Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
File: hFPR6GGO-ProB13dWCcNCUAGvpk.mft (raw, json)
Hash identifier: ePzUUQawb05kCVYdtLjd2bO5PPfcdImUP9osb7I7XPY=
Subject key identifier: 44:BC:F8:62:CD:CB:47:08:A5:47:1C:4B:BE:1C:12:89:85:D1:CE:42
Authority key identifier: 84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99
Certificate issuer: /CN=8453d1e8618ef8fae8075ddd58270d094006be99
Certificate serial: 01A181196206A200BA0BCC845D961DCBA5F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
Manifest number: 0742
Signing time: Wed 28 Oct 2026 06:01:26 +0000
Manifest this update: Wed 28 Oct 2026 06:01:26 +0000
Manifest next update: Thu 29 Oct 2026 06:01:26 +0000
Files and hashes: 1: H6fEkqVKszpXDZG-GKB24yi6fGA.roa (hash: VZx0qzECb8pJ5sSNI4YrIdOddJh7Fq3Sv2eEUes2jOk=)
2: hFPR6GGO-ProB13dWCcNCUAGvpk.crl (hash: b7Rk0KFlEm4jmi2HnADgUJuKtvDyr2mCf6midn8azX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 06:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:19:62:06:a2:00:ba:0b:cc:84:5d:96:1d:cb:a5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8453d1e8618ef8fae8075ddd58270d094006be99
Validity
Not Before: Oct 28 06:01:26 2026 GMT
Not After : Oct 29 06:01:26 2026 GMT
Subject: CN=44bcf862cdcb4708a5471c4bbe1c128985d1ce42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4e:f5:ea:49:9b:cc:27:e4:30:5e:d0:45:81:
2f:50:13:2c:c4:70:4c:2f:31:86:a8:80:f5:30:ff:
50:bc:b1:79:bd:05:99:78:14:23:8b:7d:84:8a:4f:
24:10:37:e8:27:80:f3:da:ea:96:87:82:9d:cd:3b:
2f:de:e3:4c:d2:31:07:dd:9a:94:2e:46:1f:a1:34:
1f:d9:ee:12:8a:b9:e0:a2:6d:90:17:6f:e6:27:ed:
f8:94:18:20:35:54:9f:48:7c:57:55:9c:49:84:04:
7e:5e:5b:f2:d7:fa:72:eb:bb:2b:a1:8e:a0:21:61:
44:83:97:1c:de:a5:bd:d9:a8:66:16:ba:ec:18:0d:
62:cf:56:6e:3f:cf:67:c0:23:69:77:bd:d2:5e:77:
86:a1:e7:57:7f:7c:d2:72:e4:2f:84:47:e4:86:a6:
9a:0b:e0:55:5f:81:7c:c8:b4:02:9a:2b:d4:0d:49:
2a:a8:fd:9c:c1:71:42:54:71:f9:87:65:b5:97:7e:
b0:7a:0d:6b:3f:16:94:ea:67:84:83:96:8b:92:92:
e3:50:53:5c:1a:70:9a:c8:ce:bd:2b:41:f6:ad:57:
2e:b2:e1:8a:81:c3:b4:8b:51:a9:01:93:0e:50:32:
04:61:96:a7:08:1c:d2:10:78:ff:76:ff:e8:b1:21:
e4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BC:F8:62:CD:CB:47:08:A5:47:1C:4B:BE:1C:12:89:85:D1:CE:42
X509v3 Authority Key Identifier:
keyid:84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d2:d1:92:55:e7:26:5d:a9:c9:0b:53:f9:64:5f:2e:57:33:
