Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
File: hR1ONNTkhTnBcEUdTiYTiIf26SI.mft (raw, json)
Hash identifier: nSnhN5SospZzNpQExahFAptx/YRN8UhWhgrSWVEk+FU=
Subject key identifier: C4:7D:43:87:3D:A5:44:71:44:AB:B0:22:0F:9E:7B:9A:D5:FD:92:C3
Authority key identifier: 85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
Certificate issuer: /CN=851d4e34d4e48539c170451d4e26138887f6e922
Certificate serial: 01A0D383EE60D432B916F00374FC48D76473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
Manifest number: 161A
Signing time: Thu 24 Sep 2026 13:03:53 +0000
Manifest this update: Thu 24 Sep 2026 13:03:53 +0000
Manifest next update: Fri 25 Sep 2026 13:03:53 +0000
Files and hashes: 1: R833NOdXTD2aQWG3JavzKd06mys.roa (hash: fWZj94n90bNsji3CFK3WkNid37wFqWD8C1Qx/wwtaQQ=)
2: ZmLewUIWz9_zdShetR7Jdzl8lfo.roa (hash: fPaCPLobKeVWk/RzinoeDdlx4MxMtKzniHguRoc5v/k=)
3: hR1ONNTkhTnBcEUdTiYTiIf26SI.crl (hash: 1W8zCAxamxUX0Az9j7ANnSqi4ZN9tw0cRFK7W1CBgzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:03:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:83:ee:60:d4:32:b9:16:f0:03:74:fc:48:d7:64:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851d4e34d4e48539c170451d4e26138887f6e922
Validity
Not Before: Sep 24 13:03:53 2026 GMT
Not After : Sep 25 13:03:53 2026 GMT
Subject: CN=c47d43873da5447144abb0220f9e7b9ad5fd92c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d2:9c:2b:70:71:bc:15:16:62:88:b5:fb:1c:
8a:48:df:7a:78:33:db:f4:d1:51:d2:5e:98:eb:49:
39:e7:6b:94:a2:f2:57:8d:07:e6:cd:7d:3b:94:a9:
90:c8:73:a6:7e:15:c4:d9:56:58:f7:ff:87:6e:e0:
2c:08:ff:6e:90:dc:93:ce:85:bf:da:e0:07:92:80:
c4:35:b4:2e:75:a4:29:38:ab:67:2c:2b:1f:d6:17:
a7:5d:2c:fb:d5:ac:ed:59:be:5a:00:07:c1:7f:bf:
06:0e:54:b8:62:00:b2:e8:6d:c5:39:74:e5:a1:3c:
57:b4:63:dc:6a:8e:98:57:af:26:fb:a5:2f:4e:fe:
66:b2:c8:02:41:e7:1b:53:0f:dc:01:39:30:d6:ac:
15:35:bb:a3:1a:82:b1:83:d3:72:17:24:66:92:01:
50:10:b6:93:e5:58:a2:bd:3a:f2:96:46:90:f2:3c:
63:58:9e:a0:8c:f8:60:48:91:8d:92:3a:de:2b:94:
fb:95:80:b6:9f:65:cd:a6:00:14:70:ae:e9:d5:25:
56:f0:3d:94:41:f4:78:32:4e:1b:8d:9e:47:c8:08:
e0:60:90:92:42:03:07:d6:f5:cd:5d:ba:83:c4:c5:
a3:93:52:1b:f1:82:27:03:55:f1:58:35:29:02:8d:
0e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:7D:43:87:3D:A5:44:71:44:AB:B0:22:0F:9E:7B:9A:D5:FD:92:C3
X509v3 Authority Key Identifier:
keyid:85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:26:52:27:dd:b8:f2:4b:9d:a0:48:0d:48:9a:68:af:f4:e5:
26:34:03:e1:8d:16:f2:d1:88:d7:c5:a9:42:2b:d3:9a:7e:37:
85:b2:34:da:4c:32:6a:16:f0:f2:7e:60:15:f8:4c:d7:6a:1a:
a2:50:32:c0:d7:10:b5:9f:8d:34:4e:78:db:6a:6b:04:93:63:
79:74:84:4a:4d:08:50:a2:c0:5e:f5:9a:59:81:cb:1b:04:49:
20:39:7d:ef:a5:18:70:3b:07:7e:4f:56:c0:24:6b:88:40:bc:
e0:5e:eb:d5:f4:e8:3c:25:9f:d2:6a:c0:be:58:71:f1:d0:a3:
61:89:ec:61:85:92:01:49:7a:d7:bf:a4:25:82:af:6b:88:44:
03:1e:f3:ee:4d:d6:94:d7:ef:90:b4:ba:a7:bb:81:e9:b7:82:
2a:51:f2:1c:72:80:65:a2:61:ff:79:63:7f:dc:e7:51:54:e0:
95:39:2a:73:97:b2:f0:a1:36:04:5c:25:cd:ca:a9:52:24:8b:
cd:e8:6d:96:ae:be:59:c1:6c:f4:19:fb:a2:75:17:61:1b:a9:
fb:7e:1c:cb:80:eb:86:b7:72:fd:73:57:bb:8e:a0:bd:89:7e:
c0:18:4f:ac:2b:61:fd:72:53:c1:27:5b:6f:6e:ce:58:7a:bb:
59:61:c3:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTg+5g1DK5FvADdPxI12RzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MWQ0ZTM0ZDRlNDg1MzljMTcwNDUxZDRlMjYxMzg4ODdm
NmU5MjIwHhcNMjYwOTI0MTMwMzUzWhcNMjYwOTI1MTMwMzUzWjAzMTEwLwYDVQQD
EyhjNDdkNDM4NzNkYTU0NDcxNDRhYmIwMjIwZjllN2I5YWQ1ZmQ5MmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtKcK3BxvBUWYoi1+xyKSN96eDPb
9NFR0l6Y60k552uUovJXjQfmzX07lKmQyHOmfhXE2VZY9/+HbuAsCP9ukNyTzoW/
2uAHkoDENbQudaQpOKtnLCsf1henXSz71aztWb5aAAfBf78GDlS4YgCy6G3FOXTl
oTxXtGPcao6YV68m+6UvTv5mssgCQecbUw/cATkw1qwVNbujGoKxg9NyFyRmkgFQ
ELaT5ViivTrylkaQ8jxjWJ6gjPhgSJGNkjreK5T7lYC2n2XNpgAUcK7p1SVW8D2U
QfR4Mk4bjZ5HyAjgYJCSQgMH1vXNXbqDxMWjk1Ib8YInA1XxWDUpAo0OhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMR9Q4c9pURxRKuwIg+ee5rV/ZLDMB8GA1UdIwQY
MBaAFIUdTjTU5IU5wXBFHU4mE4iH9ukiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFIxT05OVGtoVG5CY0VVZFRpWVRpSWYyNlNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9iZjE1ODktNmFkZi00NGIzLTk3NDYt
ODFjNDA1NTE0OGUwLzEvaFIxT05OVGtoVG5CY0VVZFRpWVRpSWYyNlNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9iZjE1ODktNmFkZi00NGIzLTk3NDYtODFjNDA1NTE0OGUw
LzEvaFIxT05OVGtoVG5CY0VVZFRpWVRpSWYyNlNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCZSJ924
8kudoEgNSJpor/TlJjQD4Y0W8tGI18WpQivTmn43hbI02kwyahbw8n5gFfhM12oa
olAywNcQtZ+NNE5422prBJNjeXSESk0IUKLAXvWaWYHLGwRJIDl976UYcDsHfk9W
wCRriEC84F7r1fToPCWf0mrAvlhx8dCjYYnsYYWSAUl617+kJYKva4hEAx7z7k3W
lNfvkLS6p7uB6beCKlHyHHKAZaJh/3ljf9znUVTglTkqc5ey8KE2BFwlzcqpUiSL
zehtlq6+WcFs9Bn7onUXYRup+34cy4Drhrdy/XNXu46gvYl+wBhPrCth/XJTwSdb
b27OWHq7WWHD3g==
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:14:57 2026 by rpki-client