Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
File: hUwNsAZYRNlZTf6N2O_XftHkk_g.mft (raw, json)
Hash identifier: lz2vhIH/vrMPvoa2fWxbFkRf/PAykZixJnVp37ejJIk=
Subject key identifier: 96:AC:08:DD:6B:B8:EA:A4:1A:0B:63:99:E9:F8:F0:62:42:48:39:F6
Authority key identifier: 85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8
Certificate issuer: /CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
Certificate serial: 01A17EBD1BAAD10A3CC45C90DAE912C76814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
Manifest number: 1AC8
Signing time: Tue 27 Oct 2026 19:01:24 +0000
Manifest this update: Tue 27 Oct 2026 19:01:24 +0000
Manifest next update: Wed 28 Oct 2026 19:01:24 +0000
Files and hashes: 1: DB-kubcDSriQvnabeDogJ7LkMfM.roa (hash: XGoLRb9s7HKmX6rpBYGsBJA5idHvV3yS22+b7xVn/rY=)
2: hUwNsAZYRNlZTf6N2O_XftHkk_g.crl (hash: 6gsjjlMRGObLnre9AA3VEm/UTlY8O6G/VIFNASIlgxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 19:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bd:1b:aa:d1:0a:3c:c4:5c:90:da:e9:12:c7:68:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
Validity
Not Before: Oct 27 19:01:24 2026 GMT
Not After : Oct 28 19:01:24 2026 GMT
Subject: CN=96ac08dd6bb8eaa41a0b6399e9f8f062424839f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:04:3f:1f:6c:42:59:c7:b8:02:dd:7d:1d:31:
96:82:bf:b4:cc:b9:d6:ca:0b:10:be:1d:63:3e:6e:
90:4d:45:db:1e:53:fc:50:f6:be:91:12:52:8d:5e:
64:04:73:27:48:6a:8c:a8:a5:85:61:37:ec:2b:1e:
aa:e0:5c:34:06:c9:ab:5c:26:f7:69:86:83:a7:bc:
f0:30:97:0f:54:03:ce:65:3f:a0:e1:d6:22:25:d9:
fc:ed:9f:0c:51:51:fc:48:b4:14:7d:c8:55:7b:fe:
2c:1f:33:9c:e9:a7:0c:a2:60:74:ca:d9:db:42:3d:
81:8a:bf:e9:d6:79:c2:19:a1:b1:32:87:5d:10:4e:
49:02:7f:e4:25:1a:27:07:91:ff:12:bf:56:d2:96:
41:95:d9:bd:0f:1e:63:46:a8:af:9b:50:08:1f:e3:
43:3b:52:f5:3e:3c:96:cf:38:94:71:a7:11:21:bb:
e5:f2:0a:f2:73:86:88:7b:fd:64:36:08:70:6f:12:
07:6c:3d:38:13:9c:16:df:b1:c9:89:95:56:d9:3b:
ea:65:e8:52:e8:ba:27:ec:e3:51:fc:08:57:3e:32:
99:3a:81:91:12:12:00:26:fc:49:3a:b7:dd:74:3d:
93:83:16:ec:1d:ad:ee:55:fd:4e:a1:af:90:3f:30:
02:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AC:08:DD:6B:B8:EA:A4:1A:0B:63:99:E9:F8:F0:62:42:48:39:F6
X509v3 Authority Key Identifier:
keyid:85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e5:1e:72:e2:da:1d:f1:42:68:f7:3f:04:3a:83:36:20:51:
4e:5e:e3:6f:f1:13:56:88:ad:81:ba:6d:66:8b:dc:48:db:4a:
