Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
File: T_hs8z4V6kCJ2inip4gddG34Ju8.mft (raw, json)
Hash identifier: 9TBc04/xT4PZ4+m8It3K4GzJqy7WCEXTqT63AeN5qEs=
Subject key identifier: 65:43:43:E1:FA:5D:2C:C7:AB:C0:63:F7:EF:A3:AF:B3:45:01:8E:DA
Authority key identifier: 4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
Certificate issuer: /CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Certificate serial: 01A165A19254129EBBCE51BDD93C7F2153B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
Manifest number: 141B
Signing time: Thu 22 Oct 2026 22:00:49 +0000
Manifest this update: Thu 22 Oct 2026 22:00:49 +0000
Manifest next update: Fri 23 Oct 2026 22:00:49 +0000
Files and hashes: 1: 1v3IPl8M1eJPBhCAK7u4vq4rUaI.roa (hash: fKYCNJCehScelohhLM2BpKiOwF7K+yob2FjJd+Ycr6M=)
2: T_hs8z4V6kCJ2inip4gddG34Ju8.crl (hash: k1TOWhWm7v7eVEx5DYK3HLEADu8GvKzQZCTLiJfGoy8=)
3: pxD_Y88xrQvnAVjSRtOa0jsr7OQ.roa (hash: +SNLZHSRdVfvPSo1qQ3dQv0AK0ZdBnAQ1eRjccxs6zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:65:a1:92:54:12:9e:bb:ce:51:bd:d9:3c:7f:21:53:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Validity
Not Before: Oct 22 22:00:49 2026 GMT
Not After : Oct 23 22:00:49 2026 GMT
Subject: CN=654343e1fa5d2cc7abc063f7efa3afb345018eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2a:1e:04:08:4f:ed:f9:e3:94:37:c5:ee:48:
ea:06:86:a5:a2:29:e8:c5:5c:4c:c4:ae:b4:fa:53:
5a:89:57:5c:d9:46:a4:48:38:88:f8:55:8e:b2:c3:
19:72:43:0f:49:0b:a9:97:4c:b4:91:2a:fe:59:eb:
aa:05:2a:99:77:3f:f4:57:a0:c2:39:c0:f3:86:f7:
d1:8c:3f:c3:b9:56:6e:ed:cb:c2:09:f1:42:1a:a2:
ae:c8:13:c2:fa:84:40:ef:3e:3e:7b:0c:50:b8:fc:
9c:39:6d:bf:45:21:94:7c:ed:d7:f1:fa:1e:c7:0b:
8e:55:d5:63:94:c1:e2:17:47:5e:58:87:5a:77:3d:
c1:3f:0e:c9:91:c2:3f:47:a7:7b:d2:4c:77:1b:af:
6c:e0:12:03:8d:1e:bd:05:6e:1a:7d:39:b7:e7:f5:
22:f3:e1:c6:63:33:f0:f4:d3:3e:c4:e7:bb:96:1a:
51:fd:d1:14:81:c0:4f:4c:e4:47:ca:8f:de:79:18:
89:86:82:36:9a:0b:e9:dd:d3:cd:9f:68:f3:ff:08:
c5:ae:97:47:28:51:8e:c9:f6:28:ff:19:b2:e7:37:
76:f6:97:be:20:f2:52:00:e2:6e:31:f9:7b:c8:29:
8f:f5:a8:24:bd:d2:f2:7d:aa:71:9f:6a:c7:3c:d6:
d4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:43:43:E1:FA:5D:2C:C7:AB:C0:63:F7:EF:A3:AF:B3:45:01:8E:DA
X509v3 Authority Key Identifier:
keyid:4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d0:ab:b5:4a:7a:4e:69:db:3f:d7:48:e4:c0:ea:e6:36:3e:
