Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/heSsHuWPsBZEjd0bp6W6mkizPsw.mft
File: heSsHuWPsBZEjd0bp6W6mkizPsw.mft (raw, json)
Hash identifier: flKYtJwSmpQQWzo/cs56son/LJP2pVLoawDK2pDO1E8=
Subject key identifier: AD:E5:E3:7A:A5:44:39:FE:1D:46:BE:97:75:B3:80:97:11:A9:89:B0
Authority key identifier: 85:E4:AC:1E:E5:8F:B0:16:44:8D:DD:1B:A7:A5:BA:9A:48:B3:3E:CC
Certificate issuer: /CN=85e4ac1ee58fb016448ddd1ba7a5ba9a48b33ecc
Certificate serial: 01A0BCC283CF1FC95A943FB213ABD17CAF2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/heSsHuWPsBZEjd0bp6W6mkizPsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/heSsHuWPsBZEjd0bp6W6mkizPsw.mft
Manifest number: DB
Signing time: Sun 20 Sep 2026 03:00:59 +0000
Manifest this update: Sun 20 Sep 2026 03:00:59 +0000
Manifest next update: Mon 21 Sep 2026 03:00:59 +0000
Files and hashes: 1: 4s1KFc_pThYjGBdUJLs2Nl1upLE.roa (hash: 4dYHQlFuSRkjK7GHEQ+aA58N3FDz6pXVboUirj4ugs0=)
2: WprdfNGgmVJxl7pKSMorRSpkqxg.asa (hash: 47wTCptNF3CDuUj1JZbNAy/veEaKtcD7HJ1oodwJlcg=)
3: heSsHuWPsBZEjd0bp6W6mkizPsw.crl (hash: uwAa0fukVmEWeVoNuBU9Qfhc2vaYQVB+RikNX8FH8uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/heSsHuWPsBZEjd0bp6W6mkizPsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/heSsHuWPsBZEjd0bp6W6mkizPsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/heSsHuWPsBZEjd0bp6W6mkizPsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:c2:83:cf:1f:c9:5a:94:3f:b2:13:ab:d1:7c:af:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e4ac1ee58fb016448ddd1ba7a5ba9a48b33ecc
Validity
Not Before: Sep 20 03:00:59 2026 GMT
Not After : Sep 21 03:00:59 2026 GMT
Subject: CN=ade5e37aa54439fe1d46be9775b3809711a989b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:24:bc:3c:9b:bf:c0:5f:6a:09:f6:3b:6b:6c:
be:6f:d1:c9:38:fa:6d:29:80:55:2b:77:fb:31:10:
fa:2e:47:8b:9d:14:8a:f8:76:81:39:22:67:90:96:
b2:ed:ee:76:24:52:64:ce:eb:e5:8b:f3:69:29:a0:
93:1c:18:1b:e6:96:18:e5:c5:e2:76:e9:fe:1b:84:
9d:20:0f:87:b0:39:59:b6:dd:14:c7:3d:f7:2f:ae:
f9:90:bf:15:b2:6e:46:36:12:e4:ca:ee:92:9c:7a:
0e:84:86:8b:29:2c:d0:fc:ab:99:cd:5b:19:92:c3:
5c:8c:de:62:45:1d:86:0f:c8:59:76:ff:a2:ca:dc:
41:6b:b2:97:a9:14:1f:85:bf:1c:80:17:ef:9a:47:
f0:2e:99:75:13:69:af:10:0f:61:9c:99:51:76:bd:
74:94:ec:62:37:e0:43:26:e5:36:82:64:76:92:42:
41:9e:23:34:6e:49:9d:9c:4d:ef:28:76:59:f4:d4:
13:f9:85:16:5c:46:9e:e9:70:49:42:00:b9:33:04:
5f:9c:46:a2:d1:d3:6f:71:29:1b:d3:c7:52:b6:8f:
aa:74:cd:d9:80:41:ea:27:f1:c8:32:19:70:59:46:
83:e8:c0:dc:38:e0:4a:da:36:b8:05:60:6e:d5:89:
76:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E5:E3:7A:A5:44:39:FE:1D:46:BE:97:75:B3:80:97:11:A9:89:B0
X509v3 Authority Key Identifier:
keyid:85:E4:AC:1E:E5:8F:B0:16:44:8D:DD:1B:A7:A5:BA:9A:48:B3:3E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/heSsHuWPsBZEjd0bp6W6mkizPsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/heSsHuWPsBZEjd0bp6W6mkizPsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/heSsHuWPsBZEjd0bp6W6mkizPsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:54:bf:4d:75:19:32:4e:c3:ab:6c:09:55:af:58:a9:a0:f7:
3a:0b:a7:97:9a:f9:bd:9b:5f:9a:14:ae:eb:91:d0:9d:62:e9:
73:0e:66:84:46:ba:88:65:01:0f:ec:67:01:52:f5:a5:4c:7f:
ed:9a:55:7a:42:81:54:c2:a6:0f:3b:5c:fc:cd:b4:fe:a9:ae:
68:e8:44:b0:04:f9:24:dd:00:f6:84:90:c2:6f:b6:a3:99:5a:
6a:c1:95:31:46:d4:e5:be:21:34:80:f3:64:dc:2c:31:3e:9a:
f7:82:0e:fe:07:93:e2:27:ea:51:89:64:cd:65:73:67:6a:ea:
e6:aa:7b:40:b6:03:a9:40:e5:03:b6:6f:cb:de:85:1f:94:95:
2e:66:9a:10:04:19:0b:a1:39:4b:dd:21:85:1c:a4:b0:4c:b4:
06:7e:57:8e:45:52:15:36:97:12:49:9e:62:c3:af:93:01:bc:
03:21:8d:4a:ad:99:9e:94:e5:77:19:3f:bf:20:f9:ae:c2:05:
55:3e:33:9a:5c:63:3a:8a:31:07:1a:4c:2d:02:94:fe:7e:ef:
f9:85:82:21:5e:f6:d2:a1:fa:8c:0d:01:f2:d2:90:48:5a:f7:
65:2d:92:79:cb:34:43:46:29:2c:3e:25:8a:8d:f4:26:12:fa:
b4:9e:78:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC8woPPH8lalD+yE6vRfK8uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZTRhYzFlZTU4ZmIwMTY0NDhkZGQxYmE3YTViYTlhNDhi
MzNlY2MwHhcNMjYwOTIwMDMwMDU5WhcNMjYwOTIxMDMwMDU5WjAzMTEwLwYDVQQD
EyhhZGU1ZTM3YWE1NDQzOWZlMWQ0NmJlOTc3NWIzODA5NzExYTk4OWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iS8PJu/wF9qCfY7a2y+b9HJOPpt
KYBVK3f7MRD6LkeLnRSK+HaBOSJnkJay7e52JFJkzuvli/NpKaCTHBgb5pYY5cXi
dun+G4SdIA+HsDlZtt0Uxz33L675kL8Vsm5GNhLkyu6SnHoOhIaLKSzQ/KuZzVsZ
ksNcjN5iRR2GD8hZdv+iytxBa7KXqRQfhb8cgBfvmkfwLpl1E2mvEA9hnJlRdr10
lOxiN+BDJuU2gmR2kkJBniM0bkmdnE3vKHZZ9NQT+YUWXEae6XBJQgC5MwRfnEai
0dNvcSkb08dSto+qdM3ZgEHqJ/HIMhlwWUaD6MDcOOBK2ja4BWBu1Yl2GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3l43qlRDn+HUa+l3WzgJcRqYmwMB8GA1UdIwQY
MBaAFIXkrB7lj7AWRI3dG6eluppIsz7MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGVTc0h1V1BzQlpFamQwYnA2VzZta2l6UHN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84MzFmNTMtOTBkMS00MjA4LWE2ZDUt
YzVmZTQ0NDIwYzA5LzEvaGVTc0h1V1BzQlpFamQwYnA2VzZta2l6UHN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi84MzFmNTMtOTBkMS00MjA4LWE2ZDUtYzVmZTQ0NDIwYzA5
LzEvaGVTc0h1V1BzQlpFamQwYnA2VzZta2l6UHN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAflS/TXUZ
Mk7Dq2wJVa9YqaD3Ogunl5r5vZtfmhSu65HQnWLpcw5mhEa6iGUBD+xnAVL1pUx/
7ZpVekKBVMKmDztc/M20/qmuaOhEsAT5JN0A9oSQwm+2o5laasGVMUbU5b4hNIDz
ZNwsMT6a94IO/geT4ifqUYlkzWVzZ2rq5qp7QLYDqUDlA7Zvy96FH5SVLmaaEAQZ
C6E5S90hhRyksEy0Bn5XjkVSFTaXEkmeYsOvkwG8AyGNSq2ZnpTldxk/vyD5rsIF
VT4zmlxjOooxBxpMLQKU/n7v+YWCIV720qH6jA0B8tKQSFr3ZS2Secs0Q0YpLD4l
io30JhL6tJ54YQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 11:57:41 2026 by rpki-client