Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/hu9QZSG0-b0foX8wh2WfssVG4Ng.mft
File: hu9QZSG0-b0foX8wh2WfssVG4Ng.mft (raw, json)
Hash identifier: LslEu/o2XxDcGPT/bZ5oJYoRcV2rHabLS4ahJk3l13M=
Subject key identifier: 5D:15:31:5D:51:36:01:6D:73:19:44:73:C2:E5:B9:7C:8F:CD:44:F0
Authority key identifier: 86:EF:50:65:21:B4:F9:BD:1F:A1:7F:30:87:65:9F:B2:C5:46:E0:D8
Certificate issuer: /CN=86ef506521b4f9bd1fa17f3087659fb2c546e0d8
Certificate serial: 01A0C368B8222ADA41BB6849931D7245DC85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu9QZSG0-b0foX8wh2WfssVG4Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/hu9QZSG0-b0foX8wh2WfssVG4Ng.mft
Manifest number: 86
Signing time: Mon 21 Sep 2026 10:00:15 +0000
Manifest this update: Mon 21 Sep 2026 10:00:15 +0000
Manifest next update: Tue 22 Sep 2026 10:00:15 +0000
Files and hashes: 1: br3xFyo0GnB4STjJnTpUdkV8Q7s.roa (hash: IEukFQawGXjdqi0RnytgX5C//iUSZHrf62ki2UehA54=)
2: dX7fCd5oPY9fmwZUIfcAQHfrCRs.roa (hash: m88oh8owdEFH3tUoKjfEUIRkfalCTEAQLA+89duR55g=)
3: hQDtWiN_Sr5_Jw_7MSL8KB4GDac.roa (hash: 2g6jWruf2KhjwuFceqA/ae0CgjO0uCwl2Bz+nWtkTv8=)
4: hu9QZSG0-b0foX8wh2WfssVG4Ng.crl (hash: wnpvhvoQBDg1ESr4ce9yCQjvARFgq9+HN1DqpPyAMvg=)
5: lMbycOyKsNQEYDbbnO8jLbNPRkE.roa (hash: eTJe4v/IqH8HQqSSHHi7pyJmR8yUrAqAwUv/AvrAmLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/hu9QZSG0-b0foX8wh2WfssVG4Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/hu9QZSG0-b0foX8wh2WfssVG4Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu9QZSG0-b0foX8wh2WfssVG4Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:68:b8:22:2a:da:41:bb:68:49:93:1d:72:45:dc:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ef506521b4f9bd1fa17f3087659fb2c546e0d8
Validity
Not Before: Sep 21 10:00:15 2026 GMT
Not After : Sep 22 10:00:15 2026 GMT
Subject: CN=5d15315d5136016d73194473c2e5b97c8fcd44f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:b3:66:f4:5b:16:5e:e2:07:06:b6:f6:b2:
64:76:5c:2a:13:ef:cf:04:a1:41:8a:dc:f2:df:12:
64:f0:6f:36:17:8a:b1:42:de:a8:fb:79:53:05:1f:
5a:96:d9:2f:22:e2:6f:97:e4:82:5d:f2:1f:3d:45:
c5:b2:ab:49:d7:10:4a:90:0a:6b:2f:7f:6f:1d:4c:
9b:1e:d5:75:b5:f7:51:4a:fb:0a:0b:63:6f:3f:36:
25:9b:8c:df:74:11:45:ea:27:83:61:2d:05:a1:00:
ca:a6:40:a5:fb:4c:2d:9d:cd:4d:35:a1:6f:64:78:
4d:10:f8:d9:9e:f5:2f:1e:5a:bf:ef:5c:57:07:1c:
e7:0a:de:59:ff:88:8e:0b:51:dc:a1:bf:33:ee:41:
1c:e9:69:10:3c:31:3c:09:3c:05:51:af:7e:09:59:
58:c3:97:d7:02:1b:aa:b1:74:f5:79:5d:45:46:fa:
83:d5:56:29:86:3c:79:65:a0:61:73:2b:69:b2:ad:
82:72:4e:08:cf:12:6e:44:dc:6e:93:e4:47:05:cd:
f6:4c:b0:67:e0:15:5b:8f:9c:57:18:a2:00:be:94:
d2:1b:99:ae:c8:00:3e:19:d9:e7:ea:df:9c:8e:5b:
87:ab:c1:ab:e2:80:ae:b6:1b:96:fa:46:31:ab:c4:
1c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:15:31:5D:51:36:01:6D:73:19:44:73:C2:E5:B9:7C:8F:CD:44:F0
X509v3 Authority Key Identifier:
keyid:86:EF:50:65:21:B4:F9:BD:1F:A1:7F:30:87:65:9F:B2:C5:46:E0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu9QZSG0-b0foX8wh2WfssVG4Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/hu9QZSG0-b0foX8wh2WfssVG4Ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/71f0d6-2e6e-4d11-b863-a61ca5643020/1/hu9QZSG0-b0foX8wh2WfssVG4Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:87:7f:80:b9:d7:38:24:2f:d7:f0:2b:0a:ab:ba:2a:30:23:
6b:d6:8b:45:b8:70:4a:b0:81:84:5c:2a:80:37:3d:cc:2e:2d:
34:2f:b2:c7:4e:02:21:d6:a0:55:18:a8:52:76:9f:5c:f6:44:
ad:d5:c1:b0:b2:bb:0e:1d:77:f5:3e:ac:82:12:12:e0:4a:90:
ef:f2:09:d8:92:32:65:ec:cc:96:37:1d:09:f7:2d:42:c5:49:
18:e9:53:08:80:89:84:0c:59:d3:d5:54:22:8d:20:fd:a5:bd:
42:4b:7d:30:58:ab:fa:75:13:a8:a9:70:67:48:27:33:45:70:
0f:fd:aa:f0:d3:de:b1:b5:ae:91:a5:be:6a:ff:85:db:a6:2c:
dc:fe:db:a0:94:7a:a2:9d:e2:41:eb:60:b5:c3:93:7b:08:c3:
21:ba:d4:35:57:a1:e1:d4:76:6c:c3:a1:0b:af:06:6e:d4:4e:
4c:06:fc:eb:7d:31:f3:74:cc:69:ec:d0:3d:28:cf:9a:0b:ac:
28:c9:c5:fd:d6:fb:b5:f5:7c:33:54:5e:22:ca:b2:d7:13:bf:
c7:f6:18:fe:39:78:9f:a2:3a:4c:a1:d5:f7:94:42:93:ff:56:
85:71:1f:4a:17:4a:63:de:6f:b9:b8:fd:76:03:d5:dd:b3:ad:
3d:79:71:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDaLgiKtpBu2hJkx1yRdyFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZWY1MDY1MjFiNGY5YmQxZmExN2YzMDg3NjU5ZmIyYzU0
NmUwZDgwHhcNMjYwOTIxMTAwMDE1WhcNMjYwOTIyMTAwMDE1WjAzMTEwLwYDVQQD
Eyg1ZDE1MzE1ZDUxMzYwMTZkNzMxOTQ0NzNjMmU1Yjk3YzhmY2Q0NGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMazZvRbFl7iBwa29rJkdlwqE+/P
BKFBitzy3xJk8G82F4qxQt6o+3lTBR9altkvIuJvl+SCXfIfPUXFsqtJ1xBKkApr
L39vHUybHtV1tfdRSvsKC2NvPzYlm4zfdBFF6ieDYS0FoQDKpkCl+0wtnc1NNaFv
ZHhNEPjZnvUvHlq/71xXBxznCt5Z/4iOC1Hcob8z7kEc6WkQPDE8CTwFUa9+CVlY
w5fXAhuqsXT1eV1FRvqD1VYphjx5ZaBhcytpsq2Cck4IzxJuRNxuk+RHBc32TLBn
4BVbj5xXGKIAvpTSG5muyAA+Gdnn6t+cjluHq8Gr4oCuthuW+kYxq8QcLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0VMV1RNgFtcxlEc8LluXyPzUTwMB8GA1UdIwQY
MBaAFIbvUGUhtPm9H6F/MIdln7LFRuDYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHU5UVpTRzAtYjBmb1g4d2gyV2Zzc1ZHNE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi83MWYwZDYtMmU2ZS00ZDExLWI4NjMt
YTYxY2E1NjQzMDIwLzEvaHU5UVpTRzAtYjBmb1g4d2gyV2Zzc1ZHNE5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi83MWYwZDYtMmU2ZS00ZDExLWI4NjMtYTYxY2E1NjQzMDIw
LzEvaHU5UVpTRzAtYjBmb1g4d2gyV2Zzc1ZHNE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABod/gLnX
OCQv1/ArCqu6KjAja9aLRbhwSrCBhFwqgDc9zC4tNC+yx04CIdagVRioUnafXPZE
rdXBsLK7Dh139T6sghIS4EqQ7/IJ2JIyZezMljcdCfctQsVJGOlTCICJhAxZ09VU
Io0g/aW9Qkt9MFir+nUTqKlwZ0gnM0VwD/2q8NPesbWukaW+av+F26Ys3P7boJR6
op3iQetgtcOTewjDIbrUNVeh4dR2bMOhC68GbtROTAb8630x83TMaezQPSjPmgus
KMnF/db7tfV8M1ReIsqy1xO/x/YY/jl4n6I6TKHV95RCk/9WhXEfShdKY95vubj9
dgPV3bOtPXlxgw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 14:47:43 2026 by rpki-client