8e:9a:ae:78:73:e3:19:e0:bf:e3:7d:17:7e:a1:88:1d:12:c7:
af:8d:1d:80:8a:77:ea:6e:78:eb:9d:4c:e7:d3:6b:2c:a6:8d:
d2:ec:3d:3b:9d:1b:54:7c:09:13:1e:2f:3b:f4:4e:a8:38:ae:
c6:33:c4:2f:73:87:2f:39:de:dd:75:a5:6d:40:16:df:a9:0e:
32:9b:33:9f:9a:e4:68:d5:ab:62:52:a3:3a:d6:16:32:3d:94:
60:d0:5e:d8:8e:86:ce:0f:34:43:7d:4e:26:25:f0:d5:ce:b6:
bc:7b:6b:15:c2:8e:48:14:98:f0:39:c1:31:5c:9a:2c:48:b3:
85:31:a3:67:4c:e2:d3:84:f0:c8:11:4c:94:c9:2a:99:53:79:
8d:67:50:d0:78:04:1a:b6:08:89:92:72:50:5a:52:5a:09:e2:
c8:f0:4a:af:4f:07:93:6d:7c:b8:6d:31:e5:d6:64:ca:54:b2:
36:64:c7:9f:db:f4:27:32:65:d5:2a:ed:8f:94:30:7c:bd:d6:
7d:c9:8c:b0:43:28:f2:1b:64:74:94:26:81:41:e1:15:50:d1:
01:0e:f1:7a:5f:f3:e7:0c:0f:b7:d2:e8:5e:a9:31:32:b2:49:
13:13:85:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGBGWIGogC6C8yEXZYdy6XyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NTNkMWU4NjE4ZWY4ZmFlODA3NWRkZDU4MjcwZDA5NDAw
NmJlOTkwHhcNMjYxMDI4MDYwMTI2WhcNMjYxMDI5MDYwMTI2WjAzMTEwLwYDVQQD
Eyg0NGJjZjg2MmNkY2I0NzA4YTU0NzFjNGJiZTFjMTI4OTg1ZDFjZTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxE716kmbzCfkMF7QRYEvUBMsxHBM
LzGGqID1MP9QvLF5vQWZeBQji32Eik8kEDfoJ4Dz2uqWh4KdzTsv3uNM0jEH3ZqU
LkYfoTQf2e4Sirngom2QF2/mJ+34lBggNVSfSHxXVZxJhAR+Xlvy1/py67sroY6g
IWFEg5cc3qW92ahmFrrsGA1iz1ZuP89nwCNpd73SXneGoedXf3zScuQvhEfkhqaa
C+BVX4F8yLQCmivUDUkqqP2cwXFCVHH5h2W1l36weg1rPxaU6meEg5aLkpLjUFNc
GnCayM69K0H2rVcusuGKgcO0i1GpAZMOUDIEYZanCBzSEHj/dv/osSHksQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFES8+GLNy0cIpUccS74cEomF0c5CMB8GA1UdIwQY
MBaAFIRT0ehhjvj66Add3VgnDQlABr6ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEZQUjZHR08tUHJvQjEzZFdDY05DVUFHdnBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83ODBjMzQtMTgzYi00NmY0LWI5NjEt
ZDRhZTQwNzEzMjhmLzEvaEZQUjZHR08tUHJvQjEzZFdDY05DVUFHdnBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83ODBjMzQtMTgzYi00NmY0LWI5NjEtZDRhZTQwNzEzMjhm
LzEvaEZQUjZHR08tUHJvQjEzZFdDY05DVUFHdnBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQdLRklXn
Jl2pyQtT+WRfLlczjpqueHPjGeC/430XfqGIHRLHr40dgIp36m54651M59NrLKaN
0uw9O50bVHwJEx4vO/ROqDiuxjPEL3OHLzne3XWlbUAW36kOMpszn5rkaNWrYlKj
OtYWMj2UYNBe2I6Gzg80Q31OJiXw1c62vHtrFcKOSBSY8DnBMVyaLEizhTGjZ0zi
04TwyBFMlMkqmVN5jWdQ0HgEGrYIiZJyUFpSWgniyPBKr08Hk218uG0x5dZkylSy
NmTHn9v0JzJl1Srtj5QwfL3WfcmMsEMo8htkdJQmgUHhFVDRAQ7xel/z5wwPt9Lo
XqkxMrJJExOFsA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 16:30:26 2026 by rpki-client