Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
File: hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft (raw, json)
Hash identifier: JRj/l3F1RLU23bNSeGjd1XV0ldAnaijjqviKSYyPdGU=
Subject key identifier: D4:A9:E6:8B:15:5C:89:10:60:1E:22:E7:3C:BF:22:83:E8:6F:8F:8D
Authority key identifier: 85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A
Certificate issuer: /CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a
Certificate serial: 01A0F343E8A9CA7AD0CEC60CD2EBFE6026F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
Manifest number: 0D0E
Signing time: Wed 30 Sep 2026 17:01:49 +0000
Manifest this update: Wed 30 Sep 2026 17:01:49 +0000
Manifest next update: Thu 01 Oct 2026 17:01:49 +0000
Files and hashes: 1: U967gx6zU2ewhEleCWFHT_7A_9o.roa (hash: rEcp4qFupVQgVYmsA8hG1Q/G6+z2CIRB0Mx5vxsYxf0=)
2: h-KmrUFQix2mPVIgPxijrxKClGw.roa (hash: fc8hHRpimWi4M001kIYlHNuSFZw5gckGt8QS97+VBbM=)
3: hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl (hash: umRTM/1ZMs9xNeJC2pPLLfMKG579aKu72/GIUaQbSTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 17:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:43:e8:a9:ca:7a:d0:ce:c6:0c:d2:eb:fe:60:26:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a
Validity
Not Before: Sep 30 17:01:49 2026 GMT
Not After : Oct 1 17:01:49 2026 GMT
Subject: CN=d4a9e68b155c8910601e22e73cbf2283e86f8f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:39:4e:05:60:a7:5c:8c:bf:b9:20:de:87:33:
16:5b:42:00:6d:87:78:84:a1:49:40:80:c2:af:bf:
0f:5d:a8:9a:51:5b:a5:ba:a0:d0:65:b8:b7:d6:ce:
41:49:e6:fe:5d:7f:61:20:d7:8f:44:72:48:47:d9:
00:f0:cb:d9:0e:7e:51:09:25:b5:af:c0:f6:40:1a:
c2:67:79:e4:5e:0f:35:3e:88:f3:17:78:4f:dc:8a:
bc:30:2b:6c:57:5b:69:33:7e:5b:16:61:9a:5e:50:
6e:e5:ac:7d:3c:ff:18:25:a1:39:e1:74:28:ae:8d:
79:98:8d:cb:f7:bb:df:83:f3:87:ef:02:b6:f4:ad:
8c:62:ed:da:b3:ab:10:4d:09:66:c6:f9:c1:cd:32:
04:8c:70:08:83:1f:4f:00:64:ba:b2:8a:e4:b7:56:
68:bd:38:3d:55:d6:4b:02:1b:19:fd:fc:db:c9:74:
c6:31:d1:39:eb:7d:c4:5e:a2:d4:9a:c1:be:0a:08:
24:9a:88:e6:e4:02:01:c0:c8:0b:cc:34:cd:92:9c:
39:00:c0:6d:46:72:6c:e5:03:9e:ec:2f:d2:5d:8e:
a2:ed:ca:63:5a:60:88:8c:37:04:27:01:4c:cc:84:
e2:f0:15:aa:05:25:44:0a:88:30:59:74:30:ac:ef:
f5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A9:E6:8B:15:5C:89:10:60:1E:22:E7:3C:BF:22:83:E8:6F:8F:8D
X509v3 Authority Key Identifier:
keyid:85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:40:70:9d:8d:ea:1f:49:9b:7a:06:62:11:7f:5c:e8:56:62:
