Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.mft
File: H_oFe7xNCbnGccQ_-W81wA3p-7s.mft (raw, json)
Hash identifier: S9PI0zDD9WUKzjN8b7Hqvufhng+4t/iFjBCluAffGRM=
Subject key identifier: 3E:2F:F8:38:FF:84:10:EE:1A:CD:FC:9C:5A:F4:15:E7:0B:D4:DA:61
Authority key identifier: 1F:FA:05:7B:BC:4D:09:B9:C6:71:C4:3F:F9:6F:35:C0:0D:E9:FB:BB
Certificate issuer: /CN=1ffa057bbc4d09b9c671c43ff96f35c00de9fbbb
Certificate serial: 01A0DCBB72FC16B598EB21BD5408B93225BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_oFe7xNCbnGccQ_-W81wA3p-7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.mft
Manifest number: 0122
Signing time: Sat 26 Sep 2026 08:01:07 +0000
Manifest this update: Sat 26 Sep 2026 08:01:07 +0000
Manifest next update: Sun 27 Sep 2026 08:01:07 +0000
Files and hashes: 1: H_oFe7xNCbnGccQ_-W81wA3p-7s.crl (hash: xHPSDAGtgpD7oL35XUIP6FwHYpwomek84BhzECkVshg=)
2: TvRQaRsziqrRJCQCiUQYjyKVrn0.roa (hash: mrwUynV6T3tedBWfd3iohzz+A8WkbO6ygpgXbd4vXq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_oFe7xNCbnGccQ_-W81wA3p-7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:72:fc:16:b5:98:eb:21:bd:54:08:b9:32:25:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ffa057bbc4d09b9c671c43ff96f35c00de9fbbb
Validity
Not Before: Sep 26 08:01:07 2026 GMT
Not After : Sep 27 08:01:07 2026 GMT
Subject: CN=3e2ff838ff8410ee1acdfc9c5af415e70bd4da61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b3:17:58:c2:e5:f9:54:55:b7:1b:9b:15:dd:
af:0a:06:40:ad:c9:cf:77:3b:58:06:6f:b1:4b:cc:
02:fa:82:a4:d1:92:9b:29:74:3b:b3:36:96:84:41:
fc:66:49:68:10:3d:e8:da:53:32:eb:de:d9:c8:d3:
12:95:d2:ba:a3:cc:b1:ac:3f:49:4d:cc:21:53:21:
b7:7c:ec:1e:64:9f:60:4b:e4:f6:97:f3:0e:4d:2c:
99:84:c8:02:c1:f0:29:6f:b5:85:c8:a4:e4:14:94:
61:a3:06:b6:8e:f9:8f:bc:ce:33:c6:e5:04:91:67:
0a:01:75:09:18:aa:8b:50:34:b4:7d:36:39:3d:34:
22:b5:e9:24:d1:07:08:22:16:f0:27:be:70:54:6c:
79:d8:24:37:bf:a1:07:29:83:af:80:7e:50:69:c1:
1a:59:8d:e2:6a:7b:79:e6:d1:6c:a4:1f:6b:ac:b4:
93:82:4f:0e:13:40:e6:2d:77:aa:a8:6f:9a:3a:ee:
7c:01:f3:8e:21:e9:55:8a:e6:25:ac:c7:53:a6:e6:
78:e5:60:6c:8c:0b:b3:98:c1:a0:c0:ac:76:64:bd:
22:3b:54:78:92:ff:eb:27:e2:8c:4e:b1:9a:6f:65:
ca:a7:69:66:8f:8d:fb:dc:64:db:ee:5b:dc:1f:d3:
45:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2F:F8:38:FF:84:10:EE:1A:CD:FC:9C:5A:F4:15:E7:0B:D4:DA:61
X509v3 Authority Key Identifier:
keyid:1F:FA:05:7B:BC:4D:09:B9:C6:71:C4:3F:F9:6F:35:C0:0D:E9:FB:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_oFe7xNCbnGccQ_-W81wA3p-7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d4:c8:2d:ad:0c:59:a4:30:9d:ec:48:fa:e0:2d:14:19:98:
