Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
File: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft (raw, json)
Hash identifier: 1fhduUhO1JTU4e3aR0V586b8LNv91ETv1xTJms6jLT4=
Subject key identifier: A9:80:5B:C0:07:B3:7A:29:6B:23:84:41:17:24:B6:99:76:DD:29:59
Authority key identifier: 85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
Certificate issuer: /CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Certificate serial: 01A16A90B530981914D99B865B914EAE92C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
Manifest number: 1953
Signing time: Fri 23 Oct 2026 21:00:30 +0000
Manifest this update: Fri 23 Oct 2026 21:00:30 +0000
Manifest next update: Sat 24 Oct 2026 21:00:30 +0000
Files and hashes: 1: 4KbAohA8ssFR1i33E3s1iD_d4NM.roa (hash: hNIZfJq4/MLB3UNEqiTbF6882A38pDgGoQNN1odn41g=)
2: 63y8SGT1xErvBSh2Z_hJttu62lM.roa (hash: JI2NXJcRm68/TBBkycOEqEDZ5p5swkLFyZRc8a9XM30=)
3: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl (hash: GzfxYUpo2Tvmvc9fZzUedHxWQfaUcXgg97Itiru74Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:90:b5:30:98:19:14:d9:9b:86:5b:91:4e:ae:92:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Validity
Not Before: Oct 23 21:00:30 2026 GMT
Not After : Oct 24 21:00:30 2026 GMT
Subject: CN=a9805bc007b37a296b2384411724b69976dd2959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b0:6f:94:72:2e:77:1f:9c:82:2b:17:d8:e9:
05:52:e1:bc:81:64:a8:52:eb:e7:b8:d9:a3:c1:f7:
59:36:c4:36:85:d2:44:88:79:d8:f7:37:66:54:b2:
48:71:0e:af:18:d9:aa:91:99:b3:f4:aa:99:90:9b:
c0:55:c2:c5:f5:e4:b2:d0:b5:d5:21:5d:5b:65:54:
b6:e1:b6:f6:83:85:50:91:53:31:fd:1a:4e:f2:ea:
17:a1:63:c0:56:c8:1f:ae:38:e2:7c:14:50:a1:07:
df:7c:a5:87:3f:62:30:ef:b4:e1:49:a6:2c:bc:6a:
b3:b0:50:87:fd:8b:d0:d8:b5:33:b8:6f:9b:1d:12:
f2:65:ed:73:ef:3f:e6:ff:43:f1:35:80:34:21:46:
24:62:d6:06:ae:f8:dd:2f:7a:68:b0:12:b5:a1:f7:
00:8f:83:0a:e1:ce:d5:5d:8e:49:e0:ee:e2:f1:48:
aa:e9:3b:90:b5:0f:b3:48:b7:69:f8:df:3e:40:d1:
57:3f:7f:6f:4f:29:59:4f:5c:e2:3e:5c:ec:44:c4:
42:9c:40:60:1e:a0:39:18:6b:d4:1a:9c:51:92:12:
aa:5f:5c:59:44:d7:2d:3a:4d:43:d0:ce:80:e6:39:
ca:f9:36:89:05:a4:d8:70:14:98:4b:6c:ff:bc:8b:
12:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:80:5B:C0:07:B3:7A:29:6B:23:84:41:17:24:B6:99:76:DD:29:59
X509v3 Authority Key Identifier:
keyid:85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:88:e6:ff:98:b2:e9:aa:39:dd:45:bc:d0:dd:7c:6d:39:ce:
