Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/542d3b-ce00-47bd-b484-957cb63fe681/1/HIomETq5OUUuR1b21T9XcRRQYpA.mft
File: HIomETq5OUUuR1b21T9XcRRQYpA.mft (raw, json)
Hash identifier: veTNU+cZ5EOrpbR2BNgQUt79nvsuEK1wZUcPN4FT08w=
Subject key identifier: 6D:78:46:3A:0C:D7:01:F5:69:7A:7C:C3:5F:3E:7B:F9:4B:0A:8A:AB
Authority key identifier: 1C:8A:26:11:3A:B9:39:45:2E:47:56:F6:D5:3F:57:71:14:50:62:90
Certificate issuer: /CN=1c8a26113ab939452e4756f6d53f577114506290
Certificate serial: 01A126F9CA1A40E6E127A44E6B6451D0BD97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIomETq5OUUuR1b21T9XcRRQYpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/542d3b-ce00-47bd-b484-957cb63fe681/1/HIomETq5OUUuR1b21T9XcRRQYpA.mft
Manifest number: 01D7
Signing time: Sat 10 Oct 2026 18:01:06 +0000
Manifest this update: Sat 10 Oct 2026 18:01:06 +0000
Manifest next update: Sun 11 Oct 2026 18:01:06 +0000
Files and hashes: 1: HIomETq5OUUuR1b21T9XcRRQYpA.crl (hash: 5LueyDWJdymZXCs0Yz97ATlmZw1LUusrX328HdvALDM=)
2: kfHOguahwmoMsyRaQw8pUo9cNfU.roa (hash: 9xDfD3+rs0UdeCP8bqBepaOJdTPshbSNDRJXUgbGRxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/542d3b-ce00-47bd-b484-957cb63fe681/1/HIomETq5OUUuR1b21T9XcRRQYpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/542d3b-ce00-47bd-b484-957cb63fe681/1/HIomETq5OUUuR1b21T9XcRRQYpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HIomETq5OUUuR1b21T9XcRRQYpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:f9:ca:1a:40:e6:e1:27:a4:4e:6b:64:51:d0:bd:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c8a26113ab939452e4756f6d53f577114506290
Validity
Not Before: Oct 10 18:01:06 2026 GMT
Not After : Oct 11 18:01:06 2026 GMT
Subject: CN=6d78463a0cd701f5697a7cc35f3e7bf94b0a8aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cc:13:13:1d:e7:63:f1:04:15:ba:7c:75:e5:
40:a7:19:70:52:21:39:ed:39:7b:fb:9b:84:2e:02:
1f:a6:a4:bd:9a:b0:84:16:46:a8:06:bf:c1:57:ae:
73:ac:5e:fd:6c:17:14:a8:97:20:0b:85:66:58:04:
86:ec:3e:d6:86:f8:5b:f7:03:e0:06:c9:39:2a:c1:
3c:79:12:74:cd:93:ad:2e:8a:80:ab:25:da:0f:11:
4b:98:11:51:41:86:20:94:c3:56:aa:24:39:e7:9c:
05:89:a0:06:bd:f1:2a:f6:db:30:ab:be:b3:e3:eb:
94:bb:9a:d4:26:c6:ff:4b:5c:fa:ea:06:18:f5:2c:
c5:52:f7:1e:d5:ff:56:7c:75:80:14:69:b9:c4:fb:
63:f7:f1:c3:21:d6:5b:46:6d:83:1f:0d:3a:5b:da:
44:9f:0d:37:13:46:5d:65:aa:05:9d:83:e5:82:0b:
16:64:a7:29:2f:b5:d4:ac:2a:1d:b5:41:30:4f:27:
11:83:ec:d8:95:68:e2:0e:b6:25:3e:ff:a4:57:83:
97:16:e9:46:e3:bf:fc:5c:68:99:46:9c:a3:0c:2c:
04:73:f3:db:e0:19:24:82:df:0c:45:71:4b:bb:84:
c2:fe:b4:49:95:8a:db:81:26:ee:9e:81:47:cb:aa:
a2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:78:46:3A:0C:D7:01:F5:69:7A:7C:C3:5F:3E:7B:F9:4B:0A:8A:AB
X509v3 Authority Key Identifier:
keyid:1C:8A:26:11:3A:B9:39:45:2E:47:56:F6:D5:3F:57:71:14:50:62:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIomETq5OUUuR1b21T9XcRRQYpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/542d3b-ce00-47bd-b484-957cb63fe681/1/HIomETq5OUUuR1b21T9XcRRQYpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/542d3b-ce00-47bd-b484-957cb63fe681/1/HIomETq5OUUuR1b21T9XcRRQYpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:2e:74:11:f8:70:a8:55:84:91:81:3e:2a:aa:a9:42:b0:38:
8d:f8:33:9f:37:3d:ed:25:84:be:74:47:2b:1f:7d:b3:ef:98:
db:0b:49:ac:dc:31:76:9d:50:c5:d2:0f:91:19:2b:cc:10:64:
8a:ba:4f:e7:90:f2:66:2e:0c:76:7f:c2:29:2f:38:62:ad:46:
b6:df:cc:f2:74:58:26:89:a5:59:27:ef:90:56:6b:cf:28:c9:
40:12:19:a6:b9:78:25:ac:c1:1f:3b:b3:68:cb:6b:af:95:5f:
80:6e:28:49:f3:87:72:27:cb:00:42:7f:59:9e:de:63:8e:c8:
c1:63:c6:50:d0:42:5e:eb:11:20:17:0d:94:39:28:57:5c:d9:
d5:32:f8:a8:1f:97:65:7f:0b:66:c5:60:c8:0d:38:0c:87:1a:
5d:c4:56:56:17:b6:d0:22:53:ef:58:61:95:7a:7c:f6:98:36:
6b:e7:f8:a8:3e:49:76:3c:ee:62:aa:7f:14:30:a9:00:b8:ff:
3b:5f:53:4b:60:6a:a5:11:18:c2:98:ac:7f:be:8f:c5:15:37:
60:e7:1e:89:0b:08:81:ec:29:ec:eb:ca:cd:c4:fd:8b:ee:f8:
4d:6c:d7:72:73:b6:1c:f6:7b:3e:a6:26:9d:01:5d:0a:76:bf:
bf:e1:66:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEm+coaQObhJ6ROa2RR0L2XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOGEyNjExM2FiOTM5NDUyZTQ3NTZmNmQ1M2Y1NzcxMTQ1
MDYyOTAwHhcNMjYxMDEwMTgwMTA2WhcNMjYxMDExMTgwMTA2WjAzMTEwLwYDVQQD
Eyg2ZDc4NDYzYTBjZDcwMWY1Njk3YTdjYzM1ZjNlN2JmOTRiMGE4YWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MwTEx3nY/EEFbp8deVApxlwUiE5
7Tl7+5uELgIfpqS9mrCEFkaoBr/BV65zrF79bBcUqJcgC4VmWASG7D7Whvhb9wPg
Bsk5KsE8eRJ0zZOtLoqAqyXaDxFLmBFRQYYglMNWqiQ555wFiaAGvfEq9tswq76z
4+uUu5rUJsb/S1z66gYY9SzFUvce1f9WfHWAFGm5xPtj9/HDIdZbRm2DHw06W9pE
nw03E0ZdZaoFnYPlggsWZKcpL7XUrCodtUEwTycRg+zYlWjiDrYlPv+kV4OXFulG
47/8XGiZRpyjDCwEc/Pb4Bkkgt8MRXFLu4TC/rRJlYrbgSbunoFHy6qilQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG14RjoM1wH1aXp8w18+e/lLCoqrMB8GA1UdIwQY
MBaAFByKJhE6uTlFLkdW9tU/V3EUUGKQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSElvbUVUcTVPVVV1UjFiMjFUOVhjUlJRWXBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81NDJkM2ItY2UwMC00N2JkLWI0ODQt
OTU3Y2I2M2ZlNjgxLzEvSElvbUVUcTVPVVV1UjFiMjFUOVhjUlJRWXBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy81NDJkM2ItY2UwMC00N2JkLWI0ODQtOTU3Y2I2M2ZlNjgx
LzEvSElvbUVUcTVPVVV1UjFiMjFUOVhjUlJRWXBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZS50Efhw
qFWEkYE+KqqpQrA4jfgznzc97SWEvnRHKx99s++Y2wtJrNwxdp1QxdIPkRkrzBBk
irpP55DyZi4Mdn/CKS84Yq1Gtt/M8nRYJomlWSfvkFZrzyjJQBIZprl4JazBHzuz
aMtrr5VfgG4oSfOHcifLAEJ/WZ7eY47IwWPGUNBCXusRIBcNlDkoV1zZ1TL4qB+X
ZX8LZsVgyA04DIcaXcRWVhe20CJT71hhlXp89pg2a+f4qD5JdjzuYqp/FDCpALj/
O19TS2BqpREYwpisf76PxRU3YOceiQsIgewp7OvKzcT9i+74TWzXcnO2HPZ7PqYm
nQFdCna/v+Fm7w==
-----END CERTIFICATE-----
Generated at Sun Oct 11 04:40:57 2026 by rpki-client