63:a0:c7:40:a3:e9:78:72:bb:9f:e4:f9:58:d6:0d:04:04:0e:
44:29:d3:3c:c6:e6:9f:fc:94:2c:4c:d4:64:9e:9c:55:f0:d9:
0b:36:01:8c:a4:17:44:43:ac:62:9c:36:80:90:cb:e6:7e:d7:
a9:79:a8:38:34:06:df:4f:4f:c0:03:cf:26:a4:ac:af:94:20:
7a:54:16:7d:a3:38:e9:f2:88:8f:7d:54:02:60:16:f3:de:75:
05:3d:c6:1c:27:86:8e:28:44:df:59:bc:de:dc:5f:d7:e1:28:
a6:d3:03:fe:fc:03:9b:35:e5:62:09:61:4f:e9:af:c9:5a:83:
fd:38:d6:6b:c7:10:9b:e1:1a:c2:cc:01:b6:3d:33:cd:5d:9b:
0c:8a:50:ab:35:4b:c3:2e:42:45:dc:2d:b6:c7:f2:7f:62:3f:
2a:06:3c:5b:51:54:ba:9e:f8:f9:e8:47:49:0c:42:3e:68:18:
16:18:2b:44:6c:f4:85:91:47:7d:8a:88:91:dd:67:6b:34:79:
65:ce:a4:9a:f2:76:95:3e:31:44:7c:1a:9d:23:34:88:12:02:
6f:7b:84:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+vRuq0Qo8xFyQ2ukSx2gUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NGMwZGIwMDY1ODQ0ZDk1OTRkZmU4ZGQ4ZWZkNzdlZDFl
NDkzZjgwHhcNMjYxMDI3MTkwMTI0WhcNMjYxMDI4MTkwMTI0WjAzMTEwLwYDVQQD
Eyg5NmFjMDhkZDZiYjhlYWE0MWEwYjYzOTllOWY4ZjA2MjQyNDgzOWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AQ/H2xCWce4At19HTGWgr+0zLnW
ygsQvh1jPm6QTUXbHlP8UPa+kRJSjV5kBHMnSGqMqKWFYTfsKx6q4Fw0BsmrXCb3
aYaDp7zwMJcPVAPOZT+g4dYiJdn87Z8MUVH8SLQUfchVe/4sHzOc6acMomB0ytnb
Qj2Bir/p1nnCGaGxModdEE5JAn/kJRonB5H/Er9W0pZBldm9Dx5jRqivm1AIH+ND
O1L1PjyWzziUcacRIbvl8gryc4aIe/1kNghwbxIHbD04E5wW37HJiZVW2TvqZehS
6Lon7ONR/AhXPjKZOoGREhIAJvxJOrfddD2TgxbsHa3uVf1Ooa+QPzAC2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJasCN1ruOqkGgtjmen48GJCSDn2MB8GA1UdIwQY
MBaAFIVMDbAGWETZWU3+jdjv137R5JP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFV3TnNBWllSTmxaVGY2TjJPX1hmdEhra19nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lYzY3ZGItYzdhMS00OGE2LWFiOTQt
NjBiOTM1OTViYWM5LzEvaFV3TnNBWllSTmxaVGY2TjJPX1hmdEhra19nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9lYzY3ZGItYzdhMS00OGE2LWFiOTQtNjBiOTM1OTViYWM5
LzEvaFV3TnNBWllSTmxaVGY2TjJPX1hmdEhra19nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJuUecuLa
HfFCaPc/BDqDNiBRTl7jb/ETVoitgbptZovcSNtKY6DHQKPpeHK7n+T5WNYNBAQO
RCnTPMbmn/yULEzUZJ6cVfDZCzYBjKQXREOsYpw2gJDL5n7XqXmoODQG309PwAPP
JqSsr5QgelQWfaM46fKIj31UAmAW8951BT3GHCeGjihE31m83txf1+EoptMD/vwD
mzXlYglhT+mvyVqD/TjWa8cQm+EawswBtj0zzV2bDIpQqzVLwy5CRdwttsfyf2I/
KgY8W1FUup74+ehHSQxCPmgYFhgrRGz0hZFHfYqIkd1nazR5Zc6kmvJ2lT4xRHwa
nSM0iBICb3uEfw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 00:51:45 2026 by rpki-client