Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
File: hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft (raw, json)
Hash identifier: /hRnrqnrjbNNa8j80mrR/2us9grjKZFREC6Gj4jK5FM=
Subject key identifier: 3C:68:7B:92:97:FA:C4:07:9F:07:F0:77:05:13:6B:E0:12:BF:8E:57
Authority key identifier: 85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A
Certificate issuer: /CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a
Certificate serial: 019EBD6C8FC935EA4F9D58D18B855F85A934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
Manifest number: 0BE9
Signing time: Fri 12 Jun 2026 20:01:08 +0000
Manifest this update: Fri 12 Jun 2026 20:01:08 +0000
Manifest next update: Sat 13 Jun 2026 20:01:08 +0000
Files and hashes: 1: U967gx6zU2ewhEleCWFHT_7A_9o.roa (hash: rEcp4qFupVQgVYmsA8hG1Q/G6+z2CIRB0Mx5vxsYxf0=)
2: h-KmrUFQix2mPVIgPxijrxKClGw.roa (hash: fc8hHRpimWi4M001kIYlHNuSFZw5gckGt8QS97+VBbM=)
3: hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl (hash: NPDX9cKtLNuGWDL0k+npKa3bbZYNQiD6ny6e7KbCxfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 17:56:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:6c:8f:c9:35:ea:4f:9d:58:d1:8b:85:5f:85:a9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a
Validity
Not Before: Jun 12 20:01:08 2026 GMT
Not After : Jun 13 20:01:08 2026 GMT
Subject: CN=3c687b9297fac4079f07f07705136be012bf8e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:58:eb:c9:4a:0f:65:06:47:c5:86:4d:1d:08:
b3:9f:50:9e:cc:04:a7:bf:d6:f6:34:af:6d:ed:42:
da:85:e6:9c:d6:54:ab:b9:fd:ca:5d:84:39:50:a5:
1c:1a:eb:ea:b5:e2:8d:c9:a9:9f:e0:4b:10:2a:89:
b3:46:48:86:b9:82:5b:4b:45:b0:29:bf:7e:9a:87:
12:b9:b7:ad:61:dd:16:e1:c3:a8:d6:68:a7:d0:3d:
00:b8:f1:01:ae:fe:2d:28:98:0c:24:56:cb:3e:54:
a2:96:e1:05:10:22:0b:f4:0a:ca:4b:00:0d:cf:f5:
ee:98:bd:26:62:ef:74:eb:fc:48:3b:29:cc:96:0d:
c8:37:8b:0f:3f:9d:9f:8f:20:ee:bf:6d:04:c9:d1:
af:a2:4f:f0:1f:68:f7:8e:6b:a4:c5:90:30:72:22:
2d:59:61:f3:d1:d4:18:47:a8:d2:cf:7d:1c:1b:a3:
93:54:05:18:f6:5a:6b:9d:68:f3:01:73:dc:a9:71:
c9:dc:74:40:ee:b2:99:ae:9f:e7:59:73:08:2d:0d:
d2:10:c0:e1:1e:e2:5f:bd:69:c0:52:56:23:7b:e4:
92:3d:e8:39:20:fc:31:e9:0d:09:6a:3e:48:51:35:
93:00:c4:40:9c:f9:e9:a5:cb:d2:34:6d:1b:93:2f:
06:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:68:7B:92:97:FA:C4:07:9F:07:F0:77:05:13:6B:E0:12:BF:8E:57
X509v3 Authority Key Identifier:
keyid:85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:f8:62:5d:1a:e1:d6:62:6d:e0:66:46:43:74:ba:39:5c:32:
d0:b0:ce:01:83:aa:67:cf:d6:76:fc:ca:b6:34:b9:88:c4:63:
50:3b:25:46:f1:6d:16:30:f9:d9:da:40:66:9e:87:e0:81:9b:
96:0a:9c:9c:eb:32:e5:e4:d1:c5:1c:42:41:90:85:1a:16:2e:
c0:1a:e8:7d:b7:5c:66:21:57:c7:72:00:da:ec:f6:be:3d:72:
3d:90:72:28:f6:c0:3d:b5:ff:42:ce:2e:d7:9c:30:41:ed:f7:
d8:b0:eb:eb:48:1d:4a:da:84:33:83:8d:87:9d:d5:ce:ef:15:
e6:b4:5a:12:38:2a:1e:dc:f9:bf:37:f8:9d:5b:9d:d4:d7:27:
d6:83:62:ea:4d:45:36:70:4d:c3:65:4c:54:52:a6:73:f2:c5:
ee:82:05:bc:15:2b:ab:1c:c4:54:20:30:a1:ba:7e:e4:5b:cf:
63:5d:6e:61:2a:58:38:4a:b2:2f:78:e9:95:c8:3a:9c:4d:fb:
a9:90:c5:d5:92:86:18:3e:d4:7a:7f:d7:1a:d4:20:54:79:04:
f3:ba:14:f2:0c:42:d9:29:75:3d:1b:f9:bb:bc:0d:24:4f:e9:
69:c5:48:62:93:5d:0a:d6:21:3a:a1:b5:40:50:4d:7f:7a:c0:
c9:07:bf:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ69bI/JNepPnVjRi4Vfhak0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZmI4NWFkZDA5ZjQ4NzZlYTZhYWE4OGQ0ZDg4YzgxY2Ni
NmIxMGEwHhcNMjYwNjEyMjAwMTA4WhcNMjYwNjEzMjAwMTA4WjAzMTEwLwYDVQQD
EygzYzY4N2I5Mjk3ZmFjNDA3OWYwN2YwNzcwNTEzNmJlMDEyYmY4ZTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFjryUoPZQZHxYZNHQizn1CezASn
v9b2NK9t7ULaheac1lSruf3KXYQ5UKUcGuvqteKNyamf4EsQKomzRkiGuYJbS0Ww
Kb9+mocSubetYd0W4cOo1min0D0AuPEBrv4tKJgMJFbLPlSiluEFECIL9ArKSwAN
z/XumL0mYu906/xIOynMlg3IN4sPP52fjyDuv20EydGvok/wH2j3jmukxZAwciIt
WWHz0dQYR6jSz30cG6OTVAUY9lprnWjzAXPcqXHJ3HRA7rKZrp/nWXMILQ3SEMDh
HuJfvWnAUlYje+SSPeg5IPwx6Q0Jaj5IUTWTAMRAnPnppcvSNG0bky8GkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxoe5KX+sQHnwfwdwUTa+ASv45XMB8GA1UdIwQY
MBaAFIX7ha3Qn0h26mqqiNTYjIHMtrEKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGZ1RnJkQ2ZTSGJxYXFxSTFOaU1nY3kyc1FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9jZWVhOTEtMGEyYS00YTRlLTkxN2It
YzYxNjFjZTM5NWFmLzEvaGZ1RnJkQ2ZTSGJxYXFxSTFOaU1nY3kyc1FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9jZWVhOTEtMGEyYS00YTRlLTkxN2ItYzYxNjFjZTM5NWFm
LzEvaGZ1RnJkQ2ZTSGJxYXFxSTFOaU1nY3kyc1FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1vhiXRrh
1mJt4GZGQ3S6OVwy0LDOAYOqZ8/WdvzKtjS5iMRjUDslRvFtFjD52dpAZp6H4IGb
lgqcnOsy5eTRxRxCQZCFGhYuwBrofbdcZiFXx3IA2uz2vj1yPZByKPbAPbX/Qs4u
15wwQe332LDr60gdStqEM4ONh53Vzu8V5rRaEjgqHtz5vzf4nVud1Ncn1oNi6k1F
NnBNw2VMVFKmc/LF7oIFvBUrqxzEVCAwobp+5FvPY11uYSpYOEqyL3jplcg6nE37
qZDF1ZKGGD7Uen/XGtQgVHkE87oU8gxC2Sl1PRv5u7wNJE/pacVIYpNdCtYhOqG1
QFBNf3rAyQe/Aw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 03:14:58 2026 by rpki-client