Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
File: hZjLxOjf8YUkBKmSddIwpWERBV8.mft (raw, json)
Hash identifier: 9I4ePGzkg/OVzsNzAcQTjkXvUp6ZcajQNxFCgWCG5u4=
Subject key identifier: 40:10:20:4E:15:85:CD:F5:A4:B4:05:61:BB:37:73:65:13:9C:93:2C
Authority key identifier: 85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
Certificate issuer: /CN=8598cbc4e8dff1852404a99275d230a56111055f
Certificate serial: 01A173262255D6ABCB62B8E80C7ED32C17DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
Manifest number: 0B0F
Signing time: Sun 25 Oct 2026 13:00:41 +0000
Manifest this update: Sun 25 Oct 2026 13:00:41 +0000
Manifest next update: Mon 26 Oct 2026 13:00:41 +0000
Files and hashes: 1: 6Zls-m6M9cBINWFd4w7uZTmGtY8.roa (hash: G1IdsClkRwxJrpDcDQsqLk4FP+v4Gfd2cicmc4XSPyc=)
2: hZjLxOjf8YUkBKmSddIwpWERBV8.crl (hash: L1+4I2wPEdfAy6rOPXO4XxhP8dui5At3P328n5kEtzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:26:22:55:d6:ab:cb:62:b8:e8:0c:7e:d3:2c:17:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8598cbc4e8dff1852404a99275d230a56111055f
Validity
Not Before: Oct 25 13:00:41 2026 GMT
Not After : Oct 26 13:00:41 2026 GMT
Subject: CN=4010204e1585cdf5a4b40561bb377365139c932c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5c:f7:9f:48:3d:c2:e8:17:d1:db:ab:e5:89:
26:da:38:0c:fd:0f:6f:78:5c:14:d4:1a:4c:92:d1:
e8:e4:22:41:27:98:29:53:cb:44:d9:0e:0b:24:a8:
a4:0f:78:10:22:33:d5:dc:7c:0d:c2:01:dc:98:69:
22:76:c8:3e:4c:ab:2b:57:14:2c:cd:c0:76:8c:17:
1a:7a:12:60:da:bc:92:1f:77:da:c7:db:ae:26:b0:
df:61:8f:f3:c8:e7:78:63:c3:44:a2:76:32:bb:22:
16:08:c4:25:df:78:c6:cf:09:48:53:2c:13:5f:a3:
5e:e2:9b:33:15:36:e7:4a:ed:73:c1:49:62:d8:c5:
27:66:f2:69:55:c6:db:3c:28:bf:98:c2:13:2a:2c:
27:01:1a:b4:d2:0c:44:7f:d1:ce:7f:88:be:2f:31:
1e:3b:17:63:d9:ea:ef:a8:2a:2a:46:80:71:a1:13:
7e:e6:b4:5b:ac:5d:0f:b5:81:0b:2a:71:5c:cf:5c:
86:dd:7f:b3:d0:95:b2:82:8f:a5:e7:bc:b8:ef:d6:
fb:f8:32:b8:7a:1a:52:ae:04:f6:d4:5e:f0:c5:33:
a6:ec:c3:f9:8a:74:6c:04:6a:05:70:0e:bb:ca:40:
9d:b1:59:2e:eb:b7:b2:d6:7c:15:06:c7:46:16:5e:
e1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:10:20:4E:15:85:CD:F5:A4:B4:05:61:BB:37:73:65:13:9C:93:2C
X509v3 Authority Key Identifier:
keyid:85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:00:40:70:bd:3a:af:2a:1f:90:48:c7:2c:da:4b:f0:36:ff:
