Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/hgyewNGzTkvXpk-QAgWTV0CbM8o.mft
File: hgyewNGzTkvXpk-QAgWTV0CbM8o.mft (raw, json)
Hash identifier: 6ml/y/GQw+emzZ7BWBqBcjaQ2JTkRq3Ve75xkP1HgrY=
Subject key identifier: 48:47:91:94:4B:34:B6:E0:72:2E:F9:85:6F:38:A1:73:EA:C8:56:FA
Authority key identifier: 86:0C:9E:C0:D1:B3:4E:4B:D7:A6:4F:90:02:05:93:57:40:9B:33:CA
Certificate issuer: /CN=860c9ec0d1b34e4bd7a64f9002059357409b33ca
Certificate serial: 01A03F3BA98DC068052552AD57AFA40D94A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgyewNGzTkvXpk-QAgWTV0CbM8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/hgyewNGzTkvXpk-QAgWTV0CbM8o.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 18:01:09 +0000
Manifest this update: Wed 26 Aug 2026 18:01:09 +0000
Manifest next update: Thu 27 Aug 2026 18:01:09 +0000
Files and hashes: 1: 3H6PgooRGLT_mSPUyDMorwjEhUs.roa (hash: U5HujpHe+LmaURpE34QxCKE6KhEyc2Pqe68mUX3PjZQ=)
2: hgyewNGzTkvXpk-QAgWTV0CbM8o.crl (hash: vQ/lB2k5AaS43sQLGzgkZrzwBDbmNgaBqG44BrfhHw0=)
3: wyvBjZ-0ftuE8HVEKWNED0ouTx4.roa (hash: cpWy42Uj2If/l45ij0xFVto/b1Q0O7mBcXLVxEEvfaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/hgyewNGzTkvXpk-QAgWTV0CbM8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/hgyewNGzTkvXpk-QAgWTV0CbM8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgyewNGzTkvXpk-QAgWTV0CbM8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3b:a9:8d:c0:68:05:25:52:ad:57:af:a4:0d:94:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860c9ec0d1b34e4bd7a64f9002059357409b33ca
Validity
Not Before: Aug 26 18:01:09 2026 GMT
Not After : Aug 27 18:01:09 2026 GMT
Subject: CN=484791944b34b6e0722ef9856f38a173eac856fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:82:c1:9e:c2:97:95:21:a4:5b:72:5d:25:a9:
0f:36:6a:86:e6:e0:5c:af:58:7b:e3:17:1a:64:f8:
5f:9d:c8:78:19:24:35:0f:53:b0:00:93:46:3a:aa:
07:65:04:0f:10:1a:cf:6b:00:f2:72:62:b1:df:42:
63:c2:fd:09:a0:9d:5f:d8:b3:8a:49:26:29:b0:7a:
6b:be:66:a1:71:88:2b:fd:13:f5:3c:15:2e:ca:ab:
a2:80:8c:e6:ef:a8:41:4a:e3:d2:42:3d:d8:fb:0e:
9b:c4:69:5d:2d:8b:68:ef:3a:ce:45:d7:99:da:c6:
66:5b:10:cb:6e:ba:48:96:33:b8:db:a5:c4:74:bc:
22:69:a9:bc:68:48:7b:6f:60:a2:35:66:35:34:e6:
5a:c9:c3:24:cc:f2:1e:88:83:c5:ce:e9:7f:2c:29:
ac:86:1f:6f:74:d0:53:50:24:1b:d7:80:60:b7:f7:
af:d1:19:21:c7:02:4a:39:23:7e:e9:2f:4e:4e:73:
ed:d1:20:de:22:b7:70:35:42:58:0a:7e:98:fb:b1:
29:d2:50:86:9f:dc:13:ba:fb:c7:d4:33:bc:e5:52:
40:73:d0:69:af:66:ac:92:64:8e:4b:d2:6f:9d:e7:
21:f2:ef:f9:1a:db:a0:ac:3c:d8:c0:2c:6c:8e:21:
8b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:47:91:94:4B:34:B6:E0:72:2E:F9:85:6F:38:A1:73:EA:C8:56:FA
X509v3 Authority Key Identifier:
