Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
File: HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft (raw, json)
Hash identifier: KCZ7SoG/k7JJHPRqTlTn6R0NkvrdF29/SJYX4fOyXu4=
Subject key identifier: DF:A6:7E:65:16:46:22:65:CF:66:3D:79:FE:3E:64:C9:B8:1A:54:B9
Authority key identifier: 1D:FC:2B:36:51:41:63:D3:89:EE:8F:E1:8F:8E:23:43:FA:4D:DC:99
Certificate issuer: /CN=1dfc2b36514163d389ee8fe18f8e2343fa4ddc99
Certificate serial: 01A102B6D10E2C398455038873DDF59DB013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
Manifest number: 1A86
Signing time: Sat 03 Oct 2026 17:01:37 +0000
Manifest this update: Sat 03 Oct 2026 17:01:37 +0000
Manifest next update: Sun 04 Oct 2026 17:01:37 +0000
Files and hashes: 1: 2r56-7c4rzlH_MkXpf4EVQxFefI.roa (hash: hSJijlNMgIG+anYeveOsK+OFXlzwcZe8DVit+XV01Ts=)
2: HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.crl (hash: m+61al7o9ERCpvSi6rdCLM9Q42+3wejG86XE0pK4lcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 17:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:b6:d1:0e:2c:39:84:55:03:88:73:dd:f5:9d:b0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dfc2b36514163d389ee8fe18f8e2343fa4ddc99
Validity
Not Before: Oct 3 17:01:37 2026 GMT
Not After : Oct 4 17:01:37 2026 GMT
Subject: CN=dfa67e6516462265cf663d79fe3e64c9b81a54b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b2:d9:49:4e:9b:ab:86:ac:ac:ad:3d:a2:ee:
00:73:44:15:8f:f0:7e:d9:6c:34:34:02:fa:fb:5f:
dc:fb:9a:b8:c0:fa:f5:c8:2d:31:0b:d8:42:f1:cd:
7a:62:18:84:8f:82:e4:2a:ee:47:d2:1a:87:9f:d6:
e0:a1:5b:15:ae:53:8c:a0:fe:fc:da:d1:11:4f:7d:
1e:92:a9:71:c4:e5:74:96:71:0f:8b:9d:ee:78:64:
a8:04:f9:cc:b0:ba:7c:ee:91:38:be:52:0d:21:62:
d9:22:16:5e:0c:75:80:a6:68:64:cf:6b:3a:9e:1c:
35:21:14:60:96:c0:71:5b:a8:72:50:40:df:4b:70:
9b:8e:21:d5:c3:e3:b5:f5:e1:4a:6b:ef:b6:59:4e:
19:1f:e8:c4:b5:aa:79:ab:08:11:99:65:7e:1d:f1:
32:68:b9:53:57:00:ff:96:7d:4e:8f:d6:0c:7c:af:
71:8c:f5:76:61:4a:49:6f:1a:41:84:0e:cb:60:3b:
58:a5:98:22:da:e0:34:68:97:63:0b:cb:42:45:2e:
da:9b:fd:11:72:8d:64:2c:29:1e:5d:8e:61:15:d5:
1d:31:b2:f0:2d:33:28:f3:ac:ae:9b:32:a5:84:60:
40:0a:e2:59:6b:ea:8e:23:d1:48:aa:0e:73:81:af:
ef:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A6:7E:65:16:46:22:65:CF:66:3D:79:FE:3E:64:C9:B8:1A:54:B9
X509v3 Authority Key Identifier:
keyid:1D:FC:2B:36:51:41:63:D3:89:EE:8F:E1:8F:8E:23:43:FA:4D:DC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:33:74:b6:73:14:18:a8:7d:42:b4:49:2e:8b:d4:79:d0:96:
da:45:5d:49:c9:4c:7b:ee:59:43:6f:ca:84:98:32:08:db:7a:
59:94:fb:f8:f1:2b:30:6a:d9:3b:db:23:d0:4a:50:60:5f:f9:
47:39:09:bd:95:9c:df:2b:c3:e5:c9:84:da:83:bb:a1:b2:44:
79:3f:d0:c0:55:c2:f5:4a:ed:0c:65:a6:ca:ce:d8:6b:33:dc:
6a:4a:cf:be:47:17:d8:a3:32:58:12:31:04:eb:ce:73:e4:7a:
a1:e4:c9:cc:e9:c8:80:54:a9:58:68:a4:da:07:83:bc:f5:4d:
da:3a:73:74:ff:1b:a1:f2:90:0e:fe:94:18:4e:34:ed:70:4c:
59:91:6d:29:bf:aa:8c:b0:92:fb:52:3c:2a:93:2c:94:c1:ac:
31:8a:7e:87:d2:68:0c:c1:1b:95:d4:75:39:11:ac:9a:24:5a:
14:5b:6b:fa:7b:91:4d:29:48:aa:db:47:33:11:cf:d1:a9:4d:
d5:91:1e:da:54:f7:64:03:ca:2b:21:e8:a3:f7:61:49:6f:a4:
d7:d1:90:ea:75:0b:b6:09:6b:c4:bd:2e:70:fa:70:be:69:81:
dd:36:5f:e2:3c:21:81:21:cc:12:32:f8:55:6b:5c:98:93:97:
65:9c:24:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaECttEOLDmEVQOIc931nbATMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZmMyYjM2NTE0MTYzZDM4OWVlOGZlMThmOGUyMzQzZmE0
ZGRjOTkwHhcNMjYxMDAzMTcwMTM3WhcNMjYxMDA0MTcwMTM3WjAzMTEwLwYDVQQD
EyhkZmE2N2U2NTE2NDYyMjY1Y2Y2NjNkNzlmZTNlNjRjOWI4MWE1NGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rLZSU6bq4asrK09ou4Ac0QVj/B+
2Ww0NAL6+1/c+5q4wPr1yC0xC9hC8c16YhiEj4LkKu5H0hqHn9bgoVsVrlOMoP78
2tERT30ekqlxxOV0lnEPi53ueGSoBPnMsLp87pE4vlINIWLZIhZeDHWApmhkz2s6
nhw1IRRglsBxW6hyUEDfS3CbjiHVw+O19eFKa++2WU4ZH+jEtap5qwgRmWV+HfEy
aLlTVwD/ln1Oj9YMfK9xjPV2YUpJbxpBhA7LYDtYpZgi2uA0aJdjC8tCRS7am/0R
co1kLCkeXY5hFdUdMbLwLTMo86yumzKlhGBACuJZa+qOI9FIqg5zga/vtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+mfmUWRiJlz2Y9ef4+ZMm4GlS5MB8GA1UdIwQY
MBaAFB38KzZRQWPTie6P4Y+OI0P6TdyZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGZ3ck5sRkJZOU9KN29faGo0NGpRX3BOM0prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kOTI5YWItNDg5Ni00M2UyLWE4NzYt
MDFiZWQ4NzgyYzdmLzEvSGZ3ck5sRkJZOU9KN29faGo0NGpRX3BOM0prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kOTI5YWItNDg5Ni00M2UyLWE4NzYtMDFiZWQ4NzgyYzdm
LzEvSGZ3ck5sRkJZOU9KN29faGo0NGpRX3BOM0prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKTN0tnMU
GKh9QrRJLovUedCW2kVdSclMe+5ZQ2/KhJgyCNt6WZT7+PErMGrZO9sj0EpQYF/5
RzkJvZWc3yvD5cmE2oO7obJEeT/QwFXC9UrtDGWmys7YazPcakrPvkcX2KMyWBIx
BOvOc+R6oeTJzOnIgFSpWGik2geDvPVN2jpzdP8bofKQDv6UGE407XBMWZFtKb+q
jLCS+1I8KpMslMGsMYp+h9JoDMEbldR1ORGsmiRaFFtr+nuRTSlIqttHMxHP0alN
1ZEe2lT3ZAPKKyHoo/dhSW+k19GQ6nULtglrxL0ucPpwvmmB3TZf4jwhgSHMEjL4
VWtcmJOXZZwkkw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 02:15:38 2026 by rpki-client