Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
File: h6WU4wS2ghg6ojWeQOHc75P-BXA.mft (raw, json)
Hash identifier: TBButysj1JEJl0Jp5dU1C9DdWjywptGCjFZ21Xc6XKc=
Subject key identifier: 68:1E:35:D9:C2:0B:47:89:EC:D0:0C:08:5A:13:84:C0:A0:CA:46:19
Authority key identifier: 87:A5:94:E3:04:B6:82:18:3A:A2:35:9E:40:E1:DC:EF:93:FE:05:70
Certificate issuer: /CN=87a594e304b682183aa2359e40e1dcef93fe0570
Certificate serial: 01A17A04421563F54531F0DAC2A9C54C1786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
Manifest number: 09D8
Signing time: Mon 26 Oct 2026 21:01:01 +0000
Manifest this update: Mon 26 Oct 2026 21:01:01 +0000
Manifest next update: Tue 27 Oct 2026 21:01:01 +0000
Files and hashes: 1: WxnDI9dSFugc7Iy0b5YqreC9wbU.roa (hash: z//4HqyEyKzOrY+CM2iIO8ckIeunZSzbquuEiF28tBw=)
2: h6WU4wS2ghg6ojWeQOHc75P-BXA.crl (hash: OC0R9sPlPEGn9ckhfyax1HDBZ/3/dMOCWU+NVlc4dlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:04:42:15:63:f5:45:31:f0:da:c2:a9:c5:4c:17:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87a594e304b682183aa2359e40e1dcef93fe0570
Validity
Not Before: Oct 26 21:01:01 2026 GMT
Not After : Oct 27 21:01:01 2026 GMT
Subject: CN=681e35d9c20b4789ecd00c085a1384c0a0ca4619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:23:7c:79:19:89:67:3b:54:86:7f:d9:0c:d9:
5c:61:63:bc:fd:07:2e:8e:7c:5f:15:d6:1c:fb:f8:
e9:d7:37:bb:2b:76:9c:55:d9:39:f9:b1:47:45:3b:
79:24:68:c5:08:38:0b:66:42:08:97:46:58:f9:1f:
5b:fa:4b:66:0f:2d:2f:ea:01:c1:30:0d:d5:b2:a7:
51:b4:62:40:a1:72:4d:f0:8b:b1:a0:a9:ee:86:84:
a9:86:70:40:36:e5:c8:42:36:53:1d:57:ee:8e:76:
b7:1a:7d:8c:4f:c9:35:08:52:76:8e:4f:f9:a8:11:
40:58:20:25:37:d8:aa:dc:dc:44:a8:fe:06:9c:66:
d6:39:c4:65:f2:e1:b9:34:71:b3:f0:91:7c:ac:05:
cc:e4:97:0c:67:a4:0d:b1:68:db:44:a9:60:dc:30:
38:e2:e0:45:ea:a9:b6:a5:5e:a4:44:1e:ba:ee:19:
99:de:be:eb:62:83:d7:33:bb:5f:0f:83:32:35:37:
da:82:f0:74:29:09:87:82:ee:fe:ad:df:01:13:e8:
e3:43:8d:e2:c2:86:65:81:47:95:69:29:62:8a:83:
b2:45:cd:fc:d1:9d:ad:d4:39:7e:f6:fd:e8:5f:5c:
a7:f8:29:b3:5e:0f:ad:e1:f3:94:f2:3a:f3:f4:24:
44:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1E:35:D9:C2:0B:47:89:EC:D0:0C:08:5A:13:84:C0:A0:CA:46:19
X509v3 Authority Key Identifier:
keyid:87:A5:94:E3:04:B6:82:18:3A:A2:35:9E:40:E1:DC:EF:93:FE:05:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:b1:c9:fe:5d:8b:f2:e9:e5:ea:b1:9a:fd:e3:05:34:00:8a:
