9:76:29:f4:2c:8f:c4:33:5e:3f:d1:68:
9b:2f:e6:cd:c0:13:d5:97:52:ad:0c:90:27:27:e8:
a2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E9:33:1F:8B:F2:59:6F:AD:F1:4E:03:59:49:B5:C3:97:78:41:CC
X509v3 Authority Key Identifier:
keyid:85:E1:56:7B:16:81:83:3C:94:4A:5F:26:40:A9:E0:3B:E8:EF:0B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/heFWexaBgzyUSl8mQKngO-jvC_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/df4945-f532-4a01-a7fa-53a998de63e3/1/heFWexaBgzyUSl8mQKngO-jvC_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:4b:4a:6b:a0:0b:81:17:d1:0d:b2:88:1d:9b:8e:d8:4a:26:
21:2c:d0:35:f7:d8:6a:5c:72:76:d9:a7:38:e0:45:60:71:58:
67:c5:cb:fb:84:94:d4:a8:c7:8c:87:ef:e1:6e:b5:2c:6f:b2:
19:ba:05:02:8c:17:2a:17:08:fc:d6:dd:26:74:aa:9d:6a:68:
af:7c:2a:fc:28:2e:2a:e4:5a:cc:76:40:3a:00:39:79:2b:c5:
72:50:28:bc:4c:c1:2e:7c:d8:72:e8:23:69:01:34:b0:d3:77:
36:2e:26:03:2b:c9:d1:d8:cd:3a:84:2b:a8:0f:ae:b0:1e:9c:
f3:52:b0:70:bc:37:06:06:0d:9a:4c:18:df:4a:da:2c:3e:99:
f9:b3:4f:6c:f5:d8:cf:74:01:b3:ae:1e:9f:69:76:d0:42:56:
66:40:b7:1d:3c:74:53:6c:ce:5c:e5:82:af:65:24:d0:e6:69:
cd:9d:e8:5a:5b:9d:b0:6d:4f:e0:ec:65:e9:45:9f:46:a6:b3:
de:fe:b7:8e:cb:f7:fd:9b:d9:cd:d6:ca:5d:ff:ea:14:83:c7:
93:fc:16:21:07:b2:3e:07:aa:fd:1e:bf:51:5a:88:ff:1f:7d:
d0:7f:10:b0:e2:ae:bf:89:de:0f:a2:60:c8:05:43:31:c8:85:
4c:04:3c:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEHAWyubYMrHDSYUB2dhP10MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZTE1NjdiMTY4MTgzM2M5NDRhNWYyNjQwYTllMDNiZThl
ZjBiZjQwHhcNMjYxMDA0MTMwMTM2WhcNMjYxMDA1MTMwMTM2WjAzMTEwLwYDVQQD
Eyg5Y2U5MzMxZjhiZjI1OTZmYWRmMTRlMDM1OTQ5YjVjMzk3Nzg0MWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa35VRw7H8QHU/oqB3RJbDqlksdM
AiA74D96Gx0dVFH3+dNiXdhcWRSS96iAu+NWsPpgYv40ZCuAnV3IdmcbqpQwYqcN
KJ1POJOKt+KDP2aIQ1JuKWjDSGypkk38EmkTm57ZQQQWGk1Muet0cLxf52ZVMi8D
Y7ugv4FpCi+TAyZZyjtIkzE6+OeMmk4v+gK21isYeQF4RzqD1c6gO0QtI0OnpDGY
9dhOlSD5iE7TB5Prq67Rfuf/8BTEDDz/vqUINOan30IOjpY59g2fSNEGTYfGEmWf
CrbifOAE1u7tpGJe1gapdin0LI/EM14/0WibL+bNwBPVl1KtDJAnJ+ii5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzpMx+L8llvrfFOA1lJtcOXeEHMMB8GA1UdIwQY
MBaAFIXhVnsWgYM8lEpfJkCp4Dvo7wv0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGVGV2V4YUJnenlVU2w4bVFLbmdPLWp2Q19RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9kZjQ5NDUtZjUzMi00YTAxLWE3ZmEt
NTNhOTk4ZGU2M2UzLzEvaGVGV2V4YUJnenlVU2w4bVFLbmdPLWp2Q19RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9kZjQ5NDUtZjUzMi00YTAxLWE3ZmEtNTNhOTk4ZGU2M2Uz
LzEvaGVGV2V4YUJnenlVU2w4bVFLbmdPLWp2Q19RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN0tKa6AL
gRfRDbKIHZuO2EomISzQNffYalxydtmnOOBFYHFYZ8XL+4SU1KjHjIfv4W61LG+y
GboFAowXKhcI/NbdJnSqnWpor3wq/CguKuRazHZAOgA5eSvFclAovEzBLnzYcugj
aQE0sNN3Ni4mAyvJ0djNOoQrqA+usB6c81KwcLw3BgYNmkwY30raLD6Z+bNPbPXY
z3QBs64en2l20EJWZkC3HTx0U2zOXOWCr2Uk0OZpzZ3oWludsG1P4Oxl6UWfRqaz
3v63jsv3/ZvZzdbKXf/qFIPHk/wWIQeyPgeq/R6/UVqI/x990H8QsOKuv4neD6Jg
yAVDMciFTAQ8jg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 23:20:35 2026 by rpki-client