ac:0f:45:88:ce:a2:34:c2:9c:9f:b4:7b:c1:7e:45:dc:03:b3:
5a:f6:ae:41:1d:e6:ea:d5:be:9b:46:e6:3f:79:59:ce:c8:9d:
c3:91:d8:5b:ee:b2:b0:68:73:34:fb:26:b1:40:4c:c9:39:c0:
47:0f:4b:4f:a0:43:17:fd:b7:80:8b:38:c2:46:68:52:65:db:
b6:89:c8:63:06:7c:49:34:78:14:79:7a:40:39:9f:6a:02:ae:
5c:c5:33:ba:72:d9:31:de:48:54:70:1e:06:18:a2:e8:75:12:
9f:2e:f6:5a:82:75:b8:2f:f6:74:72:3a:d5:22:3f:61:82:36:
a2:17:62:8a:b8:92:d1:b1:15:28:20:2e:ad:21:e2:12:80:e2:
4f:c4:1b:74:86:39:44:62:df:de:12:5e:76:7f:b5:0a:15:b5:
a1:c5:5d:8b:f9:7e:0c:bc:df:87:37:42:4f:0c:73:a4:e1:98:
32:cb:55:5a:99:56:c5:2e:8c:1a:3e:a5:bf:7b:fe:b5:5e:8b:
87:86:dd:5d:c9:42:53:19:c4:35:1a:88:14:86:24:84:a6:21:
67:0f:a2:aa:e5:ad:56:9a:ef:73:27:0a:dd:07:54:8f:6f:fb:
65:56:3d:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFzJiJV1qvLYrjoDH7TLBfaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1OThjYmM0ZThkZmYxODUyNDA0YTk5Mjc1ZDIzMGE1NjEx
MTA1NWYwHhcNMjYxMDI1MTMwMDQxWhcNMjYxMDI2MTMwMDQxWjAzMTEwLwYDVQQD
Eyg0MDEwMjA0ZTE1ODVjZGY1YTRiNDA1NjFiYjM3NzM2NTEzOWM5MzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71z3n0g9wugX0dur5Ykm2jgM/Q9v
eFwU1BpMktHo5CJBJ5gpU8tE2Q4LJKikD3gQIjPV3HwNwgHcmGkidsg+TKsrVxQs
zcB2jBcaehJg2rySH3fax9uuJrDfYY/zyOd4Y8NEonYyuyIWCMQl33jGzwlIUywT
X6Ne4pszFTbnSu1zwUli2MUnZvJpVcbbPCi/mMITKiwnARq00gxEf9HOf4i+LzEe
Oxdj2ervqCoqRoBxoRN+5rRbrF0PtYELKnFcz1yG3X+z0JWygo+l57y479b7+DK4
ehpSrgT21F7wxTOm7MP5inRsBGoFcA67ykCdsVku67ey1nwVBsdGFl7h3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAQIE4Vhc31pLQFYbs3c2UTnJMsMB8GA1UdIwQY
MBaAFIWYy8To3/GFJASpknXSMKVhEQVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8wNDlhYjItOTIyNi00YjQwLWFiOGEt
NTFlNGE1ZWFmYzhlLzEvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8wNDlhYjItOTIyNi00YjQwLWFiOGEtNTFlNGE1ZWFmYzhl
LzEvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQBAcL06
ryofkEjHLNpL8Db/rA9FiM6iNMKcn7R7wX5F3AOzWvauQR3m6tW+m0bmP3lZzsid
w5HYW+6ysGhzNPsmsUBMyTnARw9LT6BDF/23gIs4wkZoUmXbtonIYwZ8STR4FHl6
QDmfagKuXMUzunLZMd5IVHAeBhii6HUSny72WoJ1uC/2dHI61SI/YYI2ohdiiriS
0bEVKCAurSHiEoDiT8QbdIY5RGLf3hJedn+1ChW1ocVdi/l+DLzfhzdCTwxzpOGY
MstVWplWxS6MGj6lv3v+tV6Lh4bdXclCUxnENRqIFIYkhKYhZw+iquWtVprvcycK
3QdUj2/7ZVY9UQ==
-----END CERTIFICATE-----
Generated at Sun Oct 25 23:08:31 2026 by rpki-client