Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
File: hD0a_PE70hF9R99oPkCmMocATP4.mft (raw, json)
Hash identifier: uwVm83/6SI6PEvVOocL61dQrPaHxf9GMkJ68mEGGDBo=
Subject key identifier: 09:35:49:60:5A:17:C1:91:AE:03:A4:5F:B8:6D:E9:56:06:B6:0A:B8
Authority key identifier: 84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
Certificate issuer: /CN=843d1afcf13bd2117d47df683e40a63287004cfe
Certificate serial: 01A08C7B519426A518EC61D15730FBB79085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
Manifest number: 16F2
Signing time: Thu 10 Sep 2026 18:01:26 +0000
Manifest this update: Thu 10 Sep 2026 18:01:26 +0000
Manifest next update: Fri 11 Sep 2026 18:01:26 +0000
Files and hashes: 1: blJ-TZh-82zY8BmhlGXDYcWlXEM.roa (hash: Fd7qkgfgnAB5yGlcwTOLNMtcHfXu1EK11nyoGzaI4T8=)
2: hD0a_PE70hF9R99oPkCmMocATP4.crl (hash: ED/jxa9TGiQOi9DP5LIf+PkjdXIjaXvP593JUHGfF2A=)
3: uGcdeOeH2FGE8oSm_emFftbBDBI.roa (hash: K6Jsrsz0fx7XMWqDVYW8cVOMG7U2AmGR+nHljnd4RYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:51:94:26:a5:18:ec:61:d1:57:30:fb:b7:90:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843d1afcf13bd2117d47df683e40a63287004cfe
Validity
Not Before: Sep 10 18:01:26 2026 GMT
Not After : Sep 11 18:01:26 2026 GMT
Subject: CN=093549605a17c191ae03a45fb86de95606b60ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9a:5c:36:16:60:15:7d:3e:53:32:cb:80:49:
a3:94:7e:c5:e2:1c:13:91:b5:8c:5d:5c:b8:db:e1:
32:dc:58:f8:df:e7:05:ea:2f:05:34:03:07:d1:0c:
a0:6d:31:fb:de:e2:54:a8:74:32:43:9b:f1:73:25:
ba:53:ed:21:26:8c:1b:f1:35:e7:45:ab:65:6d:4f:
d8:16:bd:3a:88:de:49:eb:4a:78:f7:ad:3c:d5:73:
80:ba:21:d2:be:68:99:8a:98:c0:bd:e4:99:6b:02:
4d:d7:c3:ce:96:93:c9:05:6a:8b:ec:fc:cd:13:d8:
cc:a4:73:45:cf:ca:d0:7d:51:98:29:37:b2:7d:b5:
f2:d7:bf:ef:78:c6:c3:18:13:6d:ef:06:b2:67:07:
12:df:06:30:44:18:d1:1d:df:71:f1:66:5a:3b:d2:
f6:02:66:17:b6:46:dc:85:4b:e9:ba:7a:46:84:8e:
a0:f8:55:59:f8:d0:82:ba:6a:01:60:e2:31:12:3e:
25:7e:a5:9e:1d:39:e0:b5:9c:85:7c:a7:a8:eb:06:
30:85:d9:f3:23:3f:2a:2b:e6:15:ba:f3:12:25:ef:
c2:fd:e6:e8:f6:e9:7e:e9:d4:26:9e:e8:aa:37:bc:
aa:ed:28:6f:fb:cd:a6:40:7d:39:cd:31:1a:54:fc:
1d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:35:49:60:5A:17:C1:91:AE:03:A4:5F:B8:6D:E9:56:06:B6:0A:B8
X509v3 Authority Key Identifier:
keyid:84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:da:c9:0c:b5:cf:2d:ec:43:ba:42:50:c4:92:71:95:74:f0:
6f:0b:24:2e:f0:4c:26:7e:57:96:b4:e5:1b:32:7e:30:ec:3c:
6c:db:2a:b6:d3:94:92:17:ef:d6:32:f0:ca:b2:ea:da:c6:7d:
bf:94:11:11:7e:f6:d3:f2:7e:3c:fb:a1:38:13:fc:da:0e:77:
a9:59:14:aa:55:e1:6a:51:5e:e1:57:60:cf:27:37:e8:0a:7b:
a5:33:55:1f:3f:a8:85:af:64:c5:ef:5e:bd:4a:e0:b0:b0:0a:
9e:37:b3:ea:47:16:6b:78:f1:05:11:ff:b6:ed:e9:8b:9c:50:
9b:43:4b:ec:f4:04:6a:8c:63:68:49:52:c9:ec:90:10:cd:f3:
11:ea:01:72:b9:a5:60:0d:d6:8c:9b:f5:ef:9d:43:93:7b:7f:
2b:38:08:7e:56:00:d7:13:08:9f:8f:d0:d3:01:17:75:11:10:
77:98:24:3f:1c:33:22:cb:b0:d0:bc:7b:94:cb:df:9f:11:58:
ea:d4:b2:99:42:98:56:21:53:ab:01:9e:f5:fe:52:ca:91:1a:
62:0e:d9:2d:37:0e:3c:a0:1b:09:9c:7b:c2:9a:97:de:5e:6e:
97:c4:70:20:03:49:1a:df:47:f7:60:c6:d0:e8:12:0a:3d:c2:
8a:af:fd:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMe1GUJqUY7GHRVzD7t5CFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0M2QxYWZjZjEzYmQyMTE3ZDQ3ZGY2ODNlNDBhNjMyODcw
MDRjZmUwHhcNMjYwOTEwMTgwMTI2WhcNMjYwOTExMTgwMTI2WjAzMTEwLwYDVQQD
EygwOTM1NDk2MDVhMTdjMTkxYWUwM2E0NWZiODZkZTk1NjA2YjYwYWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJpcNhZgFX0+UzLLgEmjlH7F4hwT
kbWMXVy42+Ey3Fj43+cF6i8FNAMH0QygbTH73uJUqHQyQ5vxcyW6U+0hJowb8TXn
RatlbU/YFr06iN5J60p496081XOAuiHSvmiZipjAveSZawJN18POlpPJBWqL7PzN
E9jMpHNFz8rQfVGYKTeyfbXy17/veMbDGBNt7wayZwcS3wYwRBjRHd9x8WZaO9L2
AmYXtkbchUvpunpGhI6g+FVZ+NCCumoBYOIxEj4lfqWeHTngtZyFfKeo6wYwhdnz
Iz8qK+YVuvMSJe/C/ebo9ul+6dQmnuiqN7yq7Shv+82mQH05zTEaVPwdQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAk1SWBaF8GRrgOkX7ht6VYGtgq4MB8GA1UdIwQY
MBaAFIQ9GvzxO9IRfUffaD5ApjKHAEz+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEQwYV9QRTcwaEY5Ujk5b1BrQ21Nb2NBVFA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8xNzMzMDYtMmRiZC00YWQ4LWJkNTEt
YjFmM2JjYzY3YWFlLzEvaEQwYV9QRTcwaEY5Ujk5b1BrQ21Nb2NBVFA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8xNzMzMDYtMmRiZC00YWQ4LWJkNTEtYjFmM2JjYzY3YWFl
LzEvaEQwYV9QRTcwaEY5Ujk5b1BrQ21Nb2NBVFA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAANrJDLXP
LexDukJQxJJxlXTwbwskLvBMJn5XlrTlGzJ+MOw8bNsqttOUkhfv1jLwyrLq2sZ9
v5QREX720/J+PPuhOBP82g53qVkUqlXhalFe4Vdgzyc36Ap7pTNVHz+oha9kxe9e
vUrgsLAKnjez6kcWa3jxBRH/tu3pi5xQm0NL7PQEaoxjaElSyeyQEM3zEeoBcrml
YA3WjJv1751Dk3t/KzgIflYA1xMIn4/Q0wEXdREQd5gkPxwzIsuw0Lx7lMvfnxFY
6tSymUKYViFTqwGe9f5SypEaYg7ZLTcOPKAbCZx7wpqX3l5ul8RwIANJGt9H92DG
0OgSCj3Ciq/9EA==
-----END CERTIFICATE-----
Generated at Fri Sep 11 01:47:17 2026 by rpki-client