Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
File: hmuOBdk45F1lrjFNxnUjfeyDEaE.mft (raw, json)
Hash identifier: /br7v/y87mjCK8eyaKKmGrRqz7DMkxvmnop53J1t9zo=
Subject key identifier: 16:92:70:8C:0F:20:0B:DB:01:A0:33:18:69:6C:FF:DA:62:17:9D:47
Authority key identifier: 86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1
Certificate issuer: /CN=866b8e05d938e45d65ae314dc675237dec8311a1
Certificate serial: 01A08FEA94A95C0501BA942C495F8C80EE95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
Manifest number: 1665
Signing time: Fri 11 Sep 2026 10:01:50 +0000
Manifest this update: Fri 11 Sep 2026 10:01:50 +0000
Manifest next update: Sat 12 Sep 2026 10:01:50 +0000
Files and hashes: 1: AXw1fMN4QVwh_fCCHDmmZdyjQ0M.roa (hash: 2a2VYvYjD+SKO9HMwLyzgAvBrGoGV8DCs63xNBs37UA=)
2: hmuOBdk45F1lrjFNxnUjfeyDEaE.crl (hash: MLU4y0jddDRUQ6tkFKEC0wejsVKPRYzBKhCjHQmtkag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 10:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:ea:94:a9:5c:05:01:ba:94:2c:49:5f:8c:80:ee:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866b8e05d938e45d65ae314dc675237dec8311a1
Validity
Not Before: Sep 11 10:01:50 2026 GMT
Not After : Sep 12 10:01:50 2026 GMT
Subject: CN=1692708c0f200bdb01a03318696cffda62179d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:85:3c:c8:9b:4f:38:75:df:07:e1:be:d2:d1:
1e:7f:1a:30:56:f3:f4:f2:8f:23:7f:24:b3:73:d8:
38:9b:52:a6:be:9c:3a:d8:6a:29:1c:7c:a7:69:bd:
30:66:11:73:c8:66:cd:d7:a1:d8:21:5d:34:24:9f:
1d:92:3a:3b:b6:7a:53:bb:e5:ca:d3:d0:cc:18:a3:
10:cd:1c:0f:32:f9:ac:a7:87:3f:cc:1f:75:c7:80:
37:94:e8:0c:bf:db:d3:7f:c9:39:58:d8:aa:39:52:
a7:bd:bc:0a:bb:93:49:82:9c:5b:45:8f:5b:45:c9:
d4:31:b6:27:c9:01:d2:77:bf:8f:45:b5:c0:a7:66:
e9:b2:73:91:e6:02:23:7b:0c:72:58:fe:23:b1:66:
d4:c9:c6:52:38:e0:c8:77:f8:d8:b7:4c:db:24:a1:
73:fa:cf:4b:f7:24:36:8b:cc:34:dc:40:7e:78:5e:
37:b4:9e:6d:8b:06:06:d0:a2:57:ba:e3:78:ac:c4:
3c:83:0f:f0:de:a0:95:46:43:a5:02:50:b6:c8:26:
32:ed:b1:e3:bd:4a:49:a9:7e:bf:dc:9f:4e:39:1a:
9a:d3:97:a1:fd:f5:26:1a:32:d1:45:9b:ed:94:5f:
a4:5a:0c:b3:9a:27:7a:0b:83:68:ce:02:ea:e8:b4:
e4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:92:70:8C:0F:20:0B:DB:01:A0:33:18:69:6C:FF:DA:62:17:9D:47
X509v3 Authority Key Identifier:
keyid:86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:fa:9f:44:98:cc:99:2d:bd:ea:6d:fd:a0:b9:51:41:b6:30:
36:00:42:90:d9:f4:db:b3:9a:cd:14:94:7e:c7:59:5d:e2:72:
64:0c:24:1e:ec:9c:d3:30:34:c5:50:80:71:07:41:93:ce:b6:
30:76:6b:13:ba:b6:e0:4d:76:31:dc:9d:0b:7f:78:51:1d:15:
52:b5:b1:b1:19:fc:54:b7:23:89:fc:f0:f8:f0:8d:78:34:53:
9f:00:4a:a9:96:4f:83:85:01:92:63:50:e4:87:5b:77:a2:95:
01:9d:1a:16:de:7f:d1:02:57:21:84:12:b2:d5:b1:83:a4:68:
ba:f4:b9:2b:22:37:24:e2:aa:7f:c0:04:b9:47:d9:46:c9:29:
8d:44:b3:49:65:75:99:38:b1:2d:e4:25:5a:3b:31:5d:61:ec:
e2:0c:9e:ae:4a:1a:dd:ba:04:e7:9c:a8:30:76:32:fb:fb:89:
65:c7:e7:4d:e3:86:8d:5e:c4:97:63:b3:e9:b2:cb:f3:3c:24:
2b:61:c7:8a:b3:33:dd:6f:15:1a:d3:30:41:b2:d8:f5:ff:09:
83:f5:7c:73:d5:b2:55:09:46:3b:f1:25:3d:7a:af:e5:2d:3a:
dd:17:d0:31:83:9d:a5:74:8c:3b:6b:1e:a5:7b:b8:b2:3e:ee:
a0:46:7c:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCP6pSpXAUBupQsSV+MgO6VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NmI4ZTA1ZDkzOGU0NWQ2NWFlMzE0ZGM2NzUyMzdkZWM4
MzExYTEwHhcNMjYwOTExMTAwMTUwWhcNMjYwOTEyMTAwMTUwWjAzMTEwLwYDVQQD
EygxNjkyNzA4YzBmMjAwYmRiMDFhMDMzMTg2OTZjZmZkYTYyMTc5ZDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoU8yJtPOHXfB+G+0tEefxowVvP0
8o8jfySzc9g4m1Kmvpw62GopHHynab0wZhFzyGbN16HYIV00JJ8dkjo7tnpTu+XK
09DMGKMQzRwPMvmsp4c/zB91x4A3lOgMv9vTf8k5WNiqOVKnvbwKu5NJgpxbRY9b
RcnUMbYnyQHSd7+PRbXAp2bpsnOR5gIjewxyWP4jsWbUycZSOODId/jYt0zbJKFz
+s9L9yQ2i8w03EB+eF43tJ5tiwYG0KJXuuN4rMQ8gw/w3qCVRkOlAlC2yCYy7bHj
vUpJqX6/3J9OORqa05eh/fUmGjLRRZvtlF+kWgyzmid6C4NozgLq6LTkjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBaScIwPIAvbAaAzGGls/9piF51HMB8GA1UdIwQY
MBaAFIZrjgXZOORdZa4xTcZ1I33sgxGhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG11T0JkazQ1RjFscmpGTnhuVWpmZXlERWFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kNWJjZTItYTkyZi00NDJhLWEyMzUt
YWE4OGE0YmE1OGVmLzEvaG11T0JkazQ1RjFscmpGTnhuVWpmZXlERWFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9kNWJjZTItYTkyZi00NDJhLWEyMzUtYWE4OGE0YmE1OGVm
LzEvaG11T0JkazQ1RjFscmpGTnhuVWpmZXlERWFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp/qfRJjM
mS296m39oLlRQbYwNgBCkNn027OazRSUfsdZXeJyZAwkHuyc0zA0xVCAcQdBk862
MHZrE7q24E12MdydC394UR0VUrWxsRn8VLcjifzw+PCNeDRTnwBKqZZPg4UBkmNQ
5Idbd6KVAZ0aFt5/0QJXIYQSstWxg6RouvS5KyI3JOKqf8AEuUfZRskpjUSzSWV1
mTixLeQlWjsxXWHs4gyerkoa3boE55yoMHYy+/uJZcfnTeOGjV7El2Oz6bLL8zwk
K2HHirMz3W8VGtMwQbLY9f8Jg/V8c9WyVQlGO/ElPXqv5S063RfQMYOdpXSMO2se
pXu4sj7uoEZ8PA==
-----END CERTIFICATE-----
Generated at Fri Sep 11 20:40:26 2026 by rpki-client