Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
File: hZjLxOjf8YUkBKmSddIwpWERBV8.mft (raw, json)
Hash identifier: yMKvkihR4nCR4DooNVAQCnpEyAquGyNvcFFLn9CfLK0=
Subject key identifier: F8:93:B9:27:E0:50:A5:AC:D4:06:CF:FF:D8:E2:E0:BC:CF:B5:C0:4A
Authority key identifier: 85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
Certificate issuer: /CN=8598cbc4e8dff1852404a99275d230a56111055f
Certificate serial: 01A0D6B9FB87BF38D22A0B5951D9388A407A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
Manifest number: 0ABE
Signing time: Fri 25 Sep 2026 04:01:47 +0000
Manifest this update: Fri 25 Sep 2026 04:01:47 +0000
Manifest next update: Sat 26 Sep 2026 04:01:47 +0000
Files and hashes: 1: 6Zls-m6M9cBINWFd4w7uZTmGtY8.roa (hash: G1IdsClkRwxJrpDcDQsqLk4FP+v4Gfd2cicmc4XSPyc=)
2: hZjLxOjf8YUkBKmSddIwpWERBV8.crl (hash: VaWjTUfldqXUtayLUpW8j5Z5u7WSSPfvSgnloFV2odg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:fb:87:bf:38:d2:2a:0b:59:51:d9:38:8a:40:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8598cbc4e8dff1852404a99275d230a56111055f
Validity
Not Before: Sep 25 04:01:47 2026 GMT
Not After : Sep 26 04:01:47 2026 GMT
Subject: CN=f893b927e050a5acd406cfffd8e2e0bccfb5c04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d0:6a:6b:50:16:0d:2a:ae:22:7b:2a:ed:17:
42:ba:4a:1c:f7:bf:6f:eb:be:9d:e5:26:4b:6f:ff:
b0:56:5d:91:7e:d2:d3:ad:99:0b:da:11:55:01:62:
6f:6d:2b:53:63:75:39:c7:f2:c2:57:38:b1:33:d8:
37:7c:7f:65:93:ea:d7:f0:24:8a:75:74:5c:65:17:
67:b0:83:96:e8:14:cf:81:f7:c1:01:a3:72:93:98:
f6:89:43:34:48:b4:93:1d:a6:8c:e7:f8:23:96:b5:
e4:b4:ce:fb:1e:b5:63:a8:ca:90:dc:a0:ab:12:03:
6c:4a:94:9d:f2:e7:39:2c:0c:9c:33:ec:f3:9c:90:
41:ce:bb:62:cc:e4:94:9c:da:76:36:df:d2:b3:3b:
6a:a6:69:82:71:e7:87:4e:34:a5:05:19:13:70:b1:
93:ca:fd:8f:fa:42:1a:d1:09:0e:d9:fb:3d:f7:13:
14:6b:f8:c8:41:c8:81:82:28:da:d4:bc:c7:46:b1:
05:d9:e8:f6:25:58:1e:c0:0d:65:b8:48:75:ab:6a:
75:ef:08:1a:fa:c6:b1:8d:26:82:f2:da:19:66:b4:
8d:9c:6f:58:98:76:85:5a:30:ab:9b:e4:23:f2:7d:
2b:bf:cb:86:d4:fc:f9:67:0e:bd:ad:52:82:3c:10:
68:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:93:B9:27:E0:50:A5:AC:D4:06:CF:FF:D8:E2:E0:BC:CF:B5:C0:4A
X509v3 Authority Key Identifier:
keyid:85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8b:7b:50:54:73:cb:25:9a:de:91:7e:ec:76:c0:19:8d:40:
3f:17:ad:d5:d6:8b:e5:4c:73:8c:0f:87:c8:b1:80:38:39:07:
5e:59:ed:1a:32:90:8b:5b:b7:4b:5e:e7:4c:91:60:2b:a8:83:
e5:23:79:89:ef:fc:fc:d1:94:a8:2d:76:64:6b:ad:e8:2d:0f:
78:45:de:dc:ae:93:9c:85:4f:72:b4:49:8a:bf:a1:0b:3e:82:
5f:ac:98:ba:b9:22:ee:df:76:43:3f:2e:5a:30:9f:bb:bc:e9:
e6:7e:99:b0:1f:23:1c:ad:c5:40:d7:c9:84:32:05:92:6e:5f:
0d:a9:d5:8a:42:5c:bb:6b:74:c4:4e:d8:33:5c:d8:6a:aa:1a:
56:84:8f:07:01:b4:09:bc:63:06:dd:b3:71:30:b6:00:94:32:
24:12:ff:89:cd:7f:9d:8e:bf:44:a9:de:f6:e4:f4:9e:e3:cb:
ce:da:b6:66:00:6f:70:5b:be:c0:de:d2:a0:dc:f7:3a:37:71:
08:2e:e8:e3:09:ef:4c:d9:1f:7e:3c:4e:fc:db:2f:07:31:5c:
45:bb:15:b2:db:c6:b7:ca:26:74:77:98:7d:5c:01:fa:ba:87:
3f:0d:76:fc:19:8c:73:f8:a4:1d:e6:c2:a9:96:5d:65:bf:e3:
e5:21:11:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWufuHvzjSKgtZUdk4ikB6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1OThjYmM0ZThkZmYxODUyNDA0YTk5Mjc1ZDIzMGE1NjEx
MTA1NWYwHhcNMjYwOTI1MDQwMTQ3WhcNMjYwOTI2MDQwMTQ3WjAzMTEwLwYDVQQD
EyhmODkzYjkyN2UwNTBhNWFjZDQwNmNmZmZkOGUyZTBiY2NmYjVjMDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9Bqa1AWDSquInsq7RdCukoc979v
676d5SZLb/+wVl2RftLTrZkL2hFVAWJvbStTY3U5x/LCVzixM9g3fH9lk+rX8CSK
dXRcZRdnsIOW6BTPgffBAaNyk5j2iUM0SLSTHaaM5/gjlrXktM77HrVjqMqQ3KCr
EgNsSpSd8uc5LAycM+zznJBBzrtizOSUnNp2Nt/SsztqpmmCceeHTjSlBRkTcLGT
yv2P+kIa0QkO2fs99xMUa/jIQciBgija1LzHRrEF2ej2JVgewA1luEh1q2p17wga
+saxjSaC8toZZrSNnG9YmHaFWjCrm+Qj8n0rv8uG1Pz5Zw69rVKCPBBoYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPiTuSfgUKWs1AbP/9ji4LzPtcBKMB8GA1UdIwQY
MBaAFIWYy8To3/GFJASpknXSMKVhEQVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8wNDlhYjItOTIyNi00YjQwLWFiOGEt
NTFlNGE1ZWFmYzhlLzEvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8wNDlhYjItOTIyNi00YjQwLWFiOGEtNTFlNGE1ZWFmYzhl
LzEvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4t7UFRz
yyWa3pF+7HbAGY1APxet1daL5UxzjA+HyLGAODkHXlntGjKQi1u3S17nTJFgK6iD
5SN5ie/8/NGUqC12ZGut6C0PeEXe3K6TnIVPcrRJir+hCz6CX6yYurki7t92Qz8u
WjCfu7zp5n6ZsB8jHK3FQNfJhDIFkm5fDanVikJcu2t0xE7YM1zYaqoaVoSPBwG0
CbxjBt2zcTC2AJQyJBL/ic1/nY6/RKne9uT0nuPLztq2ZgBvcFu+wN7SoNz3Ojdx
CC7o4wnvTNkffjxO/NsvBzFcRbsVstvGt8omdHeYfVwB+rqHPw12/BmMc/ikHebC
qZZdZb/j5SER3w==
-----END CERTIFICATE-----
Generated at Fri Sep 25 10:55:17 2026 by rpki-client