
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
File: hu4gHGXWVe6c_iUflR6pG7oVRWc.mft (raw, json)
Hash identifier: kYnyUbNKJYns1zZLB4U1nYkwl3WDhfw4pqoGfDgtcTs=
Subject key identifier: 65:14:45:C3:E3:01:1C:9D:A4:9C:4D:2C:99:78:CE:8C:E1:D4:F9:C5
Authority key identifier: 86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
Certificate issuer: /CN=86ee201c65d655ee9cfe251f951ea91bba154567
Certificate serial: 01A0CBFE98E59C1D679743073FEEC3B0CC84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
Manifest number: 1A7E
Signing time: Wed 23 Sep 2026 02:00:55 +0000
Manifest this update: Wed 23 Sep 2026 02:00:55 +0000
Manifest next update: Thu 24 Sep 2026 02:00:55 +0000
Files and hashes: 1: LcSdh4tedCpmAS17t3yRnbgmEdk.roa (hash: hiklecs4t1l45JXffh9PyN2aehgshHQGA7Lc04Y7log=)
2: heKnF0nPw3navL7mvVdrP7ZenfE.roa (hash: SN8nxNReThCLTC+u68FN/Bqg6og3YUjtGA8xvnnpO7A=)
3: hu4gHGXWVe6c_iUflR6pG7oVRWc.crl (hash: oByAyWVbnGXC0q9NO07dinla3q2nAxy6gcHj4AD2PXk=)
4: raFuC_u8FXIkL3qzbF_M7uzS1bY.roa (hash: rn7vhUa/CpBOHdDH6ILdMBUoshBfT4bHqwrkhi/LUAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:98:e5:9c:1d:67:97:43:07:3f:ee:c3:b0:cc:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee201c65d655ee9cfe251f951ea91bba154567
Validity
Not Before: Sep 23 02:00:55 2026 GMT
Not After : Sep 24 02:00:55 2026 GMT
Subject: CN=651445c3e3011c9da49c4d2c9978ce8ce1d4f9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:90:c4:91:63:44:8b:bf:4c:05:80:80:0e:42:
98:4e:9c:bd:af:12:4d:4e:4f:88:e6:46:87:66:d8:
eb:d9:23:92:ab:65:d1:42:a5:e7:36:58:f9:e5:03:
bd:c9:31:c9:3e:65:42:0e:78:75:05:ce:d9:dd:97:
1a:b5:13:96:32:ff:bf:2a:96:60:11:a5:01:83:80:
c7:0c:c1:90:e6:0a:56:a7:78:5f:31:81:79:37:52:
2f:11:08:97:47:93:98:77:c2:1c:43:64:e0:6e:29:
54:10:71:ee:0d:75:fa:1e:90:a5:9a:76:ee:77:52:
2c:bc:92:69:7e:32:79:6f:0c:a0:81:78:e7:77:09:
f4:31:44:84:3e:21:36:88:02:4d:4d:90:46:9e:d3:
ae:8b:56:db:db:3d:81:1c:f7:6a:d9:c1:a1:30:0b:
fd:89:0c:75:ed:2f:2f:6f:98:ed:dd:25:c4:5d:5b:
fa:a6:b0:66:70:87:36:85:cc:e6:e5:f8:2d:da:8f:
7d:e0:f1:80:8f:be:bb:88:1c:77:aa:c1:8b:4d:94:
58:8c:95:73:83:6c:de:72:56:a9:e3:80:52:81:f7:
eb:cf:d8:e6:b6:e1:6e:f6:40:4c:c8:18:62:b1:8f:
b7:5c:b9:88:c6:38:87:41:f5:aa:9b:93:41:76:a5:
1d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:14:45:C3:E3:01:1C:9D:A4:9C:4D:2C:99:78:CE:8C:E1:D4:F9:C5
X509v3 Authority Key Identifier:
keyid:86:EE:20:1C:65:D6:55:EE:9C:FE:25:1F:95:1E:A9:1B:BA:15:45:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4gHGXWVe6c_iUflR6pG7oVRWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/13a735-3b1c-4d9c-8cfa-a8ca8e4c7e77/1/hu4gHGXWVe6c_iUflR6pG7oVRWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4c:9a:cb:9d:82:ce:8e:5b:d4:2b:a9:65:6e:e2:5a:99:72:
3a:30:dc:0e:e8:19:17:c6:00:89:82:46:88:8d:17:51:3c:56:
2b:09:4b:d2:64:5a:c8:31:fb:40:8a:af:e2:48:99:c3:4d:55:
b6:5f:37:04:7c:ff:df:8d:70:5e:9c:b2:9f:75:df:74:24:12:
da:35:93:de:c3:7d:2f:86:8b:de:1a:7a:2c:7d:72:cb:1f:79:
9e:d0:c4:84:9b:e6:7b:11:84:d1:b1:f3:b0:30:ae:83:ff:4f:
3d:d5:f3:e6:78:e5:d2:2b:f2:de:6b:c0:25:1d:00:a0:6e:96:
e4:8d:3e:b1:85:13:fd:10:2c:75:e2:3f:83:e5:41:3d:1a:47:
a4:10:ac:ca:d0:cb:ad:22:ac:42:11:16:d1:0b:39:41:d8:39:
e1:3d:47:0c:df:0c:1b:b4:fa:ff:4e:fb:d8:95:fc:3f:d7:06:
ac:3e:5d:ab:80:8e:71:b0:4e:c6:28:e5:d7:4f:dd:ac:75:c9:
74:33:c7:7e:e1:5f:05:d0:4e:7e:a7:0f:06:b2:f8:70:db:a0:
bc:44:3f:b8:dc:55:99:14:01:1a:b7:fc:4d:eb:35:c2:44:67:
01:92:b4:9a:1b:6d:a7:06:e6:24:97:1a:91:df:e7:a5:01:77:
f2:3d:01:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDL/pjlnB1nl0MHP+7DsMyEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZWUyMDFjNjVkNjU1ZWU5Y2ZlMjUxZjk1MWVhOTFiYmEx
NTQ1NjcwHhcNMjYwOTIzMDIwMDU1WhcNMjYwOTI0MDIwMDU1WjAzMTEwLwYDVQQD
Eyg2NTE0NDVjM2UzMDExYzlkYTQ5YzRkMmM5OTc4Y2U4Y2UxZDRmOWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5DEkWNEi79MBYCADkKYTpy9rxJN
Tk+I5kaHZtjr2SOSq2XRQqXnNlj55QO9yTHJPmVCDnh1Bc7Z3ZcatROWMv+/KpZg
EaUBg4DHDMGQ5gpWp3hfMYF5N1IvEQiXR5OYd8IcQ2TgbilUEHHuDXX6HpClmnbu
d1IsvJJpfjJ5bwyggXjndwn0MUSEPiE2iAJNTZBGntOui1bb2z2BHPdq2cGhMAv9
iQx17S8vb5jt3SXEXVv6prBmcIc2hczm5fgt2o994PGAj767iBx3qsGLTZRYjJVz
g2zeclap44BSgffrz9jmtuFu9kBMyBhisY+3XLmIxjiHQfWqm5NBdqUd4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUURcPjARydpJxNLJl4zozh1PnFMB8GA1UdIwQY
MBaAFIbuIBxl1lXunP4lH5UeqRu6FUVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHU0Z0hHWFdWZTZjX2lVZmxSNnBHN29WUldjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xM2E3MzUtM2IxYy00ZDljLThjZmEt
YThjYThlNGM3ZTc3LzEvaHU0Z0hHWFdWZTZjX2lVZmxSNnBHN29WUldjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8xM2E3MzUtM2IxYy00ZDljLThjZmEtYThjYThlNGM3ZTc3
LzEvaHU0Z0hHWFdWZTZjX2lVZmxSNnBHN29WUldjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0yay52C
zo5b1CupZW7iWplyOjDcDugZF8YAiYJGiI0XUTxWKwlL0mRayDH7QIqv4kiZw01V
tl83BHz/341wXpyyn3XfdCQS2jWT3sN9L4aL3hp6LH1yyx95ntDEhJvmexGE0bHz
sDCug/9PPdXz5njl0ivy3mvAJR0AoG6W5I0+sYUT/RAsdeI/g+VBPRpHpBCsytDL
rSKsQhEW0Qs5Qdg54T1HDN8MG7T6/0772JX8P9cGrD5dq4COcbBOxijl10/drHXJ
dDPHfuFfBdBOfqcPBrL4cNugvEQ/uNxVmRQBGrf8Tes1wkRnAZK0mhttpwbmJJca
kd/npQF38j0Bmg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 12:38:05 2026 by rpki-client