ee:8e:df:89:66:4a:2b:c9:cd:08:e4:15:13:2d:5d:d0:6d:b5:
06:c5:de:37:ec:ce:3a:0b:2c:0d:8c:b6:95:04:a4:40:79:12:
68:65:7a:6c:e4:d0:0b:65:b9:fe:51:0e:d4:56:ab:34:87:03:
d7:33:62:97:d3:86:4e:5f:83:08:01:33:94:e5:20:52:23:56:
4c:1a:f5:84:4e:98:5a:54:9a:3c:4e:b5:f5:34:06:ac:35:2c:
ca:f7:af:93:93:ed:44:96:1e:8b:35:fc:9c:af:6c:44:f0:41:
f9:4a:84:c8:6a:f4:bd:46:40:f7:68:7f:c0:11:78:0d:ed:f5:
00:4d:6a:d0:f2:35:6a:e6:be:ac:06:3b:d0:39:f0:3f:d9:17:
02:7a:4d:f5:b8:6b:c8:a9:4f:f5:74:55:81:1b:38:dc:97:30:
e4:a0:64:cc:1b:68:ac:ad:a6:d7:95:27:08:9a:52:7f:96:1f:
aa:e6:d0:ff:4f:fc:c9:e1:6b:a9:10:3e:d8:8d:ce:20:ce:13:
86:ab:e7:cb:17:ca:6f:85:a8:7b:b0:af:cc:d2:1a:90:4b:e0:
18:b0:9c:62:e0:2a:b8:81:07:50:5a:c0:0e:1d:fa:0c:26:f7:
d0:5c:35:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcu3L8FrWY6yG9VAi5MiW7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZmEwNTdiYmM0ZDA5YjljNjcxYzQzZmY5NmYzNWMwMGRl
OWZiYmIwHhcNMjYwOTI2MDgwMTA3WhcNMjYwOTI3MDgwMTA3WjAzMTEwLwYDVQQD
EygzZTJmZjgzOGZmODQxMGVlMWFjZGZjOWM1YWY0MTVlNzBiZDRkYTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLMXWMLl+VRVtxubFd2vCgZArcnP
dztYBm+xS8wC+oKk0ZKbKXQ7szaWhEH8ZkloED3o2lMy697ZyNMSldK6o8yxrD9J
TcwhUyG3fOweZJ9gS+T2l/MOTSyZhMgCwfApb7WFyKTkFJRhowa2jvmPvM4zxuUE
kWcKAXUJGKqLUDS0fTY5PTQitekk0QcIIhbwJ75wVGx52CQ3v6EHKYOvgH5QacEa
WY3iant55tFspB9rrLSTgk8OE0DmLXeqqG+aOu58AfOOIelViuYlrMdTpuZ45WBs
jAuzmMGgwKx2ZL0iO1R4kv/rJ+KMTrGab2XKp2lmj4373GTb7lvcH9NF9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4v+Dj/hBDuGs38nFr0FecL1NphMB8GA1UdIwQY
MBaAFB/6BXu8TQm5xnHEP/lvNcAN6fu7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSF9vRmU3eE5DYm5HY2NRXy1XODF3QTNwLTdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi80NWMzMDAtODVlZC00NTQ5LTg1MWEt
ZTYwOTA4ZWI3YzhkLzEvSF9vRmU3eE5DYm5HY2NRXy1XODF3QTNwLTdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi80NWMzMDAtODVlZC00NTQ5LTg1MWEtZTYwOTA4ZWI3Yzhk
LzEvSF9vRmU3eE5DYm5HY2NRXy1XODF3QTNwLTdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfNTILa0M
WaQwnexI+uAtFBmY7o7fiWZKK8nNCOQVEy1d0G21BsXeN+zOOgssDYy2lQSkQHkS
aGV6bOTQC2W5/lEO1FarNIcD1zNil9OGTl+DCAEzlOUgUiNWTBr1hE6YWlSaPE61
9TQGrDUsyvevk5PtRJYeizX8nK9sRPBB+UqEyGr0vUZA92h/wBF4De31AE1q0PI1
aua+rAY70DnwP9kXAnpN9bhryKlP9XRVgRs43Jcw5KBkzBtorK2m15UnCJpSf5Yf
qubQ/0/8yeFrqRA+2I3OIM4ThqvnyxfKb4Woe7CvzNIakEvgGLCcYuAquIEHUFrA
Dh36DCb30Fw1tA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 17:46:41 2026 by rpki-client