Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.mft
File: hmVxtAaXbJ-viHcwKBnPVQ554p0.mft (raw, json)
Hash identifier: eifjcmC6KZZNPVrQS5TEatFk8LcbQg8WstcHblrF7eA=
Subject key identifier: BB:AA:D9:53:FB:FC:AD:6D:96:91:4A:28:25:20:15:8A:B8:4D:5D:39
Authority key identifier: 86:65:71:B4:06:97:6C:9F:AF:88:77:30:28:19:CF:55:0E:79:E2:9D
Certificate issuer: /CN=866571b406976c9faf8877302819cf550e79e29d
Certificate serial: 01A0FAC68C3AAD3384D8EA7BFDF43DAB6CF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmVxtAaXbJ-viHcwKBnPVQ554p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.mft
Manifest number: 0192
Signing time: Fri 02 Oct 2026 04:01:51 +0000
Manifest this update: Fri 02 Oct 2026 04:01:51 +0000
Manifest next update: Sat 03 Oct 2026 04:01:51 +0000
Files and hashes: 1: PFBKsrtOCbGhBn0cYx9bOrROX78.roa (hash: 7K+faRfy2CkTQM6e5qFvQ/b7USgvSKY/AFQOmLzDB3g=)
2: hmVxtAaXbJ-viHcwKBnPVQ554p0.crl (hash: HEYzlc8OqPw1V6DZWdb3xuXXfaDEpYn2/BpL8ObihHw=)
3: jKNT_AJmqKLUzRsNV17SW2IxOf8.roa (hash: YzX7y6hNOozFt4OF66OKcy+9YHHPACtTPRFr+JGkOjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmVxtAaXbJ-viHcwKBnPVQ554p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 04:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fa:c6:8c:3a:ad:33:84:d8:ea:7b:fd:f4:3d:ab:6c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866571b406976c9faf8877302819cf550e79e29d
Validity
Not Before: Oct 2 04:01:51 2026 GMT
Not After : Oct 3 04:01:51 2026 GMT
Subject: CN=bbaad953fbfcad6d96914a282520158ab84d5d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:75:8b:09:36:40:fc:b1:aa:8d:60:2e:4d:24:
36:c1:e9:b1:83:a5:87:d9:b2:f1:bd:d8:f3:ad:f5:
ba:2d:11:3f:db:61:04:e1:a7:19:bb:9c:8b:ea:ba:
18:e5:1c:f7:3a:d3:74:90:e7:cb:04:c4:3a:40:70:
77:73:d0:06:eb:70:20:61:6d:c7:9a:50:74:74:68:
d9:31:da:2a:b5:da:2a:c9:84:bd:e1:45:fe:1f:ff:
49:64:45:c5:d5:37:aa:9d:15:aa:40:3f:b8:0d:a2:
64:c5:94:a4:2f:13:c5:19:64:a8:92:54:3e:2b:a9:
56:42:26:a2:26:2f:ff:87:69:81:72:fd:e4:de:3e:
ce:ff:70:ad:0f:ee:5a:92:77:0d:e5:26:cc:d5:12:
0f:fa:2e:07:ff:0d:42:ff:4b:25:48:3f:26:d3:31:
da:03:14:52:92:d9:95:cf:d1:90:ab:71:83:61:6b:
34:f8:90:8a:05:b0:95:42:d1:9a:e9:c2:90:82:4f:
34:fc:1c:ad:00:9c:9e:59:98:5d:4b:62:ff:a6:2e:
fc:ca:5d:e9:6b:f3:f7:d9:b6:7b:32:11:6b:f1:bb:
fd:29:d4:a0:ce:73:06:0f:b8:43:be:e9:21:66:4a:
3c:1b:9f:fb:58:38:35:d5:79:97:e0:cf:0e:99:78:
ef:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AA:D9:53:FB:FC:AD:6D:96:91:4A:28:25:20:15:8A:B8:4D:5D:39
X509v3 Authority Key Identifier:
keyid:86:65:71:B4:06:97:6C:9F:AF:88:77:30:28:19:CF:55:0E:79:E2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmVxtAaXbJ-viHcwKBnPVQ554p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f3:08:7c:38:90:61:cf:9d:2a:4f:ea:78:3a:e8:7a:63:2e:
0b:3e:eb:fd:6e:a3:ae:a3:ae:a8:3f:3b:4b:82:48:91:39:a9:
2d:ce:7d:e6:77:ac:c2:6e:b2:bd:e5:b4:c3:36:2d:9a:3f:39:
d5:d4:a4:f7:59:7d:9a:b6:bf:23:d7:20:50:65:98:e2:1f:29:
27:d6:0b:1e:13:2f:89:72:e5:e5:60:eb:d0:23:60:7f:1b:4a:
9a:ea:6c:33:69:1d:9c:64:9a:64:19:4e:15:c5:4d:4a:4e:31:
61:50:8f:59:96:cf:27:10:36:18:c0:83:2a:78:ec:cd:71:b1:
63:17:6f:5b:14:96:7c:e6:c9:a1:39:0d:b5:88:0d:e0:1d:1d:
30:89:a4:6b:76:95:ca:58:8d:d4:59:e9:37:9a:80:a6:e4:a5:
ad:50:87:aa:06:6f:15:2e:8c:ae:17:ba:74:03:94:eb:de:4f:
36:a7:c8:84:1b:ab:4a:98:44:84:0c:6d:81:d1:b5:3e:aa:64:
f1:97:b7:53:f7:68:6f:bb:02:8c:39:17:72:ee:94:11:ef:ae:
68:44:f6:07:a7:b9:69:34:40:54:4e:7f:71:65:12:50:7d:d2:
68:33:4d:b3:1a:9d:8e:1f:aa:01:47:1e:2f:88:c4:bc:58:09:
6f:92:86:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD6xow6rTOE2Op7/fQ9q2zzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NjU3MWI0MDY5NzZjOWZhZjg4NzczMDI4MTljZjU1MGU3
OWUyOWQwHhcNMjYxMDAyMDQwMTUxWhcNMjYxMDAzMDQwMTUxWjAzMTEwLwYDVQQD
EyhiYmFhZDk1M2ZiZmNhZDZkOTY5MTRhMjgyNTIwMTU4YWI4NGQ1ZDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHWLCTZA/LGqjWAuTSQ2wemxg6WH
2bLxvdjzrfW6LRE/22EE4acZu5yL6roY5Rz3OtN0kOfLBMQ6QHB3c9AG63AgYW3H
mlB0dGjZMdoqtdoqyYS94UX+H/9JZEXF1TeqnRWqQD+4DaJkxZSkLxPFGWSoklQ+
K6lWQiaiJi//h2mBcv3k3j7O/3CtD+5akncN5SbM1RIP+i4H/w1C/0slSD8m0zHa
AxRSktmVz9GQq3GDYWs0+JCKBbCVQtGa6cKQgk80/BytAJyeWZhdS2L/pi78yl3p
a/P32bZ7MhFr8bv9KdSgznMGD7hDvukhZko8G5/7WDg11XmX4M8OmXjvIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLuq2VP7/K1tlpFKKCUgFYq4TV05MB8GA1UdIwQY
MBaAFIZlcbQGl2yfr4h3MCgZz1UOeeKdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG1WeHRBYVhiSi12aUhjd0tCblBWUTU1NHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9mZGM3NDEtNWY2Ni00NDZkLWE5NDQt
NWJjOWE2M2NlYWY2LzEvaG1WeHRBYVhiSi12aUhjd0tCblBWUTU1NHAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9mZGM3NDEtNWY2Ni00NDZkLWE5NDQtNWJjOWE2M2NlYWY2
LzEvaG1WeHRBYVhiSi12aUhjd0tCblBWUTU1NHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbPMIfDiQ
Yc+dKk/qeDroemMuCz7r/W6jrqOuqD87S4JIkTmpLc595neswm6yveW0wzYtmj85
1dSk91l9mra/I9cgUGWY4h8pJ9YLHhMviXLl5WDr0CNgfxtKmupsM2kdnGSaZBlO
FcVNSk4xYVCPWZbPJxA2GMCDKnjszXGxYxdvWxSWfObJoTkNtYgN4B0dMImka3aV
yliN1FnpN5qApuSlrVCHqgZvFS6Mrhe6dAOU695PNqfIhBurSphEhAxtgdG1Pqpk
8Ze3U/dob7sCjDkXcu6UEe+uaET2B6e5aTRAVE5/cWUSUH3SaDNNsxqdjh+qAUce
L4jEvFgJb5KG3Q==
-----END CERTIFICATE-----
Generated at Fri Oct 2 15:55:10 2026 by rpki-client