Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
File: hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft (raw, json)
Hash identifier: caJjDX0vCElBeU8mcused0J3UzQ4/me/hc0JYV11erQ=
Subject key identifier: C9:84:24:91:20:D1:C5:E8:7A:F9:96:97:FB:8A:07:A2:B0:2B:65:20
Authority key identifier: 84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC
Certificate issuer: /CN=84b87af5334c5c45141b6675a9ed46e57b7976ac
Certificate serial: 01A12C8E283EB0A82F8E75294EABA0D96E1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
Manifest number: 1A9F
Signing time: Sun 11 Oct 2026 20:01:16 +0000
Manifest this update: Sun 11 Oct 2026 20:01:16 +0000
Manifest next update: Mon 12 Oct 2026 20:01:16 +0000
Files and hashes: 1: hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl (hash: ++WGddGMKuMtxiUWq1+BOa+MaOyZ/VpN9oMdSqcYERM=)
2: yfgLpeAIQyC5y-W4IaKpK2L1_yk.roa (hash: oWLVNeWnqZmGvQRxIBi9f/jmIyhTqkilRZKKYPg6VeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:8e:28:3e:b0:a8:2f:8e:75:29:4e:ab:a0:d9:6e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b87af5334c5c45141b6675a9ed46e57b7976ac
Validity
Not Before: Oct 11 20:01:16 2026 GMT
Not After : Oct 12 20:01:16 2026 GMT
Subject: CN=c984249120d1c5e87af99697fb8a07a2b02b6520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8f:3d:3a:52:c8:9a:9f:07:91:a3:51:bb:c8:
88:5c:0c:e1:c1:92:4d:3c:88:d4:ff:d5:78:df:7b:
87:a9:61:30:8e:75:ff:00:fd:99:f1:d7:a4:f6:95:
5a:52:b6:7e:cc:8c:fd:e7:12:d0:e5:10:90:59:eb:
f6:72:18:55:9d:67:bd:fb:85:21:a7:7e:80:98:b1:
7c:5b:3a:5f:9b:13:f1:a0:3b:b1:55:18:2f:e1:59:
9c:fb:04:2b:0f:3c:de:34:30:fe:8c:cc:ea:67:83:
f3:f5:7a:32:d9:81:60:d1:d9:a2:3b:a2:9e:8b:45:
b4:8b:b6:67:cc:73:8a:12:10:e2:2d:1e:0e:03:29:
72:47:a1:72:b2:64:a0:ea:b0:d1:1a:5b:4f:c9:c8:
04:b8:f8:e3:b6:ae:97:e6:85:e9:6c:45:3b:a4:83:
92:37:cc:ff:18:44:1b:28:b2:0c:8f:c4:fa:7b:96:
55:09:51:63:88:b4:ad:10:5f:b2:64:92:0f:de:92:
ad:be:c3:d5:71:21:f0:54:f5:b0:20:87:f0:cf:94:
66:d2:cf:28:c0:71:71:17:30:3a:d3:c6:29:aa:cc:
3e:81:76:4f:2a:14:68:d4:5b:77:50:bb:6d:24:4c:
3b:08:21:c3:7b:fe:6d:7c:0d:1b:e0:dd:fc:3b:37:
d8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:84:24:91:20:D1:C5:E8:7A:F9:96:97:FB:8A:07:A2:B0:2B:65:20
X509v3 Authority Key Identifier:
keyid:84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:3d:d3:24:7d:a5:34:5b:a6:7b:85:e1:e0:c8:e0:ef:a4:09:
e0:0c:cd:08:4b:82:df:fa:fb:70:84:70:2e:85:3f:dd:4c:4b:
a8:57:02:f8:29:ff:5a:9b:ec:10:9f:72:31:a3:8d:d7:cb:19:
c1:07:7e:f5:4d:f3:b4:c5:7a:e4:6b:77:cd:9d:38:d9:9e:56:
cd:3c:91:58:57:d4:99:fa:bc:28:31:47:09:24:cd:0c:d3:39:
04:bd:09:a1:61:81:e2:ae:3f:8a:18:b6:b5:a4:1b:3f:ff:8e:
d6:19:fe:d1:2f:13:bc:b3:c9:de:ed:10:a2:88:9c:3e:36:99:
71:a1:fa:bd:59:4b:f2:3d:5b:8e:77:97:75:47:db:56:61:5a:
02:e8:04:14:57:45:d8:5f:9c:95:ec:b2:90:cd:81:e8:f5:c3:
da:c2:3c:4b:2a:99:25:c3:a6:38:c7:90:cb:18:f0:11:be:3f:
72:1a:e7:ee:fb:c2:f3:5e:fd:ab:83:57:3f:41:76:1e:e1:2f:
5b:06:50:81:3c:ee:ae:dd:e1:ce:3e:6d:a9:67:f6:86:6d:0a:
47:9c:53:58:b4:55:cd:d3:31:17:15:3a:34:57:9a:24:f9:6b:
2d:38:ea:6f:ff:dc:c8:c7:49:61:79:69:c7:bb:fb:38:11:54:
b3:65:98:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEsjig+sKgvjnUpTqug2W4eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0Yjg3YWY1MzM0YzVjNDUxNDFiNjY3NWE5ZWQ0NmU1N2I3
OTc2YWMwHhcNMjYxMDExMjAwMTE2WhcNMjYxMDEyMjAwMTE2WjAzMTEwLwYDVQQD
EyhjOTg0MjQ5MTIwZDFjNWU4N2FmOTk2OTdmYjhhMDdhMmIwMmI2NTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI89OlLImp8HkaNRu8iIXAzhwZJN
PIjU/9V433uHqWEwjnX/AP2Z8dek9pVaUrZ+zIz95xLQ5RCQWev2chhVnWe9+4Uh
p36AmLF8WzpfmxPxoDuxVRgv4Vmc+wQrDzzeNDD+jMzqZ4Pz9Xoy2YFg0dmiO6Ke
i0W0i7ZnzHOKEhDiLR4OAylyR6FysmSg6rDRGltPycgEuPjjtq6X5oXpbEU7pIOS
N8z/GEQbKLIMj8T6e5ZVCVFjiLStEF+yZJIP3pKtvsPVcSHwVPWwIIfwz5Rm0s8o
wHFxFzA608Ypqsw+gXZPKhRo1Ft3ULttJEw7CCHDe/5tfA0b4N38OzfY7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmEJJEg0cXoevmWl/uKB6KwK2UgMB8GA1UdIwQY
MBaAFIS4evUzTFxFFBtmdantRuV7eXasMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExoNjlUTk1YRVVVRzJaMXFlMUc1WHQ1ZHF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iN2JhYzMtZjYyZC00MTQyLWFmM2Mt
MmU5ODRmYmZmOGIxLzEvaExoNjlUTk1YRVVVRzJaMXFlMUc1WHQ1ZHF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9iN2JhYzMtZjYyZC00MTQyLWFmM2MtMmU5ODRmYmZmOGIx
LzEvaExoNjlUTk1YRVVVRzJaMXFlMUc1WHQ1ZHF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJz3TJH2l
NFume4Xh4Mjg76QJ4AzNCEuC3/r7cIRwLoU/3UxLqFcC+Cn/WpvsEJ9yMaON18sZ
wQd+9U3ztMV65Gt3zZ042Z5WzTyRWFfUmfq8KDFHCSTNDNM5BL0JoWGB4q4/ihi2
taQbP/+O1hn+0S8TvLPJ3u0QooicPjaZcaH6vVlL8j1bjneXdUfbVmFaAugEFFdF
2F+cleyykM2B6PXD2sI8SyqZJcOmOMeQyxjwEb4/chrn7vvC8179q4NXP0F2HuEv
WwZQgTzurt3hzj5tqWf2hm0KR5xTWLRVzdMxFxU6NFeaJPlrLTjqb//cyMdJYXlp
x7v7OBFUs2WYQA==
-----END CERTIFICATE-----
Generated at Mon Oct 12 04:32:32 2026 by rpki-client