Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
File: hNHcYT105sMty5gUzhJr1htSqqc.mft (raw, json)
Hash identifier: Q7ebd487S0Nw7XdmAYSIrpiFNBkkcV8J83s00FYrGD0=
Subject key identifier: E3:74:CE:DC:59:10:5F:63:44:FA:8E:CE:55:28:D1:FF:19:FA:B4:0D
Authority key identifier: 84:D1:DC:61:3D:74:E6:C3:2D:CB:98:14:CE:12:6B:D6:1B:52:AA:A7
Certificate issuer: /CN=84d1dc613d74e6c32dcb9814ce126bd61b52aaa7
Certificate serial: 01A17A3A649E8DC3AB3D044BA687CCC52E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
Manifest number: 1AC6
Signing time: Mon 26 Oct 2026 22:00:09 +0000
Manifest this update: Mon 26 Oct 2026 22:00:09 +0000
Manifest next update: Tue 27 Oct 2026 22:00:09 +0000
Files and hashes: 1: H6AvCEiySRywPqnoqPga4bVAQxg.roa (hash: nQJRt0EmcoJ2XDzeO3DLhVTm+C2u2iMFsb1catI5sW4=)
2: hNHcYT105sMty5gUzhJr1htSqqc.crl (hash: xndJP4DatovgXJKQ/0EoMOts2tJFYVXxWm2V381ReKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 22:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:3a:64:9e:8d:c3:ab:3d:04:4b:a6:87:cc:c5:2e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d1dc613d74e6c32dcb9814ce126bd61b52aaa7
Validity
Not Before: Oct 26 22:00:09 2026 GMT
Not After : Oct 27 22:00:09 2026 GMT
Subject: CN=e374cedc59105f6344fa8ece5528d1ff19fab40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fd:45:1b:d7:ab:3e:97:44:a9:e1:b5:24:5c:
8c:76:bd:1c:aa:d4:88:7a:e5:6c:61:42:e3:3a:b4:
68:86:7c:1d:eb:fb:50:cb:b9:57:a6:37:75:b8:e7:
35:5f:42:3f:e9:9d:53:bd:ef:ad:a5:30:54:cd:04:
5e:ff:d6:d9:67:a9:a1:53:28:f0:27:fb:0a:56:9c:
de:b3:d9:0f:04:96:23:49:7f:b7:15:79:02:60:79:
ec:28:e4:a9:47:46:21:a8:66:30:93:17:1e:0a:3d:
d2:cb:1f:1f:69:94:31:02:77:63:9d:70:8d:9e:08:
6d:00:3b:2a:b8:c9:37:2a:f1:2c:3c:21:ef:82:70:
35:ee:13:9c:41:ef:f3:71:04:71:02:37:78:a9:12:
23:48:bc:c8:ff:a0:11:03:ae:d6:1d:65:7e:56:e9:
9c:8d:4c:a3:1f:97:d0:e1:21:74:81:e1:26:6d:31:
69:01:6a:e9:eb:1b:72:11:43:53:2d:7e:f5:11:02:
87:b0:f8:13:d9:12:91:22:7f:2f:1d:fb:69:72:3a:
20:c6:0a:d2:bb:de:18:e3:22:e2:44:12:78:1e:a3:
79:e8:ff:0b:90:21:5e:a5:c2:85:9e:75:48:70:83:
43:8b:64:ca:24:86:6b:a4:ee:79:3c:13:5b:d9:bc:
e3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:74:CE:DC:59:10:5F:63:44:FA:8E:CE:55:28:D1:FF:19:FA:B4:0D
X509v3 Authority Key Identifier:
keyid:84:D1:DC:61:3D:74:E6:C3:2D:CB:98:14:CE:12:6B:D6:1B:52:AA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:25:12:64:1e:b2:9b:a4:ea:e1:4c:66:d4:28:38:80:f8:9a:
01:1f:39:12:c7:21:32:ee:5b:a2:ba:ab:02:24:6e:d6:10:d7:
b6:6c:a5:32:55:74:c2:4f:f9:53:df:0a:41:b2:b1:5f:46:93:
6b:9a:58:1c:37:d4:21:1b:ec:6e:6a:8b:5e:af:0e:1c:b0:5d:
5b:bf:83:d2:4a:5b:cf:59:db:9d:eb:3d:e0:5c:3e:f6:14:aa:
e0:1d:13:b7:70:8d:ca:f7:87:7b:cf:05:c8:29:a3:dd:7b:db:
98:5c:52:cb:ef:0a:d0:ff:9c:71:22:74:6b:15:df:be:f3:52:
7f:dd:3f:3f:2b:4c:21:1e:83:af:da:ef:99:7f:84:e8:e7:fd:
53:ac:bf:e2:dd:7b:a0:ad:d0:12:77:79:84:e7:29:e4:7b:de:
04:83:db:b5:2b:ae:24:64:2c:d1:35:99:e5:ac:af:f7:64:24:
6e:f8:16:46:15:68:0a:7e:91:2c:a1:90:cc:11:1c:ef:27:0f:
95:a2:aa:55:41:86:24:c9:84:5e:33:16:09:24:ba:8f:97:13:
bd:93:0f:0a:76:cc:21:12:07:74:08:a7:0d:33:9c:b2:00:d6:
3a:62:cc:ed:a7:fe:d4:70:fc:89:88:2f:65:f3:88:ea:a4:4e:
03:5a:38:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6OmSejcOrPQRLpofMxS5KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZDFkYzYxM2Q3NGU2YzMyZGNiOTgxNGNlMTI2YmQ2MWI1
MmFhYTcwHhcNMjYxMDI2MjIwMDA5WhcNMjYxMDI3MjIwMDA5WjAzMTEwLwYDVQQD
EyhlMzc0Y2VkYzU5MTA1ZjYzNDRmYThlY2U1NTI4ZDFmZjE5ZmFiNDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/1FG9erPpdEqeG1JFyMdr0cqtSI
euVsYULjOrRohnwd6/tQy7lXpjd1uOc1X0I/6Z1Tve+tpTBUzQRe/9bZZ6mhUyjw
J/sKVpzes9kPBJYjSX+3FXkCYHnsKOSpR0YhqGYwkxceCj3Syx8faZQxAndjnXCN
nghtADsquMk3KvEsPCHvgnA17hOcQe/zcQRxAjd4qRIjSLzI/6ARA67WHWV+Vumc
jUyjH5fQ4SF0geEmbTFpAWrp6xtyEUNTLX71EQKHsPgT2RKRIn8vHftpcjogxgrS
u94Y4yLiRBJ4HqN56P8LkCFepcKFnnVIcINDi2TKJIZrpO55PBNb2bzjxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFON0ztxZEF9jRPqOzlUo0f8Z+rQNMB8GA1UdIwQY
MBaAFITR3GE9dObDLcuYFM4Sa9YbUqqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaE5IY1lUMTA1c010eTVnVXpoSnIxaHRTcXFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy80ZTAyMDEtNGEwNC00MTVmLWE1ZjIt
ZjIxYjY2ZGU5YjU2LzEvaE5IY1lUMTA1c010eTVnVXpoSnIxaHRTcXFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy80ZTAyMDEtNGEwNC00MTVmLWE1ZjItZjIxYjY2ZGU5YjU2
LzEvaE5IY1lUMTA1c010eTVnVXpoSnIxaHRTcXFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASyUSZB6y
m6Tq4Uxm1Cg4gPiaAR85EschMu5borqrAiRu1hDXtmylMlV0wk/5U98KQbKxX0aT
a5pYHDfUIRvsbmqLXq8OHLBdW7+D0kpbz1nbnes94Fw+9hSq4B0Tt3CNyveHe88F
yCmj3XvbmFxSy+8K0P+ccSJ0axXfvvNSf90/PytMIR6Dr9rvmX+E6Of9U6y/4t17
oK3QEnd5hOcp5HveBIPbtSuuJGQs0TWZ5ayv92QkbvgWRhVoCn6RLKGQzBEc7ycP
laKqVUGGJMmEXjMWCSS6j5cTvZMPCnbMIRIHdAinDTOcsgDWOmLM7af+1HD8iYgv
ZfOI6qROA1o4/Q==
-----END CERTIFICATE-----
Generated at Tue Oct 27 08:53:11 2026 by rpki-client