Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
File: h3rydLcxE0zLwmco-TfaAwWN1zs.mft (raw, json)
Hash identifier: eTP/5zKiA64rLwgnNVbNK3hS9JdA/RWvG5o6tsfq8yM=
Subject key identifier: 38:D6:35:93:9A:B2:56:BB:50:0E:6C:C8:A5:5A:96:C8:2A:97:42:71
Authority key identifier: 87:7A:F2:74:B7:31:13:4C:CB:C2:67:28:F9:37:DA:03:05:8D:D7:3B
Certificate issuer: /CN=877af274b731134ccbc26728f937da03058dd73b
Certificate serial: 01A1822BC912BCBC3626E6CB13DCCAD3C171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3rydLcxE0zLwmco-TfaAwWN1zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
Manifest number: 020D
Signing time: Wed 28 Oct 2026 11:01:09 +0000
Manifest this update: Wed 28 Oct 2026 11:01:09 +0000
Manifest next update: Thu 29 Oct 2026 11:01:09 +0000
Files and hashes: 1: AhAcdKgAbaxev6WZheq94rPVhy4.roa (hash: jnz0tuvjSI9nchLY2GePdtWDuCFuuGK4nahWThqEMJU=)
2: IR529NvnrXP81UBDnz8QdBrSyJ8.roa (hash: IkGeFcq/7XMWRAAEt9CdXpwX/GjXpCyZ2A9WTlqr/w4=)
3: h3rydLcxE0zLwmco-TfaAwWN1zs.crl (hash: g/KheKOI4pnQiI9W/ZG8fs5SC8l/RlCe1rshuhT2oqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3rydLcxE0zLwmco-TfaAwWN1zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2b:c9:12:bc:bc:36:26:e6:cb:13:dc:ca:d3:c1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877af274b731134ccbc26728f937da03058dd73b
Validity
Not Before: Oct 28 11:01:09 2026 GMT
Not After : Oct 29 11:01:09 2026 GMT
Subject: CN=38d635939ab256bb500e6cc8a55a96c82a974271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c5:d1:dc:d3:59:e7:3d:85:82:3b:69:e0:7f:
20:0e:05:f3:b3:e9:c3:ec:7b:c3:8c:c6:33:bb:a8:
b5:83:5e:88:b7:74:db:72:4f:57:83:d5:51:a1:39:
47:0c:3c:76:c1:81:bd:80:75:36:96:e4:73:1e:72:
5e:1b:bd:6e:e3:de:af:09:cf:74:02:4d:76:74:49:
c7:2f:15:f2:c1:bf:8f:72:1e:ec:e2:db:96:18:0b:
d1:b6:45:1e:90:15:8e:13:59:df:d3:d4:60:d1:ce:
85:32:07:e3:89:9b:b0:4f:b3:9f:8b:60:29:4c:13:
f2:1c:43:f9:e2:e1:c0:d5:2f:cc:2f:76:09:b6:cd:
35:cf:8c:11:5a:b1:fd:9c:4a:e2:f6:49:69:bd:f9:
79:25:e8:7b:59:7c:e3:b2:98:0a:61:31:c8:3e:43:
a8:0a:f0:1c:22:b8:3e:4e:db:8f:d9:29:cf:80:70:
d6:28:c0:41:c7:f6:89:2e:3d:bc:11:48:67:0e:16:
27:9e:27:a1:f8:de:2b:d7:8c:00:9c:58:bb:85:fa:
bc:62:72:2b:1f:10:51:fe:27:0a:8a:78:36:bb:46:
9c:f8:7a:61:28:4f:03:23:c8:4f:3f:3a:e1:e7:5c:
b9:4a:93:49:ca:81:5b:63:6a:ed:d2:06:cc:69:9e:
a9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D6:35:93:9A:B2:56:BB:50:0E:6C:C8:A5:5A:96:C8:2A:97:42:71
X509v3 Authority Key Identifier:
