Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.mft
File: HVdIhaDItCBcPfLR_Nc0h33hBdk.mft (raw, json)
Hash identifier: QC5unDuIxOiolO1/WyS6heKIq85+Xy2aOb/TF88NDzk=
Subject key identifier: B9:05:C3:37:A6:81:50:81:72:D5:C9:94:AD:BB:C5:57:6E:FD:72:30
Authority key identifier: 1D:57:48:85:A0:C8:B4:20:5C:3D:F2:D1:FC:D7:34:87:7D:E1:05:D9
Certificate issuer: /CN=1d574885a0c8b4205c3df2d1fcd734877de105d9
Certificate serial: 01A16790B1FFB855CC4C4999CCF925BEC76D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVdIhaDItCBcPfLR_Nc0h33hBdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.mft
Manifest number: 068B
Signing time: Fri 23 Oct 2026 07:01:38 +0000
Manifest this update: Fri 23 Oct 2026 07:01:38 +0000
Manifest next update: Sat 24 Oct 2026 07:01:38 +0000
Files and hashes: 1: DQJJnOEfa2oVElYGaSR8zz5ni_0.asa (hash: fCFpR+GJ0E2w8nVsqk/F0dIfaoFThyR6WgRzVIEQnVU=)
2: HVdIhaDItCBcPfLR_Nc0h33hBdk.crl (hash: z+ist7tKCIk5ZvgKunpbhm20bK97S9XT+5NxHThGthM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HVdIhaDItCBcPfLR_Nc0h33hBdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:90:b1:ff:b8:55:cc:4c:49:99:cc:f9:25:be:c7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d574885a0c8b4205c3df2d1fcd734877de105d9
Validity
Not Before: Oct 23 07:01:38 2026 GMT
Not After : Oct 24 07:01:38 2026 GMT
Subject: CN=b905c337a681508172d5c994adbbc5576efd7230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0e:22:8f:df:97:c6:4a:00:03:3f:90:90:c3:
e1:e9:f8:63:18:09:30:95:74:ed:c0:68:af:9f:34:
cb:2a:bf:36:c0:9d:ea:43:50:5c:22:bb:06:0e:7a:
13:e0:7a:c4:b6:68:27:c2:4e:95:5d:6b:1b:3a:31:
2d:64:f4:13:88:c2:59:66:53:5d:e8:1f:b8:91:c8:
49:4c:ef:0c:ce:bc:a9:e6:c8:c4:f9:dc:69:f1:4d:
ba:f8:4e:6e:95:b2:2d:24:b4:09:8f:78:53:c8:a2:
c0:ee:88:40:bc:45:80:47:54:72:6c:c4:63:b8:b3:
e6:2b:7c:70:f7:29:48:ea:8f:21:92:72:85:e3:9f:
60:11:18:34:7a:3d:90:03:f6:43:02:f2:97:07:82:
d3:c4:92:ea:b2:fe:cb:50:d3:66:39:a1:f2:1a:35:
4a:18:41:c1:37:40:fc:78:82:6e:b7:3d:2e:dd:03:
93:f5:e0:2a:31:1f:b3:b5:ce:83:bb:68:96:55:f2:
53:d8:a8:d7:cb:77:bc:77:35:10:7c:12:95:45:01:
97:9a:6f:48:9e:63:9d:73:14:4e:bc:99:e6:f9:36:
69:6c:69:f0:e2:bf:b3:e4:b6:09:05:59:36:b5:0f:
8c:37:03:11:7b:8f:be:3f:51:4e:67:8c:c6:61:fb:
6d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:05:C3:37:A6:81:50:81:72:D5:C9:94:AD:BB:C5:57:6E:FD:72:30
X509v3 Authority Key Identifier:
keyid:1D:57:48:85:A0:C8:B4:20:5C:3D:F2:D1:FC:D7:34:87:7D:E1:05:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVdIhaDItCBcPfLR_Nc0h33hBdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:5d:fa:fb:b8:b4:f5:d4:cb:2d:36:ca:5f:72:14:f5:fd:5a:
f4:e2:14:e1:f1:03:97:16:44:35:36:5a:a1:1f:be:43:4d:54:
d7:35:71:58:f8:96:ca:db:c5:20:05:37:5f:8d:33:71:e5:be:
db:62:b9:f7:51:41:ec:6c:ee:cc:5c:e9:64:03:61:30:d5:fe:
6b:56:5d:bd:de:0e:f4:77:1b:98:9a:39:c2:5a:9d:a3:44:36:
4f:a0:64:d4:be:23:f6:0e:75:b3:d7:15:81:8b:45:43:f2:46:
34:7e:ce:f2:86:7b:b7:56:3a:36:cf:ba:29:42:c5:95:38:6f:
3a:1f:9f:08:96:7f:68:c7:c4:8e:5f:31:5c:70:bc:43:da:32:
39:a9:77:e3:eb:35:d8:cf:75:a8:09:9f:82:a7:0e:89:a0:09:
d2:15:1f:27:f9:9c:3c:2a:db:c4:f3:c9:8a:12:43:7b:60:61:
ec:ce:e9:8e:fd:b8:63:47:e9:42:82:f8:3c:64:b4:03:1e:4d:
8f:8e:44:33:33:7f:ca:b0:8f:81:f4:05:9d:68:e0:09:71:7d:
0d:ec:16:7d:a6:42:e8:f1:52:03:61:99:40:67:3b:18:7f:48:
b7:8c:6a:38:44:08:13:f7:a7:0a:e9:52:5c:11:d2:91:4b:43:
4d:c1:7b:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFnkLH/uFXMTEmZzPklvsdtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNTc0ODg1YTBjOGI0MjA1YzNkZjJkMWZjZDczNDg3N2Rl
MTA1ZDkwHhcNMjYxMDIzMDcwMTM4WhcNMjYxMDI0MDcwMTM4WjAzMTEwLwYDVQQD
EyhiOTA1YzMzN2E2ODE1MDgxNzJkNWM5OTRhZGJiYzU1NzZlZmQ3MjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4g4ij9+XxkoAAz+QkMPh6fhjGAkw
lXTtwGivnzTLKr82wJ3qQ1BcIrsGDnoT4HrEtmgnwk6VXWsbOjEtZPQTiMJZZlNd
6B+4kchJTO8Mzryp5sjE+dxp8U26+E5ulbItJLQJj3hTyKLA7ohAvEWAR1RybMRj
uLPmK3xw9ylI6o8hknKF459gERg0ej2QA/ZDAvKXB4LTxJLqsv7LUNNmOaHyGjVK
GEHBN0D8eIJutz0u3QOT9eAqMR+ztc6Du2iWVfJT2KjXy3e8dzUQfBKVRQGXmm9I
nmOdcxROvJnm+TZpbGnw4r+z5LYJBVk2tQ+MNwMRe4++P1FOZ4zGYftt9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLkFwzemgVCBctXJlK27xVdu/XIwMB8GA1UdIwQY
MBaAFB1XSIWgyLQgXD3y0fzXNId94QXZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFZkSWhhREl0Q0JjUGZMUl9OYzBoMzNoQmRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82OTdkZjctYjE5Yi00NmYxLThlNDMt
OTE5OGNhMmFjNzY2LzEvSFZkSWhhREl0Q0JjUGZMUl9OYzBoMzNoQmRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82OTdkZjctYjE5Yi00NmYxLThlNDMtOTE5OGNhMmFjNzY2
LzEvSFZkSWhhREl0Q0JjUGZMUl9OYzBoMzNoQmRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtV36+7i0
9dTLLTbKX3IU9f1a9OIU4fEDlxZENTZaoR++Q01U1zVxWPiWytvFIAU3X40zceW+
22K591FB7GzuzFzpZANhMNX+a1Zdvd4O9HcbmJo5wlqdo0Q2T6Bk1L4j9g51s9cV
gYtFQ/JGNH7O8oZ7t1Y6Ns+6KULFlThvOh+fCJZ/aMfEjl8xXHC8Q9oyOal34+s1
2M91qAmfgqcOiaAJ0hUfJ/mcPCrbxPPJihJDe2Bh7M7pjv24Y0fpQoL4PGS0Ax5N
j45EMzN/yrCPgfQFnWjgCXF9DewWfaZC6PFSA2GZQGc7GH9It4xqOEQIE/enCulS
XBHSkUtDTcF79Q==
-----END CERTIFICATE-----
Generated at Fri Oct 23 19:04:44 2026 by rpki-client