Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
File: Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft (raw, json)
Hash identifier: pORSJmJm1KrNUHDdLfjX4P++qJNuIkkXIXgXYprBSZk=
Subject key identifier: D1:44:09:A5:B7:E4:25:B5:B0:58:9F:1B:BF:3C:8F:40:D5:26:1B:7D
Authority key identifier: 1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B
Certificate issuer: /CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b
Certificate serial: 01A135FE882BAE03E064E316811D866A6908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
Manifest number: 09EF
Signing time: Tue 13 Oct 2026 16:00:35 +0000
Manifest this update: Tue 13 Oct 2026 16:00:35 +0000
Manifest next update: Wed 14 Oct 2026 16:00:35 +0000
Files and hashes: 1: Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl (hash: BCatqcq4K8ulH6vfUdiEJh0bk3SAapvlDyv3SJSeZzA=)
2: lx2J9WOsX2M54t8-J-Ipl4_XUM4.roa (hash: jlAohhibW/lQaiHQMqOapsCsgW9kpTO6lOTRSlTXr4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 16:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:fe:88:2b:ae:03:e0:64:e3:16:81:1d:86:6a:69:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b
Validity
Not Before: Oct 13 16:00:35 2026 GMT
Not After : Oct 14 16:00:35 2026 GMT
Subject: CN=d14409a5b7e425b5b0589f1bbf3c8f40d5261b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4b:b9:eb:fc:6c:af:69:52:29:fd:80:52:73:
a7:87:f4:fe:fe:ea:76:fe:8e:5c:ec:2c:4b:f0:4c:
a2:d8:39:d9:98:cb:ce:e3:17:6d:60:44:bd:b0:66:
5b:b6:a5:f8:29:cc:dd:a9:64:bd:20:11:5f:94:a9:
ba:e8:d7:49:c3:d2:fd:de:ba:22:3a:cc:82:2f:59:
2e:ca:70:8a:3e:1b:88:ce:40:c7:f1:13:20:73:53:
1b:56:e4:cf:f0:3f:9d:6b:d7:45:3b:9e:5b:05:ca:
91:57:53:28:80:c3:1e:e4:f6:56:be:21:56:16:23:
29:5c:ba:3a:03:28:3a:db:07:ee:30:33:35:8b:ea:
2e:8a:a7:02:f0:d4:51:5e:ab:19:ac:fd:61:ed:02:
b4:8e:80:39:f6:19:37:7d:49:15:52:45:9c:c2:ae:
53:e8:29:6d:2b:b3:d8:0f:46:30:e2:b9:42:ff:e0:
4a:db:a1:86:df:31:6b:ac:a7:19:3d:89:70:7a:79:
4a:a2:cc:d1:ae:9f:a7:1e:c7:da:f9:f3:1c:e5:4d:
3e:a1:4f:7a:e2:ba:e3:b7:e8:76:ec:7b:f4:4c:fe:
c5:5a:90:4c:01:7a:1d:e0:4f:9c:22:ac:80:9e:4e:
31:e0:5b:bd:42:68:1b:0e:54:13:c2:9b:3a:8a:bd:
c5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:44:09:A5:B7:E4:25:B5:B0:58:9F:1B:BF:3C:8F:40:D5:26:1B:7D
X509v3 Authority Key Identifier:
keyid:1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:25:e7:91:9c:32:6e:e1:34:ce:bc:ef:fa:e2:02:68:63:25:
05:70:00:60:da:63:5e:25:ab:dd:e8:30:bb:de:4d:b0:0d:b8:
26:2e:fb:4e:0f:b3:28:33:f6:95:cb:d1:a5:63:5a:23:7f:87:
47:15:1f:43:fa:55:00:dd:b2:14:81:d9:b1:32:63:23:b7:67:
62:21:df:e5:bf:d8:b2:af:f8:da:69:6a:4a:38:62:0c:72:a4:
9d:cb:bb:83:48:6c:80:81:67:dd:af:dd:20:2d:2f:f6:27:ed:
ad:e3:fb:21:c4:47:d4:c0:95:26:de:58:65:db:d6:f6:bd:99:
54:ec:e4:e9:a0:6b:19:f0:7e:16:87:54:c8:da:d2:86:2e:18:
66:22:42:4e:a1:6c:51:25:13:75:96:10:34:36:aa:93:24:5f:
db:38:51:b0:56:5b:89:c1:b8:0c:2a:0a:53:42:09:42:c6:89:
e7:65:6c:54:60:93:1d:96:22:eb:04:52:95:a8:c8:93:29:8c:
c7:03:3f:9c:32:46:82:46:7b:18:d2:8e:91:1e:4c:b4:42:2a:
d4:78:bb:a1:f2:aa:f2:b6:a7:a0:2e:27:42:90:ed:79:ce:ca:
10:b4:4e:17:ac:6c:b6:d6:ef:53:38:bc:61:3c:1f:04:bd:09:
16:16:cd:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE1/ogrrgPgZOMWgR2GamkIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZWIzZmFhODM4ODU0OWI1NWNiM2YzYWJkNGM2YzE1MTA2
Y2Y1M2IwHhcNMjYxMDEzMTYwMDM1WhcNMjYxMDE0MTYwMDM1WjAzMTEwLwYDVQQD
EyhkMTQ0MDlhNWI3ZTQyNWI1YjA1ODlmMWJiZjNjOGY0MGQ1MjYxYjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ku56/xsr2lSKf2AUnOnh/T+/up2
/o5c7CxL8Eyi2DnZmMvO4xdtYES9sGZbtqX4KczdqWS9IBFflKm66NdJw9L93roi
OsyCL1kuynCKPhuIzkDH8RMgc1MbVuTP8D+da9dFO55bBcqRV1MogMMe5PZWviFW
FiMpXLo6Ayg62wfuMDM1i+ouiqcC8NRRXqsZrP1h7QK0joA59hk3fUkVUkWcwq5T
6CltK7PYD0Yw4rlC/+BK26GG3zFrrKcZPYlwenlKoszRrp+nHsfa+fMc5U0+oU96
4rrjt+h27Hv0TP7FWpBMAXod4E+cIqyAnk4x4Fu9QmgbDlQTwps6ir3FowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFECaW35CW1sFifG788j0DVJht9MB8GA1UdIwQY
MBaAFB3rP6qDiFSbVcs/Or1MbBUQbPU7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGVzX3FvT0lWSnRWeXo4NnZVeHNGUkJzOVRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82YzQxMzEtMzY1Yy00YzE0LTllMGIt
NTAyYTk1N2ZkYWY4LzEvSGVzX3FvT0lWSnRWeXo4NnZVeHNGUkJzOVRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS82YzQxMzEtMzY1Yy00YzE0LTllMGItNTAyYTk1N2ZkYWY4
LzEvSGVzX3FvT0lWSnRWeXo4NnZVeHNGUkJzOVRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyXnkZwy
buE0zrzv+uICaGMlBXAAYNpjXiWr3egwu95NsA24Ji77Tg+zKDP2lcvRpWNaI3+H
RxUfQ/pVAN2yFIHZsTJjI7dnYiHf5b/Ysq/42mlqSjhiDHKkncu7g0hsgIFn3a/d
IC0v9iftreP7IcRH1MCVJt5YZdvW9r2ZVOzk6aBrGfB+FodUyNrShi4YZiJCTqFs
USUTdZYQNDaqkyRf2zhRsFZbicG4DCoKU0IJQsaJ52VsVGCTHZYi6wRSlajIkymM
xwM/nDJGgkZ7GNKOkR5MtEIq1Hi7ofKq8ranoC4nQpDtec7KELROF6xsttbvUzi8
YTwfBL0JFhbNLA==
-----END CERTIFICATE-----
Generated at Wed Oct 14 04:09:33 2026 by rpki-client