Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
File: HnsuJD-KqVRZeTK83NmvZWDc5RY.mft (raw, json)
Hash identifier: s9f56aTU7WnuSju3IU94+OctEfQ5vPrvfVZNGSkdX6s=
Subject key identifier: EA:31:EB:07:1D:33:6B:6D:F9:2D:6C:C2:B0:AC:7B:F1:CD:36:AC:9F
Authority key identifier: 1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
Certificate issuer: /CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Certificate serial: 01A0DACDCEE8015B7B1EBFC380CC99B00DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
Manifest number: 0F35
Signing time: Fri 25 Sep 2026 23:01:55 +0000
Manifest this update: Fri 25 Sep 2026 23:01:55 +0000
Manifest next update: Sat 26 Sep 2026 23:01:55 +0000
Files and hashes: 1: 1-z-hX5qlCf8aH8nr2X0zpJdE1hg.roa (hash: 9rLZMVrt7BCmTVumDwvgzgKKJKdaVIZCBXEilPyFZ4c=)
2: HnsuJD-KqVRZeTK83NmvZWDc5RY.crl (hash: LmEbW3RXIa1tGLL+rzDLbZlHLyGbJhRRfKN/1/FCn10=)
3: XI8CVY8sYwhzkz3YLD7pkxjD3Zk.roa (hash: 25+wg4lixvrKpaIcYJueXb9oNmVKiR9L4SbDtXfdAjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:ce:e8:01:5b:7b:1e:bf:c3:80:cc:99:b0:0d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Validity
Not Before: Sep 25 23:01:55 2026 GMT
Not After : Sep 26 23:01:55 2026 GMT
Subject: CN=ea31eb071d336b6df92d6cc2b0ac7bf1cd36ac9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2f:7e:64:fd:c7:92:78:68:7d:45:6e:ed:64:
88:01:42:43:d5:db:aa:45:84:a3:51:33:2a:b6:12:
5d:87:e8:a1:36:a7:b5:58:dc:3d:c6:ac:e3:80:20:
4d:dd:aa:67:39:a9:1b:ae:1c:4a:54:02:aa:05:0d:
49:bd:a1:f0:72:f9:47:b1:00:17:b9:79:42:f7:0c:
8d:4a:a7:08:5b:87:51:96:6b:d9:60:5e:41:ff:0d:
1b:db:57:7e:2c:8a:37:1f:a3:d4:9b:ac:c5:ea:cf:
17:92:e9:54:57:6e:0c:20:11:d0:67:d6:33:ea:96:
07:18:8c:b6:91:21:20:ac:52:0f:4a:0f:28:e8:48:
07:fa:b9:9c:f1:fe:09:46:7d:cd:13:82:13:5d:e4:
67:6a:df:9b:57:70:e7:ad:df:af:09:ce:19:da:b5:
a4:0e:f2:93:03:ae:eb:f1:7e:6b:a6:d5:43:6c:d6:
69:2e:27:b6:7a:b7:81:92:69:51:d9:99:cc:cf:0f:
44:c1:80:7f:71:19:ac:0e:dc:85:44:22:cd:ae:9a:
4e:d0:d4:c3:82:c9:29:7e:7a:a6:b6:3a:cd:b2:16:
e7:3c:f0:ca:bc:4a:90:bf:41:6d:f0:4d:fc:45:df:
28:5c:f8:b6:f7:e2:1b:68:b9:aa:c5:f1:13:8d:50:
2a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:31:EB:07:1D:33:6B:6D:F9:2D:6C:C2:B0:AC:7B:F1:CD:36:AC:9F
X509v3 Authority Key Identifier:
keyid:1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:62:01:06:26:a5:fe:8b:54:1f:d7:af:20:28:af:e4:96:8e:
9c:db:58:54:e6:b5:e6:6f:0c:d9:e9:07:8c:1e:e6:5b:dc:14:
08:52:60:e4:ca:65:7c:02:d5:ed:43:64:ee:29:fd:b3:d2:ef:
b0:20:cf:cb:b8:d8:56:fd:cf:67:20:de:ed:9a:90:43:4c:4b:
db:59:cf:ae:3a:e7:c9:e0:77:4b:e7:30:71:c6:07:39:77:a7:
b2:6f:95:d3:1c:63:dd:10:59:6e:1c:82:a0:fc:7d:be:2c:fb:
32:04:7d:53:31:a3:03:c1:9a:f9:ce:1f:1f:2b:8f:a6:d8:38:
da:91:a1:75:18:52:fb:1c:46:8c:c6:6e:b3:fe:e3:e4:6d:7e:
97:ff:73:03:ff:c6:e1:63:05:cf:03:20:4d:13:35:09:26:6b:
95:d0:e4:4e:02:2b:02:30:0b:b9:a9:63:79:cc:7b:01:f7:50:
a1:f7:81:2a:ee:13:2c:4f:ef:16:84:20:b5:7f:cc:0d:45:af:
ed:b4:42:c8:e4:9a:24:c2:93:d6:92:57:67:b7:5e:d6:17:e1:
e3:d3:11:60:4d:9f:3e:f1:79:9b:fd:85:8e:72:ee:00:4f:bd:
7a:f8:bb:21:42:36:ce:6c:f5:97:bd:f3:8f:87:61:77:c6:ea:
74:df:07:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDazc7oAVt7Hr/DgMyZsA3CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlN2IyZTI0M2Y4YWE5NTQ1OTc5MzJiY2RjZDlhZjY1NjBk
Y2U1MTYwHhcNMjYwOTI1MjMwMTU1WhcNMjYwOTI2MjMwMTU1WjAzMTEwLwYDVQQD
EyhlYTMxZWIwNzFkMzM2YjZkZjkyZDZjYzJiMGFjN2JmMWNkMzZhYzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1y9+ZP3HknhofUVu7WSIAUJD1duq
RYSjUTMqthJdh+ihNqe1WNw9xqzjgCBN3apnOakbrhxKVAKqBQ1JvaHwcvlHsQAX
uXlC9wyNSqcIW4dRlmvZYF5B/w0b21d+LIo3H6PUm6zF6s8XkulUV24MIBHQZ9Yz
6pYHGIy2kSEgrFIPSg8o6EgH+rmc8f4JRn3NE4ITXeRnat+bV3Dnrd+vCc4Z2rWk
DvKTA67r8X5rptVDbNZpLie2ereBkmlR2ZnMzw9EwYB/cRmsDtyFRCLNrppO0NTD
gskpfnqmtjrNshbnPPDKvEqQv0Ft8E38Rd8oXPi29+IbaLmqxfETjVAq5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOox6wcdM2tt+S1swrCse/HNNqyfMB8GA1UdIwQY
MBaAFB57LiQ/iqlUWXkyvNzZr2Vg3OUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG5zdUpELUtxVlJaZVRLODNObXZaV0RjNVJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC80ZGFlZTAtODRlMi00MWU5LTk2NDMt
ZDU0OTU1NjQzY2Q5LzEvSG5zdUpELUtxVlJaZVRLODNObXZaV0RjNVJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC80ZGFlZTAtODRlMi00MWU5LTk2NDMtZDU0OTU1NjQzY2Q5
LzEvSG5zdUpELUtxVlJaZVRLODNObXZaV0RjNVJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGIBBial
/otUH9evICiv5JaOnNtYVOa15m8M2ekHjB7mW9wUCFJg5MplfALV7UNk7in9s9Lv
sCDPy7jYVv3PZyDe7ZqQQ0xL21nPrjrnyeB3S+cwccYHOXensm+V0xxj3RBZbhyC
oPx9viz7MgR9UzGjA8Ga+c4fHyuPptg42pGhdRhS+xxGjMZus/7j5G1+l/9zA//G
4WMFzwMgTRM1CSZrldDkTgIrAjALualjecx7AfdQofeBKu4TLE/vFoQgtX/MDUWv
7bRCyOSaJMKT1pJXZ7de1hfh49MRYE2fPvF5m/2FjnLuAE+9evi7IUI2zmz1l73z
j4dhd8bqdN8HFw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:23:24 2026 by rpki-client