Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
File: hFwjee_tEAVs-GXVLDLh4euowUA.mft (raw, json)
Hash identifier: ub8iIvlavSfvNvcWTMjtW/N5WRw4d5VG9lGSQ5hRYoE=
Subject key identifier: E0:37:DA:20:EF:3D:4B:AD:D2:13:58:88:F2:F0:CF:23:EC:F7:ED:C5
Authority key identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
Certificate issuer: /CN=845c2379efed10056cf865d52c32e1e1eba8c140
Certificate serial: 01A0CB9082673AF73F0D83CAE084751AB5CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
Manifest number: 1AA8
Signing time: Wed 23 Sep 2026 00:00:40 +0000
Manifest this update: Wed 23 Sep 2026 00:00:40 +0000
Manifest next update: Thu 24 Sep 2026 00:00:40 +0000
Files and hashes: 1: 1cB9lohxPvW0aZ8d9tUcZB_hbpA.roa (hash: ZGgmXtZjF6LTHZxN99Ge2atwtWdo2BL+hrKZeJQ6mA4=)
2: RX1r4Qs7sshSi_fFORl-RS8ke2U.roa (hash: 3LSqgK+dEpd1mR7mki06tDkI20cS2e3t1p5igEow5no=)
3: cl4xGAEEhr0atOkS-M875z9YeH4.roa (hash: KmImRnh0KgE+zH9nTs3NJvmrEfwkRWLYqjzje40ykHY=)
4: hFwjee_tEAVs-GXVLDLh4euowUA.crl (hash: w8ZR5yvjpl7+st4J1iIVaEeJapH/1LjG5YULaNwsax4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:82:67:3a:f7:3f:0d:83:ca:e0:84:75:1a:b5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c2379efed10056cf865d52c32e1e1eba8c140
Validity
Not Before: Sep 23 00:00:40 2026 GMT
Not After : Sep 24 00:00:40 2026 GMT
Subject: CN=e037da20ef3d4badd2135888f2f0cf23ecf7edc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c7:3d:2c:94:d0:6e:fc:a6:36:0a:6a:f6:e0:
a6:23:5d:f6:2b:1b:3a:d8:5b:55:ab:8b:24:d2:88:
d6:7b:d0:1c:33:3c:5e:bd:9a:5a:75:e5:ab:05:c8:
8a:b2:21:1f:b1:e2:1a:89:8a:1c:83:16:14:af:dd:
78:26:0f:a6:48:06:e7:96:98:cc:02:4f:46:21:45:
9a:04:2d:fa:ea:67:c4:32:58:62:86:22:fe:a7:2f:
26:4d:af:90:c7:80:aa:cc:47:22:88:a9:73:13:cf:
e8:37:a0:aa:06:6c:d2:38:2e:2b:c0:25:28:a0:6e:
cd:6d:70:2d:aa:92:77:6e:5a:f4:2c:a0:64:6c:00:
40:61:42:63:f6:a1:29:53:b6:8f:f2:78:b4:30:ca:
ef:b3:e2:66:a7:78:41:a4:cf:a7:f3:40:b3:28:10:
49:03:d3:a5:02:df:6e:d5:cd:71:0c:02:89:96:ba:
47:3a:8e:96:71:dd:e9:59:2f:67:2d:23:94:99:be:
bd:76:5a:d9:37:1d:8f:7d:98:73:d0:63:bb:92:d7:
9f:c6:6f:2e:dd:36:d1:5f:a1:7d:6a:94:f0:28:68:
20:2c:04:b2:da:c6:3e:6f:49:3f:50:6f:0b:50:1e:
1d:b5:23:bb:c7:56:bc:9c:9a:98:65:5c:5c:7e:ef:
c0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:37:DA:20:EF:3D:4B:AD:D2:13:58:88:F2:F0:CF:23:EC:F7:ED:C5
X509v3 Authority Key Identifier:
keyid:84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e2:1c:78:ec:58:61:db:08:62:36:ea:54:21:a1:f0:f0:7a:
d1:b7:89:92:39:f0:f4:f7:a2:3c:e5:bd:0f:7c:7f:3b:2b:e6:
3f:4e:1e:ff:0a:2e:ad:6f:ab:67:01:a5:24:83:65:4e:a8:c0:
a4:f0:75:34:1b:9d:d5:6d:f8:08:4c:cb:8c:f5:43:0d:d9:24:
b9:e3:2b:5a:cb:a6:0b:dd:cc:03:b5:e1:d3:ab:49:6e:84:27:
3a:5b:32:fa:cf:05:3d:71:35:1e:20:fb:65:cc:62:ba:43:6b:
b8:96:c9:2f:7f:c0:c3:68:6d:ac:23:6d:6b:20:74:5e:23:35:
f5:b9:91:08:3d:86:65:a2:3e:8a:a3:d0:cb:84:32:cc:a7:46:
75:2f:95:8c:36:9d:98:f5:21:f5:38:39:f5:c6:41:03:5a:7c:
0e:19:05:f3:cf:67:af:fc:04:b0:c8:dd:94:fa:1d:1d:73:b5:
71:42:70:64:69:e3:89:45:56:cc:60:ce:4b:f2:51:33:47:e3:
24:c1:11:3f:0d:96:b0:f7:6d:d4:78:b9:18:4a:45:3d:1f:0f:
c1:a1:3e:10:6c:9b:d4:9c:47:63:73:1c:fe:08:d7:fc:b9:eb:
fc:f6:03:e1:ae:2d:56:7b:4a:6b:46:1f:93:5b:db:b8:cb:dd:
16:65:22:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLkIJnOvc/DYPK4IR1GrXKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NWMyMzc5ZWZlZDEwMDU2Y2Y4NjVkNTJjMzJlMWUxZWJh
OGMxNDAwHhcNMjYwOTIzMDAwMDQwWhcNMjYwOTI0MDAwMDQwWjAzMTEwLwYDVQQD
EyhlMDM3ZGEyMGVmM2Q0YmFkZDIxMzU4ODhmMmYwY2YyM2VjZjdlZGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMc9LJTQbvymNgpq9uCmI132Kxs6
2FtVq4sk0ojWe9AcMzxevZpadeWrBciKsiEfseIaiYocgxYUr914Jg+mSAbnlpjM
Ak9GIUWaBC366mfEMlhihiL+py8mTa+Qx4CqzEciiKlzE8/oN6CqBmzSOC4rwCUo
oG7NbXAtqpJ3blr0LKBkbABAYUJj9qEpU7aP8ni0MMrvs+Jmp3hBpM+n80CzKBBJ
A9OlAt9u1c1xDAKJlrpHOo6Wcd3pWS9nLSOUmb69dlrZNx2PfZhz0GO7ktefxm8u
3TbRX6F9apTwKGggLASy2sY+b0k/UG8LUB4dtSO7x1a8nJqYZVxcfu/AdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOA32iDvPUut0hNYiPLwzyPs9+3FMB8GA1UdIwQY
MBaAFIRcI3nv7RAFbPhl1Swy4eHrqMFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEZ3amVlX3RFQVZzLUdYVkxETGg0ZXVvd1VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS82MGU4ZmEtZWM1Yy00NTk0LTllYzQt
YmU3YTFhMDAxY2NmLzEvaEZ3amVlX3RFQVZzLUdYVkxETGg0ZXVvd1VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS82MGU4ZmEtZWM1Yy00NTk0LTllYzQtYmU3YTFhMDAxY2Nm
LzEvaEZ3amVlX3RFQVZzLUdYVkxETGg0ZXVvd1VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPuIceOxY
YdsIYjbqVCGh8PB60beJkjnw9PeiPOW9D3x/OyvmP04e/wourW+rZwGlJINlTqjA
pPB1NBud1W34CEzLjPVDDdkkueMrWsumC93MA7Xh06tJboQnOlsy+s8FPXE1HiD7
ZcxiukNruJbJL3/Aw2htrCNtayB0XiM19bmRCD2GZaI+iqPQy4QyzKdGdS+VjDad
mPUh9Tg59cZBA1p8DhkF889nr/wEsMjdlPodHXO1cUJwZGnjiUVWzGDOS/JRM0fj
JMERPw2WsPdt1Hi5GEpFPR8PwaE+EGyb1JxHY3Mc/gjX/Lnr/PYD4a4tVntKa0Yf
k1vbuMvdFmUieA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 08:09:20 2026 by rpki-client