Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
File: HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft (raw, json)
Hash identifier: 6xEOk6YZ+NMInDqvida0OrkrHytgQVVsJauLr0WEhZg=
Subject key identifier: 76:DD:17:47:26:10:DA:51:26:44:0A:12:B4:AB:FB:75:49:79:58:36
Authority key identifier: 1D:FC:2B:36:51:41:63:D3:89:EE:8F:E1:8F:8E:23:43:FA:4D:DC:99
Certificate issuer: /CN=1dfc2b36514163d389ee8fe18f8e2343fa4ddc99
Certificate serial: 01A17C604E2B74B68FEF2EBB901947B25207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
Manifest number: 1AC5
Signing time: Tue 27 Oct 2026 08:00:48 +0000
Manifest this update: Tue 27 Oct 2026 08:00:48 +0000
Manifest next update: Wed 28 Oct 2026 08:00:48 +0000
Files and hashes: 1: 2r56-7c4rzlH_MkXpf4EVQxFefI.roa (hash: hSJijlNMgIG+anYeveOsK+OFXlzwcZe8DVit+XV01Ts=)
2: HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.crl (hash: Qjv5RDduGsNVzkFafMfvwYAfyG0N7Qm7AowPmCuXCPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:4e:2b:74:b6:8f:ef:2e:bb:90:19:47:b2:52:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dfc2b36514163d389ee8fe18f8e2343fa4ddc99
Validity
Not Before: Oct 27 08:00:48 2026 GMT
Not After : Oct 28 08:00:48 2026 GMT
Subject: CN=76dd17472610da5126440a12b4abfb7549795836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:24:8d:7c:48:8b:50:e8:db:c7:3a:13:f3:5b:
bd:3c:f0:34:71:5b:28:60:7d:c4:23:95:81:83:5c:
b5:3e:87:8b:06:08:f3:28:a5:d7:aa:ad:db:90:62:
c2:d8:7d:9f:a1:9e:b0:85:90:34:08:11:5a:26:68:
50:9b:82:80:a9:08:4b:a5:4b:ee:df:ff:75:7d:7f:
a5:c5:f3:bd:d9:8a:ec:e1:c8:c1:34:6f:6f:f5:33:
f7:da:95:1f:87:c4:61:07:a9:96:4e:b5:b4:63:05:
62:26:48:5d:29:c4:33:bb:35:c6:13:01:81:29:43:
15:60:a6:e2:54:48:57:51:1c:c3:b3:6b:07:e4:2f:
d9:81:96:b9:61:06:6f:f6:a4:bc:7b:5b:73:bb:b8:
d8:c9:f0:ef:e5:04:40:c4:03:63:b0:06:0f:86:79:
db:ce:d5:aa:2b:59:65:5d:50:29:ff:f2:d0:d1:e0:
56:da:2e:49:54:93:91:4a:f4:cc:30:a4:1b:95:32:
fe:df:f2:59:5f:25:e7:65:06:7b:c1:8f:f6:ab:63:
63:da:97:39:17:4b:b4:fd:41:7e:c6:bf:c1:ca:25:
fa:1d:65:c5:78:00:2d:7b:f7:2c:d7:df:3b:2c:bd:
54:27:13:ee:e6:42:c3:5c:ce:a2:2c:2f:bb:38:77:
7e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DD:17:47:26:10:DA:51:26:44:0A:12:B4:AB:FB:75:49:79:58:36
X509v3 Authority Key Identifier:
keyid:1D:FC:2B:36:51:41:63:D3:89:EE:8F:E1:8F:8E:23:43:FA:4D:DC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b9:22:e5:b3:77:c3:92:d2:af:65:9e:9b:ab:70:28:06:a3:
bb:7e:ec:e7:4d:ea:eb:4a:4b:7c:78:ce:96:3e:ba:78:cf:f2:
c0:e3:7e:98:8a:5f:b2:c7:80:b7:7d:e2:66:ab:f3:c4:56:5e:
f9:90:62:1f:0d:cd:69:c2:af:36:3f:e6:6b:4d:8c:70:56:69:
ce:2c:c6:40:35:fd:9f:6a:7c:05:79:d0:30:22:18:e8:b7:47:
49:ea:3e:4d:7e:f9:ca:85:67:bd:fd:31:0f:fc:af:3d:af:aa:
a4:3b:65:f8:ef:93:72:d2:ac:fe:fd:9a:a6:f3:d8:24:38:ab:
38:7f:8e:d8:ce:3c:93:48:13:56:fa:85:5f:7a:18:f4:ee:83:
2f:99:6f:76:ef:51:a7:28:12:72:7c:e6:fb:78:6d:1c:95:85:
5f:e2:dd:6d:c2:e0:0e:d1:d1:2e:8f:da:b4:f1:15:0c:23:64:
dd:12:12:f4:44:32:f6:ef:e5:3f:c2:86:79:62:e3:68:a7:03:
02:d6:0e:46:17:88:d5:dd:61:9e:0d:fc:dd:77:1f:b6:0f:95:
ab:34:2e:0b:7d:a2:38:05:5b:ba:03:5c:cc:3b:ac:42:6d:e6:
5d:aa:ab:7d:f1:dc:17:12:21:3f:1b:9d:38:f8:01:02:73:0a:
54:b9:18:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8YE4rdLaP7y67kBlHslIHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZmMyYjM2NTE0MTYzZDM4OWVlOGZlMThmOGUyMzQzZmE0
ZGRjOTkwHhcNMjYxMDI3MDgwMDQ4WhcNMjYxMDI4MDgwMDQ4WjAzMTEwLwYDVQQD
Eyg3NmRkMTc0NzI2MTBkYTUxMjY0NDBhMTJiNGFiZmI3NTQ5Nzk1ODM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnySNfEiLUOjbxzoT81u9PPA0cVso
YH3EI5WBg1y1PoeLBgjzKKXXqq3bkGLC2H2foZ6whZA0CBFaJmhQm4KAqQhLpUvu
3/91fX+lxfO92Yrs4cjBNG9v9TP32pUfh8RhB6mWTrW0YwViJkhdKcQzuzXGEwGB
KUMVYKbiVEhXURzDs2sH5C/ZgZa5YQZv9qS8e1tzu7jYyfDv5QRAxANjsAYPhnnb
ztWqK1llXVAp//LQ0eBW2i5JVJORSvTMMKQblTL+3/JZXyXnZQZ7wY/2q2Nj2pc5
F0u0/UF+xr/ByiX6HWXFeAAte/cs1987LL1UJxPu5kLDXM6iLC+7OHd+DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbdF0cmENpRJkQKErSr+3VJeVg2MB8GA1UdIwQY
MBaAFB38KzZRQWPTie6P4Y+OI0P6TdyZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGZ3ck5sRkJZOU9KN29faGo0NGpRX3BOM0prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kOTI5YWItNDg5Ni00M2UyLWE4NzYt
MDFiZWQ4NzgyYzdmLzEvSGZ3ck5sRkJZOU9KN29faGo0NGpRX3BOM0prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kOTI5YWItNDg5Ni00M2UyLWE4NzYtMDFiZWQ4NzgyYzdm
LzEvSGZ3ck5sRkJZOU9KN29faGo0NGpRX3BOM0prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADrki5bN3
w5LSr2Wem6twKAaju37s503q60pLfHjOlj66eM/ywON+mIpfsseAt33iZqvzxFZe
+ZBiHw3NacKvNj/ma02McFZpzizGQDX9n2p8BXnQMCIY6LdHSeo+TX75yoVnvf0x
D/yvPa+qpDtl+O+TctKs/v2apvPYJDirOH+O2M48k0gTVvqFX3oY9O6DL5lvdu9R
pygScnzm+3htHJWFX+LdbcLgDtHRLo/atPEVDCNk3RIS9EQy9u/lP8KGeWLjaKcD
AtYORheI1d1hng383Xcftg+VqzQuC32iOAVbugNczDusQm3mXaqrffHcFxIhPxud
OPgBAnMKVLkYTg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:35:18 2026 by rpki-client