Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.mft
File: H_oFe7xNCbnGccQ_-W81wA3p-7s.mft (raw, json)
Hash identifier: Nru4w88iolb0PVUctB/9ZdngF6PEka+UrlNzEEDxe+I=
Subject key identifier: AF:FD:9D:6F:00:19:7B:8D:09:A5:C7:3E:6E:D5:4E:38:CD:62:79:86
Authority key identifier: 1F:FA:05:7B:BC:4D:09:B9:C6:71:C4:3F:F9:6F:35:C0:0D:E9:FB:BB
Certificate issuer: /CN=1ffa057bbc4d09b9c671c43ff96f35c00de9fbbb
Certificate serial: 01A16D9279349144C311FD57208F735ACD78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_oFe7xNCbnGccQ_-W81wA3p-7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.mft
Manifest number: 016D
Signing time: Sat 24 Oct 2026 11:01:18 +0000
Manifest this update: Sat 24 Oct 2026 11:01:18 +0000
Manifest next update: Sun 25 Oct 2026 11:01:18 +0000
Files and hashes: 1: H_oFe7xNCbnGccQ_-W81wA3p-7s.crl (hash: ctX98zSsTRqkwhBC3k9k2tOcS/U8s9+DOHuzHrxzcA4=)
2: TvRQaRsziqrRJCQCiUQYjyKVrn0.roa (hash: mrwUynV6T3tedBWfd3iohzz+A8WkbO6ygpgXbd4vXq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_oFe7xNCbnGccQ_-W81wA3p-7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:92:79:34:91:44:c3:11:fd:57:20:8f:73:5a:cd:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ffa057bbc4d09b9c671c43ff96f35c00de9fbbb
Validity
Not Before: Oct 24 11:01:18 2026 GMT
Not After : Oct 25 11:01:18 2026 GMT
Subject: CN=affd9d6f00197b8d09a5c73e6ed54e38cd627986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f7:e6:14:e0:57:9a:a6:8f:5a:93:e3:f4:10:
46:af:09:be:9b:1c:f3:72:46:e6:61:31:c1:e8:83:
dd:bf:98:ea:5d:e2:56:b6:69:fd:44:97:d6:33:b9:
12:af:fb:e2:fc:18:a1:52:62:07:cd:d3:3d:00:89:
f2:3e:36:a4:31:f6:dd:4d:e2:de:3c:b6:bb:26:e5:
7c:88:b2:91:92:20:a5:c2:a1:be:f5:86:87:ae:84:
b1:cb:9f:84:a4:33:a7:c6:1f:be:74:85:da:b3:ef:
cc:6b:83:3a:5f:7f:17:ce:ba:61:23:2f:50:42:91:
2f:89:f0:b7:e6:9c:68:7e:c3:02:5e:d2:be:87:d2:
52:b0:c5:66:50:a6:5d:92:06:e9:6e:08:78:30:60:
22:89:bc:3a:60:60:dc:36:4e:50:45:ee:8d:5f:7d:
31:0f:62:78:71:3e:c9:fe:97:93:c9:45:3e:c0:d2:
df:0d:20:2d:88:00:ef:06:1b:65:59:7f:60:2f:0b:
d9:b0:80:bf:58:3b:28:a4:ca:d2:38:21:74:19:a1:
29:d3:50:ac:3a:2c:cb:16:f4:4c:ec:c0:ea:64:fa:
1b:10:72:7d:e7:3b:5f:69:ff:6c:a0:03:65:63:a8:
aa:2a:f4:04:fe:77:21:aa:00:c4:b1:c2:f2:28:af:
b6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FD:9D:6F:00:19:7B:8D:09:A5:C7:3E:6E:D5:4E:38:CD:62:79:86
X509v3 Authority Key Identifier:
keyid:1F:FA:05:7B:BC:4D:09:B9:C6:71:C4:3F:F9:6F:35:C0:0D:E9:FB:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_oFe7xNCbnGccQ_-W81wA3p-7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:67:6b:af:7d:3a:68:e2:70:6c:a9:a1:e9:38:e5:94:cf:33:
1c:a5:65:f1:72:f3:2c:ae:b3:f7:ba:15:09:23:ba:3e:dd:b9:
25:be:90:7e:5a:33:32:dc:fb:57:64:b7:44:39:4c:48:01:8a:
7b:0f:de:cd:d1:f6:9e:d5:44:63:28:42:2b:cb:53:ec:8d:74:
58:69:10:ec:63:13:7b:ca:a3:cd:e6:9a:16:52:75:aa:77:ba:
2e:f4:c2:80:76:38:fe:21:3a:56:41:dd:d5:27:75:20:e1:f0:
a1:8b:77:66:18:31:f0:16:d2:8b:85:f3:c3:86:5f:47:5f:c7:
38:0d:90:b4:49:ef:69:13:2e:de:f0:6d:ad:3c:60:b2:e1:e8:
bf:9f:86:ba:3a:06:67:84:42:7f:11:ce:90:7a:27:2f:3d:0c:
9b:2b:92:ad:21:84:3d:a7:20:ee:88:79:43:48:e8:fc:93:9a:
4a:dc:27:6b:13:33:9e:43:f8:72:5b:4b:bb:f9:b8:a8:dc:42:
45:82:00:a6:19:15:42:62:d5:b5:dd:82:15:42:76:95:1b:38:
20:06:6a:59:69:44:27:41:d7:3d:af:ca:ff:fe:05:f4:22:90:
25:cc:ad:b2:8e:95:76:2c:a2:58:82:84:d7:17:ea:d9:55:ee:
cc:73:0f:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFtknk0kUTDEf1XII9zWs14MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZmEwNTdiYmM0ZDA5YjljNjcxYzQzZmY5NmYzNWMwMGRl
OWZiYmIwHhcNMjYxMDI0MTEwMTE4WhcNMjYxMDI1MTEwMTE4WjAzMTEwLwYDVQQD
EyhhZmZkOWQ2ZjAwMTk3YjhkMDlhNWM3M2U2ZWQ1NGUzOGNkNjI3OTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPfmFOBXmqaPWpPj9BBGrwm+mxzz
ckbmYTHB6IPdv5jqXeJWtmn9RJfWM7kSr/vi/BihUmIHzdM9AInyPjakMfbdTeLe
PLa7JuV8iLKRkiClwqG+9YaHroSxy5+EpDOnxh++dIXas+/Ma4M6X38XzrphIy9Q
QpEvifC35pxofsMCXtK+h9JSsMVmUKZdkgbpbgh4MGAiibw6YGDcNk5QRe6NX30x
D2J4cT7J/peTyUU+wNLfDSAtiADvBhtlWX9gLwvZsIC/WDsopMrSOCF0GaEp01Cs
OizLFvRM7MDqZPobEHJ95ztfaf9soANlY6iqKvQE/nchqgDEscLyKK+2RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/9nW8AGXuNCaXHPm7VTjjNYnmGMB8GA1UdIwQY
MBaAFB/6BXu8TQm5xnHEP/lvNcAN6fu7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSF9vRmU3eE5DYm5HY2NRXy1XODF3QTNwLTdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi80NWMzMDAtODVlZC00NTQ5LTg1MWEt
ZTYwOTA4ZWI3YzhkLzEvSF9vRmU3eE5DYm5HY2NRXy1XODF3QTNwLTdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi80NWMzMDAtODVlZC00NTQ5LTg1MWEtZTYwOTA4ZWI3Yzhk
LzEvSF9vRmU3eE5DYm5HY2NRXy1XODF3QTNwLTdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr2drr306
aOJwbKmh6TjllM8zHKVl8XLzLK6z97oVCSO6Pt25Jb6QflozMtz7V2S3RDlMSAGK
ew/ezdH2ntVEYyhCK8tT7I10WGkQ7GMTe8qjzeaaFlJ1qne6LvTCgHY4/iE6VkHd
1Sd1IOHwoYt3Zhgx8BbSi4Xzw4ZfR1/HOA2QtEnvaRMu3vBtrTxgsuHov5+GujoG
Z4RCfxHOkHonLz0MmyuSrSGEPacg7oh5Q0jo/JOaStwnaxMznkP4cltLu/m4qNxC
RYIAphkVQmLVtd2CFUJ2lRs4IAZqWWlEJ0HXPa/K//4F9CKQJcytso6VdiyiWIKE
1xfq2VXuzHMPtA==
-----END CERTIFICATE-----
Generated at Sat Oct 24 20:46:34 2026 by rpki-client