keyid:87:7A:F2:74:B7:31:13:4C:CB:C2:67:28:F9:37:DA:03:05:8D:D7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3rydLcxE0zLwmco-TfaAwWN1zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:6c:a4:8e:5d:f9:19:aa:c4:4e:8a:d3:a5:9f:af:dc:09:71:
84:6a:eb:94:bb:03:b4:bf:d8:8d:9c:24:88:f3:5c:e7:30:c4:
ee:1c:6c:44:f1:76:79:c1:32:18:91:7b:3e:6c:76:c1:0f:a0:
c0:ef:f2:c5:55:f7:46:e9:f0:6c:72:5f:f2:55:7b:07:83:12:
48:f2:ec:cb:05:e8:e4:c1:dc:67:13:62:0a:1e:a3:da:5a:91:
44:c3:8c:ed:7c:86:fe:a3:04:35:ea:30:8f:44:53:20:2a:f5:
4b:bd:a8:83:9a:23:06:1f:d6:bf:63:cc:4f:30:ab:9e:5f:13:
7e:96:01:c9:93:ca:6d:d9:42:81:ad:91:42:6c:eb:09:46:8f:
a7:a9:2b:02:fb:7c:26:5c:b2:2e:8b:55:9e:d6:ef:74:d6:82:
ab:23:ae:de:e8:d1:61:30:2f:19:77:bb:25:2c:94:9a:97:65:
a1:c5:01:b5:12:79:ec:2d:64:bb:83:bd:32:ea:11:6e:5c:a0:
cc:16:27:b4:c5:ff:77:dc:be:6e:d0:53:27:3e:19:be:0a:e2:
bf:81:bd:aa:a3:ec:b5:1b:29:3b:ea:0a:ee:99:2a:a5:df:f1:
89:2b:06:a3:03:18:0b:dc:ff:3d:4f:e2:49:73:8e:af:2d:ce:
23:c4:0b:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGCK8kSvLw2JubLE9zK08FxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3N2FmMjc0YjczMTEzNGNjYmMyNjcyOGY5MzdkYTAzMDU4
ZGQ3M2IwHhcNMjYxMDI4MTEwMTA5WhcNMjYxMDI5MTEwMTA5WjAzMTEwLwYDVQQD
EygzOGQ2MzU5MzlhYjI1NmJiNTAwZTZjYzhhNTVhOTZjODJhOTc0MjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsXR3NNZ5z2Fgjtp4H8gDgXzs+nD
7HvDjMYzu6i1g16It3Tbck9Xg9VRoTlHDDx2wYG9gHU2luRzHnJeG71u496vCc90
Ak12dEnHLxXywb+Pch7s4tuWGAvRtkUekBWOE1nf09Rg0c6FMgfjiZuwT7Ofi2Ap
TBPyHEP54uHA1S/ML3YJts01z4wRWrH9nEri9klpvfl5Jeh7WXzjspgKYTHIPkOo
CvAcIrg+TtuP2SnPgHDWKMBBx/aJLj28EUhnDhYnnieh+N4r14wAnFi7hfq8YnIr
HxBR/icKing2u0ac+HphKE8DI8hPPzrh51y5SpNJyoFbY2rt0gbMaZ6pfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjWNZOasla7UA5syKValsgql0JxMB8GA1UdIwQY
MBaAFId68nS3MRNMy8JnKPk32gMFjdc7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDNyeWRMY3hFMHpMd21jby1UZmFBd1dOMXpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy82ODk4MTYtNjM5OS00MzI1LTkyODYt
ZjEzYWUzMmMxOGYwLzEvaDNyeWRMY3hFMHpMd21jby1UZmFBd1dOMXpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy82ODk4MTYtNjM5OS00MzI1LTkyODYtZjEzYWUzMmMxOGYw
LzEvaDNyeWRMY3hFMHpMd21jby1UZmFBd1dOMXpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmykjl35
GarETorTpZ+v3AlxhGrrlLsDtL/YjZwkiPNc5zDE7hxsRPF2ecEyGJF7Pmx2wQ+g
wO/yxVX3RunwbHJf8lV7B4MSSPLsywXo5MHcZxNiCh6j2lqRRMOM7XyG/qMENeow
j0RTICr1S72og5ojBh/Wv2PMTzCrnl8TfpYByZPKbdlCga2RQmzrCUaPp6krAvt8
JlyyLotVntbvdNaCqyOu3ujRYTAvGXe7JSyUmpdlocUBtRJ57C1ku4O9MuoRblyg
zBYntMX/d9y+btBTJz4Zvgriv4G9qqPstRspO+oK7pkqpd/xiSsGowMYC9z/PU/i
SXOOry3OI8QLeA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 16:36:02 2026 by rpki-client