Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.mft
File: hB6IIdAaloi57nryrruVnLvtBys.mft (raw, json)
Hash identifier: VHH53nkLsyz/RNai0udM7+AeIpJ3J65Ci72NMcNKeBo=
Subject key identifier: F2:D7:DD:F6:70:D6:C0:DD:9F:C3:6A:C5:98:90:DD:87:CD:AA:43:A9
Authority key identifier: 84:1E:88:21:D0:1A:96:88:B9:EE:7A:F2:AE:BB:95:9C:BB:ED:07:2B
Certificate issuer: /CN=841e8821d01a9688b9ee7af2aebb959cbbed072b
Certificate serial: 01A11ABE4B16552521D090FBA6325D57A7FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hB6IIdAaloi57nryrruVnLvtBys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.mft
Manifest number: 02C9
Signing time: Thu 08 Oct 2026 09:00:40 +0000
Manifest this update: Thu 08 Oct 2026 09:00:40 +0000
Manifest next update: Fri 09 Oct 2026 09:00:40 +0000
Files and hashes: 1: OBBBpbRLtAoopWvDF4V0_36vRjc.roa (hash: rORQCAXSnhZhLeVmf7l/rxG4Y1xlgxBiqBOAQvHavUw=)
2: hB6IIdAaloi57nryrruVnLvtBys.crl (hash: 7HlI4GqiRVui5hQR3xN49T0mK210I3WJnJV4A0dI1JA=)
3: n-u3pAbtCpun8Sd3e8bI1PdPQbA.asa (hash: UfFTiG8cIxuK4yk1unwjFoEQCnOqxLEmjULdwQNY6gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.mft
rsync://rpki.ripe.net/repository/DEFAULT/hB6IIdAaloi57nryrruVnLvtBys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:be:4b:16:55:25:21:d0:90:fb:a6:32:5d:57:a7:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=841e8821d01a9688b9ee7af2aebb959cbbed072b
Validity
Not Before: Oct 8 09:00:40 2026 GMT
Not After : Oct 9 09:00:40 2026 GMT
Subject: CN=f2d7ddf670d6c0dd9fc36ac59890dd87cdaa43a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:e5:96:7e:b0:0a:a8:06:4a:1e:80:a9:2f:
ab:bf:0d:92:3a:12:30:87:ed:e3:80:e6:72:1b:1a:
29:8b:6d:c9:e7:b2:b2:dd:df:db:d5:0f:2a:25:ec:
48:4a:45:65:27:09:ae:9d:1b:58:5a:16:c7:74:f5:
13:22:48:43:bd:ae:8b:92:3e:24:43:01:79:2e:19:
11:a1:15:d6:9b:aa:3c:c8:db:22:9e:12:a5:5d:ce:
d4:75:b3:81:6c:94:04:d6:32:f0:99:00:e4:2e:62:
45:ff:15:af:df:ff:88:b6:1e:ab:19:57:f5:33:18:
33:aa:56:8a:f7:34:7a:c2:f4:44:f6:9b:2a:e7:62:
a3:4f:43:f1:16:07:f6:72:c7:7d:d7:f5:02:9f:f1:
77:78:64:54:b4:8b:57:f3:b5:27:b8:9e:24:83:76:
2b:25:df:79:5f:aa:4b:82:20:09:ec:3a:84:93:b4:
47:bd:11:91:2f:8d:13:44:1f:00:7a:0e:6d:ac:5e:
b9:2a:48:f1:04:db:ac:c5:69:9a:dc:2b:98:3f:48:
c0:91:49:1f:21:b4:fc:06:34:6d:48:6b:d0:44:a7:
43:40:3c:fc:29:8e:5b:7a:04:d8:35:6e:cf:c7:95:
d5:1a:42:85:ef:f5:bd:2c:fe:bd:58:33:b9:3e:c1:
59:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D7:DD:F6:70:D6:C0:DD:9F:C3:6A:C5:98:90:DD:87:CD:AA:43:A9
X509v3 Authority Key Identifier:
keyid:84:1E:88:21:D0:1A:96:88:B9:EE:7A:F2:AE:BB:95:9C:BB:ED:07:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hB6IIdAaloi57nryrruVnLvtBys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:5c:50:6e:39:a7:06:7c:18:f7:11:de:5b:9a:06:fc:ee:1e:
34:84:e6:d2:fb:cc:04:20:53:34:d4:9d:d4:89:46:08:83:82:
d4:31:2a:22:55:d7:0a:dc:b8:d0:cf:0d:8b:84:01:9f:12:8c:
22:31:5e:10:fb:64:8d:94:44:bb:0c:7a:a8:6c:43:c5:29:36:
8f:73:b2:b7:d9:6c:a5:7a:7e:bc:7c:54:9a:e6:d3:32:54:fc:
76:cb:66:d8:38:c3:70:a4:bd:16:ce:73:9a:b2:2a:e7:36:6e:
04:65:df:a2:87:b6:23:92:14:b4:07:72:aa:d8:ca:7a:d3:99:
f5:6d:10:33:e4:4c:1b:19:ed:d0:76:49:a6:23:df:0a:f9:88:
c2:9f:4f:fc:1e:1d:e1:17:ac:63:75:5a:37:56:6a:00:20:ab:
b2:1c:30:1b:bf:9b:46:5b:45:06:19:d1:c9:73:9d:85:29:b9:
7c:0c:4a:c4:69:f7:a7:15:b5:00:e9:75:a4:80:1e:f9:4a:76:
f7:f0:81:15:af:19:8e:56:1a:60:3a:26:43:bc:86:38:bf:e5:
7f:c7:ec:f2:b1:07:7d:51:18:3a:97:61:c8:e0:f2:64:f3:0d:
5d:08:84:6a:b0:66:de:d1:d4:46:7d:75:28:b1:58:0c:bc:76:
2e:1f:7c:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEavksWVSUh0JD7pjJdV6f/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MWU4ODIxZDAxYTk2ODhiOWVlN2FmMmFlYmI5NTljYmJl
ZDA3MmIwHhcNMjYxMDA4MDkwMDQwWhcNMjYxMDA5MDkwMDQwWjAzMTEwLwYDVQQD
EyhmMmQ3ZGRmNjcwZDZjMGRkOWZjMzZhYzU5ODkwZGQ4N2NkYWE0M2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr23lln6wCqgGSh6AqS+rvw2SOhIw
h+3jgOZyGxopi23J57Ky3d/b1Q8qJexISkVlJwmunRtYWhbHdPUTIkhDva6Lkj4k
QwF5LhkRoRXWm6o8yNsinhKlXc7UdbOBbJQE1jLwmQDkLmJF/xWv3/+Ith6rGVf1
MxgzqlaK9zR6wvRE9psq52KjT0PxFgf2csd91/UCn/F3eGRUtItX87UnuJ4kg3Yr
Jd95X6pLgiAJ7DqEk7RHvRGRL40TRB8Aeg5trF65KkjxBNusxWma3CuYP0jAkUkf
IbT8BjRtSGvQRKdDQDz8KY5begTYNW7Px5XVGkKF7/W9LP69WDO5PsFZ3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLX3fZw1sDdn8NqxZiQ3YfNqkOpMB8GA1UdIwQY
MBaAFIQeiCHQGpaIue568q67lZy77QcrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEI2SUlkQWFsb2k1N25yeXJydVZuTHZ0QnlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9iMDY3ZGItOWFiMS00YjEzLTliNzAt
YTEzMjM3NjEzNDU5LzEvaEI2SUlkQWFsb2k1N25yeXJydVZuTHZ0QnlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9iMDY3ZGItOWFiMS00YjEzLTliNzAtYTEzMjM3NjEzNDU5
LzEvaEI2SUlkQWFsb2k1N25yeXJydVZuTHZ0QnlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkVxQbjmn
BnwY9xHeW5oG/O4eNITm0vvMBCBTNNSd1IlGCIOC1DEqIlXXCty40M8Ni4QBnxKM
IjFeEPtkjZREuwx6qGxDxSk2j3Oyt9lspXp+vHxUmubTMlT8dstm2DjDcKS9Fs5z
mrIq5zZuBGXfooe2I5IUtAdyqtjKetOZ9W0QM+RMGxnt0HZJpiPfCvmIwp9P/B4d
4ResY3VaN1ZqACCrshwwG7+bRltFBhnRyXOdhSm5fAxKxGn3pxW1AOl1pIAe+Up2
9/CBFa8ZjlYaYDomQ7yGOL/lf8fs8rEHfVEYOpdhyODyZPMNXQiEarBm3tHURn11
KLFYDLx2Lh98PA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 15:40:35 2026 by rpki-client