Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
File: hps2AP1zjmmNEv7yDhBuapTjtnQ.mft (raw, json)
Hash identifier: WKqXyxhw0lPet++AgevmpdNWRx5BvXwRGlSAPSk7BGg=
Subject key identifier: AC:24:28:38:2E:2E:97:38:FB:1C:ED:11:1D:9B:81:17:80:17:82:1C
Authority key identifier: 86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74
Certificate issuer: /CN=869b3600fd738e698d12fef20e106e6a94e3b674
Certificate serial: 01A123C1BDFDC53EF14A511711B30037D979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
Manifest number: 0F88
Signing time: Sat 10 Oct 2026 03:01:01 +0000
Manifest this update: Sat 10 Oct 2026 03:01:01 +0000
Manifest next update: Sun 11 Oct 2026 03:01:01 +0000
Files and hashes: 1: D07dxDXxrFaWAK13Zm1gQWe6sqM.roa (hash: WEmuyO7ijZIUqK6Kdgpk4wxDQKr57OBRHR5wIMw0Uxo=)
2: hps2AP1zjmmNEv7yDhBuapTjtnQ.crl (hash: dqC3dgdylV8FTAaNlMyReKbEY+TGiWczuoL6qDp1re8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:c1:bd:fd:c5:3e:f1:4a:51:17:11:b3:00:37:d9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869b3600fd738e698d12fef20e106e6a94e3b674
Validity
Not Before: Oct 10 03:01:01 2026 GMT
Not After : Oct 11 03:01:01 2026 GMT
Subject: CN=ac2428382e2e9738fb1ced111d9b81178017821c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d6:f0:dc:79:05:1b:89:5e:40:ab:1b:61:f4:
af:74:c0:ed:bd:f6:fd:ee:1b:02:8b:e8:5b:9a:dc:
e3:24:18:78:87:2c:55:d6:07:36:e2:f7:8a:ab:a8:
f5:78:8b:a0:3b:d2:a9:80:ab:0f:06:f6:b0:de:8f:
b1:08:3c:0b:8e:ca:f1:b2:f4:93:9b:4a:11:04:f1:
d2:7c:15:86:ec:ee:be:74:3e:48:69:38:1b:42:fa:
5a:e9:30:36:69:2a:9c:a9:70:ed:dd:e2:b1:d9:67:
39:02:02:a3:4d:58:34:82:1a:30:d9:ff:e2:f3:4f:
c3:e6:77:15:fc:1b:4d:57:d3:c6:39:80:a6:ec:34:
96:45:1c:40:7e:3b:a0:5a:b7:f0:07:9d:c2:08:6a:
5c:42:12:4f:e3:42:73:1a:80:bc:1d:54:82:06:dc:
c7:dc:33:3d:2d:c0:52:a4:95:1c:e2:21:d2:7c:a8:
19:5e:5e:b5:d0:61:f5:d9:8d:13:6a:42:18:a9:8c:
e1:db:f7:1c:20:e5:f0:a1:de:2a:b6:8f:c9:fe:b0:
cf:38:78:91:88:56:2c:ae:a4:25:8b:7c:ae:91:a8:
66:a5:98:76:d0:25:fa:04:88:55:47:f5:20:3c:64:
d7:7d:f6:1e:f8:1b:85:97:6d:f4:ce:14:72:99:cc:
0e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:24:28:38:2E:2E:97:38:FB:1C:ED:11:1D:9B:81:17:80:17:82:1C
X509v3 Authority Key Identifier:
keyid:86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:d5:59:c5:14:ae:4d:15:b4:80:59:07:9b:20:94:89:77:0b:
a7:5f:0b:84:e8:06:9d:05:4f:19:d5:3b:2d:c4:2f:31:1a:5a:
b3:53:05:04:1e:07:8c:35:6c:1d:9a:6f:68:7c:cf:c5:9b:51:
e8:4c:b5:62:02:94:62:0a:ee:4c:25:f4:97:d8:e4:0f:db:92:
0f:3e:01:8b:a9:3f:fc:e5:e2:23:20:7e:84:1b:d8:b8:97:64:
bf:da:e0:d3:b8:4d:82:48:93:86:ee:8b:58:c4:f8:84:17:b8:
bf:bb:ca:bb:e0:8e:41:71:83:6e:dd:4e:c3:6b:68:e6:63:25:
4f:25:b5:2a:cc:33:4e:b7:72:8d:d4:bf:c9:c1:69:47:06:98:
57:3f:e3:87:ff:1c:90:f5:32:b8:aa:8e:91:7f:f5:9d:41:d0:
bc:a4:be:1b:d2:90:0d:b5:e4:19:5e:d3:b1:a8:b3:0f:b0:ea:
f5:56:d5:0b:06:79:a1:76:25:3b:a4:34:aa:a4:dc:2d:d0:e8:
96:2a:00:86:d2:7a:cc:8a:ff:5b:57:52:49:bd:b2:bb:8f:40:
21:32:5d:6c:19:ed:6e:27:c7:7a:5e:3e:9c:3e:1a:d4:b1:28:
5e:ad:80:fb:8f:63:e7:4f:22:42:4f:a9:1a:55:13:42:02:39:
47:e4:78:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEjwb39xT7xSlEXEbMAN9l5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OWIzNjAwZmQ3MzhlNjk4ZDEyZmVmMjBlMTA2ZTZhOTRl
M2I2NzQwHhcNMjYxMDEwMDMwMTAxWhcNMjYxMDExMDMwMTAxWjAzMTEwLwYDVQQD
EyhhYzI0MjgzODJlMmU5NzM4ZmIxY2VkMTExZDliODExNzgwMTc4MjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9bw3HkFG4leQKsbYfSvdMDtvfb9
7hsCi+hbmtzjJBh4hyxV1gc24veKq6j1eIugO9KpgKsPBvaw3o+xCDwLjsrxsvST
m0oRBPHSfBWG7O6+dD5IaTgbQvpa6TA2aSqcqXDt3eKx2Wc5AgKjTVg0ghow2f/i
80/D5ncV/BtNV9PGOYCm7DSWRRxAfjugWrfwB53CCGpcQhJP40JzGoC8HVSCBtzH
3DM9LcBSpJUc4iHSfKgZXl610GH12Y0TakIYqYzh2/ccIOXwod4qto/J/rDPOHiR
iFYsrqQli3yukahmpZh20CX6BIhVR/UgPGTXffYe+BuFl230zhRymcwOOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwkKDguLpc4+xztER2bgReAF4IcMB8GA1UdIwQY
MBaAFIabNgD9c45pjRL+8g4QbmqU47Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHBzMkFQMXpqbW1ORXY3eURoQnVhcFRqdG5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82MDk5NzYtMWFjZS00NDRmLWJjYjUt
NDI0M2U4OGJkNzZjLzEvaHBzMkFQMXpqbW1ORXY3eURoQnVhcFRqdG5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy82MDk5NzYtMWFjZS00NDRmLWJjYjUtNDI0M2U4OGJkNzZj
LzEvaHBzMkFQMXpqbW1ORXY3eURoQnVhcFRqdG5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApdVZxRSu
TRW0gFkHmyCUiXcLp18LhOgGnQVPGdU7LcQvMRpas1MFBB4HjDVsHZpvaHzPxZtR
6Ey1YgKUYgruTCX0l9jkD9uSDz4Bi6k//OXiIyB+hBvYuJdkv9rg07hNgkiThu6L
WMT4hBe4v7vKu+COQXGDbt1Ow2to5mMlTyW1KswzTrdyjdS/ycFpRwaYVz/jh/8c
kPUyuKqOkX/1nUHQvKS+G9KQDbXkGV7TsaizD7Dq9VbVCwZ5oXYlO6Q0qqTcLdDo
lioAhtJ6zIr/W1dSSb2yu49AITJdbBntbifHel4+nD4a1LEoXq2A+49j508iQk+p
GlUTQgI5R+R4RQ==
-----END CERTIFICATE-----
Generated at Sat Oct 10 11:20:12 2026 by rpki-client