Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
File: hmuOBdk45F1lrjFNxnUjfeyDEaE.mft (raw, json)
Hash identifier: JQ8fkapkzx/2NQ4uTVcwjv+GU7snWgIiDBIku1s2xUs=
Subject key identifier: 3C:5C:4E:7F:25:B7:96:53:22:BE:5C:AB:86:E0:74:1F:37:15:2C:25
Authority key identifier: 86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1
Certificate issuer: /CN=866b8e05d938e45d65ae314dc675237dec8311a1
Certificate serial: 01A181504DB297ED2D5944784BE361E88110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
Manifest number: 16E2
Signing time: Wed 28 Oct 2026 07:01:25 +0000
Manifest this update: Wed 28 Oct 2026 07:01:25 +0000
Manifest next update: Thu 29 Oct 2026 07:01:25 +0000
Files and hashes: 1: AXw1fMN4QVwh_fCCHDmmZdyjQ0M.roa (hash: 2a2VYvYjD+SKO9HMwLyzgAvBrGoGV8DCs63xNBs37UA=)
2: hmuOBdk45F1lrjFNxnUjfeyDEaE.crl (hash: My6X8uHsxtrg6Av0Fsjt0r26VJaBunqCM2VK5cnJ7q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:50:4d:b2:97:ed:2d:59:44:78:4b:e3:61:e8:81:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866b8e05d938e45d65ae314dc675237dec8311a1
Validity
Not Before: Oct 28 07:01:25 2026 GMT
Not After : Oct 29 07:01:25 2026 GMT
Subject: CN=3c5c4e7f25b7965322be5cab86e0741f37152c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:58:af:c5:ad:ce:f2:08:db:ee:85:cb:bb:4c:
b3:a6:05:60:06:c6:e2:95:3f:c2:d1:9b:d8:c3:02:
b2:31:ec:c5:1c:06:1a:dd:b1:6b:56:c7:04:28:e0:
d7:d8:4c:31:9c:ea:d4:6a:02:6d:5a:a1:1c:fb:08:
08:d7:14:78:2b:4c:92:e7:c2:44:f2:6c:26:05:25:
56:a3:f6:e7:23:3a:ce:94:e6:de:7c:07:8b:1e:46:
44:eb:0f:3c:fb:29:c6:f2:d5:50:a3:41:a9:d3:8d:
1d:18:d9:be:1d:9b:57:3a:33:3b:53:43:cd:7b:d1:
17:56:d8:21:1f:a3:25:21:26:80:34:f7:86:ad:c8:
72:09:2c:f6:11:9c:b8:e0:fc:81:30:39:ea:59:66:
e2:20:e4:dc:bf:3a:01:92:35:a0:5a:ea:47:04:fc:
dd:d8:6c:b5:89:8e:70:ac:c1:c0:da:a3:6a:cf:60:
15:98:8d:d9:08:19:c4:a9:04:51:28:32:fb:7e:b6:
54:0a:5c:39:1e:38:65:57:50:39:1e:bd:6a:b0:90:
e2:28:30:9f:f5:8a:7a:b7:c1:79:b3:9b:ef:2f:09:
1d:13:76:6b:a5:de:5f:e5:7f:a1:05:95:82:9f:f6:
5e:0a:8d:ab:91:3d:6c:25:34:e8:bc:cf:b6:d0:70:
71:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5C:4E:7F:25:B7:96:53:22:BE:5C:AB:86:E0:74:1F:37:15:2C:25
X509v3 Authority Key Identifier:
keyid:86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:4b:6f:ef:59:02:bb:45:56:8b:7b:af:c3:5d:97:03:51:3c:
ef:49:f7:21:c1:2a:a7:d1:38:17:04:94:62:35:65:e9:12:60:
08:46:cb:5f:99:1f:67:38:9b:4e:b9:7f:a8:29:be:aa:af:52:
6d:31:02:8c:82:7a:99:79:54:54:06:a4:92:17:9d:bf:82:cb:
4f:8e:c3:3f:dc:15:7b:5b:f6:a9:a2:d6:71:37:3f:77:ec:69:
80:33:e5:03:0e:83:6e:ca:a7:c0:dc:b1:d6:6b:f9:fb:de:0e:
25:16:8b:8b:bb:bb:5a:22:29:f8:65:2f:f4:01:47:5a:a9:24:
13:9c:2a:17:89:77:d0:f5:3b:54:b3:8a:01:41:01:8d:25:68:
48:9a:c1:89:af:4c:b6:e4:17:c7:1d:b6:ee:35:c9:20:76:b2:
d0:f9:14:2d:c1:da:08:3d:42:d8:7c:bb:a4:c6:f1:88:c7:55:
26:c2:01:f8:b3:fc:2a:57:6d:38:d3:5f:16:fa:73:4f:61:9f:
30:c9:d2:e5:08:e6:50:3c:86:06:c6:99:51:0c:aa:a9:30:ed:
d4:fd:53:46:ab:c4:7b:3d:78:e5:22:d6:36:91:ca:44:ef:07:
5c:de:cf:93:e1:4b:6f:53:41:37:af:3e:1d:e5:58:69:f1:a0:
18:2f:d1:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGBUE2yl+0tWUR4S+Nh6IEQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NmI4ZTA1ZDkzOGU0NWQ2NWFlMzE0ZGM2NzUyMzdkZWM4
MzExYTEwHhcNMjYxMDI4MDcwMTI1WhcNMjYxMDI5MDcwMTI1WjAzMTEwLwYDVQQD
EygzYzVjNGU3ZjI1Yjc5NjUzMjJiZTVjYWI4NmUwNzQxZjM3MTUyYzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1ivxa3O8gjb7oXLu0yzpgVgBsbi
lT/C0ZvYwwKyMezFHAYa3bFrVscEKODX2EwxnOrUagJtWqEc+wgI1xR4K0yS58JE
8mwmBSVWo/bnIzrOlObefAeLHkZE6w88+ynG8tVQo0Gp040dGNm+HZtXOjM7U0PN
e9EXVtghH6MlISaANPeGrchyCSz2EZy44PyBMDnqWWbiIOTcvzoBkjWgWupHBPzd
2Gy1iY5wrMHA2qNqz2AVmI3ZCBnEqQRRKDL7frZUClw5HjhlV1A5Hr1qsJDiKDCf
9Yp6t8F5s5vvLwkdE3Zrpd5f5X+hBZWCn/ZeCo2rkT1sJTTovM+20HBxpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxcTn8lt5ZTIr5cq4bgdB83FSwlMB8GA1UdIwQY
MBaAFIZrjgXZOORdZa4xTcZ1I33sgxGhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG11T0JkazQ1RjFscmpGTnhuVWpmZXlERWFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kNWJjZTItYTkyZi00NDJhLWEyMzUt
YWE4OGE0YmE1OGVmLzEvaG11T0JkazQ1RjFscmpGTnhuVWpmZXlERWFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9kNWJjZTItYTkyZi00NDJhLWEyMzUtYWE4OGE0YmE1OGVm
LzEvaG11T0JkazQ1RjFscmpGTnhuVWpmZXlERWFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsEtv71kC
u0VWi3uvw12XA1E870n3IcEqp9E4FwSUYjVl6RJgCEbLX5kfZzibTrl/qCm+qq9S
bTECjIJ6mXlUVAakkhedv4LLT47DP9wVe1v2qaLWcTc/d+xpgDPlAw6DbsqnwNyx
1mv5+94OJRaLi7u7WiIp+GUv9AFHWqkkE5wqF4l30PU7VLOKAUEBjSVoSJrBia9M
tuQXxx227jXJIHay0PkULcHaCD1C2Hy7pMbxiMdVJsIB+LP8KldtONNfFvpzT2Gf
MMnS5QjmUDyGBsaZUQyqqTDt1P1TRqvEez145SLWNpHKRO8HXN7Pk+FLb1NBN68+
HeVYafGgGC/RpA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 16:29:36 2026 by rpki-client