Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/9e7295-f991-4f49-88c3-4679bdd4f340/1/h-u3WW2Vg5pJJmc7zXv_0zv4U70.mft
File: h-u3WW2Vg5pJJmc7zXv_0zv4U70.mft (raw, json)
Hash identifier: R7TkRL+zGUzPVahXr8DV6KqWKYInrYLeqtLQ3YbzwfQ=
Subject key identifier: DD:0D:DB:98:0D:1D:85:1A:7C:1E:42:C0:89:F9:FA:4A:91:B6:AB:1D
Authority key identifier: 87:EB:B7:59:6D:95:83:9A:49:26:67:3B:CD:7B:FF:D3:3B:F8:53:BD
Certificate issuer: /CN=87ebb7596d95839a4926673bcd7bffd33bf853bd
Certificate serial: 01A11C07ADAC90723C0793B3D7DF287484C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-u3WW2Vg5pJJmc7zXv_0zv4U70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/9e7295-f991-4f49-88c3-4679bdd4f340/1/h-u3WW2Vg5pJJmc7zXv_0zv4U70.mft
Manifest number: 01C5
Signing time: Thu 08 Oct 2026 15:00:27 +0000
Manifest this update: Thu 08 Oct 2026 15:00:27 +0000
Manifest next update: Fri 09 Oct 2026 15:00:27 +0000
Files and hashes: 1: 4VnSoaJFq21OFcZvDPsAEryTDSk.roa (hash: CEZUEzkTNlI42r5UTq7wcvBj5hp5tyvou0Tezlvu5lg=)
2: h-u3WW2Vg5pJJmc7zXv_0zv4U70.crl (hash: iBeicLjhW0c/BGWD8O2E67aSfUb0LRaKmkkAGWD03cc=)
3: zFKSffrPsjxLp1Rn4HVvoFmQLKc.roa (hash: XkXnvMZ9f35IfpEaF5/d3kcQ6c6OZwO+xjVlqj6fwEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/9e7295-f991-4f49-88c3-4679bdd4f340/1/h-u3WW2Vg5pJJmc7zXv_0zv4U70.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/9e7295-f991-4f49-88c3-4679bdd4f340/1/h-u3WW2Vg5pJJmc7zXv_0zv4U70.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-u3WW2Vg5pJJmc7zXv_0zv4U70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:07:ad:ac:90:72:3c:07:93:b3:d7:df:28:74:84:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87ebb7596d95839a4926673bcd7bffd33bf853bd
Validity
Not Before: Oct 8 15:00:27 2026 GMT
Not After : Oct 9 15:00:27 2026 GMT
Subject: CN=dd0ddb980d1d851a7c1e42c089f9fa4a91b6ab1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0c:7c:96:ea:7a:d8:11:f9:22:6c:9d:d9:60:
06:b5:b0:9a:6d:69:55:d0:98:ec:ae:6f:95:96:1a:
2b:ec:c7:66:71:1c:f5:44:45:fd:22:7b:fb:fd:27:
e8:22:16:ff:fd:97:4d:c1:d4:73:04:cb:90:63:71:
d2:86:3e:51:d5:e1:f4:33:21:6b:b6:c3:e4:36:d2:
9b:f0:65:c9:40:48:a7:fa:66:56:bc:96:cc:db:0b:
8b:a9:08:da:c9:90:94:42:dc:d4:30:20:b7:c2:1f:
29:00:b9:cc:36:a2:6a:b5:23:ab:22:56:63:1f:a3:
1a:ba:3b:41:4c:7d:d4:15:5b:aa:88:9d:4c:0a:47:
5e:0d:03:7d:22:b4:2e:8e:d7:58:cf:6d:7e:f9:2f:
84:cf:0c:f3:64:a2:0a:c8:ae:54:b0:9e:b3:91:4c:
0a:7d:45:f3:74:45:13:7f:9d:c8:43:18:6e:d3:c7:
64:76:24:fd:3e:91:1b:29:72:1e:ca:c4:02:57:a1:
5e:a6:cc:4a:e2:2c:5d:d3:e5:d5:d9:9c:38:bb:3d:
c5:20:4f:1f:ba:98:5a:59:4f:f9:cf:5f:91:d0:0f:
ab:cd:76:1b:4b:99:17:75:72:89:64:ac:ea:63:14:
f6:6f:a9:62:ef:f9:f6:d2:44:9f:12:7f:ac:18:78:
ee:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0D:DB:98:0D:1D:85:1A:7C:1E:42:C0:89:F9:FA:4A:91:B6:AB:1D
X509v3 Authority Key Identifier:
keyid:87:EB:B7:59:6D:95:83:9A:49:26:67:3B:CD:7B:FF:D3:3B:F8:53:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-u3WW2Vg5pJJmc7zXv_0zv4U70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9e7295-f991-4f49-88c3-4679bdd4f340/1/h-u3WW2Vg5pJJmc7zXv_0zv4U70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9e7295-f991-4f49-88c3-4679bdd4f340/1/h-u3WW2Vg5pJJmc7zXv_0zv4U70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b5:ed:01:e2:99:dc:98:df:00:f2:c7:4a:22:be:9c:51:71:
24:bc:dd:c4:0a:c7:e2:5f:bf:0b:88:01:34:f6:23:53:e3:4c:
d7:d8:bb:08:23:0d:f5:cf:a2:3f:f1:cb:e6:39:c1:ed:54:2b:
16:3f:dd:19:4a:83:1a:e9:63:bc:75:b4:18:22:01:f3:72:d4:
86:6e:fc:83:2b:64:90:81:f7:4f:19:ab:89:bc:7e:b2:69:64:
5d:7e:52:18:05:93:66:0d:c4:b0:e1:36:f0:4f:e1:1f:d5:e4:
3e:5b:01:ae:a7:ed:20:60:1f:2d:2d:44:83:60:01:5c:7d:1b:
a7:a0:3c:83:37:46:99:19:7c:78:0b:e8:9e:c8:50:e7:6d:08:
9a:c7:ac:f1:96:ef:e8:bf:a5:8f:9b:e4:ec:26:f4:26:0d:19:
19:cf:7c:1e:ce:34:3c:a0:1a:dc:af:cf:90:12:4c:67:33:f1:
55:bc:f4:2c:8e:0e:80:37:65:a1:10:b3:69:a2:71:a3:99:a3:
a6:c3:6e:29:f8:fa:99:4e:eb:a5:1d:a8:2c:1a:c1:2b:e7:78:
d1:55:29:4b:ae:77:a2:0b:a4:09:84:1b:be:c5:f3:e3:ba:25:
45:ab:da:2c:59:fb:e0:bc:96:c5:b0:b9:63:79:d6:2c:ca:aa:
41:7c:cb:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEcB62skHI8B5Oz198odITDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZWJiNzU5NmQ5NTgzOWE0OTI2NjczYmNkN2JmZmQzM2Jm
ODUzYmQwHhcNMjYxMDA4MTUwMDI3WhcNMjYxMDA5MTUwMDI3WjAzMTEwLwYDVQQD
EyhkZDBkZGI5ODBkMWQ4NTFhN2MxZTQyYzA4OWY5ZmE0YTkxYjZhYjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwx8lup62BH5Imyd2WAGtbCabWlV
0Jjsrm+Vlhor7MdmcRz1REX9Inv7/SfoIhb//ZdNwdRzBMuQY3HShj5R1eH0MyFr
tsPkNtKb8GXJQEin+mZWvJbM2wuLqQjayZCUQtzUMCC3wh8pALnMNqJqtSOrIlZj
H6MaujtBTH3UFVuqiJ1MCkdeDQN9IrQujtdYz21++S+EzwzzZKIKyK5UsJ6zkUwK
fUXzdEUTf53IQxhu08dkdiT9PpEbKXIeysQCV6FepsxK4ixd0+XV2Zw4uz3FIE8f
uphaWU/5z1+R0A+rzXYbS5kXdXKJZKzqYxT2b6li7/n20kSfEn+sGHjuEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0N25gNHYUafB5CwIn5+kqRtqsdMB8GA1UdIwQY
MBaAFIfrt1ltlYOaSSZnO817/9M7+FO9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaC11M1dXMlZnNXBKSm1jN3pYdl8wenY0VTcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC85ZTcyOTUtZjk5MS00ZjQ5LTg4YzMt
NDY3OWJkZDRmMzQwLzEvaC11M1dXMlZnNXBKSm1jN3pYdl8wenY0VTcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC85ZTcyOTUtZjk5MS00ZjQ5LTg4YzMtNDY3OWJkZDRmMzQw
LzEvaC11M1dXMlZnNXBKSm1jN3pYdl8wenY0VTcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACrXtAeKZ
3JjfAPLHSiK+nFFxJLzdxArH4l+/C4gBNPYjU+NM19i7CCMN9c+iP/HL5jnB7VQr
Fj/dGUqDGuljvHW0GCIB83LUhm78gytkkIH3Txmribx+smlkXX5SGAWTZg3EsOE2
8E/hH9XkPlsBrqftIGAfLS1Eg2ABXH0bp6A8gzdGmRl8eAvonshQ520Imses8Zbv
6L+lj5vk7Cb0Jg0ZGc98Hs40PKAa3K/PkBJMZzPxVbz0LI4OgDdloRCzaaJxo5mj
psNuKfj6mU7rpR2oLBrBK+d40VUpS653ogukCYQbvsXz47olRavaLFn74LyWxbC5
Y3nWLMqqQXzLAg==
-----END CERTIFICATE-----
Generated at Thu Oct 8 20:04:10 2026 by rpki-client