13:c9:61:4e:ae:77:a6:3d:64:f9:b1:ce:ad:81:5e:18:fe:0c:
64:10:04:89:e8:b3:89:17:2f:9a:5a:a8:03:07:e9:0a:1f:1c:
cf:c5:6f:cd:64:a7:7f:a2:f8:dc:37:e4:3b:50:e4:df:d7:a1:
cf:39:61:5b:13:eb:47:55:05:a6:3b:9a:b2:65:c0:79:7d:d9:
89:64:64:f1:85:99:36:7e:b3:b3:a7:cb:65:f7:f6:22:9d:7a:
cf:0e:96:f9:09:db:a9:43:56:ff:4c:fc:21:43:cc:84:7b:99:
04:96:59:f5:5d:d0:a4:03:46:8c:f2:65:f8:b7:f1:9a:e0:7e:
18:39:63:57:e1:20:ff:f3:ad:b5:10:1b:a4:6a:b1:e4:87:8f:
3b:82:bd:8f:aa:43:9e:7e:12:d3:3f:6e:16:c4:97:eb:66:12:
2a:ac:1a:be:4a:cd:15:32:0f:b2:ef:5f:2f:b2:15:95:d2:5a:
b0:4d:4f:41:5f:5b:c0:dc:33:f0:d6:63:5d:b4:0a:88:27:b5:
01:59:7f:78:6e:d1:8a:19:0d:27:d2:d7:0a:01:fe:70:b2:91:
cf:3f:26:b2:36:40:05:32:de:af:44:83:86:44:ea:c0:6c:21:
ba:cb:f6:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDzQ+ipynrQzsYM0uv+YCbwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZmI4NWFkZDA5ZjQ4NzZlYTZhYWE4OGQ0ZDg4YzgxY2Ni
NmIxMGEwHhcNMjYwOTMwMTcwMTQ5WhcNMjYxMDAxMTcwMTQ5WjAzMTEwLwYDVQQD
EyhkNGE5ZTY4YjE1NWM4OTEwNjAxZTIyZTczY2JmMjI4M2U4NmY4ZjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzlOBWCnXIy/uSDehzMWW0IAbYd4
hKFJQIDCr78PXaiaUVuluqDQZbi31s5BSeb+XX9hINePRHJIR9kA8MvZDn5RCSW1
r8D2QBrCZ3nkXg81PojzF3hP3Iq8MCtsV1tpM35bFmGaXlBu5ax9PP8YJaE54XQo
ro15mI3L97vfg/OH7wK29K2MYu3as6sQTQlmxvnBzTIEjHAIgx9PAGS6sorkt1Zo
vTg9VdZLAhsZ/fzbyXTGMdE5633EXqLUmsG+Cggkmojm5AIBwMgLzDTNkpw5AMBt
RnJs5QOe7C/SXY6i7cpjWmCIjDcEJwFMzITi8BWqBSVECogwWXQwrO/1kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSp5osVXIkQYB4i5zy/IoPob4+NMB8GA1UdIwQY
MBaAFIX7ha3Qn0h26mqqiNTYjIHMtrEKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGZ1RnJkQ2ZTSGJxYXFxSTFOaU1nY3kyc1FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9jZWVhOTEtMGEyYS00YTRlLTkxN2It
YzYxNjFjZTM5NWFmLzEvaGZ1RnJkQ2ZTSGJxYXFxSTFOaU1nY3kyc1FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9jZWVhOTEtMGEyYS00YTRlLTkxN2ItYzYxNjFjZTM5NWFm
LzEvaGZ1RnJkQ2ZTSGJxYXFxSTFOaU1nY3kyc1FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfkBwnY3q
H0mbegZiEX9c6FZiE8lhTq53pj1k+bHOrYFeGP4MZBAEieiziRcvmlqoAwfpCh8c
z8VvzWSnf6L43DfkO1Dk39ehzzlhWxPrR1UFpjuasmXAeX3ZiWRk8YWZNn6zs6fL
Zff2Ip16zw6W+QnbqUNW/0z8IUPMhHuZBJZZ9V3QpANGjPJl+LfxmuB+GDljV+Eg
//OttRAbpGqx5IePO4K9j6pDnn4S0z9uFsSX62YSKqwavkrNFTIPsu9fL7IVldJa
sE1PQV9bwNwz8NZjXbQKiCe1AVl/eG7RihkNJ9LXCgH+cLKRzz8msjZABTLer0SD
hkTqwGwhusv2Eg==
-----END CERTIFICATE-----
Generated at Thu Oct 1 09:13:46 2026 by rpki-client