Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
File: Hx4uqu8HAVlawnVNASEhfnuR1zk.mft (raw, json)
Hash identifier: CKJE6URhPvmKKRipI/dDvqHxbEZ/THVDjyR6Vet39s8=
Subject key identifier: 32:DE:79:FC:16:C4:23:EF:8A:BA:DA:79:56:B7:B0:6D:FB:64:63:0F
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Certificate issuer: /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial: 01A0EB1CE8146D130490A0FF12D04FA3FF0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
Manifest number: 067D
Signing time: Tue 29 Sep 2026 03:02:15 +0000
Manifest this update: Tue 29 Sep 2026 03:02:15 +0000
Manifest next update: Wed 30 Sep 2026 03:02:15 +0000
Files and hashes: 1: Hx4uqu8HAVlawnVNASEhfnuR1zk.crl (hash: EPdS2hXTyqowOsh9zQxJQpy/1Q6AMq0uc25VJlp8Bso=)
2: XHt6U6txMDBbVbzSvnNjcotaYrU.roa (hash: 6GcCoiIs+4rcGlZlZSq/JDe7tcT/R5cFv6QsNxJbWAg=)
3: v0-H6ke7hMRuQuVw_oo2QtUgSNE.roa (hash: tBQwZZG9DL7zjt0yr5VRGUWvKlkN9L/sX8V6/7cxKZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 03:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:1c:e8:14:6d:13:04:90:a0:ff:12:d0:4f:a3:ff:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Validity
Not Before: Sep 29 03:02:15 2026 GMT
Not After : Sep 30 03:02:15 2026 GMT
Subject: CN=32de79fc16c423ef8abada7956b7b06dfb64630f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6c:5d:0e:3e:bf:54:e8:96:92:c0:ac:4a:ee:
6c:04:e0:72:27:f4:7c:3f:60:94:34:e4:c8:ec:a2:
42:f8:34:3b:16:51:2a:0d:74:1f:e6:6c:41:63:b5:
d4:ee:e6:df:49:bf:f5:5a:f8:03:65:9f:d7:05:84:
c4:7d:87:55:91:16:ed:2a:a2:fe:54:d2:75:34:32:
1a:a8:0c:1b:78:b9:15:7c:c8:ca:b3:fc:fd:21:ac:
69:c2:36:66:81:f0:5a:51:68:e8:fd:59:c7:c8:d2:
28:d0:a2:c3:00:fb:2a:0e:eb:14:e8:69:6d:e2:ff:
5d:a1:44:be:9b:1d:36:45:f8:48:d0:83:42:bd:3d:
ba:05:19:4e:55:30:17:b5:85:21:3b:eb:fa:c7:e7:
77:2b:61:c6:5e:f1:b5:43:fd:bf:62:b1:b3:0d:51:
49:84:dd:63:d8:db:59:fe:fb:7e:d1:d7:6b:b6:19:
b3:7b:b4:ce:5c:8a:d2:9a:8f:7d:7d:e0:1c:6c:91:
2a:db:c4:82:e6:5b:55:ec:96:b9:74:6c:3f:a0:0c:
32:8d:41:47:99:71:b7:ab:e6:70:9d:7b:bb:ba:b0:
f6:28:48:1b:23:79:1e:f9:43:09:f9:e1:c8:4f:c5:
c7:1d:94:1b:1c:91:02:07:ae:35:98:0a:35:de:c4:
f3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DE:79:FC:16:C4:23:EF:8A:BA:DA:79:56:B7:B0:6D:FB:64:63:0F
X509v3 Authority Key Identifier:
keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:eb:e3:81:d2:de:2c:0e:85:6f:e3:e6:3c:9d:14:2a:34:27:
48:9b:d0:b5:7e:1c:cd:0d:cd:d6:1c:df:fc:e5:c4:47:a8:1c:
f7:2d:7e:d8:b2:91:f9:20:47:19:ac:12:f9:01:d8:98:52:f5:
8f:4c:12:31:4c:de:0c:01:bb:6a:68:ae:a8:5a:eb:c6:27:f9:
8a:eb:3c:7d:1f:88:d0:b6:70:7a:bd:ee:e8:09:85:34:1e:7c:
f2:ca:e8:76:8d:7b:b8:29:ec:67:23:b1:cc:95:59:18:38:8b:
19:3b:69:e3:db:9c:ae:c6:e0:a4:43:2a:93:9f:7d:fe:58:e1:
4e:26:97:b0:22:2f:10:86:7e:8d:ce:50:31:40:59:9d:69:21:
c2:b4:00:c0:91:ae:c7:4d:f2:54:07:d8:c1:1b:41:f4:94:93:
4a:a9:bd:32:65:33:a4:03:55:bd:f7:bf:11:aa:8c:c8:b9:2c:
4a:70:53:37:90:a4:99:d7:a6:2c:9c:2b:77:3e:04:8d:91:ad:
04:da:43:4c:5b:8b:38:90:2d:11:54:f6:b3:1b:ab:32:10:ed:
37:b8:e1:e0:d3:a6:b2:40:10:96:96:fe:80:b5:11:ed:a7:40:
b3:24:f8:a6:d4:94:c6:d4:36:9e:70:17:29:95:a3:9f:4a:f5:
2b:69:e3:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDrHOgUbRMEkKD/EtBPo/8MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMWUyZWFhZWYwNzAxNTk1YWMyNzU0ZDAxMjEyMTdlN2I5
MWQ3MzkwHhcNMjYwOTI5MDMwMjE1WhcNMjYwOTMwMDMwMjE1WjAzMTEwLwYDVQQD
EygzMmRlNzlmYzE2YzQyM2VmOGFiYWRhNzk1NmI3YjA2ZGZiNjQ2MzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2xdDj6/VOiWksCsSu5sBOByJ/R8
P2CUNOTI7KJC+DQ7FlEqDXQf5mxBY7XU7ubfSb/1WvgDZZ/XBYTEfYdVkRbtKqL+
VNJ1NDIaqAwbeLkVfMjKs/z9IaxpwjZmgfBaUWjo/VnHyNIo0KLDAPsqDusU6Glt
4v9doUS+mx02RfhI0INCvT26BRlOVTAXtYUhO+v6x+d3K2HGXvG1Q/2/YrGzDVFJ
hN1j2NtZ/vt+0ddrthmze7TOXIrSmo99feAcbJEq28SC5ltV7Ja5dGw/oAwyjUFH
mXG3q+ZwnXu7urD2KEgbI3ke+UMJ+eHIT8XHHZQbHJECB641mAo13sTzYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLeefwWxCPvirraeVa3sG37ZGMPMB8GA1UdIwQY
MBaAFB8eLqrvBwFZWsJ1TQEhIX57kdc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHg0dXF1OEhBVmxhd25WTkFTRWhmbnVSMXprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS80ZDZmZmQtMWZhYy00OTdmLTgxMGMt
MmIzNGI4NDMzYmI1LzEvSHg0dXF1OEhBVmxhd25WTkFTRWhmbnVSMXprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS80ZDZmZmQtMWZhYy00OTdmLTgxMGMtMmIzNGI4NDMzYmI1
LzEvSHg0dXF1OEhBVmxhd25WTkFTRWhmbnVSMXprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAruvjgdLe
LA6Fb+PmPJ0UKjQnSJvQtX4czQ3N1hzf/OXER6gc9y1+2LKR+SBHGawS+QHYmFL1
j0wSMUzeDAG7amiuqFrrxif5ius8fR+I0LZwer3u6AmFNB588srodo17uCnsZyOx
zJVZGDiLGTtp49ucrsbgpEMqk599/ljhTiaXsCIvEIZ+jc5QMUBZnWkhwrQAwJGu
x03yVAfYwRtB9JSTSqm9MmUzpANVvfe/EaqMyLksSnBTN5CkmdemLJwrdz4EjZGt
BNpDTFuLOJAtEVT2sxurMhDtN7jh4NOmskAQlpb+gLUR7adAsyT4ptSUxtQ2nnAX
KZWjn0r1K2njYA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 13:17:24 2026 by rpki-client