Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
File: hElpeAFBgkzQrL-lp4RhHusKfds.mft (raw, json)
Hash identifier: /T4QCBBpqJqHeoXR55fSgOFClMSLj+wYjE1HT7vCtT0=
Subject key identifier: A4:3A:55:E7:F9:05:4B:13:1F:9F:41:57:45:33:BC:98:E6:D4:E3:0E
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial: 01A16F1250A69862DE3AB1DE430BCA9D6A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
Manifest number: 0B7A
Signing time: Sat 24 Oct 2026 18:00:33 +0000
Manifest this update: Sat 24 Oct 2026 18:00:33 +0000
Manifest next update: Sun 25 Oct 2026 18:00:33 +0000
Files and hashes: 1: 1-ZrQbFc7NRMGl29jtjWMKsIp2ZQ.roa (hash: He4PUZhKvLvJbADEv84xs1x0RYoT7WY7P6/fpECXwDc=)
2: 8CXXxXOl_TgN0Sp_A7Pbzfq6fKY.roa (hash: x6lpEzFYhwFVijSBlfFL06mSEvzg6Wxii04ehpDZw4U=)
3: GUhp8Wvci_j7T4kmVTXcfm-wQGw.roa (hash: sCSjIJ+mAkndBqHerekCSW8OY51YrH4HeTZcaJ0ddlk=)
4: GW4dInsub7k2BztNc9KO0RXqd4A.roa (hash: IMiWrs6n4JNtZ7SiOWqNyYDbPpDBAplDzPrQ8pcJs/g=)
5: hElpeAFBgkzQrL-lp4RhHusKfds.crl (hash: HnYasokLfGKwEvD2Ovrkg62dVBZN4MWiREfgb0RRPRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 18:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:12:50:a6:98:62:de:3a:b1:de:43:0b:ca:9d:6a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Validity
Not Before: Oct 24 18:00:33 2026 GMT
Not After : Oct 25 18:00:33 2026 GMT
Subject: CN=a43a55e7f9054b131f9f41574533bc98e6d4e30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dd:c4:5e:e7:e2:10:ea:b3:09:6a:ab:3f:e0:
22:51:8a:6c:98:0f:56:f8:13:7b:f1:9f:c2:66:e6:
60:d1:b2:19:5c:0d:a5:7e:78:04:72:01:c5:51:58:
69:ac:d5:f0:db:f9:cf:5c:9f:bc:63:c8:62:17:f8:
61:55:87:06:ef:1d:51:61:73:62:d6:ba:25:ab:54:
e0:7c:19:a5:b2:23:26:24:db:19:cb:bf:ed:7c:c3:
de:fc:62:54:b2:b4:7d:de:42:fa:ed:2c:95:de:20:
01:ee:07:5b:98:a8:06:4c:eb:da:76:db:5c:65:c9:
fd:80:9f:6c:c1:7e:a7:9c:37:33:70:ae:24:fa:ba:
34:7b:1b:e2:6c:e3:41:ff:9c:b0:eb:7c:d0:70:8b:
0f:ab:a4:9e:75:f1:15:b5:2a:26:15:04:d7:7c:5a:
cd:19:43:bc:60:7c:5d:8f:7a:dd:de:1e:f8:85:be:
b2:ba:92:63:67:70:a7:88:51:95:03:e5:4f:c0:c4:
71:69:b1:32:45:b7:cb:f0:ce:18:c4:44:b6:39:e1:
57:eb:81:43:a4:4c:f3:32:58:eb:bf:e6:06:0e:b8:
6a:4e:c2:de:0d:5b:13:48:46:ca:1c:1c:37:b4:23:
23:a3:bd:21:99:1f:d5:71:df:9d:6e:8a:32:6a:5e:
65:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3A:55:E7:F9:05:4B:13:1F:9F:41:57:45:33:BC:98:E6:D4:E3:0E
X509v3 Authority Key Identifier:
keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:3f:8d:cc:c2:6d:6c:2c:52:cc:fc:3a:c7:a9:1b:8c:0f:c0:
3e:62:8f:c9:5a:d3:02:d9:6a:e0:5c:af:5f:8e:89:1c:2e:5f:
49:8a:8b:78:34:b8:d5:56:46:f0:0c:0c:2f:21:5f:da:ba:be:
5f:31:61:04:88:bc:3b:da:53:e5:db:61:8c:d2:79:fc:eb:2f:
ba:9c:6d:7d:c3:76:b5:1d:e2:66:4e:1e:4c:48:cd:0e:6e:54:
1f:a2:80:af:ed:71:fc:8d:48:c7:ff:10:94:e2:ff:1c:5b:ca:
5e:64:0c:4a:24:ec:f2:5c:07:53:a4:5e:3d:ed:7b:f4:80:97:
9a:8c:a2:60:dc:2f:16:41:3c:cd:58:dd:2b:e4:7d:f4:12:e5:
d3:43:34:58:91:1c:72:2f:fa:d2:f2:21:9e:08:53:1f:a4:e5:
20:0f:95:27:b1:64:7d:4f:25:ab:39:68:42:8d:32:aa:a7:bb:
69:33:a7:95:5d:62:3c:b2:e1:99:77:83:db:1a:89:d5:78:77:
1e:79:b8:b5:81:e9:00:ce:e8:1e:51:f1:46:d9:99:cf:77:70:
c6:dc:fe:09:bc:8d:c9:0f:5f:cb:32:da:53:a1:d4:3f:e2:c7:
b6:64:d0:b1:aa:b2:63:f2:dc:40:88:81:37:34:81:c1:5c:72:
a1:18:e6:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFvElCmmGLeOrHeQwvKnWolMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NDk2OTc4MDE0MTgyNGNkMGFjYmZhNWE3ODQ2MTFlZWIw
YTdkZGIwHhcNMjYxMDI0MTgwMDMzWhcNMjYxMDI1MTgwMDMzWjAzMTEwLwYDVQQD
EyhhNDNhNTVlN2Y5MDU0YjEzMWY5ZjQxNTc0NTMzYmM5OGU2ZDRlMzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvt3EXufiEOqzCWqrP+AiUYpsmA9W
+BN78Z/CZuZg0bIZXA2lfngEcgHFUVhprNXw2/nPXJ+8Y8hiF/hhVYcG7x1RYXNi
1rolq1TgfBmlsiMmJNsZy7/tfMPe/GJUsrR93kL67SyV3iAB7gdbmKgGTOvadttc
Zcn9gJ9swX6nnDczcK4k+ro0exvibONB/5yw63zQcIsPq6SedfEVtSomFQTXfFrN
GUO8YHxdj3rd3h74hb6yupJjZ3CniFGVA+VPwMRxabEyRbfL8M4YxES2OeFX64FD
pEzzMljrv+YGDrhqTsLeDVsTSEbKHBw3tCMjo70hmR/Vcd+dbooyal5lqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQ6Vef5BUsTH59BV0UzvJjm1OMOMB8GA1UdIwQY
MBaAFIRJaXgBQYJM0Ky/paeEYR7rCn3bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEVscGVBRkJna3pRckwtbHA0UmhIdXNLZmRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lNjJmOTUtYWJiZC00MzBkLTgxNjAt
MDRhYzE3ODgxYWE5LzEvaEVscGVBRkJna3pRckwtbHA0UmhIdXNLZmRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9lNjJmOTUtYWJiZC00MzBkLTgxNjAtMDRhYzE3ODgxYWE5
LzEvaEVscGVBRkJna3pRckwtbHA0UmhIdXNLZmRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbT+NzMJt
bCxSzPw6x6kbjA/APmKPyVrTAtlq4FyvX46JHC5fSYqLeDS41VZG8AwMLyFf2rq+
XzFhBIi8O9pT5dthjNJ5/OsvupxtfcN2tR3iZk4eTEjNDm5UH6KAr+1x/I1Ix/8Q
lOL/HFvKXmQMSiTs8lwHU6RePe179ICXmoyiYNwvFkE8zVjdK+R99BLl00M0WJEc
ci/60vIhnghTH6TlIA+VJ7FkfU8lqzloQo0yqqe7aTOnlV1iPLLhmXeD2xqJ1Xh3
Hnm4tYHpAM7oHlHxRtmZz3dwxtz+CbyNyQ9fyzLaU6HUP+LHtmTQsaqyY/LcQIiB
NzSBwVxyoRjm8w==
-----END CERTIFICATE-----
Generated at Sun Oct 25 06:09:29 2026 by rpki-client