b7:ed:33:de:45:ff:93:3c:34:8c:d7:4d:80:8a:1c:2d:d2:6e:
60:ff:43:c9:9a:6a:6a:3b:6b:ea:ac:19:f2:82:e0:f0:48:e4:
5a:73:f1:3d:fd:a8:69:e0:ac:36:07:d1:2c:db:92:09:f5:c1:
88:de:b1:7e:67:2d:ef:70:20:02:72:38:06:b2:71:cd:35:95:
3a:24:c6:ae:e5:c7:8b:db:22:45:3c:75:48:e3:9b:6c:49:11:
35:d7:10:97:2b:a9:8b:57:79:60:54:90:89:8d:3a:f8:2a:2c:
7f:62:0e:f3:96:7d:48:82:cd:2c:a7:5b:b1:f9:fa:82:f8:9f:
cb:3d:f6:04:a8:74:ab:a9:55:b0:30:7a:12:ab:5b:4b:94:b9:
59:eb:e5:ad:a5:5f:aa:13:6d:4f:60:a7:d9:08:4e:e1:a2:16:
5e:3e:0a:01:d0:a3:9e:bd:22:d6:bb:f7:8a:29:db:21:e1:03:
a9:66:64:83:c2:fb:eb:a0:54:d4:a8:ab:38:52:8c:ce:64:3f:
cd:3c:8c:1f:f1:e5:83:99:40:c7:22:4a:2a:ad:6c:08:a1:89:
83:c4:32:8c:44:90:f4:19:2a:2d:ef:04:b7:5c:72:ed:92:a3:
df:e6:92:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6BEIVY/VFMfDawqnFTBeGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YTU5NGUzMDRiNjgyMTgzYWEyMzU5ZTQwZTFkY2VmOTNm
ZTA1NzAwHhcNMjYxMDI2MjEwMTAxWhcNMjYxMDI3MjEwMTAxWjAzMTEwLwYDVQQD
Eyg2ODFlMzVkOWMyMGI0Nzg5ZWNkMDBjMDg1YTEzODRjMGEwY2E0NjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSN8eRmJZztUhn/ZDNlcYWO8/Qcu
jnxfFdYc+/jp1ze7K3acVdk5+bFHRTt5JGjFCDgLZkIIl0ZY+R9b+ktmDy0v6gHB
MA3VsqdRtGJAoXJN8IuxoKnuhoSphnBANuXIQjZTHVfujna3Gn2MT8k1CFJ2jk/5
qBFAWCAlN9iq3NxEqP4GnGbWOcRl8uG5NHGz8JF8rAXM5JcMZ6QNsWjbRKlg3DA4
4uBF6qm2pV6kRB667hmZ3r7rYoPXM7tfD4MyNTfagvB0KQmHgu7+rd8BE+jjQ43i
woZlgUeVaSliioOyRc380Z2t1Dl+9v3oX1yn+CmzXg+t4fOU8jrz9CREUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgeNdnCC0eJ7NAMCFoThMCgykYZMB8GA1UdIwQY
MBaAFIellOMEtoIYOqI1nkDh3O+T/gVwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDZXVTR3UzJnaGc2b2pXZVFPSGM3NVAtQlhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80Zjg2OTktN2I1Mi00MDZlLTgyYzAt
YjllMzRhMzhmM2E5LzEvaDZXVTR3UzJnaGc2b2pXZVFPSGM3NVAtQlhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC80Zjg2OTktN2I1Mi00MDZlLTgyYzAtYjllMzRhMzhmM2E5
LzEvaDZXVTR3UzJnaGc2b2pXZVFPSGM3NVAtQlhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAprHJ/l2L
8unl6rGa/eMFNACKt+0z3kX/kzw0jNdNgIocLdJuYP9DyZpqajtr6qwZ8oLg8Ejk
WnPxPf2oaeCsNgfRLNuSCfXBiN6xfmct73AgAnI4BrJxzTWVOiTGruXHi9siRTx1
SOObbEkRNdcQlyupi1d5YFSQiY06+Cosf2IO85Z9SILNLKdbsfn6gvifyz32BKh0
q6lVsDB6EqtbS5S5WevlraVfqhNtT2Cn2QhO4aIWXj4KAdCjnr0i1rv3iinbIeED
qWZkg8L766BU1KirOFKMzmQ/zTyMH/Hlg5lAxyJKKq1sCKGJg8QyjESQ9BkqLe8E
t1xy7ZKj3+aSag==
-----END CERTIFICATE-----
Generated at Tue Oct 27 03:47:24 2026 by rpki-client