Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
File: HnsuJD-KqVRZeTK83NmvZWDc5RY.mft (raw, json)
Hash identifier: 9yeSQVS6tcpzNmhra6K3/NCbhg+YGA97WWRZNCBzUSQ=
Subject key identifier: 84:92:91:34:1C:29:D3:04:46:AD:FE:9E:65:52:60:3A:F3:82:0A:CA
Authority key identifier: 1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
Certificate issuer: /CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Certificate serial: 01A17B167EDD2986C7544E76947CA8B39A7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
Manifest number: 0F88
Signing time: Tue 27 Oct 2026 02:00:34 +0000
Manifest this update: Tue 27 Oct 2026 02:00:34 +0000
Manifest next update: Wed 28 Oct 2026 02:00:34 +0000
Files and hashes: 1: 1-z-hX5qlCf8aH8nr2X0zpJdE1hg.roa (hash: 9rLZMVrt7BCmTVumDwvgzgKKJKdaVIZCBXEilPyFZ4c=)
2: HnsuJD-KqVRZeTK83NmvZWDc5RY.crl (hash: nXsvjlUt15X77mSArmk15AjxxhRqRronGOlOjpAmphE=)
3: XI8CVY8sYwhzkz3YLD7pkxjD3Zk.roa (hash: 25+wg4lixvrKpaIcYJueXb9oNmVKiR9L4SbDtXfdAjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:16:7e:dd:29:86:c7:54:4e:76:94:7c:a8:b3:9a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Validity
Not Before: Oct 27 02:00:34 2026 GMT
Not After : Oct 28 02:00:34 2026 GMT
Subject: CN=849291341c29d30446adfe9e6552603af3820aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:ac:dc:c2:93:aa:e3:51:1e:9e:fe:29:51:
f2:45:de:30:58:ce:45:fb:b9:a8:19:c2:2e:06:a2:
0f:8a:2a:de:6c:d6:17:0d:c6:9a:4f:a8:36:0c:57:
a2:e8:c5:43:36:40:ad:02:2c:b1:f7:9a:9c:62:d2:
b0:32:2c:a0:46:d9:62:bb:88:97:d6:2a:15:aa:44:
97:c7:20:c1:9e:f8:59:8b:6a:dd:0a:67:fc:a1:26:
61:1f:b2:0b:e7:1e:fc:fb:35:42:d1:5c:28:bb:8b:
35:fc:5a:28:f9:5f:81:09:e2:f7:f5:69:18:03:d2:
a0:95:3d:82:a0:67:d3:99:27:e7:13:28:06:36:7d:
44:23:49:2e:16:59:8a:28:10:67:13:a1:f9:47:54:
9c:96:0c:eb:8d:ca:09:30:83:5d:fb:9d:32:3c:9e:
aa:6b:41:62:4d:f4:c0:49:e7:37:f1:24:f7:60:4d:
76:d7:a0:c2:61:40:7c:25:8b:e9:5e:bc:12:68:73:
fc:fc:3f:92:8c:98:82:59:55:ef:a2:f9:93:d5:0e:
02:d1:ef:18:aa:28:da:29:25:ed:f0:d8:99:f6:ff:
85:98:b6:54:65:06:4b:ee:2d:03:6a:b7:67:bb:95:
b6:31:b6:d0:3f:97:13:0f:2f:b1:f8:63:1e:28:82:
3b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:92:91:34:1C:29:D3:04:46:AD:FE:9E:65:52:60:3A:F3:82:0A:CA
X509v3 Authority Key Identifier:
keyid:1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:4f:8b:63:63:f4:10:06:8a:83:37:82:b7:6a:09:46:fa:01:
22:c7:5a:82:4a:a5:c8:c1:63:6d:cc:1a:33:30:87:1d:3a:1b:
6f:77:7c:13:e0:f8:18:c1:94:13:c7:9b:a3:0f:1e:9a:e0:c6:
28:eb:a0:36:ae:15:18:83:84:4c:8e:e9:5b:ac:d5:b5:f3:e1:
fd:e3:ee:c1:bd:01:78:3d:0e:75:89:a9:4c:db:a2:8b:eb:47:
bd:bb:fc:e9:c2:f9:b6:bf:81:f8:2d:a4:0c:0c:13:dc:4e:16:
06:48:24:00:5a:0c:d4:eb:95:28:70:95:e6:58:39:f0:c6:ad:
01:c3:b4:36:1a:d3:0d:07:29:1c:d7:32:6a:2a:89:13:ff:38:
59:c7:d3:93:42:dc:ee:6f:40:db:55:25:52:3b:e2:94:4b:cf:
e7:fc:fe:0d:e5:94:54:aa:1d:43:d3:95:80:11:26:5f:2b:82:
59:f9:23:6d:82:06:cf:2f:2d:14:d1:3e:3c:15:6e:9e:63:9d:
94:7d:a8:c0:e7:45:80:ca:2a:32:9c:54:74:5b:e8:6b:38:66:
61:0b:18:47:83:b1:41:77:e3:af:b4:aa:b2:83:30:04:a5:c3:
57:db:df:53:c9:7d:04:6d:17:38:33:7b:ab:d0:14:0d:15:62:
32:71:da:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF7Fn7dKYbHVE52lHyos5p6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlN2IyZTI0M2Y4YWE5NTQ1OTc5MzJiY2RjZDlhZjY1NjBk
Y2U1MTYwHhcNMjYxMDI3MDIwMDM0WhcNMjYxMDI4MDIwMDM0WjAzMTEwLwYDVQQD
Eyg4NDkyOTEzNDFjMjlkMzA0NDZhZGZlOWU2NTUyNjAzYWYzODIwYWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiOs3MKTquNRHp7+KVHyRd4wWM5F
+7moGcIuBqIPiirebNYXDcaaT6g2DFei6MVDNkCtAiyx95qcYtKwMiygRtliu4iX
1ioVqkSXxyDBnvhZi2rdCmf8oSZhH7IL5x78+zVC0Vwou4s1/Foo+V+BCeL39WkY
A9KglT2CoGfTmSfnEygGNn1EI0kuFlmKKBBnE6H5R1SclgzrjcoJMINd+50yPJ6q
a0FiTfTASec38ST3YE1216DCYUB8JYvpXrwSaHP8/D+SjJiCWVXvovmT1Q4C0e8Y
qijaKSXt8NiZ9v+FmLZUZQZL7i0Dardnu5W2MbbQP5cTDy+x+GMeKII7WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISSkTQcKdMERq3+nmVSYDrzggrKMB8GA1UdIwQY
MBaAFB57LiQ/iqlUWXkyvNzZr2Vg3OUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG5zdUpELUtxVlJaZVRLODNObXZaV0RjNVJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC80ZGFlZTAtODRlMi00MWU5LTk2NDMt
ZDU0OTU1NjQzY2Q5LzEvSG5zdUpELUtxVlJaZVRLODNObXZaV0RjNVJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC80ZGFlZTAtODRlMi00MWU5LTk2NDMtZDU0OTU1NjQzY2Q5
LzEvSG5zdUpELUtxVlJaZVRLODNObXZaV0RjNVJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzE+LY2P0
EAaKgzeCt2oJRvoBIsdagkqlyMFjbcwaMzCHHTobb3d8E+D4GMGUE8ebow8emuDG
KOugNq4VGIOETI7pW6zVtfPh/ePuwb0BeD0OdYmpTNuii+tHvbv86cL5tr+B+C2k
DAwT3E4WBkgkAFoM1OuVKHCV5lg58MatAcO0NhrTDQcpHNcyaiqJE/84WcfTk0Lc
7m9A21UlUjvilEvP5/z+DeWUVKodQ9OVgBEmXyuCWfkjbYIGzy8tFNE+PBVunmOd
lH2owOdFgMoqMpxUdFvoazhmYQsYR4OxQXfjr7SqsoMwBKXDV9vfU8l9BG0XODN7
q9AUDRViMnHatQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 06:04:12 2026 by rpki-client