Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft
File: hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft (raw, json)
Hash identifier: QRdEGLTNLFVki0cHkgl1LieIlJuaLBXHoerhjVEFV4Y=
Subject key identifier: AE:C7:AD:62:3F:30:17:56:22:EB:08:8A:C3:80:F9:82:A7:66:49:0C
Authority key identifier: 86:7B:33:7C:E4:C3:4F:EB:4A:71:FF:F8:55:9E:5E:4C:98:E4:2B:00
Certificate issuer: /CN=867b337ce4c34feb4a71fff8559e5e4c98e42b00
Certificate serial: 01A0D8DECAE666C3327551023E44BAAE82E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hnszfOTDT-tKcf_4VZ5eTJjkKwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft
Manifest number: 0278
Signing time: Fri 25 Sep 2026 14:01:14 +0000
Manifest this update: Fri 25 Sep 2026 14:01:14 +0000
Manifest next update: Sat 26 Sep 2026 14:01:14 +0000
Files and hashes: 1: PnZoP9c_MUx8bGVjWDH4QemT8Oc.roa (hash: N/n/c2ZTM9Bt63EXnz2HQd3THkOEOxgNYjeKCIXt71Y=)
2: hnszfOTDT-tKcf_4VZ5eTJjkKwA.crl (hash: v5a4tim2n17saPz6qqdCKZO4k/28eLTJh2k8zQaQy10=)
3: t6GAlny-fqKuuQwhbvUz_72cDZg.roa (hash: 0Z7m8nppSdIlpMkeX4RoJU4whGw35KKZIMqUWhBFgBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hnszfOTDT-tKcf_4VZ5eTJjkKwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:de:ca:e6:66:c3:32:75:51:02:3e:44:ba:ae:82:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=867b337ce4c34feb4a71fff8559e5e4c98e42b00
Validity
Not Before: Sep 25 14:01:14 2026 GMT
Not After : Sep 26 14:01:14 2026 GMT
Subject: CN=aec7ad623f30175622eb088ac380f982a766490c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:a0:51:32:fd:6d:22:51:fc:27:0d:8a:62:
aa:d2:6e:83:bb:f8:82:56:7f:79:f5:f3:ab:a8:78:
29:4f:9c:c4:7a:37:2f:f7:72:6c:a9:36:16:c1:ed:
0d:ff:71:63:35:27:d0:78:fa:70:75:70:c6:06:09:
35:e6:b8:f2:d5:5e:02:c3:4d:6e:21:61:f7:f6:5c:
e2:3b:e0:54:e0:4a:85:ff:79:0d:c2:42:02:46:a7:
8d:37:42:eb:22:ad:17:d0:28:02:1c:ab:26:4e:d2:
fc:6c:7a:32:1f:d0:73:3d:56:3b:12:b9:ae:61:47:
38:e0:d8:0f:5f:4f:00:aa:f8:8d:ec:b3:5d:12:97:
5f:64:e8:5d:f0:a2:d0:cd:5a:99:30:6a:b7:63:31:
f4:68:a3:c2:1e:f4:f5:92:cc:04:62:74:38:89:c9:
29:32:04:8d:64:c5:c6:05:1c:a0:c9:4a:f4:19:92:
c5:19:3a:d0:0d:e8:02:f1:cd:f3:45:44:c4:b6:5d:
63:20:e4:63:e5:b3:cc:54:95:f9:ad:21:a6:f1:57:
cd:f2:0e:14:c5:57:82:5f:d9:34:a3:7c:88:7c:0b:
05:2b:da:31:b1:aa:35:7c:b5:7c:3b:6c:a9:4e:35:
15:4a:d7:5f:e9:7a:d1:46:53:1e:92:bd:70:8e:af:
02:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C7:AD:62:3F:30:17:56:22:EB:08:8A:C3:80:F9:82:A7:66:49:0C
X509v3 Authority Key Identifier:
keyid:86:7B:33:7C:E4:C3:4F:EB:4A:71:FF:F8:55:9E:5E:4C:98:E4:2B:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hnszfOTDT-tKcf_4VZ5eTJjkKwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:91:02:58:d7:99:4c:42:cd:c9:f9:e1:02:fe:d5:8f:08:32:
6a:47:a5:ab:2a:2f:0e:a3:15:07:2e:67:9d:d7:d3:a6:ac:cd:
4b:8d:ee:74:16:43:0d:8d:a7:56:74:d3:64:28:ab:4f:8b:c1:
27:f1:db:7d:57:45:91:e6:c5:b9:d0:c4:89:a8:21:1c:50:a1:
98:9a:6f:a7:f0:8f:e0:47:9e:eb:8f:89:55:3b:dc:93:f0:98:
54:3b:23:e1:37:65:40:aa:0e:4c:60:d7:a0:b1:8b:92:c8:a6:
8a:ab:a5:cd:cc:a2:19:0c:28:0f:fa:99:0a:30:79:78:38:c0:
b3:1c:5f:16:49:fb:30:c2:47:38:48:df:e8:94:5b:1e:4c:92:
8e:e2:27:ca:94:5c:dd:53:3b:a0:4f:8e:a7:5e:90:25:c7:d7:
51:2f:a4:38:25:10:2b:1c:bb:ba:47:e9:3b:1c:0e:1c:15:e3:
36:29:3b:2a:8b:eb:1a:52:bb:aa:50:db:ac:fa:c4:8c:d6:50:
20:c8:ac:10:fe:b1:36:3a:61:88:1e:a0:0c:ec:f1:71:34:ec:
10:d6:63:5b:6d:b2:a0:54:53:dd:20:16:c8:cf:5f:eb:7f:78:
33:f1:6e:d2:48:32:71:09:0d:ed:98:ff:04:4e:6a:fb:a8:54:
ca:37:6d:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDY3srmZsMydVECPkS6roLpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2N2IzMzdjZTRjMzRmZWI0YTcxZmZmODU1OWU1ZTRjOThl
NDJiMDAwHhcNMjYwOTI1MTQwMTE0WhcNMjYwOTI2MTQwMTE0WjAzMTEwLwYDVQQD
EyhhZWM3YWQ2MjNmMzAxNzU2MjJlYjA4OGFjMzgwZjk4MmE3NjY0OTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSWgUTL9bSJR/CcNimKq0m6Du/iC
Vn959fOrqHgpT5zEejcv93JsqTYWwe0N/3FjNSfQePpwdXDGBgk15rjy1V4Cw01u
IWH39lziO+BU4EqF/3kNwkICRqeNN0LrIq0X0CgCHKsmTtL8bHoyH9BzPVY7Ermu
YUc44NgPX08AqviN7LNdEpdfZOhd8KLQzVqZMGq3YzH0aKPCHvT1kswEYnQ4ickp
MgSNZMXGBRygyUr0GZLFGTrQDegC8c3zRUTEtl1jIORj5bPMVJX5rSGm8VfN8g4U
xVeCX9k0o3yIfAsFK9oxsao1fLV8O2ypTjUVStdf6XrRRlMekr1wjq8C1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7HrWI/MBdWIusIisOA+YKnZkkMMB8GA1UdIwQY
MBaAFIZ7M3zkw0/rSnH/+FWeXkyY5CsAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG5zemZPVERULXRLY2ZfNFZaNWVUSmprS3dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9lMjc5ZjUtNzNkMS00ZmU4LTk3OGQt
OTBhY2ZkYjAxZTkwLzEvaG5zemZPVERULXRLY2ZfNFZaNWVUSmprS3dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9lMjc5ZjUtNzNkMS00ZmU4LTk3OGQtOTBhY2ZkYjAxZTkw
LzEvaG5zemZPVERULXRLY2ZfNFZaNWVUSmprS3dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5ECWNeZ
TELNyfnhAv7VjwgyakelqyovDqMVBy5nndfTpqzNS43udBZDDY2nVnTTZCirT4vB
J/HbfVdFkebFudDEiaghHFChmJpvp/CP4Eee64+JVTvck/CYVDsj4TdlQKoOTGDX
oLGLksimiqulzcyiGQwoD/qZCjB5eDjAsxxfFkn7MMJHOEjf6JRbHkySjuInypRc
3VM7oE+Op16QJcfXUS+kOCUQKxy7ukfpOxwOHBXjNik7KovrGlK7qlDbrPrEjNZQ
IMisEP6xNjphiB6gDOzxcTTsENZjW22yoFRT3SAWyM9f6394M/Fu0kgycQkN7Zj/
BE5q+6hUyjdtrA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:15:47 2026 by rpki-client