Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
File: H9CHXNAFHQwJJaygQQNOeECmdws.mft (raw, json)
Hash identifier: V+AHhTlfNjYEXwa8HwH6cA5IAOxkbtQ6uXkTL0NJBsM=
Subject key identifier: 2D:1E:68:99:F6:C3:A1:41:75:E8:57:34:BA:A1:8C:36:A0:E2:BA:F0
Authority key identifier: 1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
Certificate issuer: /CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Certificate serial: 01A1DDCBE37273A33247A2BC4C9DFCC7E05B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
Manifest number: 0ACA
Signing time: Sun 15 Nov 2026 06:01:29 +0000
Manifest this update: Sun 15 Nov 2026 06:01:29 +0000
Manifest next update: Mon 16 Nov 2026 06:01:29 +0000
Files and hashes: 1: CtUI7FuLA9XYnGo9ANvnYk3wXvY.roa (hash: je0VlN/8mERR3XoX+3H4qOkq0hsewP/tEtzCyO0GxN4=)
2: Dz46KAYraGcTikQMGoMJVAAInHQ.roa (hash: NU2HWGZh7sQrY1k6J9xhsLm4R4NqLLcBXrqTHwrCQfs=)
3: H9CHXNAFHQwJJaygQQNOeECmdws.crl (hash: Fh86lDaEKj/gpFkyroD97k04ZemEFi1ncS8zY6hXw4k=)
4: RzzdhI5WQTfIRJ5CT4m2Ue9mGN4.roa (hash: xrR61qMY4oBctclJGvQvpdXymPubQyCDbVzByy1zses=)
5: atjpUn5m_olYo4VMnv5o9bZkp10.roa (hash: zhJgLfRaNhUfkrFUtufurP1akqxnjTREPo55ccYjvXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cb:e3:72:73:a3:32:47:a2:bc:4c:9d:fc:c7:e0:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Validity
Not Before: Nov 15 06:01:29 2026 GMT
Not After : Nov 16 06:01:29 2026 GMT
Subject: CN=2d1e6899f6c3a14175e85734baa18c36a0e2baf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9f:6d:47:4f:46:77:d5:6b:ae:cc:1a:29:a0:
e5:c8:3b:02:6a:38:76:17:e2:c2:bb:07:77:e1:61:
4c:64:2e:74:b7:cf:79:db:fd:5b:8b:a3:05:61:19:
e3:ca:cd:77:8e:48:a6:f0:17:00:15:1a:16:8f:5d:
0e:5f:ee:15:69:c0:d1:3a:e1:b2:a0:6f:09:ea:a1:
63:e4:8c:5c:75:3a:b0:72:e5:22:91:7b:96:29:e8:
06:be:99:63:66:5c:06:1c:f3:25:6c:bd:81:d4:e9:
23:1c:5c:ac:14:63:a7:50:d6:20:dd:24:b4:a3:8a:
1a:d4:0e:c7:90:25:e7:6b:e6:63:7e:0f:d1:c0:82:
af:39:46:aa:02:dd:ce:85:cb:f7:43:9e:08:b0:06:
a2:1e:a3:e8:68:f9:5b:cd:54:ac:7c:88:5a:e0:ce:
01:b0:55:3b:56:d2:5c:dd:11:4a:77:8e:f3:e6:5b:
43:c1:b6:63:6f:5d:b3:c1:c3:b2:dd:fb:6e:6f:b0:
f6:64:c3:e9:7b:61:e8:c6:4b:4d:0b:27:64:9c:58:
8c:40:99:e4:92:ce:09:49:3d:e7:1f:9b:22:98:06:
68:99:50:ba:2c:2d:5f:cb:06:f9:9c:68:4e:fa:06:
70:0d:ab:94:80:e4:e2:4f:8c:f9:0c:f1:12:8d:d5:
50:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1E:68:99:F6:C3:A1:41:75:E8:57:34:BA:A1:8C:36:A0:E2:BA:F0
X509v3 Authority Key Identifier:
keyid:1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:42:cd:48:4b:51:66:55:40:9e:43:a8:5f:03:a0:fe:b7:22:
d4:4c:1f:e1:35:86:18:87:fd:98:da:a1:13:dd:91:82:47:0d:
a8:e4:a7:75:98:ca:2a:0a:a7:ab:6d:39:20:d0:9d:ca:df:32:
2b:a1:fb:ad:8e:12:a1:d6:62:87:7c:cb:7c:8b:fe:c2:4f:a2:
fc:98:a6:b7:ac:8e:3e:1d:ff:31:71:32:58:97:92:bd:c1:e8:
10:80:39:ed:0d:51:29:ca:21:65:07:e4:06:ba:9e:c4:86:31:
2f:80:c8:65:52:d7:fd:7c:b5:78:b9:78:2f:ca:6f:ba:ff:6b:
aa:58:35:54:0f:52:50:b3:c3:af:0c:7d:09:a6:cb:ac:18:fa:
91:ab:21:58:4e:cb:b4:d4:e7:ba:1e:40:f1:e5:ef:12:df:90:
b9:8c:86:73:c7:e6:75:dc:21:52:72:d2:19:02:5c:f1:1f:de:
52:c0:de:97:81:8a:25:c1:54:e7:4f:b7:52:dd:ed:72:6a:96:
64:2a:b8:34:37:6e:87:3c:c5:d4:9c:51:01:9a:bb:f5:97:96:
8a:e5:8d:2a:f1:46:f6:2e:3e:92:dc:5d:85:32:ca:61:49:8a:
da:0e:ab:d2:98:6e:7b:b1:41:cd:2b:63:e1:95:55:96:20:18:
27:5a:d8:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdy+Nyc6MyR6K8TJ38x+BbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZDA4NzVjZDAwNTFkMGMwOTI1YWNhMDQxMDM0ZTc4NDBh
Njc3MGIwHhcNMjYxMTE1MDYwMTI5WhcNMjYxMTE2MDYwMTI5WjAzMTEwLwYDVQQD
EygyZDFlNjg5OWY2YzNhMTQxNzVlODU3MzRiYWExOGMzNmEwZTJiYWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyp9tR09Gd9VrrswaKaDlyDsCajh2
F+LCuwd34WFMZC50t8952/1bi6MFYRnjys13jkim8BcAFRoWj10OX+4VacDROuGy
oG8J6qFj5IxcdTqwcuUikXuWKegGvpljZlwGHPMlbL2B1OkjHFysFGOnUNYg3SS0
o4oa1A7HkCXna+Zjfg/RwIKvOUaqAt3Ohcv3Q54IsAaiHqPoaPlbzVSsfIha4M4B
sFU7VtJc3RFKd47z5ltDwbZjb12zwcOy3ftub7D2ZMPpe2HoxktNCydknFiMQJnk
ks4JST3nH5simAZomVC6LC1fywb5nGhO+gZwDauUgOTiT4z5DPESjdVQDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0eaJn2w6FBdehXNLqhjDag4rrwMB8GA1UdIwQY
MBaAFB/Qh1zQBR0MCSWsoEEDTnhApncLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDlDSFhOQUZIUXdKSmF5Z1FRTk9lRUNtZHdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yMjEwNDgtM2JhZC00NjljLWI5MzMt
ZTA4MDJmNDc0NDQ0LzEvSDlDSFhOQUZIUXdKSmF5Z1FRTk9lRUNtZHdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8yMjEwNDgtM2JhZC00NjljLWI5MzMtZTA4MDJmNDc0NDQ0
LzEvSDlDSFhOQUZIUXdKSmF5Z1FRTk9lRUNtZHdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARULNSEtR
ZlVAnkOoXwOg/rci1Ewf4TWGGIf9mNqhE92RgkcNqOSndZjKKgqnq205INCdyt8y
K6H7rY4SodZih3zLfIv+wk+i/Jimt6yOPh3/MXEyWJeSvcHoEIA57Q1RKcohZQfk
BrqexIYxL4DIZVLX/Xy1eLl4L8pvuv9rqlg1VA9SULPDrwx9CabLrBj6kashWE7L
tNTnuh5A8eXvEt+QuYyGc8fmddwhUnLSGQJc8R/eUsDel4GKJcFU50+3Ut3tcmqW
ZCq4NDduhzzF1JxRAZq79ZeWiuWNKvFG9i4+ktxdhTLKYUmK2g6r0phue7FBzStj
4ZVVliAYJ1rYqQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:11:12 2026 by rpki-client