Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
File: mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft (raw, json)
Hash identifier: xdj9YZVtFoRQZ48qwmgMHpFoX/dpEqqf2uoJG0lMubs=
Subject key identifier: 81:13:D5:82:C2:9A:14:FB:BE:2E:1A:E3:A6:1B:33:93:32:E0:46:5A
Authority key identifier: 98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99
Certificate issuer: /CN=985d472fa538204f1c23e8b6a758073b80cfc199
Certificate serial: 01A10A01D1A2EF9F3D813E8F73C3A6C9154D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
Manifest number: 165C
Signing time: Mon 05 Oct 2026 03:00:53 +0000
Manifest this update: Mon 05 Oct 2026 03:00:53 +0000
Manifest next update: Tue 06 Oct 2026 03:00:53 +0000
Files and hashes: 1: BIo28pXo6DKLLlMdXKajPhOhgpE.roa (hash: Yxz0YX56/XjwEqK3eJFqdGwrvy8qCQG0h/ZHhD2mdYI=)
2: mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl (hash: glpRS1FRSu9codNEAZGWp+k3kctNkrd+dp9Cukuiq3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:01:d1:a2:ef:9f:3d:81:3e:8f:73:c3:a6:c9:15:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=985d472fa538204f1c23e8b6a758073b80cfc199
Validity
Not Before: Oct 5 03:00:53 2026 GMT
Not After : Oct 6 03:00:53 2026 GMT
Subject: CN=8113d582c29a14fbbe2e1ae3a61b339332e0465a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9b:37:df:4e:06:10:3f:0a:7a:c9:43:a4:38:
17:54:c7:45:fd:ab:e8:02:3c:d6:7b:87:01:f2:aa:
db:e7:dc:09:fc:86:28:44:d6:a5:e6:4d:21:3f:3a:
3e:39:ed:87:70:81:31:a5:ec:42:3b:59:8c:91:c5:
f6:94:bd:54:5f:4b:9e:13:d9:62:3e:0e:d5:83:39:
9b:83:08:ce:83:b5:0d:46:6d:30:39:d9:20:35:83:
86:62:a8:1f:a0:1f:d2:9f:3b:f5:5d:0e:13:04:ec:
2a:00:58:82:93:ae:4d:59:7a:b5:f5:76:66:25:c1:
cd:ea:5f:c1:fb:3f:ce:2a:07:ec:59:03:f0:55:3f:
38:23:ad:80:ea:27:d0:33:4d:25:2a:69:e6:a7:04:
d9:03:8a:80:f8:4e:eb:1d:78:d5:9e:ba:f0:83:75:
59:99:56:35:c7:e2:dd:7c:76:10:97:e0:5d:7a:f8:
af:7c:31:ef:d7:95:bc:75:45:86:aa:11:d6:01:cc:
0d:6e:0c:15:bf:a5:cd:5e:81:c3:0f:84:cb:da:b2:
52:ed:9c:54:8a:28:72:e5:1b:1f:d4:5b:ce:3a:41:
f3:cc:c6:83:6a:25:b1:71:3b:6d:aa:77:af:4f:f4:
49:4f:c6:96:d3:c6:a1:11:1c:6d:95:c5:c8:84:f6:
fd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:13:D5:82:C2:9A:14:FB:BE:2E:1A:E3:A6:1B:33:93:32:E0:46:5A
X509v3 Authority Key Identifier:
keyid:98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ca:04:49:6d:72:4f:45:0d:11:d6:6a:86:51:0a:c8:16:49:
b0:95:07:d9:12:74:33:5c:fa:19:9e:b9:10:e9:03:ad:4f:d4:
3d:e9:c6:dd:72:d0:85:13:8b:69:63:06:c2:23:31:22:2d:84:
92:69:0f:32:53:1a:cc:5b:7e:89:6a:34:07:0c:0b:57:e8:f1:
a3:f3:ff:71:e8:dd:4c:80:3b:97:a9:73:16:b4:75:61:29:ef:
c7:4b:15:b8:0c:b7:c1:12:82:25:1c:7b:b3:ef:d3:99:64:a2:
c2:23:03:9d:05:ce:02:af:41:09:7b:fe:69:73:fc:60:60:14:
90:98:d2:c2:80:77:00:05:fa:85:c8:5b:5a:de:e6:29:0e:19:
16:9c:c9:e8:3b:15:6b:cf:9e:63:1f:60:6a:3d:48:35:05:c9:
c7:99:54:9f:fd:11:35:fe:1f:27:21:0d:9c:3c:af:81:ab:7d:
67:8e:20:bd:34:fa:90:23:fd:cf:93:2d:a0:6a:fb:52:40:c6:
2b:d7:97:61:e9:b2:a9:03:22:eb:91:ea:eb:42:82:32:ce:09:
fa:37:c0:ed:86:eb:11:95:59:b3:da:b3:0a:6e:5c:c0:e0:75:
36:bf:64:0b:13:04:17:30:c7:86:2a:6b:2c:20:92:82:a2:cd:
62:fc:b3:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEKAdGi7589gT6Pc8OmyRVNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NWQ0NzJmYTUzODIwNGYxYzIzZThiNmE3NTgwNzNiODBj
ZmMxOTkwHhcNMjYxMDA1MDMwMDUzWhcNMjYxMDA2MDMwMDUzWjAzMTEwLwYDVQQD
Eyg4MTEzZDU4MmMyOWExNGZiYmUyZTFhZTNhNjFiMzM5MzMyZTA0NjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqps3304GED8KeslDpDgXVMdF/avo
AjzWe4cB8qrb59wJ/IYoRNal5k0hPzo+Oe2HcIExpexCO1mMkcX2lL1UX0ueE9li
Pg7VgzmbgwjOg7UNRm0wOdkgNYOGYqgfoB/Snzv1XQ4TBOwqAFiCk65NWXq19XZm
JcHN6l/B+z/OKgfsWQPwVT84I62A6ifQM00lKmnmpwTZA4qA+E7rHXjVnrrwg3VZ
mVY1x+LdfHYQl+BdevivfDHv15W8dUWGqhHWAcwNbgwVv6XNXoHDD4TL2rJS7ZxU
iihy5Rsf1FvOOkHzzMaDaiWxcTttqnevT/RJT8aW08ahERxtlcXIhPb9RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIET1YLCmhT7vi4a46YbM5My4EZaMB8GA1UdIwQY
MBaAFJhdRy+lOCBPHCPotqdYBzuAz8GZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUYxSEw2VTRJRThjSS1pMnAxZ0hPNERQd1prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jMjhlYmMtNzQ5Zi00OGY2LTg5YTIt
ZWRjMzE2MjIyNjQ0LzEvbUYxSEw2VTRJRThjSS1pMnAxZ0hPNERQd1prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9jMjhlYmMtNzQ5Zi00OGY2LTg5YTItZWRjMzE2MjIyNjQ0
LzEvbUYxSEw2VTRJRThjSS1pMnAxZ0hPNERQd1prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp8oESW1y
T0UNEdZqhlEKyBZJsJUH2RJ0M1z6GZ65EOkDrU/UPenG3XLQhROLaWMGwiMxIi2E
kmkPMlMazFt+iWo0BwwLV+jxo/P/cejdTIA7l6lzFrR1YSnvx0sVuAy3wRKCJRx7
s+/TmWSiwiMDnQXOAq9BCXv+aXP8YGAUkJjSwoB3AAX6hchbWt7mKQ4ZFpzJ6DsV
a8+eYx9gaj1INQXJx5lUn/0RNf4fJyENnDyvgat9Z44gvTT6kCP9z5MtoGr7UkDG
K9eXYemyqQMi65Hq60KCMs4J+jfA7YbrEZVZs9qzCm5cwOB1Nr9kCxMEFzDHhipr
LCCSgqLNYvyzTg==
-----END CERTIFICATE-----
Generated at Mon Oct 5 14:42:16 2026 by rpki-client