cb:43:c5:c2:72:3d:1f:e2:7f:2b:5f:37:f3:82:90:74:23:6a:
85:e1:79:55:d7:4b:79:fb:91:1e:91:e4:1f:7e:c0:0c:c9:e5:
45:83:60:cd:61:ff:93:73:42:81:76:17:eb:c6:13:64:67:6f:
8c:99:3e:60:aa:f8:af:b7:d4:c2:38:f3:67:8d:08:28:8f:cd:
3a:a1:3d:00:85:a3:12:61:f2:32:e7:b1:ca:57:a0:f3:33:c2:
ac:8c:43:95:2e:09:e7:3d:b6:78:04:7a:c0:01:65:3c:c3:ef:
46:09:e4:65:37:94:cd:a6:58:99:0f:ae:97:87:fe:52:65:01:
33:99:23:6c:42:06:19:02:42:ee:e3:63:e6:a1:92:ba:06:04:
02:45:e8:15:e6:29:26:94:ac:f1:51:22:90:45:81:f9:21:c3:
d1:5c:27:6a:27:8b:bf:05:5e:d9:46:c9:5b:f1:a1:7a:7b:68:
4e:8e:65:12:b2:7a:77:be:e2:f5:79:f5:e1:5a:98:52:65:82:
53:cb:0d:ad:e8:41:4a:83:55:8a:a1:4b:3c:d5:a0:60:d2:3a:
aa:90:96:c4:19:43:30:f0:b1:ab:e8:17:59:b8:ec:07:b4:6d:
1a:81:12:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFqkLUwmBkU2ZuGW5FOrpLAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MzcwY2M1ZDI2MGYzZTJhZWZmNWRkOGY4ZjRhNDE1YTIz
NDVhODEwHhcNMjYxMDIzMjEwMDMwWhcNMjYxMDI0MjEwMDMwWjAzMTEwLwYDVQQD
EyhhOTgwNWJjMDA3YjM3YTI5NmIyMzg0NDExNzI0YjY5OTc2ZGQyOTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLBvlHIudx+cgisX2OkFUuG8gWSo
UuvnuNmjwfdZNsQ2hdJEiHnY9zdmVLJIcQ6vGNmqkZmz9KqZkJvAVcLF9eSy0LXV
IV1bZVS24bb2g4VQkVMx/RpO8uoXoWPAVsgfrjjifBRQoQfffKWHP2Iw77ThSaYs
vGqzsFCH/YvQ2LUzuG+bHRLyZe1z7z/m/0PxNYA0IUYkYtYGrvjdL3posBK1ofcA
j4MK4c7VXY5J4O7i8Uiq6TuQtQ+zSLdp+N8+QNFXP39vTylZT1ziPlzsRMRCnEBg
HqA5GGvUGpxRkhKqX1xZRNctOk1D0M6A5jnK+TaJBaTYcBSYS2z/vIsSfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmAW8AHs3opayOEQRcktpl23SlZMB8GA1UdIwQY
MBaAFIU3DMXSYPPirv9d2Pj0pBWiNFqBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFRjTXhkSmc4LUt1XzEzWS1QU2tGYUkwV29FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80ZjcyNDYtY2U4Zi00NGY4LWE4MzEt
YWU2MGJlYTA2YTljLzEvaFRjTXhkSmc4LUt1XzEzWS1QU2tGYUkwV29FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS80ZjcyNDYtY2U4Zi00NGY4LWE4MzEtYWU2MGJlYTA2YTlj
LzEvaFRjTXhkSmc4LUt1XzEzWS1QU2tGYUkwV29FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs4jm/5iy
6ao53UW80N18bTnOy0PFwnI9H+J/K18384KQdCNqheF5VddLefuRHpHkH37ADMnl
RYNgzWH/k3NCgXYX68YTZGdvjJk+YKr4r7fUwjjzZ40IKI/NOqE9AIWjEmHyMuex
yleg8zPCrIxDlS4J5z22eAR6wAFlPMPvRgnkZTeUzaZYmQ+ul4f+UmUBM5kjbEIG
GQJC7uNj5qGSugYEAkXoFeYpJpSs8VEikEWB+SHD0VwnaieLvwVe2UbJW/Ghento
To5lErJ6d77i9Xn14VqYUmWCU8sNrehBSoNViqFLPNWgYNI6qpCWxBlDMPCxq+gX
WbjsB7RtGoESyw==
-----END CERTIFICATE-----
Generated at Sat Oct 24 03:14:16 2026 by rpki-client