Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
File: hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft (raw, json)
Hash identifier: MLr7clqpIOs8Xkxs3gNZc1tDKiH4JZSIZUX+m8Tpa1M=
Subject key identifier: E4:C4:01:5C:A5:81:F7:53:B0:49:17:30:85:7E:25:89:17:71:AF:63
Authority key identifier: 85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
Certificate issuer: /CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Certificate serial: 01A12BE97031C633A27DB9CB74A31F6F7252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
Manifest number: 1751
Signing time: Sun 11 Oct 2026 17:01:21 +0000
Manifest this update: Sun 11 Oct 2026 17:01:21 +0000
Manifest next update: Mon 12 Oct 2026 17:01:21 +0000
Files and hashes: 1: AskFBvRE4tY5tlit_Gy114m2J0A.roa (hash: J6ljvruIBCWnrpJURNZnlPx/uNcMw2gcnFDVYqRVqz0=)
2: hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl (hash: eRkKTu9dzGDopiDeIFSkZm11vDIctg+pwFlHSQe6CfA=)
3: mMleahkhBsxzGvTuhDg0yXEwF_w.roa (hash: qQecQrTvSIfunD3zEv/rPkBZ+0gt71EWgnmmdmDO4Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:e9:70:31:c6:33:a2:7d:b9:cb:74:a3:1f:6f:72:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Validity
Not Before: Oct 11 17:01:21 2026 GMT
Not After : Oct 12 17:01:21 2026 GMT
Subject: CN=e4c4015ca581f753b0491730857e25891771af63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d7:bf:bd:df:fd:5e:eb:d1:68:44:03:82:ab:
7d:bc:92:ff:c5:d6:f7:3c:3b:1d:e2:b3:14:f2:a1:
5c:4b:39:a9:22:15:b6:c6:bf:bc:40:7f:a7:d7:92:
38:d3:e2:a0:e0:b7:3c:23:8f:c2:5b:54:77:26:d5:
de:56:ab:2f:7c:94:c2:19:3c:45:9c:06:51:de:af:
a9:9a:06:a2:0b:19:b2:8c:57:06:9b:79:b3:d0:4f:
c0:76:ed:cd:27:00:20:e2:0b:83:55:64:b6:ba:09:
c3:55:b4:2d:20:35:44:92:2d:4e:36:9d:69:c7:6a:
8f:4d:cc:90:43:c0:6c:1d:3c:f0:50:f6:d2:af:33:
ca:5f:f4:e5:fe:7b:70:28:41:66:99:b7:d9:3b:de:
57:30:33:b4:db:b6:93:bc:5a:83:f4:af:f7:11:c8:
34:d3:6a:2e:43:0c:37:a0:43:96:d3:77:48:a1:98:
cd:db:f2:b5:3d:04:1b:25:7e:41:9c:0e:4b:ae:dc:
a7:75:41:1b:30:dc:8d:30:ef:b8:c8:80:07:a1:7c:
88:00:40:ac:30:7d:a6:ee:dc:bf:e4:a7:de:9b:be:
be:62:bc:3c:93:2b:33:6b:3f:32:80:1e:13:85:4a:
21:3d:87:8a:f2:ce:e3:51:55:92:24:3d:88:52:a5:
d2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C4:01:5C:A5:81:F7:53:B0:49:17:30:85:7E:25:89:17:71:AF:63
X509v3 Authority Key Identifier:
keyid:85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:2d:e6:12:a6:76:f0:ba:2c:1e:e1:79:4a:42:08:1a:58:5f:
70:68:fa:c6:09:a1:3e:8d:ea:91:8b:0a:c4:40:71:d3:7f:fe:
74:1f:34:06:4c:f0:2b:88:04:b3:8f:a3:37:c3:c7:d7:3a:87:
c9:f9:88:b5:1e:8a:74:37:89:f2:ab:e8:55:6d:ec:ce:98:37:
52:90:ac:69:d2:76:99:99:f9:13:de:54:a3:34:f3:59:00:0b:
79:00:49:63:40:d8:67:9c:43:19:1c:7f:85:c0:45:78:8c:f7:
29:9d:64:44:82:fb:33:57:53:f4:5e:5a:e7:25:f7:7a:95:32:
3c:28:f2:13:0f:2f:42:0d:79:c3:14:81:25:82:57:cc:70:55:
a2:3b:e3:fe:3d:6c:bf:3d:9c:ea:f6:1c:ed:eb:9d:e0:93:d5:
07:7b:b0:73:53:24:11:13:ee:3b:84:3f:55:9d:51:06:5b:c8:
41:b5:7d:b0:1a:22:a5:08:c1:06:39:8d:71:16:fc:96:5d:a9:
45:9d:cb:14:70:02:c7:c5:79:72:07:71:f6:53:6c:ea:7f:28:
83:50:f2:63:6c:7b:1b:d5:36:bf:d7:59:67:21:a6:a4:0a:0e:
96:f4:5d:d4:e1:aa:26:10:c6:a2:26:7a:a2:21:81:1e:44:30:
e0:55:a0:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEr6XAxxjOifbnLdKMfb3JSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MmRjMGQwOTk4YjgxMjZiYWJiOTc3NWFiNDBjMTYyZWY5
NmZhMmQwHhcNMjYxMDExMTcwMTIxWhcNMjYxMDEyMTcwMTIxWjAzMTEwLwYDVQQD
EyhlNGM0MDE1Y2E1ODFmNzUzYjA0OTE3MzA4NTdlMjU4OTE3NzFhZjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ne/vd/9XuvRaEQDgqt9vJL/xdb3
PDsd4rMU8qFcSzmpIhW2xr+8QH+n15I40+Kg4Lc8I4/CW1R3JtXeVqsvfJTCGTxF
nAZR3q+pmgaiCxmyjFcGm3mz0E/Adu3NJwAg4guDVWS2ugnDVbQtIDVEki1ONp1p
x2qPTcyQQ8BsHTzwUPbSrzPKX/Tl/ntwKEFmmbfZO95XMDO027aTvFqD9K/3Ecg0
02ouQww3oEOW03dIoZjN2/K1PQQbJX5BnA5LrtyndUEbMNyNMO+4yIAHoXyIAECs
MH2m7ty/5Kfem76+Yrw8kyszaz8ygB4ThUohPYeK8s7jUVWSJD2IUqXSHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTEAVylgfdTsEkXMIV+JYkXca9jMB8GA1UdIwQY
MBaAFIUtwNCZi4EmuruXdatAwWLvlvotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFMzQTBKbUxnU2E2dTVkMXEwREJZdS1XLWkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8xY2Q2Y2EtYzA1Mi00ZTNkLTk3NGQt
ZDMyZTU2ZDc5YjJhLzEvaFMzQTBKbUxnU2E2dTVkMXEwREJZdS1XLWkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8xY2Q2Y2EtYzA1Mi00ZTNkLTk3NGQtZDMyZTU2ZDc5YjJh
LzEvaFMzQTBKbUxnU2E2dTVkMXEwREJZdS1XLWkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdy3mEqZ2
8LosHuF5SkIIGlhfcGj6xgmhPo3qkYsKxEBx03/+dB80BkzwK4gEs4+jN8PH1zqH
yfmItR6KdDeJ8qvoVW3szpg3UpCsadJ2mZn5E95UozTzWQALeQBJY0DYZ5xDGRx/
hcBFeIz3KZ1kRIL7M1dT9F5a5yX3epUyPCjyEw8vQg15wxSBJYJXzHBVojvj/j1s
vz2c6vYc7eud4JPVB3uwc1MkERPuO4Q/VZ1RBlvIQbV9sBoipQjBBjmNcRb8ll2p
RZ3LFHACx8V5cgdx9lNs6n8og1DyY2x7G9U2v9dZZyGmpAoOlvRd1OGqJhDGoiZ6
oiGBHkQw4FWgUA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 22:17:43 2026 by rpki-client