Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
File: hF3ocysQFxOPhwMrcPo7e4d273E.mft (raw, json)
Hash identifier: 39Nt7e5Wn4Vu1jmZniU1DdgOLlU8UOmf73yL6GDG+Ng=
Subject key identifier: 7E:98:56:1B:21:CD:D0:7B:CB:9F:CE:9A:BF:90:F7:A8:B4:F0:E0:AE
Authority key identifier: 84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
Certificate issuer: /CN=845de8732b1017138f87032b70fa3b7b8776ef71
Certificate serial: 01A0C520CA9F85C60AD7E554646EE99C4AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
Manifest number: 076D
Signing time: Mon 21 Sep 2026 18:00:55 +0000
Manifest this update: Mon 21 Sep 2026 18:00:55 +0000
Manifest next update: Tue 22 Sep 2026 18:00:55 +0000
Files and hashes: 1: EXFjqp1pXGSV5jmx4tb-VicHFJo.roa (hash: SAiHY7qAn6jJFUL6Y4lo8wfyaergjigidCjHrKuL8KM=)
2: TcfDrpaktt6ck5dfzSZX1rUU-3o.roa (hash: IMmbj46lmVM3D8aBLL2Qo1JPLTBEevvdt670OHWqbPA=)
3: hF3ocysQFxOPhwMrcPo7e4d273E.crl (hash: jKIFi05V/JMFRIYFvyKWVOk9NSPGrx+ElJOzzKXLhT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:20:ca:9f:85:c6:0a:d7:e5:54:64:6e:e9:9c:4a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845de8732b1017138f87032b70fa3b7b8776ef71
Validity
Not Before: Sep 21 18:00:55 2026 GMT
Not After : Sep 22 18:00:55 2026 GMT
Subject: CN=7e98561b21cdd07bcb9fce9abf90f7a8b4f0e0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:43:ae:82:09:26:58:c1:0d:b0:a5:6e:c1:20:
da:d2:f7:14:a6:4a:5a:60:13:e5:d6:f5:f4:da:74:
82:07:45:9e:0f:53:8a:23:70:9e:71:35:95:dc:79:
23:47:0f:94:6c:93:46:98:e9:5c:be:6f:9a:6e:71:
80:66:23:3f:c3:09:27:ac:cf:39:4b:57:11:0b:39:
6c:f4:e1:ee:98:d1:44:98:fe:eb:fe:19:10:a4:0a:
75:de:a0:cf:ad:2b:32:27:9b:7a:35:0a:81:40:fd:
3e:f3:b0:c2:da:72:5b:35:2a:f0:a5:d0:6d:1c:24:
a1:ef:67:14:94:c7:89:1a:26:29:80:fc:f9:18:2d:
a8:50:46:c9:a0:8e:35:2d:07:f1:0f:09:4f:99:bb:
10:ba:75:a8:fe:59:eb:0c:fd:a8:8d:17:c3:4a:41:
08:10:07:d7:31:56:6c:1b:3c:68:79:74:82:b9:b1:
a7:14:41:a6:11:5b:93:07:12:dd:6f:12:b9:6a:55:
60:7c:af:01:c6:91:da:87:28:74:94:75:1f:b7:97:
7d:a4:5c:e1:b6:05:59:ec:3e:bf:1d:08:02:70:bc:
4c:a1:b4:1f:f5:cf:32:df:fa:f8:c6:0c:b5:2a:1b:
30:53:0c:60:8b:6c:3f:bc:c6:85:96:cc:17:30:09:
6a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:98:56:1B:21:CD:D0:7B:CB:9F:CE:9A:BF:90:F7:A8:B4:F0:E0:AE
X509v3 Authority Key Identifier:
keyid:84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c0:8f:ee:82:5c:88:47:aa:78:78:7d:0a:bb:f9:15:66:50:
d0:46:3f:c2:ec:fe:5c:c3:d4:b4:5a:8c:76:b1:53:d8:db:8c:
2a:ab:71:f5:88:4f:09:16:88:4d:73:c0:4a:9a:ed:7f:dc:67:
20:9e:e9:27:4c:ef:f9:7e:70:02:44:2e:3f:19:bb:7d:d9:86:
ca:ad:c4:99:c5:12:58:b0:05:e7:00:21:09:fa:59:f6:c8:3b:
32:08:b3:d6:e8:5b:79:ec:54:75:49:c9:c5:b5:18:3b:6d:78:
c8:d9:9d:ec:fc:b1:cc:28:84:f2:a9:a0:56:9b:f0:3e:53:6a:
e2:5c:fa:a6:8c:c5:f1:f3:65:19:e8:ec:9d:b8:36:f7:ad:8d:
2c:43:c2:cc:0a:88:62:0d:68:ba:13:36:62:e4:aa:d6:cc:ca:
6d:99:72:f9:ec:9a:ae:e2:fc:38:00:e6:f4:5c:9e:a9:02:d9:
6f:7c:2c:5e:d2:e7:b5:3f:c7:3f:ad:d4:ca:04:72:b6:7d:ee:
bf:d2:4a:7e:f9:92:ea:cd:da:57:9a:44:be:e8:83:56:2e:0d:
fd:14:3e:28:e4:25:39:0b:11:fa:88:91:62:00:02:95:b3:23:
08:78:29:a6:41:1f:95:4c:6a:cf:19:5c:89:17:6e:df:02:d2:
83:c8:e6:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFIMqfhcYK1+VUZG7pnEqsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NWRlODczMmIxMDE3MTM4Zjg3MDMyYjcwZmEzYjdiODc3
NmVmNzEwHhcNMjYwOTIxMTgwMDU1WhcNMjYwOTIyMTgwMDU1WjAzMTEwLwYDVQQD
Eyg3ZTk4NTYxYjIxY2RkMDdiY2I5ZmNlOWFiZjkwZjdhOGI0ZjBlMGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEOuggkmWMENsKVuwSDa0vcUpkpa
YBPl1vX02nSCB0WeD1OKI3CecTWV3HkjRw+UbJNGmOlcvm+abnGAZiM/wwknrM85
S1cRCzls9OHumNFEmP7r/hkQpAp13qDPrSsyJ5t6NQqBQP0+87DC2nJbNSrwpdBt
HCSh72cUlMeJGiYpgPz5GC2oUEbJoI41LQfxDwlPmbsQunWo/lnrDP2ojRfDSkEI
EAfXMVZsGzxoeXSCubGnFEGmEVuTBxLdbxK5alVgfK8BxpHahyh0lHUft5d9pFzh
tgVZ7D6/HQgCcLxMobQf9c8y3/r4xgy1KhswUwxgi2w/vMaFlswXMAlqnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6YVhshzdB7y5/Omr+Q96i08OCuMB8GA1UdIwQY
MBaAFIRd6HMrEBcTj4cDK3D6O3uHdu9xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEYzb2N5c1FGeE9QaHdNcmNQbzdlNGQyNzNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85YWZiMzMtZTBhYS00OTNiLWE0NmQt
YTg4NWZiNDBkOTBkLzEvaEYzb2N5c1FGeE9QaHdNcmNQbzdlNGQyNzNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85YWZiMzMtZTBhYS00OTNiLWE0NmQtYTg4NWZiNDBkOTBk
LzEvaEYzb2N5c1FGeE9QaHdNcmNQbzdlNGQyNzNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8CP7oJc
iEeqeHh9Crv5FWZQ0EY/wuz+XMPUtFqMdrFT2NuMKqtx9YhPCRaITXPASprtf9xn
IJ7pJ0zv+X5wAkQuPxm7fdmGyq3EmcUSWLAF5wAhCfpZ9sg7Mgiz1uhbeexUdUnJ
xbUYO214yNmd7PyxzCiE8qmgVpvwPlNq4lz6pozF8fNlGejsnbg2962NLEPCzAqI
Yg1ouhM2YuSq1szKbZly+eyaruL8OADm9FyeqQLZb3wsXtLntT/HP63UygRytn3u
v9JKfvmS6s3aV5pEvuiDVi4N/RQ+KOQlOQsR+oiRYgAClbMjCHgppkEflUxqzxlc
iRdu3wLSg8jm+w==
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:57:20 2026 by rpki-client