Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
File: hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft (raw, json)
Hash identifier: zQ6K38ywc+5XyyfPwYXe+KiJPRa1xuJ+QFOKY1qUl7A=
Subject key identifier: A3:AC:C1:81:4C:0B:97:E8:F0:8B:41:6A:21:1A:8E:0A:84:06:EF:3B
Authority key identifier: 85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A
Certificate issuer: /CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a
Certificate serial: 01A08ED756E9A249F413312BB03429C9B5D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
Manifest number: 0CDA
Signing time: Fri 11 Sep 2026 05:01:12 +0000
Manifest this update: Fri 11 Sep 2026 05:01:12 +0000
Manifest next update: Sat 12 Sep 2026 05:01:12 +0000
Files and hashes: 1: U967gx6zU2ewhEleCWFHT_7A_9o.roa (hash: rEcp4qFupVQgVYmsA8hG1Q/G6+z2CIRB0Mx5vxsYxf0=)
2: h-KmrUFQix2mPVIgPxijrxKClGw.roa (hash: fc8hHRpimWi4M001kIYlHNuSFZw5gckGt8QS97+VBbM=)
3: hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl (hash: 7f4uzfPS4F878v5UmV+UfXTS3lh8EI5gRzvIfNjQjxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:d7:56:e9:a2:49:f4:13:31:2b:b0:34:29:c9:b5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a
Validity
Not Before: Sep 11 05:01:12 2026 GMT
Not After : Sep 12 05:01:12 2026 GMT
Subject: CN=a3acc1814c0b97e8f08b416a211a8e0a8406ef3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:02:d8:90:6b:37:97:0d:e9:b6:d0:fc:37:ba:
11:04:27:71:13:14:a5:e5:25:d0:70:de:1a:97:a5:
84:1e:48:a6:e6:aa:8f:4a:42:0a:d3:a6:58:47:89:
dc:c7:98:38:48:28:fd:00:cb:34:50:6b:eb:a4:a2:
b0:58:7b:77:2c:90:d7:5b:21:a0:4f:35:12:db:57:
48:05:e7:04:55:a1:1b:0b:da:40:e3:d2:7e:a1:2f:
db:ba:fb:8c:98:86:0e:99:c7:cd:0a:8b:bc:12:29:
1c:0c:b3:14:f8:25:54:d7:2f:30:03:08:d2:5f:7b:
bc:a0:01:b3:ce:ed:0a:02:58:ec:13:d4:69:17:63:
fd:ae:62:84:80:20:16:98:11:54:b3:a7:e5:e1:91:
ae:6f:a6:45:75:00:b1:ee:84:af:6e:d1:22:0e:95:
11:28:19:76:0f:f9:34:18:9c:d9:c0:6b:5e:86:86:
8c:34:c4:98:3a:5a:26:a9:8e:14:04:94:89:2b:05:
54:c7:33:93:da:c3:60:29:e3:01:dd:4f:d0:d0:74:
35:ed:48:32:7f:a2:4a:b7:bc:cc:9e:bc:1b:b4:04:
99:1e:ce:7e:4e:28:21:8c:db:69:39:78:cc:c3:ad:
8f:32:93:fd:fc:27:0e:e8:85:a3:49:0a:9c:90:05:
fe:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AC:C1:81:4C:0B:97:E8:F0:8B:41:6A:21:1A:8E:0A:84:06:EF:3B
X509v3 Authority Key Identifier:
keyid:85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:11:16:fc:e2:c3:1f:5c:e5:fe:0c:00:18:7f:99:c5:e5:8e:
0a:cb:93:2d:24:aa:aa:aa:d7:1c:91:46:36:6c:d3:3a:08:61:
a4:ee:90:c9:51:1f:3a:f0:f2:38:5e:83:77:16:b8:ae:eb:66:
58:93:ca:49:16:7a:2b:cb:e1:c9:a1:c7:0f:59:b3:cc:28:d3:
99:a9:61:57:b9:dd:a3:d7:b7:8d:2e:36:ef:37:ed:b8:37:be:
f9:a2:c9:ab:33:91:c3:13:a9:97:ba:6e:97:86:1f:21:70:21:
2c:44:74:ec:65:10:86:b5:d9:f5:7d:7c:20:0c:c6:04:5a:04:
c6:3e:9d:bd:ca:6c:60:f6:e3:ae:b2:e3:f2:d3:37:a4:73:8d:
cc:76:9d:3c:59:eb:59:81:8d:e0:0f:f0:6a:5b:71:7d:01:8a:
77:32:ff:48:11:2f:98:3c:0c:18:d9:02:11:fd:88:cb:cf:45:
2c:c5:74:b5:dc:91:e0:78:ee:76:06:16:d9:80:b5:ad:c2:54:
30:e9:7c:cc:c7:3a:3a:a4:5e:e7:fd:06:f5:f0:9f:ca:68:e5:
66:71:df:2e:fc:0f:e2:15:ec:de:32:3c:10:38:f5:cd:cb:af:
d8:27:ef:1c:ea:63:63:08:68:54:ad:21:f7:1f:70:e4:a8:17:
21:bf:2f:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCO11bpokn0EzErsDQpybXVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZmI4NWFkZDA5ZjQ4NzZlYTZhYWE4OGQ0ZDg4YzgxY2Ni
NmIxMGEwHhcNMjYwOTExMDUwMTEyWhcNMjYwOTEyMDUwMTEyWjAzMTEwLwYDVQQD
EyhhM2FjYzE4MTRjMGI5N2U4ZjA4YjQxNmEyMTFhOGUwYTg0MDZlZjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ALYkGs3lw3pttD8N7oRBCdxExSl
5SXQcN4al6WEHkim5qqPSkIK06ZYR4ncx5g4SCj9AMs0UGvrpKKwWHt3LJDXWyGg
TzUS21dIBecEVaEbC9pA49J+oS/buvuMmIYOmcfNCou8EikcDLMU+CVU1y8wAwjS
X3u8oAGzzu0KAljsE9RpF2P9rmKEgCAWmBFUs6fl4ZGub6ZFdQCx7oSvbtEiDpUR
KBl2D/k0GJzZwGtehoaMNMSYOlomqY4UBJSJKwVUxzOT2sNgKeMB3U/Q0HQ17Ugy
f6JKt7zMnrwbtASZHs5+TighjNtpOXjMw62PMpP9/CcO6IWjSQqckAX+HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOswYFMC5fo8ItBaiEajgqEBu87MB8GA1UdIwQY
MBaAFIX7ha3Qn0h26mqqiNTYjIHMtrEKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGZ1RnJkQ2ZTSGJxYXFxSTFOaU1nY3kyc1FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9jZWVhOTEtMGEyYS00YTRlLTkxN2It
YzYxNjFjZTM5NWFmLzEvaGZ1RnJkQ2ZTSGJxYXFxSTFOaU1nY3kyc1FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9jZWVhOTEtMGEyYS00YTRlLTkxN2ItYzYxNjFjZTM5NWFm
LzEvaGZ1RnJkQ2ZTSGJxYXFxSTFOaU1nY3kyc1FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApxEW/OLD
H1zl/gwAGH+ZxeWOCsuTLSSqqqrXHJFGNmzTOghhpO6QyVEfOvDyOF6Ddxa4rutm
WJPKSRZ6K8vhyaHHD1mzzCjTmalhV7ndo9e3jS427zftuDe++aLJqzORwxOpl7pu
l4YfIXAhLER07GUQhrXZ9X18IAzGBFoExj6dvcpsYPbjrrLj8tM3pHONzHadPFnr
WYGN4A/waltxfQGKdzL/SBEvmDwMGNkCEf2Iy89FLMV0tdyR4HjudgYW2YC1rcJU
MOl8zMc6OqRe5/0G9fCfymjlZnHfLvwP4hXs3jI8EDj1zcuv2CfvHOpjYwhoVK0h
9x9w5KgXIb8vWw==
-----END CERTIFICATE-----
Generated at Fri Sep 11 15:42:41 2026 by rpki-client