Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft
File: hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft (raw, json)
Hash identifier: VmGDunJltuDbAzwi/QzrbTAvMgNp1WbMvWXAe3+wRcw=
Subject key identifier: D8:32:1B:1B:22:D9:D5:65:DE:E4:E8:1A:5D:B7:E1:42:74:EA:9E:70
Authority key identifier: 86:7B:33:7C:E4:C3:4F:EB:4A:71:FF:F8:55:9E:5E:4C:98:E4:2B:00
Certificate issuer: /CN=867b337ce4c34feb4a71fff8559e5e4c98e42b00
Certificate serial: 01A17D05D7C3C3418CA5319BEBFB6AFDF45C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hnszfOTDT-tKcf_4VZ5eTJjkKwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft
Manifest number: 02CD
Signing time: Tue 27 Oct 2026 11:01:37 +0000
Manifest this update: Tue 27 Oct 2026 11:01:37 +0000
Manifest next update: Wed 28 Oct 2026 11:01:37 +0000
Files and hashes: 1: PnZoP9c_MUx8bGVjWDH4QemT8Oc.roa (hash: N/n/c2ZTM9Bt63EXnz2HQd3THkOEOxgNYjeKCIXt71Y=)
2: hnszfOTDT-tKcf_4VZ5eTJjkKwA.crl (hash: T2TC7qMXzJ3SZedtneG+pbMpAx9hRPlaRzoDujX2YYI=)
3: t6GAlny-fqKuuQwhbvUz_72cDZg.roa (hash: 0Z7m8nppSdIlpMkeX4RoJU4whGw35KKZIMqUWhBFgBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hnszfOTDT-tKcf_4VZ5eTJjkKwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:d7:c3:c3:41:8c:a5:31:9b:eb:fb:6a:fd:f4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=867b337ce4c34feb4a71fff8559e5e4c98e42b00
Validity
Not Before: Oct 27 11:01:37 2026 GMT
Not After : Oct 28 11:01:37 2026 GMT
Subject: CN=d8321b1b22d9d565dee4e81a5db7e14274ea9e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c4:81:90:fe:df:da:db:d1:60:aa:73:a2:ab:
c0:51:67:91:e2:c8:ef:6d:2a:2e:c6:06:e0:96:2b:
ed:9d:67:4f:01:73:a2:45:60:d6:bc:79:02:04:ea:
a0:24:85:4b:1b:69:e9:f8:49:bc:49:fe:fc:ab:91:
f2:c6:ee:02:6f:8d:81:94:88:2c:83:d2:8f:01:f5:
ed:f7:79:38:62:1e:cc:06:06:cd:71:7c:25:d4:9a:
fe:65:9f:17:97:4f:e0:1f:67:18:95:c5:2d:96:6f:
00:da:b1:42:7a:78:14:29:ce:f9:fe:34:fe:15:c2:
30:48:9f:cc:9c:c2:b9:83:bb:f7:d9:71:36:37:93:
41:c1:2c:f4:0d:62:a1:12:6d:9b:2f:3d:37:3c:ee:
4a:89:6f:17:ca:7d:7f:72:21:0e:79:28:69:a4:3c:
a3:79:84:2d:4e:e4:ee:36:cb:89:bf:90:ab:08:0e:
71:d2:0b:b5:43:38:82:68:26:e5:f3:07:83:e6:24:
19:18:f5:4a:11:f8:fe:61:b9:d4:b9:06:4a:f1:32:
4d:64:1c:df:84:bc:cf:ae:02:93:5b:06:2f:14:da:
85:87:fd:a9:76:a2:10:3c:70:1c:48:ea:05:36:2d:
be:e9:61:57:28:2a:1e:aa:39:77:53:2d:92:7a:d1:
f7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:32:1B:1B:22:D9:D5:65:DE:E4:E8:1A:5D:B7:E1:42:74:EA:9E:70
X509v3 Authority Key Identifier:
keyid:86:7B:33:7C:E4:C3:4F:EB:4A:71:FF:F8:55:9E:5E:4C:98:E4:2B:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hnszfOTDT-tKcf_4VZ5eTJjkKwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:27:37:14:de:66:f4:38:99:33:99:fb:a0:da:86:a1:5c:65:
99:12:58:2c:d8:92:59:25:6b:12:46:3b:0e:27:7f:54:bf:4c:
71:7c:a3:b4:1d:d4:97:3a:d0:3a:b9:6d:ac:3f:71:7a:15:7e:
77:f8:db:32:12:fd:e0:59:0e:16:6f:96:4c:eb:5d:a9:ba:d0:
17:82:ab:cf:eb:d2:4e:3f:33:38:f2:db:a7:bc:00:c1:44:cf:
dc:3d:80:28:dc:75:ca:e7:5c:75:b4:7c:b7:a0:32:a6:c4:90:
55:58:f0:21:59:9b:9e:b7:f3:09:c4:a7:2f:4e:a6:ec:b0:c5:
f0:74:3a:b8:4c:21:b3:bc:fa:90:4f:90:ca:43:17:ec:02:f7:
85:1d:98:31:5c:65:04:a2:3c:a5:f7:7b:da:d1:2a:a2:de:52:
9b:6e:e1:c7:e9:96:67:ca:5e:2e:19:0c:21:8e:b3:69:7f:ae:
66:00:c7:83:68:8b:fc:b8:8f:22:88:e9:d7:3d:52:1b:92:ee:
a6:13:61:cc:58:1f:f2:12:33:54:4a:0c:03:c6:04:79:29:04:
db:74:61:33:fa:4e:f2:1d:be:a5:d5:20:42:82:07:57:ac:01:
98:b4:cd:ab:9d:96:2a:c5:39:b0:96:08:0b:d8:e4:14:23:b6:
38:ff:d0:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF9BdfDw0GMpTGb6/tq/fRcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2N2IzMzdjZTRjMzRmZWI0YTcxZmZmODU1OWU1ZTRjOThl
NDJiMDAwHhcNMjYxMDI3MTEwMTM3WhcNMjYxMDI4MTEwMTM3WjAzMTEwLwYDVQQD
EyhkODMyMWIxYjIyZDlkNTY1ZGVlNGU4MWE1ZGI3ZTE0Mjc0ZWE5ZTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cSBkP7f2tvRYKpzoqvAUWeR4sjv
bSouxgbglivtnWdPAXOiRWDWvHkCBOqgJIVLG2np+Em8Sf78q5Hyxu4Cb42BlIgs
g9KPAfXt93k4Yh7MBgbNcXwl1Jr+ZZ8Xl0/gH2cYlcUtlm8A2rFCengUKc75/jT+
FcIwSJ/MnMK5g7v32XE2N5NBwSz0DWKhEm2bLz03PO5KiW8Xyn1/ciEOeShppDyj
eYQtTuTuNsuJv5CrCA5x0gu1QziCaCbl8weD5iQZGPVKEfj+YbnUuQZK8TJNZBzf
hLzPrgKTWwYvFNqFh/2pdqIQPHAcSOoFNi2+6WFXKCoeqjl3Uy2SetH34QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgyGxsi2dVl3uToGl234UJ06p5wMB8GA1UdIwQY
MBaAFIZ7M3zkw0/rSnH/+FWeXkyY5CsAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG5zemZPVERULXRLY2ZfNFZaNWVUSmprS3dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9lMjc5ZjUtNzNkMS00ZmU4LTk3OGQt
OTBhY2ZkYjAxZTkwLzEvaG5zemZPVERULXRLY2ZfNFZaNWVUSmprS3dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9lMjc5ZjUtNzNkMS00ZmU4LTk3OGQtOTBhY2ZkYjAxZTkw
LzEvaG5zemZPVERULXRLY2ZfNFZaNWVUSmprS3dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARyc3FN5m
9DiZM5n7oNqGoVxlmRJYLNiSWSVrEkY7Did/VL9McXyjtB3UlzrQOrltrD9xehV+
d/jbMhL94FkOFm+WTOtdqbrQF4Krz+vSTj8zOPLbp7wAwUTP3D2AKNx1yudcdbR8
t6AypsSQVVjwIVmbnrfzCcSnL06m7LDF8HQ6uEwhs7z6kE+QykMX7AL3hR2YMVxl
BKI8pfd72tEqot5Sm27hx+mWZ8peLhkMIY6zaX+uZgDHg2iL/LiPIojp1z1SG5Lu
phNhzFgf8hIzVEoMA8YEeSkE23RhM/pO8h2+pdUgQoIHV6wBmLTNq52WKsU5sJYI
C9jkFCO2OP/QFg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:37:49 2026 by rpki-client