Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
File: h9mQExRnt30RFit5--OwbKirLTk.mft (raw, json)
Hash identifier: bOAACuPBwa0h+tMgzFY1yEOFYDYm5lU7xkHj4ghZjiI=
Subject key identifier: 35:14:9F:41:F7:97:7F:EE:5D:38:BE:96:BA:29:16:97:3B:BD:6C:69
Authority key identifier: 87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
Certificate issuer: /CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Certificate serial: 01A0DC8470634C74BF86DA5D700E9E0D9FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
Manifest number: 1A86
Signing time: Sat 26 Sep 2026 07:01:01 +0000
Manifest this update: Sat 26 Sep 2026 07:01:01 +0000
Manifest next update: Sun 27 Sep 2026 07:01:01 +0000
Files and hashes: 1: 4L2HrkOMp5Px3ZdgqOBGMnz6oXw.roa (hash: qjbkKzm11wnXRFJIt4quryujdmBS5m5m8Id3/w9vHFw=)
2: 78tSQmB_UZC_rIGDHLnxnqOm3fI.roa (hash: 3kNkwMTWy/XYCkJODFF1IVosQpGtDfhW2/dwVf0UwBQ=)
3: JIk4GJqmgSwzYSk0JGPNI21QRnM.roa (hash: 45ZLZSPO108JAO0yb1j8MEBiHT4QdE4zU9XBhQbVqtg=)
4: PY323kbvCRFsNrwGFI26gXv0gpE.roa (hash: U0ksXLpw7uH4vwqe/cNwV58+FVim6JoHjXiFGt1giNE=)
5: h9mQExRnt30RFit5--OwbKirLTk.crl (hash: 7W1RvCAs3HDooP9MGx/ceyAUIsUROppVlVejEeOq/jo=)
6: oLb_BG6B2irYYvpJ_Dg1uPHKCq8.roa (hash: iEVASa2ks9RBbT4CSfXOVtY8JacDD8nYL36EtVLSvLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:84:70:63:4c:74:bf:86:da:5d:70:0e:9e:0d:9f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Validity
Not Before: Sep 26 07:01:01 2026 GMT
Not After : Sep 27 07:01:01 2026 GMT
Subject: CN=35149f41f7977fee5d38be96ba2916973bbd6c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:80:34:16:4d:7d:d0:14:e3:5f:b7:8f:9d:bc:
c5:10:43:85:37:8a:76:24:1f:94:96:c2:b8:cb:f0:
0d:7e:47:fe:a8:e3:fa:1c:c6:4d:3b:c8:93:c6:09:
d6:57:6d:9e:4b:7d:98:7c:d0:4d:0e:79:06:03:6e:
0c:e1:a1:68:b8:65:92:fd:b4:be:fb:0b:a2:48:70:
62:99:6f:0f:c7:4a:05:fe:ea:d4:f6:0c:11:ed:ba:
58:13:cc:f0:fe:fb:1b:97:d2:7d:c7:a4:11:33:1f:
89:3c:4b:df:3e:3e:c8:81:5c:4c:bb:18:8f:60:50:
55:20:0c:72:20:9d:db:ff:9f:c4:6d:78:8a:5d:79:
ec:7b:b6:8f:32:51:04:e5:f0:ce:e6:13:da:b7:9e:
a4:12:40:53:18:2a:0e:c9:f9:59:69:20:46:60:17:
88:d0:da:86:ef:ed:13:34:0c:a8:88:57:98:87:c6:
cd:65:61:6f:26:6b:87:c2:8c:53:7e:8a:f3:ea:f3:
c5:01:21:2f:a9:93:c7:93:9d:fd:94:21:99:e6:df:
01:83:94:37:37:95:55:c4:8e:ca:5b:7e:f8:5a:4b:
e5:df:ba:e1:0d:e4:f2:0b:f3:55:a8:38:72:66:a2:
80:b2:41:95:3b:b8:ee:53:e0:c1:6d:78:f6:35:5d:
e5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:14:9F:41:F7:97:7F:EE:5D:38:BE:96:BA:29:16:97:3B:BD:6C:69
X509v3 Authority Key Identifier:
keyid:87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:95:16:1e:14:58:5d:11:06:ef:0e:76:4a:26:0d:fe:b6:47:
8d:c2:4d:a8:66:d5:24:98:63:45:8b:82:21:53:f5:2e:62:c5:
32:5c:9e:e9:dc:6b:c7:3a:e9:b2:e8:42:4c:6f:99:aa:4f:85:
12:bd:c1:7f:3c:29:0d:11:0f:87:71:3f:c5:5b:77:7f:3e:83:
6e:2f:7e:a3:a0:7c:7c:09:22:cd:2a:1b:e7:b0:76:46:b9:79:
e0:a1:76:5c:df:ee:6a:4b:78:71:3f:2b:2c:07:0a:df:f6:83:
da:2a:7a:21:3a:b4:2f:55:95:a2:87:dd:e2:72:8e:62:f0:f5:
e4:ba:5e:a3:35:ff:ef:57:5c:3a:c3:b6:b6:10:24:7c:af:ed:
97:5c:20:4c:ea:c2:7f:a1:59:84:5a:a9:ea:b2:da:a0:e0:f6:
b3:cf:64:64:22:ea:80:eb:d8:78:b0:b5:7c:09:91:e1:bb:20:
c2:6b:60:3b:85:48:01:6a:45:0e:02:e5:d8:bf:75:56:47:d7:
33:84:56:c5:d8:f4:53:4b:20:8c:4f:d6:e2:de:b7:47:42:8e:
85:a8:1d:71:77:c7:97:4a:87:ae:54:5e:ab:33:d1:c7:61:86:
4a:17:44:7a:0e:de:e0:ba:87:6f:fb:2b:eb:a3:83:d2:b2:c3:
de:77:ab:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDchHBjTHS/htpdcA6eDZ/4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZDk5MDEzMTQ2N2I3N2QxMTE2MmI3OWZiZTNiMDZjYThh
YjJkMzkwHhcNMjYwOTI2MDcwMTAxWhcNMjYwOTI3MDcwMTAxWjAzMTEwLwYDVQQD
EygzNTE0OWY0MWY3OTc3ZmVlNWQzOGJlOTZiYTI5MTY5NzNiYmQ2YzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oA0Fk190BTjX7ePnbzFEEOFN4p2
JB+UlsK4y/ANfkf+qOP6HMZNO8iTxgnWV22eS32YfNBNDnkGA24M4aFouGWS/bS+
+wuiSHBimW8Px0oF/urU9gwR7bpYE8zw/vsbl9J9x6QRMx+JPEvfPj7IgVxMuxiP
YFBVIAxyIJ3b/5/EbXiKXXnse7aPMlEE5fDO5hPat56kEkBTGCoOyflZaSBGYBeI
0NqG7+0TNAyoiFeYh8bNZWFvJmuHwoxTforz6vPFASEvqZPHk539lCGZ5t8Bg5Q3
N5VVxI7KW374Wkvl37rhDeTyC/NVqDhyZqKAskGVO7juU+DBbXj2NV3lRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUUn0H3l3/uXTi+lropFpc7vWxpMB8GA1UdIwQY
MBaAFIfZkBMUZ7d9ERYrefvjsGyoqy05MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDltUUV4Um50MzBSRml0NS0tT3diS2lyTFRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni81ZGVhOTctN2VmNy00ZGIwLTk0YmMt
YjhlOGIzNGRiMjkwLzEvaDltUUV4Um50MzBSRml0NS0tT3diS2lyTFRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni81ZGVhOTctN2VmNy00ZGIwLTk0YmMtYjhlOGIzNGRiMjkw
LzEvaDltUUV4Um50MzBSRml0NS0tT3diS2lyTFRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5UWHhRY
XREG7w52SiYN/rZHjcJNqGbVJJhjRYuCIVP1LmLFMlye6dxrxzrpsuhCTG+Zqk+F
Er3BfzwpDREPh3E/xVt3fz6Dbi9+o6B8fAkizSob57B2Rrl54KF2XN/uakt4cT8r
LAcK3/aD2ip6ITq0L1WVoofd4nKOYvD15LpeozX/71dcOsO2thAkfK/tl1wgTOrC
f6FZhFqp6rLaoOD2s89kZCLqgOvYeLC1fAmR4bsgwmtgO4VIAWpFDgLl2L91VkfX
M4RWxdj0U0sgjE/W4t63R0KOhagdcXfHl0qHrlReqzPRx2GGShdEeg7e4LqHb/sr
66OD0rLD3nerbw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 12:12:24 2026 by rpki-client