93:ca:f5:3a:c1:5c:09:31:28:b8:8d:fb:2b:d8:c8:6d:b0:3e:
72:aa:c0:62:60:69:3a:3a:02:2e:77:75:bc:81:cc:b2:9b:b2:
1e:ab:2f:15:8f:5e:6b:b3:0b:e3:86:98:7d:82:7d:c0:a6:6e:
d1:03:3d:ec:d7:f7:da:a3:de:f9:e6:76:40:60:06:a9:f3:9f:
f0:2c:5a:ba:ea:a1:9a:7b:6d:8e:f8:07:90:8e:91:83:fc:d3:
04:fa:de:c8:25:8e:78:51:88:d1:63:40:c6:ec:5e:a0:91:a0:
98:13:c0:d8:01:dc:99:92:d3:fb:fc:22:03:40:f4:f4:93:7f:
04:8b:46:88:9d:d8:ba:4b:55:af:fb:03:09:a7:a6:8a:13:b2:
ae:85:f4:67:50:f0:94:c1:57:13:60:71:33:d5:41:6a:7d:ca:
94:29:5e:b5:99:45:ed:3c:80:98:83:2a:f2:e8:76:03:4d:2e:
4e:00:79:d9:f1:92:6d:a0:45:d6:7d:80:dd:4c:43:4a:7a:5b:
39:f4:c4:2e:24:d8:cf:bb:84:d4:89:4a:d5:b4:ef:75:41:8a:
89:34:63:4c:a7:1c:0e:80:1f:2c:c5:5c:54:b1:ad:0c:ee:24:
a1:cb:3a:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFloZJUEp67zlG92Tx/IVOwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZjg2Y2YzM2UxNWVhNDA4OWRhMjllMmE3ODgxZDc0NmRm
ODI2ZWYwHhcNMjYxMDIyMjIwMDQ5WhcNMjYxMDIzMjIwMDQ5WjAzMTEwLwYDVQQD
Eyg2NTQzNDNlMWZhNWQyY2M3YWJjMDYzZjdlZmEzYWZiMzQ1MDE4ZWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryoeBAhP7fnjlDfF7kjqBoaloino
xVxMxK60+lNaiVdc2UakSDiI+FWOssMZckMPSQupl0y0kSr+WeuqBSqZdz/0V6DC
OcDzhvfRjD/DuVZu7cvCCfFCGqKuyBPC+oRA7z4+ewxQuPycOW2/RSGUfO3X8foe
xwuOVdVjlMHiF0deWIdadz3BPw7JkcI/R6d70kx3G69s4BIDjR69BW4afTm35/Ui
8+HGYzPw9NM+xOe7lhpR/dEUgcBPTORHyo/eeRiJhoI2mgvp3dPNn2jz/wjFrpdH
KFGOyfYo/xmy5zd29pe+IPJSAOJuMfl7yCmP9agkvdLyfapxn2rHPNbUGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVDQ+H6XSzHq8Bj9++jr7NFAY7aMB8GA1UdIwQY
MBaAFE/4bPM+FepAidop4qeIHXRt+CbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVF9oczh6NFY2a0NKMmluaXA0Z2RkRzM0SnU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jOTkxZWUtYmQ0MS00YWQxLWI4OGQt
NmZjNWZjYTA5NjI5LzEvVF9oczh6NFY2a0NKMmluaXA0Z2RkRzM0SnU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9jOTkxZWUtYmQ0MS00YWQxLWI4OGQtNmZjNWZjYTA5NjI5
LzEvVF9oczh6NFY2a0NKMmluaXA0Z2RkRzM0SnU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANdCrtUp6
TmnbP9dI5MDq5jY+k8r1OsFcCTEouI37K9jIbbA+cqrAYmBpOjoCLnd1vIHMspuy
HqsvFY9ea7ML44aYfYJ9wKZu0QM97Nf32qPe+eZ2QGAGqfOf8CxauuqhmnttjvgH
kI6Rg/zTBPreyCWOeFGI0WNAxuxeoJGgmBPA2AHcmZLT+/wiA0D09JN/BItGiJ3Y
uktVr/sDCaemihOyroX0Z1DwlMFXE2BxM9VBan3KlCletZlF7TyAmIMq8uh2A00u
TgB52fGSbaBF1n2A3UxDSnpbOfTELiTYz7uE1IlK1bTvdUGKiTRjTKccDoAfLMVc
VLGtDO4kocs6DQ==
-----END CERTIFICATE-----
Generated at Fri Oct 23 08:31:37 2026 by rpki-client