Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
File: hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft (raw, json)
Hash identifier: 7dxBXpr7GmI5R3V0PQ3Dr3TfrNaLyLSoQYSq4z3G9gg=
Subject key identifier: 8B:88:0C:84:71:B2:47:88:23:1E:D9:DC:C4:60:61:0D:49:58:17:99
Authority key identifier: 86:38:41:50:6D:02:61:31:96:50:57:40:9A:16:04:A5:67:1F:05:41
Certificate issuer: /CN=863841506d026131965057409a1604a5671f0541
Certificate serial: 01A0EA090DD18FD97E3DB3A94BA21CAC0317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjhBUG0CYTGWUFdAmhYEpWcfBUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
Manifest number: 0841
Signing time: Mon 28 Sep 2026 22:00:56 +0000
Manifest this update: Mon 28 Sep 2026 22:00:56 +0000
Manifest next update: Tue 29 Sep 2026 22:00:56 +0000
Files and hashes: 1: A_-FW985zbY15HsoQHY3jzaLsqE.roa (hash: eSJY0BewKa72GIdMnrs7+2x+KiKuirCjSmv68OLB6u4=)
2: hjhBUG0CYTGWUFdAmhYEpWcfBUE.crl (hash: sG2ssZF+txhDqvQg1JLnOk4z9p7wbjamnEb1jmFppWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjhBUG0CYTGWUFdAmhYEpWcfBUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:09:0d:d1:8f:d9:7e:3d:b3:a9:4b:a2:1c:ac:03:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=863841506d026131965057409a1604a5671f0541
Validity
Not Before: Sep 28 22:00:56 2026 GMT
Not After : Sep 29 22:00:56 2026 GMT
Subject: CN=8b880c8471b24788231ed9dcc460610d49581799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c6:d7:20:f7:24:97:ca:8f:ba:98:6d:a1:fb:
b0:33:05:bb:30:20:81:47:e9:6b:dc:25:1d:c5:f4:
cd:8e:fd:c6:3e:45:fa:98:9d:81:c3:68:be:ba:9f:
83:48:f1:85:7f:1c:d1:e9:22:3c:5f:c6:e4:56:1a:
de:31:f3:98:f4:63:7e:ab:ad:6d:30:23:3e:8d:22:
c7:a2:fd:fe:7a:95:30:df:3d:e0:8a:fc:67:29:ce:
20:9e:5e:6d:17:4b:fe:06:77:64:3f:d5:37:28:02:
1a:cc:22:54:e4:2b:2b:e7:38:a0:2d:d3:8d:7f:4a:
7c:b3:17:eb:34:be:23:12:dc:f8:17:d1:42:c3:2a:
93:01:e0:9c:18:8c:1e:aa:8a:db:c8:a0:f9:18:ba:
ca:ee:ec:d6:43:fe:3f:bf:a8:96:eb:10:b7:5f:36:
6f:97:ca:ac:57:04:a5:a5:bc:b7:5d:69:d0:50:f9:
cf:2b:3f:78:89:25:e5:e0:72:3a:1e:5c:25:74:ad:
5a:b6:bc:14:78:28:f3:cc:c3:cc:07:1b:a5:32:9e:
e2:7a:15:15:44:0b:f0:cf:7c:9f:29:dd:07:8a:41:
9a:d8:58:26:b4:e0:4b:9f:4b:b2:0a:99:42:93:4b:
46:f3:7d:92:8b:77:59:26:db:f0:f9:04:f0:be:1e:
73:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:88:0C:84:71:B2:47:88:23:1E:D9:DC:C4:60:61:0D:49:58:17:99
X509v3 Authority Key Identifier:
keyid:86:38:41:50:6D:02:61:31:96:50:57:40:9A:16:04:A5:67:1F:05:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjhBUG0CYTGWUFdAmhYEpWcfBUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:48:3f:2f:0b:71:f5:7d:2c:a8:91:c7:f7:5b:b8:24:3c:4e:
b5:11:5d:3f:e3:f4:00:c9:80:d8:e5:9a:62:b4:e5:56:5a:89:
32:af:f4:12:06:64:95:48:51:83:6a:84:8c:38:ef:85:35:b4:
5a:f0:b6:53:4f:df:39:ae:81:2d:73:71:48:70:a4:46:ba:89:
c4:a0:6f:2b:3b:64:3e:21:f0:13:56:ab:ac:ab:81:42:08:26:
f2:b2:2b:fd:2c:bb:0a:92:01:23:59:07:17:f7:a6:63:7c:f7:
5c:d7:66:fd:52:06:25:84:f4:3c:20:c6:46:81:ab:0f:cf:d7:
f1:e9:71:52:3b:d2:81:ce:49:4d:54:fb:ec:c5:90:c9:f2:6f:
3d:19:bb:fe:06:99:21:c2:6c:b2:71:eb:57:6c:31:c8:d6:96:
0b:90:b4:76:c6:5a:2f:40:91:42:d9:05:ab:2e:9e:a3:90:0b:
85:95:22:ea:6b:6d:3c:21:41:82:15:76:fe:d1:de:b7:90:18:
0e:26:8e:ef:b0:12:ea:23:7e:54:09:f8:ff:bb:18:ff:74:b3:
de:46:b4:f9:0f:1a:a5:31:02:22:68:31:f7:fa:e1:39:8f:3e:
d0:e6:53:16:9c:f2:35:bf:81:c1:74:c9:7c:72:c9:98:ed:35:
fd:d6:41:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDqCQ3Rj9l+PbOpS6IcrAMXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Mzg0MTUwNmQwMjYxMzE5NjUwNTc0MDlhMTYwNGE1Njcx
ZjA1NDEwHhcNMjYwOTI4MjIwMDU2WhcNMjYwOTI5MjIwMDU2WjAzMTEwLwYDVQQD
Eyg4Yjg4MGM4NDcxYjI0Nzg4MjMxZWQ5ZGNjNDYwNjEwZDQ5NTgxNzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8bXIPckl8qPuphtofuwMwW7MCCB
R+lr3CUdxfTNjv3GPkX6mJ2Bw2i+up+DSPGFfxzR6SI8X8bkVhreMfOY9GN+q61t
MCM+jSLHov3+epUw3z3givxnKc4gnl5tF0v+BndkP9U3KAIazCJU5Csr5zigLdON
f0p8sxfrNL4jEtz4F9FCwyqTAeCcGIweqorbyKD5GLrK7uzWQ/4/v6iW6xC3XzZv
l8qsVwSlpby3XWnQUPnPKz94iSXl4HI6HlwldK1atrwUeCjzzMPMBxulMp7iehUV
RAvwz3yfKd0HikGa2FgmtOBLn0uyCplCk0tG832Si3dZJtvw+QTwvh5zkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIuIDIRxskeIIx7Z3MRgYQ1JWBeZMB8GA1UdIwQY
MBaAFIY4QVBtAmExllBXQJoWBKVnHwVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGpoQlVHMENZVEdXVUZkQW1oWUVwV2NmQlVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xZjE1NjMtYjMzMS00M2E5LWI5Y2Mt
M2JmYTA1MDkyMDFmLzEvaGpoQlVHMENZVEdXVUZkQW1oWUVwV2NmQlVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8xZjE1NjMtYjMzMS00M2E5LWI5Y2MtM2JmYTA1MDkyMDFm
LzEvaGpoQlVHMENZVEdXVUZkQW1oWUVwV2NmQlVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkg/Lwtx
9X0sqJHH91u4JDxOtRFdP+P0AMmA2OWaYrTlVlqJMq/0EgZklUhRg2qEjDjvhTW0
WvC2U0/fOa6BLXNxSHCkRrqJxKBvKztkPiHwE1arrKuBQggm8rIr/Sy7CpIBI1kH
F/emY3z3XNdm/VIGJYT0PCDGRoGrD8/X8elxUjvSgc5JTVT77MWQyfJvPRm7/gaZ
IcJssnHrV2wxyNaWC5C0dsZaL0CRQtkFqy6eo5ALhZUi6mttPCFBghV2/tHet5AY
DiaO77AS6iN+VAn4/7sY/3Sz3ka0+Q8apTECImgx9/rhOY8+0OZTFpzyNb+BwXTJ
fHLJmO01/dZB6Q==
-----END CERTIFICATE-----
Generated at Tue Sep 29 03:51:29 2026 by rpki-client