Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/331755-9798-4254-8455-4e46791e6d42/1/hI0Or-_oL8OxIQ5EaSsFNFkcpvU.mft
File: hI0Or-_oL8OxIQ5EaSsFNFkcpvU.mft (raw, json)
Hash identifier: HuIssQnUQMaIbm3veckf1qDYkVP5KXbADTqnE6scCxE=
Subject key identifier: 65:7B:A8:1F:E6:48:22:1F:E0:EB:00:44:68:E2:33:96:84:59:21:21
Authority key identifier: 84:8D:0E:AF:EF:E8:2F:C3:B1:21:0E:44:69:2B:05:34:59:1C:A6:F5
Certificate issuer: /CN=848d0eafefe82fc3b1210e44692b0534591ca6f5
Certificate serial: 01A0D3F03903E2A8F1DE01C24C5172B97DC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hI0Or-_oL8OxIQ5EaSsFNFkcpvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/331755-9798-4254-8455-4e46791e6d42/1/hI0Or-_oL8OxIQ5EaSsFNFkcpvU.mft
Manifest number: E7
Signing time: Thu 24 Sep 2026 15:02:10 +0000
Manifest this update: Thu 24 Sep 2026 15:02:10 +0000
Manifest next update: Fri 25 Sep 2026 15:02:10 +0000
Files and hashes: 1: 1bcxGH1cZpyTI4YIKUDBVrfhG8M.roa (hash: NC/8TtzYxM2Ha7m2JXk7QATNUCXczyQpVMeqDxeavJg=)
2: hI0Or-_oL8OxIQ5EaSsFNFkcpvU.crl (hash: bls5JHaiz//mOOuu7M9by1xUFRlNYIOCr2IKMNZ35Po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/331755-9798-4254-8455-4e46791e6d42/1/hI0Or-_oL8OxIQ5EaSsFNFkcpvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/331755-9798-4254-8455-4e46791e6d42/1/hI0Or-_oL8OxIQ5EaSsFNFkcpvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hI0Or-_oL8OxIQ5EaSsFNFkcpvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:39:03:e2:a8:f1:de:01:c2:4c:51:72:b9:7d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=848d0eafefe82fc3b1210e44692b0534591ca6f5
Validity
Not Before: Sep 24 15:02:10 2026 GMT
Not After : Sep 25 15:02:10 2026 GMT
Subject: CN=657ba81fe648221fe0eb004468e2339684592121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7c:7c:2d:f8:71:1e:ba:5f:3e:2b:00:cf:34:
48:28:59:7f:54:20:8f:a6:08:fa:e9:56:8a:eb:b8:
30:1d:0d:2c:5d:b0:b7:a6:db:9b:9c:b7:bd:71:bc:
e0:69:20:e9:78:d5:f0:d3:0c:a0:b1:15:cc:ce:15:
f1:2d:b7:29:da:65:07:f4:c7:37:05:4f:ef:e1:8f:
cc:36:90:3f:a1:fd:83:e0:e3:b4:1a:0f:09:8d:77:
57:a9:57:12:fa:5a:0d:95:6f:64:a0:f3:de:b6:a4:
e8:43:41:64:a0:b4:af:02:72:34:42:2c:88:d6:c0:
f4:bc:91:b0:e1:29:c5:50:7d:44:02:2b:08:0b:44:
47:da:97:e8:60:29:67:81:29:aa:b0:51:3c:25:2c:
31:b9:5b:ee:81:2d:63:ff:09:16:b6:fa:a6:98:e4:
15:6e:b2:03:fc:8b:8f:38:f5:ba:1c:e3:c6:36:ee:
26:59:be:82:c5:6a:5f:ad:e1:e3:e0:48:22:61:d9:
87:7c:c8:6d:11:c4:10:15:86:45:79:f7:80:22:53:
c9:e0:5c:6c:ab:1c:7d:b3:3a:eb:46:d3:54:cb:6e:
b5:90:76:61:d7:78:3e:55:bf:bd:3e:d5:26:6e:52:
91:81:d3:39:0e:fe:98:0f:10:3b:12:c7:70:3c:ae:
a0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7B:A8:1F:E6:48:22:1F:E0:EB:00:44:68:E2:33:96:84:59:21:21
X509v3 Authority Key Identifier:
keyid:84:8D:0E:AF:EF:E8:2F:C3:B1:21:0E:44:69:2B:05:34:59:1C:A6:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hI0Or-_oL8OxIQ5EaSsFNFkcpvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/331755-9798-4254-8455-4e46791e6d42/1/hI0Or-_oL8OxIQ5EaSsFNFkcpvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/331755-9798-4254-8455-4e46791e6d42/1/hI0Or-_oL8OxIQ5EaSsFNFkcpvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:39:95:70:f6:3d:08:7c:c5:ce:e7:04:cb:96:95:1b:c4:a4:
86:c7:8b:9c:f7:4f:9d:8b:06:2e:82:d7:db:49:fe:76:4b:25:
66:a2:54:01:9e:6c:a5:b6:77:df:86:89:0b:b9:ea:f1:36:39:
7a:4e:64:aa:bf:32:79:02:ff:d9:81:f4:c7:88:84:0f:4d:6e:
57:af:8c:c7:96:c8:7a:eb:b7:04:0c:df:2e:5c:f5:f4:50:20:
72:f7:3b:47:48:a0:bb:bb:c4:56:ae:87:c0:54:78:86:14:58:
03:93:d2:d5:90:7e:30:c2:45:32:02:8e:07:34:33:ce:f6:be:
13:0b:5d:0f:29:f8:9e:c8:8b:b6:33:c0:f8:db:47:27:c4:a5:
e6:c4:88:5c:95:e9:c8:83:ca:fa:66:08:3b:26:7a:10:98:2e:
74:1d:f6:58:58:eb:27:35:df:b7:4e:2a:45:13:4a:a5:5d:a6:
32:58:8f:b5:59:bd:a2:95:35:88:68:66:cc:e0:35:be:be:aa:
1d:ee:10:ac:b0:8c:d8:f1:e8:be:20:b3:d4:02:62:60:56:e0:
0e:fd:4c:36:05:69:47:95:e8:29:77:58:df:dd:23:d5:5b:28:
6c:8e:d3:8a:f6:46:a4:dc:e3:b5:d0:49:ec:c0:8d:eb:32:04:
91:d6:9a:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDT8DkD4qjx3gHCTFFyuX3DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0OGQwZWFmZWZlODJmYzNiMTIxMGU0NDY5MmIwNTM0NTkx
Y2E2ZjUwHhcNMjYwOTI0MTUwMjEwWhcNMjYwOTI1MTUwMjEwWjAzMTEwLwYDVQQD
Eyg2NTdiYTgxZmU2NDgyMjFmZTBlYjAwNDQ2OGUyMzM5Njg0NTkyMTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXx8LfhxHrpfPisAzzRIKFl/VCCP
pgj66VaK67gwHQ0sXbC3ptubnLe9cbzgaSDpeNXw0wygsRXMzhXxLbcp2mUH9Mc3
BU/v4Y/MNpA/of2D4OO0Gg8JjXdXqVcS+loNlW9koPPetqToQ0FkoLSvAnI0QiyI
1sD0vJGw4SnFUH1EAisIC0RH2pfoYClngSmqsFE8JSwxuVvugS1j/wkWtvqmmOQV
brID/IuPOPW6HOPGNu4mWb6CxWpfreHj4EgiYdmHfMhtEcQQFYZFefeAIlPJ4Fxs
qxx9szrrRtNUy261kHZh13g+Vb+9PtUmblKRgdM5Dv6YDxA7EsdwPK6gOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGV7qB/mSCIf4OsARGjiM5aEWSEhMB8GA1UdIwQY
MBaAFISNDq/v6C/DsSEORGkrBTRZHKb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEkwT3ItX29MOE94SVE1RWFTc0ZORmtjcHZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zMzE3NTUtOTc5OC00MjU0LTg0NTUt
NGU0Njc5MWU2ZDQyLzEvaEkwT3ItX29MOE94SVE1RWFTc0ZORmtjcHZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8zMzE3NTUtOTc5OC00MjU0LTg0NTUtNGU0Njc5MWU2ZDQy
LzEvaEkwT3ItX29MOE94SVE1RWFTc0ZORmtjcHZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDmVcPY9
CHzFzucEy5aVG8SkhseLnPdPnYsGLoLX20n+dkslZqJUAZ5spbZ334aJC7nq8TY5
ek5kqr8yeQL/2YH0x4iED01uV6+Mx5bIeuu3BAzfLlz19FAgcvc7R0igu7vEVq6H
wFR4hhRYA5PS1ZB+MMJFMgKOBzQzzva+EwtdDyn4nsiLtjPA+NtHJ8Sl5sSIXJXp
yIPK+mYIOyZ6EJgudB32WFjrJzXft04qRRNKpV2mMliPtVm9opU1iGhmzOA1vr6q
He4QrLCM2PHoviCz1AJiYFbgDv1MNgVpR5XoKXdY390j1VsobI7TivZGpNzjtdBJ
7MCN6zIEkdaaoA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:13:02 2026 by rpki-client