
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
File: hH0b6-TCPEIXuE9_2BkqslVUFag.mft (raw, json)
Hash identifier: tgqdiq5KUnIj0RlnX9bxUFyop3jn1t5peO6Zy8PnXAk=
Subject key identifier: EB:48:70:DB:9E:A5:E7:27:34:1D:EA:23:C6:04:08:2B:FE:F3:3D:EC
Authority key identifier: 84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8
Certificate issuer: /CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
Certificate serial: 01A0D0B6BFB29D4C736A9AE0EAE7BEC4CF0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
Manifest number: 1900
Signing time: Thu 24 Sep 2026 00:00:32 +0000
Manifest this update: Thu 24 Sep 2026 00:00:32 +0000
Manifest next update: Fri 25 Sep 2026 00:00:32 +0000
Files and hashes: 1: OGRlDFmxFDMmmAQ2PHIbdYfiSWM.roa (hash: Qgj5b6VYtZqA5g1js1nnLsLpvoekztlGnv5F0hfyC1k=)
2: hH0b6-TCPEIXuE9_2BkqslVUFag.crl (hash: qbXoWFB/p3IwHOuS2O5lnqwh2nKbvVdeqrabFuK/kLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:bf:b2:9d:4c:73:6a:9a:e0:ea:e7:be:c4:cf:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
Validity
Not Before: Sep 24 00:00:32 2026 GMT
Not After : Sep 25 00:00:32 2026 GMT
Subject: CN=eb4870db9ea5e727341dea23c604082bfef33dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4a:aa:97:59:51:16:c3:15:b3:56:10:3c:80:
5b:0a:a4:1c:a6:7e:23:76:02:77:07:07:07:9b:90:
0c:c6:e1:a6:29:28:e7:d5:f6:5a:f7:b6:c9:67:8b:
4d:fb:79:3b:9f:45:11:f5:6f:d7:27:a2:6a:a5:90:
0f:2f:a9:79:89:6d:54:9a:e4:33:ae:63:12:58:fa:
da:4f:69:ca:84:58:1d:f7:db:1b:2b:9c:06:19:cc:
dc:6a:f5:c6:cd:b7:25:87:9c:33:8a:cf:c9:a8:9d:
79:44:b2:1e:5e:9c:ef:c5:24:33:0d:9c:8e:49:30:
69:21:7f:e2:52:2c:5e:2b:70:5b:19:14:a9:77:9a:
2b:e3:2d:f7:aa:96:35:63:15:eb:a2:54:99:91:d8:
8b:18:d3:75:1d:49:34:eb:24:f0:b7:34:c5:fc:79:
6d:7d:5a:4c:1e:af:c6:a0:88:99:f0:82:9a:0a:eb:
a1:e6:60:ae:8d:49:55:85:3a:8b:c8:64:b5:e5:92:
6e:07:fb:82:f9:1e:b4:0f:19:a8:61:96:b4:d8:82:
06:a9:89:ea:0b:a4:ea:3f:a7:55:e4:25:83:da:a9:
66:28:e6:e4:59:15:fa:d6:b7:e1:a8:88:3a:33:a1:
1b:c5:b5:0f:34:b5:07:80:30:c5:9f:dc:9d:00:29:
3a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:48:70:DB:9E:A5:E7:27:34:1D:EA:23:C6:04:08:2B:FE:F3:3D:EC
X509v3 Authority Key Identifier:
keyid:84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:eb:13:83:ca:63:4f:fd:a2:a5:09:4a:06:8f:04:ab:3a:59:
44:9d:d8:5c:1f:35:ab:98:c8:7c:9b:2a:77:e4:83:07:48:3d:
13:e9:71:af:e5:68:11:a1:c0:a4:2d:5f:a2:95:ce:3c:7f:af:
27:e4:59:c3:2a:b9:a2:36:c3:9d:5e:28:2f:ae:a4:70:e0:30:
39:80:e7:e4:7c:6c:d5:26:74:a0:62:f2:fe:cb:43:ff:6f:80:
04:94:f1:77:15:f8:93:63:eb:3d:f0:56:f9:9b:b1:64:9f:f5:
8a:04:c4:d0:6a:60:42:f6:9c:4f:0c:e1:fb:88:43:48:80:b6:
72:5b:db:d8:7b:bb:ab:c9:83:55:1c:3c:04:46:bb:b6:0a:d2:
5a:84:92:49:2d:df:44:f5:fd:ed:2b:ec:d8:c4:4e:0b:9e:16:
6a:2d:6f:d4:e8:fa:6b:27:d0:82:e7:d2:4c:91:0f:04:68:00:
77:ff:73:1b:ab:f0:8c:0e:d4:50:5c:66:1f:a1:bb:24:66:b3:
aa:fa:bc:ed:73:6a:df:ee:b2:85:7d:ea:01:4b:1b:f6:62:c3:
9d:58:f1:da:19:92:35:19:33:f7:7a:66:56:d9:08:99:af:71:
fe:d2:22:f4:c8:7c:56:41:4f:30:e7:82:d3:12:94:da:2c:08:
71:37:a8:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQtr+ynUxzaprg6ue+xM8NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0N2QxYmViZTRjMjNjNDIxN2I4NGY3ZmQ4MTkyYWIyNTU1
NDE1YTgwHhcNMjYwOTI0MDAwMDMyWhcNMjYwOTI1MDAwMDMyWjAzMTEwLwYDVQQD
EyhlYjQ4NzBkYjllYTVlNzI3MzQxZGVhMjNjNjA0MDgyYmZlZjMzZGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Eqql1lRFsMVs1YQPIBbCqQcpn4j
dgJ3BwcHm5AMxuGmKSjn1fZa97bJZ4tN+3k7n0UR9W/XJ6JqpZAPL6l5iW1UmuQz
rmMSWPraT2nKhFgd99sbK5wGGczcavXGzbclh5wzis/JqJ15RLIeXpzvxSQzDZyO
STBpIX/iUixeK3BbGRSpd5or4y33qpY1YxXrolSZkdiLGNN1HUk06yTwtzTF/Hlt
fVpMHq/GoIiZ8IKaCuuh5mCujUlVhTqLyGS15ZJuB/uC+R60DxmoYZa02IIGqYnq
C6TqP6dV5CWD2qlmKObkWRX61rfhqIg6M6EbxbUPNLUHgDDFn9ydACk6sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtIcNuepecnNB3qI8YECCv+8z3sMB8GA1UdIwQY
MBaAFIR9G+vkwjxCF7hPf9gZKrJVVBWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEgwYjYtVENQRUlYdUU5XzJCa3FzbFZVRmFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9mODFlYWItYmMzNi00MmE2LTgyMmEt
Y2RiMWQzODU1NmJiLzEvaEgwYjYtVENQRUlYdUU5XzJCa3FzbFZVRmFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9mODFlYWItYmMzNi00MmE2LTgyMmEtY2RiMWQzODU1NmJi
LzEvaEgwYjYtVENQRUlYdUU5XzJCa3FzbFZVRmFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+sTg8pj
T/2ipQlKBo8EqzpZRJ3YXB81q5jIfJsqd+SDB0g9E+lxr+VoEaHApC1fopXOPH+v
J+RZwyq5ojbDnV4oL66kcOAwOYDn5Hxs1SZ0oGLy/stD/2+ABJTxdxX4k2PrPfBW
+ZuxZJ/1igTE0GpgQvacTwzh+4hDSIC2clvb2Hu7q8mDVRw8BEa7tgrSWoSSSS3f
RPX97Svs2MROC54Wai1v1Oj6ayfQgufSTJEPBGgAd/9zG6vwjA7UUFxmH6G7JGaz
qvq87XNq3+6yhX3qAUsb9mLDnVjx2hmSNRkz93pmVtkIma9x/tIi9Mh8VkFPMOeC
0xKU2iwIcTeoxQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 02:07:24 2026 by rpki-client