Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft
File: hfR7ZaUlMyab0hmBOlIDr92eXb4.mft (raw, json)
Hash identifier: xn3Eut+Dw09s2PFWF0rsUftGcAwCY1+29miwO6hthCk=
Subject key identifier: AA:04:E9:82:7D:B5:AA:F2:B9:83:A8:84:BA:E1:28:BC:E7:1C:A9:EC
Authority key identifier: 85:F4:7B:65:A5:25:33:26:9B:D2:19:81:3A:52:03:AF:DD:9E:5D:BE
Certificate issuer: /CN=85f47b65a52533269bd219813a5203afdd9e5dbe
Certificate serial: 01A17FCFC9A278756E4CD9533AE32DED290A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfR7ZaUlMyab0hmBOlIDr92eXb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft
Manifest number: 16B8
Signing time: Wed 28 Oct 2026 00:01:26 +0000
Manifest this update: Wed 28 Oct 2026 00:01:26 +0000
Manifest next update: Thu 29 Oct 2026 00:01:26 +0000
Files and hashes: 1: hfR7ZaUlMyab0hmBOlIDr92eXb4.crl (hash: QhjC+3j88UAsp5C7aPtEc/voc/q4W61pFM+DqNeVfhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfR7ZaUlMyab0hmBOlIDr92eXb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:c9:a2:78:75:6e:4c:d9:53:3a:e3:2d:ed:29:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f47b65a52533269bd219813a5203afdd9e5dbe
Validity
Not Before: Oct 28 00:01:26 2026 GMT
Not After : Oct 29 00:01:26 2026 GMT
Subject: CN=aa04e9827db5aaf2b983a884bae128bce71ca9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b2:7b:c4:bc:35:a7:0d:3b:6e:42:d7:03:9f:
61:ae:71:db:09:53:c1:3f:d1:16:72:a5:e6:41:8a:
d6:c1:8e:75:37:fa:b6:f8:1e:e4:09:f6:00:09:eb:
9f:e6:dd:95:df:a6:d8:86:96:83:62:7a:be:21:87:
ce:10:c1:d3:95:1d:55:5b:0b:3f:0e:87:ff:aa:e7:
87:80:22:95:bf:9b:c3:e8:8d:2b:08:8f:54:66:72:
9b:3e:ee:aa:2e:7a:65:1b:da:dc:c8:ec:36:8a:4a:
f1:c5:e0:ce:86:c3:c0:3a:93:3c:87:20:e0:4d:90:
35:a1:00:97:70:bd:f6:58:5d:91:c6:57:3b:ab:40:
44:42:b3:98:e1:c3:2d:50:98:4f:71:ed:a3:40:f8:
0b:7c:99:5a:d3:4b:de:99:39:61:c3:36:f4:b3:f9:
1c:ea:99:0d:c5:0a:a9:0c:6b:ca:91:38:77:69:33:
9b:a3:7a:84:13:d0:fb:15:2f:be:56:49:44:6e:38:
e9:2b:68:de:1d:f8:4e:c3:fa:a7:c5:f0:c1:8f:f9:
fc:5a:b3:0d:37:bc:94:3e:71:22:2f:4a:5c:f9:c3:
12:f0:30:67:84:fb:25:79:0d:fe:38:6a:00:f5:ce:
64:ee:f5:56:72:ff:b0:ad:1c:86:7d:18:75:a9:a5:
a0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:04:E9:82:7D:B5:AA:F2:B9:83:A8:84:BA:E1:28:BC:E7:1C:A9:EC
X509v3 Authority Key Identifier:
keyid:85:F4:7B:65:A5:25:33:26:9B:D2:19:81:3A:52:03:AF:DD:9E:5D:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfR7ZaUlMyab0hmBOlIDr92eXb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e2:85:e0:b1:78:15:39:73:84:af:96:11:b6:eb:bd:a3:ce:
9b:f8:fa:0d:04:bf:c3:25:3c:37:22:33:d2:40:37:6d:07:f1:
18:03:cb:65:7f:66:c1:2f:ba:aa:59:79:af:28:43:d5:c4:53:
4e:3b:c4:51:f6:b5:33:c4:3e:6d:27:b6:68:14:e1:ad:52:b0:
b3:e6:37:01:d4:8f:b7:c4:39:40:d3:40:b1:5d:7a:ec:fe:48:
a5:d6:ab:19:e4:6f:36:22:ec:c8:21:df:31:df:52:34:bb:27:
90:af:5c:52:b4:22:92:86:4f:84:5a:13:d2:f8:e2:d6:59:6d:
34:8f:f3:6f:45:a0:36:26:06:45:45:2c:60:77:5e:be:22:8f:
4c:94:ca:5f:56:e8:97:83:77:85:d2:57:8d:8c:c6:a3:68:b9:
bb:c1:d6:be:a0:37:f7:19:f5:03:90:c5:36:14:ec:57:2b:1f:
11:7b:d7:96:5d:55:0f:ec:d5:a4:d2:83:59:b4:ec:81:c4:9b:
df:e4:c8:83:80:5e:99:c2:f9:7d:68:01:93:b2:f8:96:58:aa:
fc:49:63:c3:55:01:4d:2c:06:8b:4d:b4:52:61:1d:70:4a:8d:
d0:5b:5f:88:da:72:71:d7:c7:65:79:73:a7:dd:11:4c:90:21:
c9:16:c2:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/z8mieHVuTNlTOuMt7SkKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZjQ3YjY1YTUyNTMzMjY5YmQyMTk4MTNhNTIwM2FmZGQ5
ZTVkYmUwHhcNMjYxMDI4MDAwMTI2WhcNMjYxMDI5MDAwMTI2WjAzMTEwLwYDVQQD
EyhhYTA0ZTk4MjdkYjVhYWYyYjk4M2E4ODRiYWUxMjhiY2U3MWNhOWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLJ7xLw1pw07bkLXA59hrnHbCVPB
P9EWcqXmQYrWwY51N/q2+B7kCfYACeuf5t2V36bYhpaDYnq+IYfOEMHTlR1VWws/
Dof/queHgCKVv5vD6I0rCI9UZnKbPu6qLnplG9rcyOw2ikrxxeDOhsPAOpM8hyDg
TZA1oQCXcL32WF2Rxlc7q0BEQrOY4cMtUJhPce2jQPgLfJla00vemTlhwzb0s/kc
6pkNxQqpDGvKkTh3aTObo3qEE9D7FS++VklEbjjpK2jeHfhOw/qnxfDBj/n8WrMN
N7yUPnEiL0pc+cMS8DBnhPsleQ3+OGoA9c5k7vVWcv+wrRyGfRh1qaWgbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKoE6YJ9taryuYOohLrhKLznHKnsMB8GA1UdIwQY
MBaAFIX0e2WlJTMmm9IZgTpSA6/dnl2+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGZSN1phVWxNeWFiMGhtQk9sSURyOTJlWGI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy82MzNmZjQtNDZlOC00MjA0LWI2MzYt
MjQxMzc4MmM3MTY2LzEvaGZSN1phVWxNeWFiMGhtQk9sSURyOTJlWGI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy82MzNmZjQtNDZlOC00MjA0LWI2MzYtMjQxMzc4MmM3MTY2
LzEvaGZSN1phVWxNeWFiMGhtQk9sSURyOTJlWGI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhuKF4LF4
FTlzhK+WEbbrvaPOm/j6DQS/wyU8NyIz0kA3bQfxGAPLZX9mwS+6qll5ryhD1cRT
TjvEUfa1M8Q+bSe2aBThrVKws+Y3AdSPt8Q5QNNAsV167P5IpdarGeRvNiLsyCHf
Md9SNLsnkK9cUrQikoZPhFoT0vji1lltNI/zb0WgNiYGRUUsYHdeviKPTJTKX1bo
l4N3hdJXjYzGo2i5u8HWvqA39xn1A5DFNhTsVysfEXvXll1VD+zVpNKDWbTsgcSb
3+TIg4BemcL5fWgBk7L4lliq/Eljw1UBTSwGi020UmEdcEqN0FtfiNpycdfHZXlz
p90RTJAhyRbCwQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 06:17:23 2026 by rpki-client