Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
File: hUkvKmkQQzxbzYJpxEDowceADWs.mft (raw, json)
Hash identifier: Gy88bNNpchHOtA5JYufz2FEXUMhxYuByZ+9Xym5kx9U=
Subject key identifier: 21:8C:0A:F5:5D:66:3F:14:32:19:AD:3F:58:90:D7:C4:F3:5A:D6:66
Authority key identifier: 85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
Certificate issuer: /CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Certificate serial: 01A11AF55845056DC2D8DC2D8BA9A2618E3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
Manifest number: 0A36
Signing time: Thu 08 Oct 2026 10:00:48 +0000
Manifest this update: Thu 08 Oct 2026 10:00:48 +0000
Manifest next update: Fri 09 Oct 2026 10:00:48 +0000
Files and hashes: 1: TVMwQ3POqUvlVpd6DIhGjA31OEo.roa (hash: Whcd9L1nk9Dj6hFZTyskGlKlxUc8A3COyWU8lK84zTI=)
2: hUkvKmkQQzxbzYJpxEDowceADWs.crl (hash: 7n0IDjwyZMMZZ9UUGZkOf6aLojfD2TS6LHk9XyaOqYk=)
3: rKoSjHhvJImZNOF1L4tvqu9KSjU.roa (hash: ED11ejyoT5xPcyYKinY7Cd+nJxVa+vcQf9GFo/cbaCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:f5:58:45:05:6d:c2:d8:dc:2d:8b:a9:a2:61:8e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Validity
Not Before: Oct 8 10:00:48 2026 GMT
Not After : Oct 9 10:00:48 2026 GMT
Subject: CN=218c0af55d663f143219ad3f5890d7c4f35ad666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ea:f2:0a:74:98:72:36:20:82:7e:f7:80:34:
cd:43:56:b1:60:f8:69:30:7b:17:7f:f1:dc:09:d2:
65:bf:29:8b:d9:7d:2c:d1:23:91:b3:c3:9f:0b:8c:
97:c7:c5:b8:a2:98:56:8b:ad:c2:50:bc:47:f0:a4:
c2:ed:2d:9a:ae:58:2d:e3:92:c4:5d:97:82:2e:c1:
35:b3:ed:e5:05:cf:dc:d4:f5:2f:be:2b:ce:90:22:
fe:45:54:97:ff:6d:e8:3e:21:3b:92:a2:43:9d:df:
45:67:17:f4:2a:88:f0:a1:7c:b0:38:09:cc:08:33:
17:49:3d:13:b7:01:41:b1:cd:eb:19:63:65:87:f8:
f0:37:71:8b:58:58:a9:26:ed:8e:3e:55:85:c7:2a:
a5:8e:15:a6:1a:f3:bd:d5:11:65:30:e5:f2:c0:c1:
49:f3:20:cf:d7:45:20:2a:5d:1a:dc:7d:9a:48:e1:
2c:9b:3e:2a:ce:a4:38:62:ff:68:dd:ab:43:e2:b2:
f3:5f:22:1d:a6:23:a9:a2:3a:24:29:38:82:93:64:
b5:80:3f:36:54:27:b1:b2:c5:8e:7e:24:0f:82:4f:
48:ad:0f:70:7d:77:3e:99:59:19:3e:f3:ad:41:e2:
9a:b7:2a:f2:b7:e1:6f:42:55:33:e1:77:68:6c:83:
3c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8C:0A:F5:5D:66:3F:14:32:19:AD:3F:58:90:D7:C4:F3:5A:D6:66
X509v3 Authority Key Identifier:
keyid:85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:59:af:41:fa:bc:bc:d7:0c:f6:37:c4:2b:ca:2e:1e:f6:de:
c8:62:f0:34:19:ae:fb:ab:d7:c1:05:47:52:a7:85:e7:dd:c9:
07:69:01:ba:d2:ba:55:2c:66:1b:91:18:ff:5f:c1:76:56:6f:
5a:f0:f3:59:e4:50:f2:f8:49:e9:c2:26:aa:f8:69:8b:7f:1b:
5c:46:f1:90:97:0b:ff:e2:53:b0:d6:d9:fd:91:e1:61:c1:82:
f8:5d:da:f1:0d:b8:af:51:1d:69:b2:bb:12:b3:7f:0a:27:b7:
4e:37:d4:f4:2b:77:5a:01:43:80:82:9e:b0:1a:02:5f:aa:5c:
fe:84:c1:5c:f8:67:a8:9a:ea:e7:a6:c8:15:f3:a6:f2:5a:cf:
fb:58:f2:8b:f3:63:0c:1b:c8:dd:5a:a0:21:39:88:19:00:4f:
de:ca:90:07:13:b9:fc:1b:aa:0f:97:b6:d1:f2:95:82:c3:da:
f9:27:22:64:8f:ce:84:ba:f4:4e:c3:9e:55:4a:23:7f:cf:d3:
e2:63:ff:52:88:17:ea:28:d4:bd:cb:b2:43:7c:83:98:4d:6f:
27:27:b2:d6:50:42:b8:54:30:ed:73:01:f8:0f:1c:2a:94:00:
a8:6c:d1:7d:83:41:67:71:7f:22:0a:41:b5:9d:c5:28:8c:33:
a8:bb:37:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEa9VhFBW3C2Nwti6miYY4+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NDkyZjJhNjkxMDQzM2M1YmNkODI2OWM0NDBlOGMxYzc4
MDBkNmIwHhcNMjYxMDA4MTAwMDQ4WhcNMjYxMDA5MTAwMDQ4WjAzMTEwLwYDVQQD
EygyMThjMGFmNTVkNjYzZjE0MzIxOWFkM2Y1ODkwZDdjNGYzNWFkNjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruryCnSYcjYggn73gDTNQ1axYPhp
MHsXf/HcCdJlvymL2X0s0SORs8OfC4yXx8W4ophWi63CULxH8KTC7S2arlgt45LE
XZeCLsE1s+3lBc/c1PUvvivOkCL+RVSX/23oPiE7kqJDnd9FZxf0KojwoXywOAnM
CDMXST0TtwFBsc3rGWNlh/jwN3GLWFipJu2OPlWFxyqljhWmGvO91RFlMOXywMFJ
8yDP10UgKl0a3H2aSOEsmz4qzqQ4Yv9o3atD4rLzXyIdpiOpojokKTiCk2S1gD82
VCexssWOfiQPgk9IrQ9wfXc+mVkZPvOtQeKatyryt+FvQlUz4XdobIM8gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGMCvVdZj8UMhmtP1iQ18TzWtZmMB8GA1UdIwQY
MBaAFIVJLyppEEM8W82CacRA6MHHgA1rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFVrdktta1FRenhiellKcHhFRG93Y2VBRFdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iMzgyMjgtMDg3NS00OTFjLTlkNGYt
ZDZhOWEyODI4NGNmLzEvaFVrdktta1FRenhiellKcHhFRG93Y2VBRFdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iMzgyMjgtMDg3NS00OTFjLTlkNGYtZDZhOWEyODI4NGNm
LzEvaFVrdktta1FRenhiellKcHhFRG93Y2VBRFdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALFmvQfq8
vNcM9jfEK8ouHvbeyGLwNBmu+6vXwQVHUqeF593JB2kButK6VSxmG5EY/1/BdlZv
WvDzWeRQ8vhJ6cImqvhpi38bXEbxkJcL/+JTsNbZ/ZHhYcGC+F3a8Q24r1EdabK7
ErN/Cie3TjfU9Ct3WgFDgIKesBoCX6pc/oTBXPhnqJrq56bIFfOm8lrP+1jyi/Nj
DBvI3VqgITmIGQBP3sqQBxO5/BuqD5e20fKVgsPa+SciZI/OhLr0TsOeVUojf8/T
4mP/UogX6ijUvcuyQ3yDmE1vJyey1lBCuFQw7XMB+A8cKpQAqGzRfYNBZ3F/IgpB
tZ3FKIwzqLs3Fg==
-----END CERTIFICATE-----
Generated at Thu Oct 8 15:53:53 2026 by rpki-client