Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
File: hst0KgO8nIVQcheiUgTf_4L8zfk.mft (raw, json)
Hash identifier: YiB19thiAsiRI4B78oNUdLGxbnW8jpSd7QGIaOicIEM=
Subject key identifier: B5:94:DB:E4:3E:7B:E0:37:27:8A:C6:64:E2:B6:F0:46:54:E5:0C:14
Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
Certificate issuer: /CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Certificate serial: 019DDCFA3DE2C71958CF3E45CC17B0723AA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
Manifest number: 11F1
Signing time: Thu 30 Apr 2026 06:01:20 +0000
Manifest this update: Thu 30 Apr 2026 06:01:20 +0000
Manifest next update: Fri 01 May 2026 06:01:20 +0000
Files and hashes: 1: FsEYUQUVL6IgAyC_3hTmIC05sYA.roa (hash: erfQp237zxf8AD8EH/ivbDYnw0vQY88Vf8ov2LTkk+Q=)
2: KhePy2KSChqSTO56xjFNB88Adhw.roa (hash: jSbx1Mp1yMnht16w7llcf9K2ZLPdIRkxkGJ6/eCHfII=)
3: Z-DKyWN4NlE9Oe6WxuczFCionOA.roa (hash: DCMKgnjrJbcUZjEDqwNnXXjpRG/93HbByWia9wwVNVM=)
4: hst0KgO8nIVQcheiUgTf_4L8zfk.crl (hash: 7uJcF9xryO6UrjnG4jxrnK4OP/sBcqASCiMYVelnEco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:fa:3d:e2:c7:19:58:cf:3e:45:cc:17:b0:72:3a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Validity
Not Before: Apr 30 06:01:20 2026 GMT
Not After : May 1 06:01:20 2026 GMT
Subject: CN=b594dbe43e7be037278ac664e2b6f04654e50c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:57:ce:8d:56:82:94:57:4b:b0:32:70:f4:
54:62:96:c3:96:2e:3d:76:b4:ee:66:71:d6:85:9a:
78:9b:5d:cf:2f:ae:86:e9:f4:9c:6a:b6:d9:db:95:
d8:9b:a8:67:12:93:bb:be:7a:63:ec:c5:85:8c:94:
2f:69:cf:b2:aa:08:8b:5f:66:5e:ba:2f:cc:33:6c:
f4:56:86:74:fa:27:eb:ef:42:7c:71:10:a2:83:18:
27:43:ea:4d:19:6c:1c:55:5a:14:fd:1f:f4:39:11:
cc:bf:88:c7:e0:d6:2a:42:4d:d0:c6:d0:8c:72:84:
22:3c:d8:6f:9f:f0:20:78:db:28:dd:f8:36:be:49:
e1:57:d7:2a:42:f0:c1:17:41:ca:48:93:fd:74:cc:
a1:0c:e6:af:95:17:10:05:6d:fd:ef:75:a2:d9:63:
34:67:92:b5:43:63:dc:66:97:c2:08:9b:e6:a1:ab:
69:07:ad:2a:f1:1b:24:56:a1:04:37:ff:52:30:70:
97:4b:64:a6:c8:4a:45:4a:87:90:b4:b6:bb:26:22:
c7:ef:7e:50:c0:80:ff:6b:f5:d0:f9:5d:01:3c:62:
38:ee:5d:9a:36:5b:dd:50:86:1c:34:9a:08:d5:f4:
92:ca:c6:9a:c4:01:1a:80:06:3e:c9:34:92:05:61:
e4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:94:DB:E4:3E:7B:E0:37:27:8A:C6:64:E2:B6:F0:46:54:E5:0C:14
X509v3 Authority Key Identifier:
keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:59:ac:04:25:f3:04:4f:ba:66:a9:d6:b0:05:b7:cf:df:ff:
d5:b5:d1:9b:c5:45:0b:f4:34:b0:98:33:d0:c8:d1:b9:b1:ac:
57:71:a1:37:48:b2:df:3f:e3:fa:f5:ce:13:9d:61:2d:e6:b4:
53:cf:f1:4f:42:a2:68:27:fe:ed:a7:b2:93:70:0a:82:8a:36:
8f:5c:65:49:a1:f0:c5:d6:fd:21:1c:ec:a4:90:b0:9d:0b:98:
50:a0:52:fc:44:fe:bd:06:11:61:19:43:a1:11:73:68:b2:e2:
89:c5:23:e5:db:b9:02:48:da:37:75:14:cf:f5:59:8d:9d:bc:
e8:54:10:ce:58:49:e5:92:40:fd:98:23:38:6e:e5:1c:02:93:
45:11:de:3e:27:b5:fd:e1:b0:3e:03:66:72:88:51:00:ae:33:
98:70:11:8d:4d:14:0c:0b:c7:56:23:8d:95:af:8b:83:0c:87:
cf:84:da:39:f0:98:d0:b2:57:cf:7c:df:4c:38:32:17:23:72:
06:a5:68:6d:c8:5b:c9:1b:5d:08:51:d5:6b:8e:51:fd:71:fc:
d6:c4:84:59:a7:0f:6a:88:37:52:dd:2e:00:55:5d:c9:09:af:
d0:74:40:2b:97:64:a1:c4:f8:7b:f3:bd:50:aa:7e:1a:bb:00:
99:0e:49:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3c+j3ixxlYzz5FzBewcjqlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Y2I3NDJhMDNiYzljODU1MDcyMTdhMjUyMDRkZmZmODJm
Y2NkZjkwHhcNMjYwNDMwMDYwMTIwWhcNMjYwNTAxMDYwMTIwWjAzMTEwLwYDVQQD
EyhiNTk0ZGJlNDNlN2JlMDM3Mjc4YWM2NjRlMmI2ZjA0NjU0ZTUwYzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmxXzo1WgpRXS7AycPRUYpbDli49
drTuZnHWhZp4m13PL66G6fScarbZ25XYm6hnEpO7vnpj7MWFjJQvac+yqgiLX2Ze
ui/MM2z0VoZ0+ifr70J8cRCigxgnQ+pNGWwcVVoU/R/0ORHMv4jH4NYqQk3QxtCM
coQiPNhvn/AgeNso3fg2vknhV9cqQvDBF0HKSJP9dMyhDOavlRcQBW3973Wi2WM0
Z5K1Q2PcZpfCCJvmoatpB60q8RskVqEEN/9SMHCXS2SmyEpFSoeQtLa7JiLH735Q
wID/a/XQ+V0BPGI47l2aNlvdUIYcNJoI1fSSysaaxAEagAY+yTSSBWHkAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWU2+Q+e+A3J4rGZOK28EZU5QwUMB8GA1UdIwQY
MBaAFIbLdCoDvJyFUHIXolIE3/+C/M35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS83NjdhZTUtYjlhMi00OTkzLTgxYTgt
MDVmMThmYzIxMmE3LzEvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS83NjdhZTUtYjlhMi00OTkzLTgxYTgtMDVmMThmYzIxMmE3
LzEvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVmsBCXz
BE+6ZqnWsAW3z9//1bXRm8VFC/Q0sJgz0MjRubGsV3GhN0iy3z/j+vXOE51hLea0
U8/xT0KiaCf+7aeyk3AKgoo2j1xlSaHwxdb9IRzspJCwnQuYUKBS/ET+vQYRYRlD
oRFzaLLiicUj5du5AkjaN3UUz/VZjZ286FQQzlhJ5ZJA/ZgjOG7lHAKTRRHePie1
/eGwPgNmcohRAK4zmHARjU0UDAvHViONla+LgwyHz4TaOfCY0LJXz3zfTDgyFyNy
BqVobchbyRtdCFHVa45R/XH81sSEWacPaog3Ut0uAFVdyQmv0HRAK5dkocT4e/O9
UKp+GrsAmQ5Jvg==
-----END CERTIFICATE-----
Generated at Thu Apr 30 08:26:28 2026 by rpki-client