keyid:86:0C:9E:C0:D1:B3:4E:4B:D7:A6:4F:90:02:05:93:57:40:9B:33:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgyewNGzTkvXpk-QAgWTV0CbM8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/hgyewNGzTkvXpk-QAgWTV0CbM8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/hgyewNGzTkvXpk-QAgWTV0CbM8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:66:c2:30:8b:f4:ec:2b:42:c0:6d:9a:fe:54:72:53:f4:fb:
70:3f:34:13:d3:e2:65:b6:03:67:f8:33:d9:69:9d:ac:24:87:
1b:1c:b0:7f:20:80:22:f7:6d:6c:84:fd:45:82:cb:0f:0c:53:
c5:14:b9:c0:3d:d6:41:8c:fc:73:7b:ea:dd:15:72:85:44:73:
e5:30:69:06:67:05:e8:b7:17:65:19:e6:e4:b0:b4:5e:5a:a0:
6a:46:9c:9f:57:0f:cf:8b:df:c7:93:e1:5a:04:03:31:00:e8:
3e:15:5b:77:c5:3c:e7:58:a8:0a:e0:3e:7f:97:9c:38:cb:47:
2f:e7:ca:21:ca:2c:ce:e2:f8:0e:1b:6d:ca:89:af:1a:ed:75:
28:2a:d8:e8:61:64:ff:e5:d3:87:8d:18:b0:65:75:41:64:c9:
67:c4:80:33:36:e6:87:36:ff:b4:47:b5:cf:dc:bf:4c:d3:1d:
e7:f8:4a:e7:f4:92:1a:81:09:53:2e:68:3a:c2:44:41:83:3a:
24:af:02:5c:13:65:b3:86:a8:e9:e0:7c:01:db:30:96:3b:1c:
3a:f8:92:8f:e4:80:9f:52:b0:12:5a:da:ef:87:39:7e:e3:8b:
39:5c:98:c7:05:5e:ed:d4:17:88:38:d6:d8:9c:18:b5:c4:2f:
e7:a1:98:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA/O6mNwGgFJVKtV6+kDZSkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MGM5ZWMwZDFiMzRlNGJkN2E2NGY5MDAyMDU5MzU3NDA5
YjMzY2EwHhcNMjYwODI2MTgwMTA5WhcNMjYwODI3MTgwMTA5WjAzMTEwLwYDVQQD
Eyg0ODQ3OTE5NDRiMzRiNmUwNzIyZWY5ODU2ZjM4YTE3M2VhYzg1NmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYLBnsKXlSGkW3JdJakPNmqG5uBc
r1h74xcaZPhfnch4GSQ1D1OwAJNGOqoHZQQPEBrPawDycmKx30Jjwv0JoJ1f2LOK
SSYpsHprvmahcYgr/RP1PBUuyquigIzm76hBSuPSQj3Y+w6bxGldLYto7zrORdeZ
2sZmWxDLbrpIljO426XEdLwiaam8aEh7b2CiNWY1NOZaycMkzPIeiIPFzul/LCms
hh9vdNBTUCQb14Bgt/ev0RkhxwJKOSN+6S9OTnPt0SDeIrdwNUJYCn6Y+7Ep0lCG
n9wTuvvH1DO85VJAc9Bpr2askmSOS9Jvnech8u/5GtugrDzYwCxsjiGLAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhHkZRLNLbgci75hW84oXPqyFb6MB8GA1UdIwQY
MBaAFIYMnsDRs05L16ZPkAIFk1dAmzPKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGd5ZXdOR3pUa3ZYcGstUUFnV1RWMENiTThvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9mZTlkMWQtNGFkZS00NjMwLThhYmEt
ZjhmMGM3ZDY2MmU3LzEvaGd5ZXdOR3pUa3ZYcGstUUFnV1RWMENiTThvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9mZTlkMWQtNGFkZS00NjMwLThhYmEtZjhmMGM3ZDY2MmU3
LzEvaGd5ZXdOR3pUa3ZYcGstUUFnV1RWMENiTThvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmbCMIv0
7CtCwG2a/lRyU/T7cD80E9PiZbYDZ/gz2WmdrCSHGxywfyCAIvdtbIT9RYLLDwxT
xRS5wD3WQYz8c3vq3RVyhURz5TBpBmcF6LcXZRnm5LC0Xlqgakacn1cPz4vfx5Ph
WgQDMQDoPhVbd8U851ioCuA+f5ecOMtHL+fKIcoszuL4DhttyomvGu11KCrY6GFk
/+XTh40YsGV1QWTJZ8SAMzbmhzb/tEe1z9y/TNMd5/hK5/SSGoEJUy5oOsJEQYM6
JK8CXBNls4ao6eB8AdswljscOviSj+SAn1KwElra74c5fuOLOVyYxwVe7dQXiDjW
2JwYtcQv56GYVw==
-----END CERTIFICATE-----
Generated at Thu Aug 27 03:56:39 2026 by rpki-client