
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
File: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft (raw, json)
Hash identifier: kU4cQWegiVutPGinN+ZoHx4vGEhoafyq6/IGsklmfyI=
Subject key identifier: F1:DD:6E:11:45:28:80:97:57:C2:2A:D9:16:B2:82:A5:B7:E4:05:1D
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 01A0D6B973FCF0B1CDD43FEE15F45724422F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
Manifest number: 14CE
Signing time: Fri 25 Sep 2026 04:01:13 +0000
Manifest this update: Fri 25 Sep 2026 04:01:13 +0000
Manifest next update: Sat 26 Sep 2026 04:01:13 +0000
Files and hashes: 1: 19E50qchIIRYPEcBaHq7sGG5wI0.roa (hash: eE5229153hExm9zLLNjIVvIWU28fOYiSgL3s6vOhycw=)
2: 97SNWyMUYRiDeG9n1N95AncRQnk.roa (hash: nI2lxusT43e2HGHQlJ+OS4ZlLDLuDOW3fSKQ9vYde5w=)
3: 9QcZs2zkek-gn2Ui4swbuoO2vr4.roa (hash: 6q/w90WCRN2heb1yDVdybCSeCfBGkK6uBIDIiKl07Rk=)
4: ARsNkmXZICw7mVOEEqaeLzW0NS8.roa (hash: HGEzOhh+K3s8r+6AsZZdfpNC/GqHLS7ExwsdeMVtoJI=)
5: Bl0qB9IHm1JVOHIHzIJOmcHHLGw.roa (hash: 5Sm32JyDwrhWc3vyfBWLEKgqGMIQn0oSGZgkbi9R4Ng=)
6: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl (hash: dgV8qo2X+eu7pgk2wkjn5z4Sv1iGMZ1b964waL0RLZs=)
7: M4q9DG7_7tEtbxxsWBKXQtxGt7k.roa (hash: l1YoZfcF40wNjjNm0JW8TrQnl6c8teto/VumFdsbKYw=)
8: OdLu_HTcQvIodFBv5wrW_bitNt8.roa (hash: Lh3p2rmlivj/4TCynBLAARFyup/lYvxOvhDJIyFzt24=)
9: Wpllp8x3IPSIu2NKqMIsX4CqA-M.roa (hash: y6yVGF74iM63320M/aisDv7GfSSwpDKSPPaZofgGzow=)
10: ZLh5PnaXaFDa2H68oOQrm4QWzUc.roa (hash: n8EPYXHHmAj3BuzhP+7twXQ5g88qMPOrqw3/TWqaivg=)
11: axcATIOsEbV9qEHFR_BgJI8InRc.roa (hash: nhsbsi/hDL4AYgein99xctG644QzrEf5lgLkARRpWaU=)
12: ek7FuUU5QqZtmW4c2a1Bh_Nvze0.roa (hash: fcj6iTqUPy26aGGnXwajRdM6fbwzNnBSUbT+6zg93yE=)
13: kz59O-9rHRK3If4NGher4WpZjHE.roa (hash: AakaTSLsPxjlp4i8uprsoV1LtGwgVY7VSh5IFGItGZA=)
14: pmvx0wgSZ-e6Csxblz8UNG8GLh4.roa (hash: HlDfShnHsELTO0EoU+/TscI7vJQLc2cGhli7/Qj3Qo0=)
15: r3dW9lAqMZzJ4q1ECWLy0uvljys.roa (hash: Ydp4ZLQaFBxEhvTauDjxFwFAUVvVLiZ8FUXZtyhH9lE=)
16: rHkDmoeEUk_UKkDPiPl2ZLunlP8.roa (hash: N4gR2twlyF+k4BziCYf7gyFcmHQBn89bTMP/4cwgXIQ=)
17: rjyccDgFllWxfeQb355Lp_fLXxk.roa (hash: tQCLpc6R3fwHVeq06ryeCzjgqeU2l9Z+qX3z3qLohNI=)
18: xiXQ7Ju7uKPaOZAIfjnaz5WFcMU.roa (hash: iBuZkqTWmF5qEyHqfDnsRPYzPSipq5gF9EuzoGnhAUE=)
19: zpnZiHFwy0LGsQziGTNhSdlz9Es.roa (hash: xFQHjKoar8tgV6VJF9byW8WcGGZiORzqntKof2KtHCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:73:fc:f0:b1:cd:d4:3f:ee:15:f4:57:24:42:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Sep 25 04:01:13 2026 GMT
Not After : Sep 26 04:01:13 2026 GMT
Subject: CN=f1dd6e114528809757c22ad916b282a5b7e4051d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:99:29:47:cc:84:19:66:e7:aa:d2:60:2a:99:
ca:8e:db:ba:ec:26:fe:ac:36:36:ea:63:31:74:b9:
c2:46:33:bd:f1:fe:27:9a:13:35:5e:e0:a2:73:fa:
45:86:1e:19:17:e2:c1:d6:7b:ac:82:cb:52:b7:df:
4a:e5:9b:10:ab:9e:cb:cb:ef:a6:c2:f3:81:48:45:
c0:16:98:6f:a9:3f:b1:53:4c:1a:9f:02:86:a5:b7:
d6:9e:e8:ee:2a:21:45:ae:db:36:30:b9:72:b1:37:
49:b4:ef:92:e1:3e:82:e8:03:1d:7f:0e:89:7f:64:
12:cb:57:e7:1c:39:8c:d9:58:f6:fd:8a:3f:70:47:
f4:8e:d4:c0:14:53:a1:99:ad:c1:1d:7c:9c:2a:67:
c8:0d:b7:99:b6:6e:8d:bb:7d:39:f4:62:71:03:7c:
a3:90:9c:36:47:f5:37:40:23:9d:8d:a8:51:20:b6:
c6:04:6e:c8:dc:de:3b:ce:e5:03:6b:61:17:b7:d5:
7c:9d:7a:31:ef:6d:da:cf:e4:8a:f3:10:95:ce:a4:
08:a3:91:0d:81:9f:73:eb:ac:17:ef:12:11:71:90:
d2:4a:e0:f3:41:92:86:fa:14:63:6d:8a:42:a7:85:
0a:d8:a9:de:6d:bc:32:8b:63:e3:d7:09:d0:7a:57:
11:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DD:6E:11:45:28:80:97:57:C2:2A:D9:16:B2:82:A5:B7:E4:05:1D
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4c:f9:02:e1:f0:f1:57:42:b1:2b:42:b5:7d:9b:3f:0f:18:
f5:1c:7b:e7:77:cc:57:c8:f6:1b:6d:e0:d9:4f:3b:34:30:2d:
7a:14:ab:a5:ea:03:5c:c8:20:78:68:5b:31:53:95:8f:d4:14:
6f:5c:67:01:a6:f1:97:fc:c8:df:2a:8a:01:ff:b7:95:16:03:
c6:be:65:8e:fd:8c:70:87:92:bb:a2:6f:cf:6e:7a:fd:85:ff:
75:64:30:a0:5c:1b:4b:36:ab:e5:cc:a1:e6:64:5a:c0:90:3a:
74:6c:06:26:fc:a9:37:d6:61:7d:f9:b3:01:38:ab:80:c5:4e:
bf:70:1f:8b:c9:ab:1e:d3:7c:d3:f8:ce:86:6f:85:33:83:09:
ec:57:21:81:0a:89:9f:54:e3:c3:b7:95:b4:2b:44:07:c5:22:
d2:93:6d:ca:04:53:80:d8:7a:7c:ba:40:29:3d:f3:2f:34:69:
04:3d:71:55:22:ee:7d:bd:ac:10:fa:fa:10:f2:d0:47:0e:87:
bf:f6:95:2f:dd:7b:f8:c3:fb:34:a0:dc:15:8f:6f:e2:1a:ae:
60:c5:66:a4:e5:3e:22:26:e1:ba:8c:24:ea:6b:8c:3e:b2:d3:
87:d6:fc:62:59:53:c0:a1:18:c9:2a:d8:1d:4c:1f:a3:8d:7e:
62:07:8b:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWuXP88LHN1D/uFfRXJEIvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk
ZGVlNjkwHhcNMjYwOTI1MDQwMTEzWhcNMjYwOTI2MDQwMTEzWjAzMTEwLwYDVQQD
EyhmMWRkNmUxMTQ1Mjg4MDk3NTdjMjJhZDkxNmIyODJhNWI3ZTQwNTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZkpR8yEGWbnqtJgKpnKjtu67Cb+
rDY26mMxdLnCRjO98f4nmhM1XuCic/pFhh4ZF+LB1nusgstSt99K5ZsQq57Ly++m
wvOBSEXAFphvqT+xU0wanwKGpbfWnujuKiFFrts2MLlysTdJtO+S4T6C6AMdfw6J
f2QSy1fnHDmM2Vj2/Yo/cEf0jtTAFFOhma3BHXycKmfIDbeZtm6Nu3059GJxA3yj
kJw2R/U3QCOdjahRILbGBG7I3N47zuUDa2EXt9V8nXox723az+SK8xCVzqQIo5EN
gZ9z66wX7xIRcZDSSuDzQZKG+hRjbYpCp4UK2Knebbwyi2Pj1wnQelcRUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHdbhFFKICXV8Iq2RaygqW35AUdMB8GA1UdIwQY
MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt
NjkxZmY1YjQ0YjAxLzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx
LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaEz5AuHw
8VdCsStCtX2bPw8Y9Rx753fMV8j2G23g2U87NDAtehSrpeoDXMggeGhbMVOVj9QU
b1xnAabxl/zI3yqKAf+3lRYDxr5ljv2McIeSu6Jvz256/YX/dWQwoFwbSzar5cyh
5mRawJA6dGwGJvypN9ZhffmzATirgMVOv3Afi8mrHtN80/jOhm+FM4MJ7FchgQqJ
n1Tjw7eVtCtEB8Ui0pNtygRTgNh6fLpAKT3zLzRpBD1xVSLufb2sEPr6EPLQRw6H
v/aVL917+MP7NKDcFY9v4hquYMVmpOU+Iibhuowk6muMPrLTh9b8YllTwKEYySrY
HUwfo41+YgeLUw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:29:49 2026 by rpki-client