Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
File: hTodtQq3cdy1KTZ92VGmfKzEhSc.mft (raw, json)
Hash identifier: rs1KVjWlsElUiglEpRwy6ijaMgfBgp3YEQRLC2NcbHA=
Subject key identifier: 71:99:F7:95:20:7A:67:43:A7:76:F0:1F:70:3C:09:52:08:75:44:C4
Authority key identifier: 85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27
Certificate issuer: /CN=853a1db50ab771dcb529367dd951a67cacc48527
Certificate serial: 01A17BBAF0A79F36CC78888F254D6C845334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
Manifest number: 1AC3
Signing time: Tue 27 Oct 2026 05:00:11 +0000
Manifest this update: Tue 27 Oct 2026 05:00:11 +0000
Manifest next update: Wed 28 Oct 2026 05:00:11 +0000
Files and hashes: 1: ClZipqAtGVJ2H4srpt_UxqUYg7k.roa (hash: gRSN7asX/fb1bF2/3SBjZi8n62BnbOxEncNI/Hx/1K0=)
2: hTodtQq3cdy1KTZ92VGmfKzEhSc.crl (hash: nE//zr6igk7Mbo4TDXyHMziA1Vr5acEjqt56fl8P/kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:ba:f0:a7:9f:36:cc:78:88:8f:25:4d:6c:84:53:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853a1db50ab771dcb529367dd951a67cacc48527
Validity
Not Before: Oct 27 05:00:11 2026 GMT
Not After : Oct 28 05:00:11 2026 GMT
Subject: CN=7199f795207a6743a776f01f703c0952087544c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a8:d1:a2:4f:e9:53:7b:0c:0d:90:c7:21:16:
9a:4a:b7:7f:e2:1f:da:2a:2e:0f:2e:20:cd:5c:5d:
85:2f:03:e4:c3:8e:92:06:2e:a2:68:64:61:d8:e1:
ad:50:7b:15:50:00:1f:31:62:f6:6b:b9:57:a9:c8:
80:ed:64:23:7a:6c:c6:5f:63:50:84:20:fb:54:30:
89:c0:11:69:0f:12:bc:78:3a:58:fa:d2:fe:cc:a0:
70:90:1f:cc:dc:61:4c:a3:5c:a2:08:8e:37:16:fa:
76:3d:6f:ce:2b:ac:76:7d:04:0d:b4:a6:e5:fb:7f:
ad:15:b6:d7:3f:04:a1:1b:73:bc:72:d0:fb:1d:4d:
36:07:a1:df:d0:69:dd:7d:cf:2e:af:81:5f:1a:6b:
88:59:b2:cc:1b:51:a1:89:e5:85:cc:51:27:d5:56:
7c:42:6b:9d:65:c1:4d:aa:f5:6e:ae:72:bd:e3:40:
61:18:4f:21:c2:2a:43:44:df:d6:89:8b:85:b3:24:
66:fe:5c:48:78:6f:4d:d6:b7:01:c5:4c:7e:91:13:
10:65:a0:5a:44:01:46:c3:3a:70:d3:b2:e4:7d:fd:
5e:c8:8c:05:35:84:28:54:46:aa:05:91:ed:db:b2:
bb:89:10:67:f9:7a:98:4e:bf:1d:f8:ac:66:13:4b:
a8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:99:F7:95:20:7A:67:43:A7:76:F0:1F:70:3C:09:52:08:75:44:C4
X509v3 Authority Key Identifier:
keyid:85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:6e:3a:3f:6a:c2:0c:da:c0:3c:53:bf:05:f4:bf:fc:0e:8e:
98:ab:09:ec:2d:29:d3:a4:6b:31:ef:52:e0:92:d8:49:18:95:
68:d3:4f:28:1a:69:8d:21:6d:47:7e:05:30:e7:87:ab:1c:0f:
b8:d1:e6:8a:5a:31:1d:94:c0:88:bb:dd:14:34:a4:5b:17:e6:
dc:d4:5c:a9:f1:52:cd:a4:0c:19:aa:c1:14:15:d5:c3:29:0f:
d9:df:4d:0f:5d:57:b9:aa:78:f3:5b:2d:f8:5e:5c:33:be:5c:
d4:d6:fc:22:16:f1:99:1f:4a:af:ad:d5:7a:03:b4:82:5d:52:
a1:91:b6:86:2c:a3:93:51:41:93:ce:e6:73:f8:5a:30:c9:f5:
14:25:5d:b8:f1:c4:60:47:9d:89:af:1d:8b:e9:b3:0c:f3:37:
e7:1d:a8:f2:6f:87:75:fd:f7:23:b3:2d:e1:01:7c:c0:c9:d3:
dc:9c:51:0a:67:ee:ab:63:0d:8d:e8:50:d2:72:cb:d6:3d:dd:
f8:7c:fa:8c:54:99:20:53:38:7f:e7:d6:79:7b:28:c6:f3:5f:
ef:c8:e2:37:41:5f:d7:7e:81:07:1c:0c:ac:af:8f:77:69:22:
d1:b5:e4:44:e7:39:15:31:90:08:b8:94:7b:64:0d:08:0b:2c:
ea:21:0b:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF7uvCnnzbMeIiPJU1shFM0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1M2ExZGI1MGFiNzcxZGNiNTI5MzY3ZGQ5NTFhNjdjYWNj
NDg1MjcwHhcNMjYxMDI3MDUwMDExWhcNMjYxMDI4MDUwMDExWjAzMTEwLwYDVQQD
Eyg3MTk5Zjc5NTIwN2E2NzQzYTc3NmYwMWY3MDNjMDk1MjA4NzU0NGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6jRok/pU3sMDZDHIRaaSrd/4h/a
Ki4PLiDNXF2FLwPkw46SBi6iaGRh2OGtUHsVUAAfMWL2a7lXqciA7WQjemzGX2NQ
hCD7VDCJwBFpDxK8eDpY+tL+zKBwkB/M3GFMo1yiCI43Fvp2PW/OK6x2fQQNtKbl
+3+tFbbXPwShG3O8ctD7HU02B6Hf0Gndfc8ur4FfGmuIWbLMG1GhieWFzFEn1VZ8
QmudZcFNqvVurnK940BhGE8hwipDRN/WiYuFsyRm/lxIeG9N1rcBxUx+kRMQZaBa
RAFGwzpw07Lkff1eyIwFNYQoVEaqBZHt27K7iRBn+XqYTr8d+KxmE0uopQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGZ95UgemdDp3bwH3A8CVIIdUTEMB8GA1UdIwQY
MBaAFIU6HbUKt3HctSk2fdlRpnysxIUnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFRvZHRRcTNjZHkxS1RaOTJWR21mS3pFaFNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9kYzY2ZjMtOGFjOS00MWI5LThlYjgt
NzcyOTVjOWNlODY2LzEvaFRvZHRRcTNjZHkxS1RaOTJWR21mS3pFaFNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9kYzY2ZjMtOGFjOS00MWI5LThlYjgtNzcyOTVjOWNlODY2
LzEvaFRvZHRRcTNjZHkxS1RaOTJWR21mS3pFaFNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX246P2rC
DNrAPFO/BfS//A6OmKsJ7C0p06RrMe9S4JLYSRiVaNNPKBppjSFtR34FMOeHqxwP
uNHmiloxHZTAiLvdFDSkWxfm3NRcqfFSzaQMGarBFBXVwykP2d9ND11Xuap481st
+F5cM75c1Nb8IhbxmR9Kr63VegO0gl1SoZG2hiyjk1FBk87mc/haMMn1FCVduPHE
YEedia8di+mzDPM35x2o8m+Hdf33I7Mt4QF8wMnT3JxRCmfuq2MNjehQ0nLL1j3d
+Hz6jFSZIFM4f+fWeXsoxvNf78jiN0Ff136BBxwMrK+Pd2ki0bXkROc5FTGQCLiU
e2QNCAss6iELsg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:41:32 2026 by rpki-client