Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
File: hdycVeFZfohWTa9WflpGZZeMe4U.mft (raw, json)
Hash identifier: 0xhIwoJOkRbH7pPi1wahBMVjL3RNhG1PKMunjr6NQec=
Subject key identifier: 09:E3:46:E5:C7:37:43:CD:64:DA:94:CE:48:41:42:3D:E8:B1:3B:CF
Authority key identifier: 85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
Certificate issuer: /CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Certificate serial: 01A160B252D2B57D9D80E02AB4C871EA80E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
Manifest number: 14F9
Signing time: Wed 21 Oct 2026 23:01:01 +0000
Manifest this update: Wed 21 Oct 2026 23:01:01 +0000
Manifest next update: Thu 22 Oct 2026 23:01:01 +0000
Files and hashes: 1: 1TVNFB2oqiU4XNjEv0BT-Pb2M0M.roa (hash: 3vvI5UYlWItjTSfQrco2BtzXvJBHGkk/x8CyOBqqD8U=)
2: 41gdFH-JudL678u_D6BB_y7EfU0.roa (hash: VnQDTpZib3x3twc60ulDPL39Qe1IesXf9+CLXJ4WNxw=)
3: Mpj_3kOIb_YBREm4CDGbZoT8R1s.roa (hash: WSgFrdqhjjGW3gBXPEw9RNID+Xo3I/t20meQJF7GgZg=)
4: YQ7UOE0fRKiUXxXL_L3iPhyJx88.roa (hash: 3O80VS4rsgTgEZbTwubyabO64/481tfENVUe6/Id6ow=)
5: a-1eulbURZwYdTXjQHmSQrhkepg.roa (hash: dU6/8b7jh8wXrhRwwYJ+BZWPnCRt/iCI6b/zuZGMbbY=)
6: hdycVeFZfohWTa9WflpGZZeMe4U.crl (hash: dJFv/8JQh3CeJxraM1CYWDAFmcKsXSvHnmllImMSf04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:b2:52:d2:b5:7d:9d:80:e0:2a:b4:c8:71:ea:80:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Validity
Not Before: Oct 21 23:01:01 2026 GMT
Not After : Oct 22 23:01:01 2026 GMT
Subject: CN=09e346e5c73743cd64da94ce4841423de8b13bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ef:76:a6:60:9f:ab:5d:7e:ff:ec:1e:2f:e5:
dd:de:eb:22:b1:1b:2b:4c:22:f6:cc:ff:d1:87:e2:
53:64:4f:82:99:70:19:01:8c:cf:cb:c8:09:36:4a:
12:da:ea:24:de:f2:3b:35:a8:86:eb:5b:82:f8:88:
ba:13:2a:87:6a:c6:88:67:ad:9f:f4:37:70:a8:01:
46:bf:44:23:02:54:d4:ac:0c:6b:42:29:52:1b:2f:
e4:7e:96:4a:97:25:87:77:72:6a:50:2b:02:5d:e4:
95:af:87:7a:82:be:88:a1:e6:80:63:b8:d4:77:2f:
86:1d:64:0b:a2:29:a7:c3:fb:36:49:81:d2:c0:87:
dc:93:ea:bc:59:be:29:2d:e2:6e:70:bd:bb:2d:e4:
25:84:12:db:ba:cd:11:b7:30:68:85:66:58:15:6d:
c1:1f:c6:6f:7c:06:2c:a6:2b:11:9e:e3:31:f9:ee:
a0:b1:92:c5:9f:ae:4e:a6:78:ad:f0:29:e5:76:e6:
04:fb:bd:77:d8:42:ab:fa:4e:7d:36:07:02:27:c5:
ca:c5:2d:df:d0:38:c4:98:44:5f:75:83:2a:65:5f:
2a:cc:8c:99:13:ee:5d:e9:02:73:59:53:22:6d:42:
6c:34:fd:43:ca:53:f8:55:41:8f:4b:19:bf:f5:68:
36:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E3:46:E5:C7:37:43:CD:64:DA:94:CE:48:41:42:3D:E8:B1:3B:CF
X509v3 Authority Key Identifier:
keyid:85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:6f:d6:b6:d8:37:98:1b:7b:7a:9b:c7:b0:bd:45:d0:8c:02:
b8:02:b9:39:26:8c:a4:3c:4f:90:a9:32:77:79:2c:41:f0:ac:
4f:67:80:31:22:b4:28:e6:85:5d:ba:58:15:a3:23:ed:b9:17:
ab:c9:04:a0:f5:5b:6e:3e:bf:93:66:8c:66:f4:a4:e0:c5:2a:
da:cc:00:d2:a1:31:32:86:51:fc:55:92:53:da:a6:17:09:4c:
01:38:18:84:f5:05:78:79:20:b7:d0:a3:4d:e8:86:94:d2:10:
79:b0:e2:2b:7c:3b:88:82:f2:4c:20:5e:88:ff:7c:f7:3f:5a:
ee:32:3e:5e:c8:29:0b:ab:35:2d:69:85:78:cb:eb:b7:3a:bb:
ba:4d:e4:34:c2:e9:7f:0d:8d:14:1a:4b:7c:0c:c5:9f:71:d1:
05:0f:17:5c:7d:23:fb:bd:8d:d3:dd:16:68:68:58:15:71:22:
d8:bb:72:25:d1:9e:bc:50:e5:4e:78:7a:b6:f6:75:55:da:a2:
11:ec:3f:57:84:6f:c0:f2:8f:0b:47:4d:e3:4c:f8:59:55:98:
b5:62:eb:91:23:9a:7b:62:dd:70:b6:70:db:d1:41:27:ca:f9:
5b:5c:b1:78:4f:c2:de:1a:f0:46:57:19:79:5e:69:17:2f:58:
e9:11:5e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 05:54:58 2026 by rpki-client