Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
File: hyELNM4ALjCgpU-r-ivKxG36cig.mft (raw, json)
Hash identifier: 7BX0MetOrwF59QSP5U78m0udQGRsvlqxgQCi1zI3J2w=
Subject key identifier: E9:84:E8:22:D3:71:30:CB:CE:47:E8:4F:BD:85:00:BF:DE:3F:05:B8
Authority key identifier: 87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28
Certificate issuer: /CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228
Certificate serial: 01A17E4ED8F35E9BBD120B379263B1C58854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
Manifest number: 08E4
Signing time: Tue 27 Oct 2026 17:00:58 +0000
Manifest this update: Tue 27 Oct 2026 17:00:58 +0000
Manifest next update: Wed 28 Oct 2026 17:00:58 +0000
Files and hashes: 1: OMhZqYIdlbW6MwJAX5hoXZbZs2s.roa (hash: Fz6GaOA6LETuiDcthzdYWCgbQdrzncp3eZt1aOMvmKA=)
2: hyELNM4ALjCgpU-r-ivKxG36cig.crl (hash: 9eo4eLLS9bwdE9bPH0JbKk2f+lbNKlMKea5DLaYmN7E=)
3: wOUhGVesCisY2HnfnAjl6Jnr-xg.roa (hash: M8DXDaBoO3oUhqazgEAtDmfaFAvLdpC11jKkFsNS9mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:4e:d8:f3:5e:9b:bd:12:0b:37:92:63:b1:c5:88:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228
Validity
Not Before: Oct 27 17:00:58 2026 GMT
Not After : Oct 28 17:00:58 2026 GMT
Subject: CN=e984e822d37130cbce47e84fbd8500bfde3f05b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:54:ca:54:2f:40:df:b2:e9:aa:da:65:94:a5:
4f:f5:10:bf:94:2d:5c:97:7f:91:c2:b9:51:5f:e2:
fc:b9:9b:0f:18:95:2c:9b:b9:7a:e2:94:aa:4b:fb:
7f:a0:ad:e7:63:9f:02:d0:3b:a0:3c:8a:9e:98:83:
fd:f0:53:0b:cd:e0:fb:9e:68:a8:d3:77:d6:93:ee:
1e:f9:3e:ce:39:32:d5:92:68:99:84:6d:ad:f4:14:
1d:90:d3:a6:f4:1c:f6:c9:2e:2c:f9:83:a1:d7:5a:
e3:4b:70:0d:6a:78:5f:c5:3a:da:ad:e6:43:71:d5:
df:96:58:ad:dd:0b:a1:a5:7e:00:6a:e5:32:46:76:
cc:82:27:cb:79:3b:33:32:64:3f:7d:07:1f:b4:3d:
37:62:d6:1b:7b:57:64:cf:f5:67:60:3d:94:04:13:
4d:ea:c8:a3:9f:a0:5a:87:7f:3a:ed:7b:3c:08:c0:
54:78:d6:d5:9d:98:69:cb:80:d8:9a:5b:c0:1b:66:
78:7b:66:df:93:cb:a7:ae:98:d2:8f:af:3d:43:71:
10:08:99:cc:49:61:34:08:88:c8:c9:93:cc:d5:40:
20:ea:42:d4:d9:46:cb:87:39:47:8f:16:da:a0:21:
bf:cb:f9:54:d5:ca:f6:ea:ed:45:2e:c7:c4:49:64:
ec:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:84:E8:22:D3:71:30:CB:CE:47:E8:4F:BD:85:00:BF:DE:3F:05:B8
X509v3 Authority Key Identifier:
keyid:87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b1:91:96:ef:cf:bd:26:06:35:13:6b:2f:8f:51:ca:f7:9e:
dd:cb:ca:cd:bb:56:c7:6f:38:49:25:03:83:f9:2a:9e:5b:74:
b5:34:15:2a:1b:f5:58:8f:ea:e5:e4:75:40:02:7d:a7:41:0b:
8b:c5:52:ab:9b:9e:c5:2b:6b:0a:3a:f7:8c:93:1a:19:19:cb:
9f:6b:2c:15:7d:96:4e:e2:e8:97:5c:61:78:05:3d:b7:ac:92:
c1:f1:28:8c:8d:9f:18:cb:c6:19:a2:87:28:13:b0:5c:f8:81:
69:d2:95:88:94:d4:ce:a7:08:7c:df:7e:6d:93:8c:d2:7b:a3:
3a:6c:c9:7f:5d:4e:cb:46:a2:30:22:fa:89:c3:a3:45:51:94:
63:61:20:36:b6:66:50:7f:14:dc:a6:9f:e8:f6:f9:f9:b3:99:
93:f4:23:13:e0:1d:21:db:aa:2b:90:c7:13:04:a2:fd:cc:c6:
34:36:19:2f:35:51:45:96:8e:98:e2:a9:e3:ab:16:94:00:33:
8c:27:04:7e:9c:eb:7e:0d:98:b1:66:5f:63:e0:70:0f:c6:28:
79:17:59:cf:bb:0e:5d:26:e2:a5:4d:fc:fc:1e:0c:8b:54:7d:
ad:f1:9d:86:34:24:e1:04:f0:97:32:88:7b:51:f6:e1:75:fa:
b1:45:01:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+TtjzXpu9Egs3kmOxxYhUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MjEwYjM0Y2UwMDJlMzBhMGE1NGZhYmZhMmJjYWM0NmRm
YTcyMjgwHhcNMjYxMDI3MTcwMDU4WhcNMjYxMDI4MTcwMDU4WjAzMTEwLwYDVQQD
EyhlOTg0ZTgyMmQzNzEzMGNiY2U0N2U4NGZiZDg1MDBiZmRlM2YwNWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlTKVC9A37LpqtpllKVP9RC/lC1c
l3+RwrlRX+L8uZsPGJUsm7l64pSqS/t/oK3nY58C0DugPIqemIP98FMLzeD7nmio
03fWk+4e+T7OOTLVkmiZhG2t9BQdkNOm9Bz2yS4s+YOh11rjS3ANanhfxTrareZD
cdXfllit3QuhpX4AauUyRnbMgifLeTszMmQ/fQcftD03YtYbe1dkz/VnYD2UBBNN
6sijn6Bah3867Xs8CMBUeNbVnZhpy4DYmlvAG2Z4e2bfk8unrpjSj689Q3EQCJnM
SWE0CIjIyZPM1UAg6kLU2UbLhzlHjxbaoCG/y/lU1cr26u1FLsfESWTstwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmE6CLTcTDLzkfoT72FAL/ePwW4MB8GA1UdIwQY
MBaAFIchCzTOAC4woKVPq/orysRt+nIoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHlFTE5NNEFMakNncFUtci1pdkt4RzM2Y2lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yOWEwZGMtMjBhZi00MzdlLTk4NzAt
MzY2OWQxYjU2OWQ2LzEvaHlFTE5NNEFMakNncFUtci1pdkt4RzM2Y2lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8yOWEwZGMtMjBhZi00MzdlLTk4NzAtMzY2OWQxYjU2OWQ2
LzEvaHlFTE5NNEFMakNncFUtci1pdkt4RzM2Y2lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErGRlu/P
vSYGNRNrL49Ryvee3cvKzbtWx284SSUDg/kqnlt0tTQVKhv1WI/q5eR1QAJ9p0EL
i8VSq5uexStrCjr3jJMaGRnLn2ssFX2WTuLol1xheAU9t6ySwfEojI2fGMvGGaKH
KBOwXPiBadKViJTUzqcIfN9+bZOM0nujOmzJf11Oy0aiMCL6icOjRVGUY2EgNrZm
UH8U3Kaf6Pb5+bOZk/QjE+AdIduqK5DHEwSi/czGNDYZLzVRRZaOmOKp46sWlAAz
jCcEfpzrfg2YsWZfY+BwD8YoeRdZz7sOXSbipU38/B4Mi1R9rfGdhjQk4QTwlzKI
e1H24XX6sUUBZw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 00:51:06 2026 by rpki-client