Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
File: hNHcYT105sMty5gUzhJr1htSqqc.mft (raw, json)
Hash identifier: hY23mizicfOenMF8D1H5unErroKExrlGQsfe2bXP/6o=
Subject key identifier: F5:10:35:A8:9D:69:83:57:67:C7:E3:AD:39:8A:BB:91:3E:B4:9F:74
Authority key identifier: 84:D1:DC:61:3D:74:E6:C3:2D:CB:98:14:CE:12:6B:D6:1B:52:AA:A7
Certificate issuer: /CN=84d1dc613d74e6c32dcb9814ce126bd61b52aaa7
Certificate serial: 01A0EB52F90363888026C5896E905392B547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
Manifest number: 1A7C
Signing time: Tue 29 Sep 2026 04:01:18 +0000
Manifest this update: Tue 29 Sep 2026 04:01:18 +0000
Manifest next update: Wed 30 Sep 2026 04:01:18 +0000
Files and hashes: 1: H6AvCEiySRywPqnoqPga4bVAQxg.roa (hash: nQJRt0EmcoJ2XDzeO3DLhVTm+C2u2iMFsb1catI5sW4=)
2: hNHcYT105sMty5gUzhJr1htSqqc.crl (hash: b9wA1/6LUNEDRh9JlpeBcN+0JTevuYtmvI9P5bmtWys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:52:f9:03:63:88:80:26:c5:89:6e:90:53:92:b5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d1dc613d74e6c32dcb9814ce126bd61b52aaa7
Validity
Not Before: Sep 29 04:01:18 2026 GMT
Not After : Sep 30 04:01:18 2026 GMT
Subject: CN=f51035a89d69835767c7e3ad398abb913eb49f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:50:81:52:26:df:be:85:18:40:aa:bd:a0:b1:
ab:67:48:d8:b3:f8:43:b2:fd:1a:b9:f5:60:3f:6b:
1e:86:44:6e:f3:19:e0:43:ad:c0:bd:0c:11:69:56:
f0:03:32:ae:f8:ed:25:37:01:4d:84:71:35:df:75:
a5:80:fe:3d:7d:18:0f:02:e5:3a:5c:ed:6e:b7:1d:
25:6d:81:99:73:2a:df:f2:a7:f8:32:46:36:ae:22:
a8:14:db:bb:12:37:17:4d:69:ca:0d:70:8e:d3:05:
67:b9:b4:24:5d:ca:be:b6:22:31:35:9f:07:4d:2a:
dc:3e:e9:7a:82:e5:6c:36:ed:d5:fd:44:6a:a8:11:
92:80:d4:6c:2e:81:65:9e:67:40:dc:3b:4d:3a:c5:
66:a1:ec:29:61:cd:54:a9:62:85:b0:91:c7:f3:c6:
02:5a:e4:99:dd:5a:40:15:e2:33:c0:62:1a:8d:6f:
bc:4d:8f:09:4f:f3:f3:3a:24:c2:29:ef:c1:7c:98:
ea:bc:c9:24:a6:e0:0d:1b:9b:91:18:b3:67:44:5d:
76:af:3f:51:a6:e0:ac:94:3e:19:e8:4e:51:9d:90:
dd:f2:26:7e:9b:b6:85:07:82:d3:b0:09:e2:9f:67:
5e:88:3a:e9:91:de:5b:fe:64:7c:c0:07:ce:4f:79:
09:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:10:35:A8:9D:69:83:57:67:C7:E3:AD:39:8A:BB:91:3E:B4:9F:74
X509v3 Authority Key Identifier:
keyid:84:D1:DC:61:3D:74:E6:C3:2D:CB:98:14:CE:12:6B:D6:1B:52:AA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:1c:27:ca:27:f2:88:ca:67:5d:3d:70:11:3c:42:0d:1e:48:
9c:85:07:5a:48:32:ad:45:7b:d5:55:50:42:13:ce:2f:95:a9:
7a:6e:66:5c:cc:c5:b9:5a:70:cb:c3:58:14:55:f4:1f:a8:7a:
66:28:76:f4:cf:9f:ca:d6:3c:91:97:09:90:06:e9:f4:65:2c:
b8:07:fc:b7:c8:32:08:60:e8:e1:52:66:16:ec:27:92:d7:04:
65:99:76:6e:3f:15:2f:ec:87:dd:c6:59:fa:16:1b:a3:10:69:
69:3a:00:b2:d4:c7:1d:9c:15:10:37:3d:69:16:ab:73:c4:ab:
1c:7d:08:db:1e:64:78:c1:53:0f:a2:8f:1f:c4:37:ab:49:4f:
1b:21:ae:7d:b3:6c:66:90:f0:c0:63:d8:61:1f:0e:c2:c7:d5:
8e:3a:91:e6:5c:ff:89:b1:d9:3f:bb:16:e0:25:75:d2:1a:dd:
f3:d4:67:0c:e4:c0:80:a5:73:2b:4f:3b:b6:d5:85:52:0b:51:
80:70:2d:b5:00:d2:93:eb:5e:b4:10:7e:6d:47:df:ef:92:4d:
eb:9c:ac:84:79:f7:8c:cb:0e:fa:36:99:61:ce:90:17:c2:b8:
47:5d:14:2e:d4:f8:59:70:8f:ce:6f:0b:94:a6:95:39:2a:d7:
f9:37:73:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDrUvkDY4iAJsWJbpBTkrVHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZDFkYzYxM2Q3NGU2YzMyZGNiOTgxNGNlMTI2YmQ2MWI1
MmFhYTcwHhcNMjYwOTI5MDQwMTE4WhcNMjYwOTMwMDQwMTE4WjAzMTEwLwYDVQQD
EyhmNTEwMzVhODlkNjk4MzU3NjdjN2UzYWQzOThhYmI5MTNlYjQ5Zjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVCBUibfvoUYQKq9oLGrZ0jYs/hD
sv0aufVgP2sehkRu8xngQ63AvQwRaVbwAzKu+O0lNwFNhHE133WlgP49fRgPAuU6
XO1utx0lbYGZcyrf8qf4MkY2riKoFNu7EjcXTWnKDXCO0wVnubQkXcq+tiIxNZ8H
TSrcPul6guVsNu3V/URqqBGSgNRsLoFlnmdA3DtNOsVmoewpYc1UqWKFsJHH88YC
WuSZ3VpAFeIzwGIajW+8TY8JT/PzOiTCKe/BfJjqvMkkpuANG5uRGLNnRF12rz9R
puCslD4Z6E5RnZDd8iZ+m7aFB4LTsAnin2deiDrpkd5b/mR8wAfOT3kJ6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUQNaidaYNXZ8fjrTmKu5E+tJ90MB8GA1UdIwQY
MBaAFITR3GE9dObDLcuYFM4Sa9YbUqqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaE5IY1lUMTA1c010eTVnVXpoSnIxaHRTcXFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy80ZTAyMDEtNGEwNC00MTVmLWE1ZjIt
ZjIxYjY2ZGU5YjU2LzEvaE5IY1lUMTA1c010eTVnVXpoSnIxaHRTcXFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy80ZTAyMDEtNGEwNC00MTVmLWE1ZjItZjIxYjY2ZGU5YjU2
LzEvaE5IY1lUMTA1c010eTVnVXpoSnIxaHRTcXFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkBwnyify
iMpnXT1wETxCDR5InIUHWkgyrUV71VVQQhPOL5Wpem5mXMzFuVpwy8NYFFX0H6h6
Zih29M+fytY8kZcJkAbp9GUsuAf8t8gyCGDo4VJmFuwnktcEZZl2bj8VL+yH3cZZ
+hYboxBpaToAstTHHZwVEDc9aRarc8SrHH0I2x5keMFTD6KPH8Q3q0lPGyGufbNs
ZpDwwGPYYR8OwsfVjjqR5lz/ibHZP7sW4CV10hrd89RnDOTAgKVzK087ttWFUgtR
gHAttQDSk+tetBB+bUff75JN65yshHn3jMsO+jaZYc6QF8K4R10ULtT4WXCPzm8L
lKaVOSrX+Tdzgw==
-----END CERTIFICATE-----
Generated at Tue Sep 29 11:29:36 2026 by rpki-client