Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
File: hEcK8NideFuhi6YX3Anj9yxZlvM.mft (raw, json)
Hash identifier: aD5xZgMAfg3A3OcHN2T4YoDZPPY1TbmTeWPLHuswMCk=
Subject key identifier: 0D:AB:23:2F:55:DE:2A:A2:C1:2B:BA:A6:AC:62:B6:8C:9E:66:28:A2
Authority key identifier: 84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
Certificate issuer: /CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Certificate serial: 01A06CF016F16086F8E81F3769D6FB783058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
Manifest number: 0BC7
Signing time: Fri 04 Sep 2026 15:01:08 +0000
Manifest this update: Fri 04 Sep 2026 15:01:08 +0000
Manifest next update: Sat 05 Sep 2026 15:01:08 +0000
Files and hashes: 1: P0H9mn8azX8J6K-hdAfHiYeHr48.roa (hash: E4c9kuinUCaG0thWwOJajTUQL7VeKxkEvaLK1sfiV8U=)
2: hEcK8NideFuhi6YX3Anj9yxZlvM.crl (hash: V3jaokRJe1jCHDuXOOD4fZ5GY44odyhqpDB5oxVFfHw=)
3: tdjIiHG6aRg6RaOSgsb_E64QRco.roa (hash: rpGb1Qz22L2bS8euMlwSPzOxpxsFd6dx18fW4QaBOow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:f0:16:f1:60:86:f8:e8:1f:37:69:d6:fb:78:30:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Validity
Not Before: Sep 4 15:01:08 2026 GMT
Not After : Sep 5 15:01:08 2026 GMT
Subject: CN=0dab232f55de2aa2c12bbaa6ac62b68c9e6628a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:29:f9:35:23:c2:bc:c1:39:80:ae:00:8d:df:
56:a6:f4:f1:2f:c6:de:ce:99:fd:8f:97:1b:56:07:
fe:81:4f:e4:82:72:c1:c3:a2:8e:f1:80:00:b9:88:
30:2a:ff:75:58:9c:d0:ca:e1:4b:af:78:e2:7a:d1:
c2:fb:46:48:f6:68:49:ed:98:a6:f3:ab:1b:37:00:
39:f8:87:76:94:ca:35:a9:08:89:99:51:15:b3:38:
c2:61:3d:69:b6:52:9f:f4:b2:01:bd:22:8b:5d:73:
cb:a8:c6:8b:3e:0e:76:95:5b:8e:6d:3c:43:9d:ce:
c4:ae:d9:36:f4:ce:f4:d4:8e:0c:f4:b0:ed:11:d0:
75:df:b8:9f:1c:23:8c:04:aa:39:0f:b6:6c:b4:69:
9a:30:a1:e9:a1:9c:23:78:2a:bf:6f:cb:ed:d6:f9:
19:cc:96:c8:9b:34:4a:c8:1c:5d:8f:3b:a5:21:f2:
79:ee:f7:22:04:7b:41:46:6d:13:e3:e6:b5:71:2f:
f5:6e:91:bd:c3:61:67:ef:87:a5:b4:33:2e:d8:ca:
3f:33:19:a8:44:86:c3:bf:81:66:29:b0:36:04:03:
05:3b:29:b5:eb:c9:40:24:12:24:18:6a:11:00:3a:
85:87:41:0c:1b:9b:26:84:78:37:e6:67:9f:58:0c:
4d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AB:23:2F:55:DE:2A:A2:C1:2B:BA:A6:AC:62:B6:8C:9E:66:28:A2
X509v3 Authority Key Identifier:
keyid:84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:dd:d1:d5:ae:36:e2:5f:d5:4b:86:12:b2:59:cc:79:5b:30:
6f:f1:6c:af:86:21:ce:64:63:c1:aa:f7:b5:10:a2:19:55:a2:
d3:07:be:03:4c:a4:b3:ab:66:4e:1e:91:09:40:01:6c:48:77:
25:88:65:03:b3:d0:ef:c1:12:a2:76:5e:f1:63:28:1e:1b:23:
36:49:1e:58:8a:0d:97:ee:b0:1d:d5:03:db:97:a3:b7:04:7a:
e5:2f:ec:40:ed:56:d4:92:f5:4b:bc:07:bf:08:3b:b9:54:61:
ae:64:73:dd:58:37:75:42:1c:25:63:34:fe:cb:4d:dc:d9:e2:
9c:8b:86:6a:6d:c4:bd:e7:1d:22:22:6c:5e:c5:fc:c3:0c:d8:
9d:b4:cd:87:b3:65:eb:87:94:02:61:dd:cc:b3:61:ff:c9:ed:
85:bf:cc:6d:7d:02:e1:45:eb:a4:b8:15:9a:26:66:74:4d:30:
a7:fa:3d:b2:d1:a5:09:14:a8:b9:72:60:61:ad:a1:0d:22:57:
ba:8d:be:ea:92:55:f8:c2:a2:f4:7f:a8:13:cf:51:8a:91:df:
94:b1:5e:08:18:9f:10:58:06:91:39:a4:03:c8:dc:c4:32:39:
44:cc:c3:b4:c5:47:d2:c5:78:a7:18:54:e9:53:9c:52:df:d1:
74:7c:49:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBs8BbxYIb46B83adb7eDBYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NDcwYWYwZDg5ZDc4NWJhMThiYTYxN2RjMDllM2Y3MmM1
OTk2ZjMwHhcNMjYwOTA0MTUwMTA4WhcNMjYwOTA1MTUwMTA4WjAzMTEwLwYDVQQD
EygwZGFiMjMyZjU1ZGUyYWEyYzEyYmJhYTZhYzYyYjY4YzllNjYyOGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yn5NSPCvME5gK4Ajd9WpvTxL8be
zpn9j5cbVgf+gU/kgnLBw6KO8YAAuYgwKv91WJzQyuFLr3jietHC+0ZI9mhJ7Zim
86sbNwA5+Id2lMo1qQiJmVEVszjCYT1ptlKf9LIBvSKLXXPLqMaLPg52lVuObTxD
nc7Ertk29M701I4M9LDtEdB137ifHCOMBKo5D7ZstGmaMKHpoZwjeCq/b8vt1vkZ
zJbImzRKyBxdjzulIfJ57vciBHtBRm0T4+a1cS/1bpG9w2Fn74eltDMu2Mo/Mxmo
RIbDv4FmKbA2BAMFOym168lAJBIkGGoRADqFh0EMG5smhHg35mefWAxNHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2rIy9V3iqiwSu6pqxitoyeZiiiMB8GA1UdIwQY
MBaAFIRHCvDYnXhboYumF9wJ4/csWZbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEVjSzhOaWRlRnVoaTZZWDNBbmo5eXhabHZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS82NjBmMWQtNTc1My00NTE2LTgwMDIt
ZTc2ZTNlMjkzZTAyLzEvaEVjSzhOaWRlRnVoaTZZWDNBbmo5eXhabHZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS82NjBmMWQtNTc1My00NTE2LTgwMDItZTc2ZTNlMjkzZTAy
LzEvaEVjSzhOaWRlRnVoaTZZWDNBbmo5eXhabHZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA193R1a42
4l/VS4YSslnMeVswb/Fsr4YhzmRjwar3tRCiGVWi0we+A0yks6tmTh6RCUABbEh3
JYhlA7PQ78ESonZe8WMoHhsjNkkeWIoNl+6wHdUD25ejtwR65S/sQO1W1JL1S7wH
vwg7uVRhrmRz3Vg3dUIcJWM0/stN3NninIuGam3EvecdIiJsXsX8wwzYnbTNh7Nl
64eUAmHdzLNh/8nthb/MbX0C4UXrpLgVmiZmdE0wp/o9stGlCRSouXJgYa2hDSJX
uo2+6pJV+MKi9H+oE89RipHflLFeCBifEFgGkTmkA8jcxDI5RMzDtMVH0sV4pxhU
6VOcUt/RdHxJuQ==
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:34:04 2026 by rpki-client