Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
File: HnsuJD-KqVRZeTK83NmvZWDc5RY.mft (raw, json)
Hash identifier: VwJj4SHmRNeYyW5Yth6oUzQZL0cYZtQkTz0Hxm9vOcQ=
Subject key identifier: 07:82:37:7F:C3:A0:3F:3E:BC:4C:75:4B:58:7C:95:77:C5:65:81:03
Authority key identifier: 1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
Certificate issuer: /CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Certificate serial: 01A08B9F0D895340C8CDA12D5B3AC7489BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
Manifest number: 0F0C
Signing time: Thu 10 Sep 2026 14:00:51 +0000
Manifest this update: Thu 10 Sep 2026 14:00:51 +0000
Manifest next update: Fri 11 Sep 2026 14:00:51 +0000
Files and hashes: 1: 1-z-hX5qlCf8aH8nr2X0zpJdE1hg.roa (hash: 9rLZMVrt7BCmTVumDwvgzgKKJKdaVIZCBXEilPyFZ4c=)
2: HnsuJD-KqVRZeTK83NmvZWDc5RY.crl (hash: 9NJBiP417QUjn8d2JIXyd5lbGyh5lH3CTJBuWNhmhBs=)
3: XI8CVY8sYwhzkz3YLD7pkxjD3Zk.roa (hash: 25+wg4lixvrKpaIcYJueXb9oNmVKiR9L4SbDtXfdAjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:0d:89:53:40:c8:cd:a1:2d:5b:3a:c7:48:9b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Validity
Not Before: Sep 10 14:00:51 2026 GMT
Not After : Sep 11 14:00:51 2026 GMT
Subject: CN=0782377fc3a03f3ebc4c754b587c9577c5658103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4f:4e:65:91:83:fc:d8:bc:98:92:2a:f9:6d:
aa:18:68:9e:16:de:97:e8:94:73:d9:24:a1:68:93:
c3:b0:e7:bb:5a:1d:88:e7:a4:87:aa:d3:fe:44:f9:
db:33:a1:61:33:2c:07:3c:f5:48:c9:62:f3:7c:37:
25:a5:cf:a1:c1:17:bd:a7:4e:dd:19:4b:91:7c:c1:
08:6f:81:0a:e9:c6:a4:48:8c:f6:e1:f1:f5:b5:37:
0f:57:80:26:1e:ee:cd:8b:48:6d:09:01:79:cc:81:
fb:6a:02:cd:51:20:9c:c4:f2:cd:dd:82:aa:53:49:
23:00:c8:fc:21:c4:d0:45:69:63:53:5b:10:d7:1c:
c4:78:1e:94:00:60:ca:46:34:7a:a6:19:73:fe:c5:
b8:d0:86:68:da:5b:9f:52:f3:ea:36:2d:7d:96:56:
ad:0a:22:7a:07:3b:62:83:b7:ea:bc:52:1c:78:9d:
eb:ba:ec:56:d2:32:d6:df:1f:0f:f5:d3:e7:94:6c:
c3:57:43:9b:c7:15:e9:64:15:e1:98:f5:02:c0:e2:
04:6e:30:f0:ff:13:00:07:e7:0f:d9:f2:1d:d0:11:
0b:04:68:dd:a4:cf:06:ae:da:e6:91:f4:b7:2e:e8:
43:66:60:23:4f:a8:63:94:3e:e2:e6:cd:37:94:92:
01:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:82:37:7F:C3:A0:3F:3E:BC:4C:75:4B:58:7C:95:77:C5:65:81:03
X509v3 Authority Key Identifier:
keyid:1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:40:ee:46:03:40:2e:69:94:f3:dc:52:6e:19:3b:ca:40:36:
68:ec:59:64:21:00:c6:07:c6:5a:86:17:82:f7:c4:c2:b6:8d:
ad:9e:0e:a0:5e:9b:90:cb:d2:51:dc:b1:df:b7:5b:4f:6b:9f:
45:fd:de:a7:22:d2:11:28:e6:a3:fb:65:d0:0b:71:bc:6f:1c:
17:52:11:8f:37:e1:74:ee:c3:9d:51:1f:00:73:bc:ff:59:40:
0c:37:7d:ac:c2:f2:99:fa:99:27:2c:83:8d:04:74:12:48:f7:
b3:d4:56:cb:e1:08:87:a5:bb:46:db:b1:0a:b3:7c:04:6a:02:
93:fc:84:37:e8:9e:9b:25:18:f5:ea:05:9b:49:d4:31:c7:fa:
5b:ac:92:50:36:65:7f:71:a5:34:57:94:85:31:44:b8:11:ef:
2b:25:62:97:0c:f0:54:58:a6:b7:91:2d:bd:77:75:06:50:26:
0e:aa:38:9c:cc:78:dc:b0:81:85:d5:e9:41:f8:be:59:87:a3:
26:26:1d:4e:51:61:89:3c:9d:b1:0d:c8:1c:e2:10:a3:64:8c:
04:89:a4:67:a9:63:3d:6d:90:3b:69:2a:5e:55:b5:5b:db:9b:
68:52:32:0e:e7:4b:8b:e7:15:6b:f9:53:cb:dc:9a:dd:35:d6:
a6:24:58:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLnw2JU0DIzaEtWzrHSJvKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlN2IyZTI0M2Y4YWE5NTQ1OTc5MzJiY2RjZDlhZjY1NjBk
Y2U1MTYwHhcNMjYwOTEwMTQwMDUxWhcNMjYwOTExMTQwMDUxWjAzMTEwLwYDVQQD
EygwNzgyMzc3ZmMzYTAzZjNlYmM0Yzc1NGI1ODdjOTU3N2M1NjU4MTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk9OZZGD/Ni8mJIq+W2qGGieFt6X
6JRz2SShaJPDsOe7Wh2I56SHqtP+RPnbM6FhMywHPPVIyWLzfDclpc+hwRe9p07d
GUuRfMEIb4EK6cakSIz24fH1tTcPV4AmHu7Ni0htCQF5zIH7agLNUSCcxPLN3YKq
U0kjAMj8IcTQRWljU1sQ1xzEeB6UAGDKRjR6phlz/sW40IZo2lufUvPqNi19llat
CiJ6Bztig7fqvFIceJ3ruuxW0jLW3x8P9dPnlGzDV0ObxxXpZBXhmPUCwOIEbjDw
/xMAB+cP2fId0BELBGjdpM8GrtrmkfS3LuhDZmAjT6hjlD7i5s03lJIBpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAeCN3/DoD8+vEx1S1h8lXfFZYEDMB8GA1UdIwQY
MBaAFB57LiQ/iqlUWXkyvNzZr2Vg3OUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG5zdUpELUtxVlJaZVRLODNObXZaV0RjNVJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC80ZGFlZTAtODRlMi00MWU5LTk2NDMt
ZDU0OTU1NjQzY2Q5LzEvSG5zdUpELUtxVlJaZVRLODNObXZaV0RjNVJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC80ZGFlZTAtODRlMi00MWU5LTk2NDMtZDU0OTU1NjQzY2Q5
LzEvSG5zdUpELUtxVlJaZVRLODNObXZaV0RjNVJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACkDuRgNA
LmmU89xSbhk7ykA2aOxZZCEAxgfGWoYXgvfEwraNrZ4OoF6bkMvSUdyx37dbT2uf
Rf3epyLSESjmo/tl0AtxvG8cF1IRjzfhdO7DnVEfAHO8/1lADDd9rMLymfqZJyyD
jQR0Ekj3s9RWy+EIh6W7RtuxCrN8BGoCk/yEN+iemyUY9eoFm0nUMcf6W6ySUDZl
f3GlNFeUhTFEuBHvKyVilwzwVFimt5EtvXd1BlAmDqo4nMx43LCBhdXpQfi+WYej
JiYdTlFhiTydsQ3IHOIQo2SMBImkZ6ljPW2QO2kqXlW1W9ubaFIyDudLi+cVa/lT
y9ya3TXWpiRY6A==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:03:53 2026 by rpki-client