Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
File: hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft (raw, json)
Hash identifier: 18d9BMDG/YlHUS1Yh0eipe4TizNsHiTrYKZVuoFuk+A=
Subject key identifier: 3D:0F:40:FD:36:7F:F7:1B:90:8B:CB:A0:D5:9A:D9:F7:F0:5F:71:C9
Authority key identifier: 86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
Certificate issuer: /CN=86623a8458eff347d424348588829ee137b45a3f
Certificate serial: 01A0C6D88A825E6179FC9E60920A01295296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
Manifest number: 0BBA
Signing time: Tue 22 Sep 2026 02:01:14 +0000
Manifest this update: Tue 22 Sep 2026 02:01:14 +0000
Manifest next update: Wed 23 Sep 2026 02:01:14 +0000
Files and hashes: 1: hCqBnwi3tLGPnGEkwFbaiiOi1Tw.roa (hash: ipklKvl4vE4704mx0vkFCsJ5FNBwNV4h3Vvuy2DJyMQ=)
2: hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl (hash: BLL5bAVgbbZprdUwqZGvJ+WN8tUSb+B+zCiCm6YB3eU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:8a:82:5e:61:79:fc:9e:60:92:0a:01:29:52:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86623a8458eff347d424348588829ee137b45a3f
Validity
Not Before: Sep 22 02:01:14 2026 GMT
Not After : Sep 23 02:01:14 2026 GMT
Subject: CN=3d0f40fd367ff71b908bcba0d59ad9f7f05f71c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bd:a1:36:1a:22:49:97:43:53:2a:f6:06:cc:
26:fc:0c:80:78:09:7c:9b:41:8c:6c:2b:44:26:27:
bc:98:cc:ea:e8:ec:8c:27:11:82:36:04:f6:6b:d9:
de:3c:40:ed:fb:f9:19:92:3e:75:25:ad:e8:58:07:
37:3b:31:ac:1f:a6:93:5e:0f:31:55:45:66:c9:6a:
f9:2c:d6:18:58:0f:5b:3b:a8:07:6b:d1:5f:d8:82:
80:6d:46:63:10:bc:01:8c:5e:f9:04:9e:5d:76:2f:
e4:a8:fb:14:ff:70:fb:52:fa:de:d5:5a:33:f4:ce:
91:90:5e:9b:2a:61:53:ad:de:7c:9d:cb:fc:04:d5:
46:29:97:60:eb:da:b4:12:ee:2b:17:8f:a3:15:c0:
05:ff:c8:55:96:6a:9f:c7:dc:66:49:b4:8e:40:1c:
f6:0c:3e:06:42:7f:04:41:e9:2a:8d:99:4e:1d:f1:
60:4f:da:34:de:14:8d:d7:7c:9a:d8:62:1a:94:8e:
4b:ce:81:e7:de:1f:4e:c3:96:13:36:cb:23:c0:af:
fe:97:b2:b4:0f:26:dc:02:73:8c:2e:c8:5d:a8:2d:
74:3a:3e:ec:aa:ee:aa:bc:66:4f:e6:f6:21:28:51:
2a:4a:12:b5:28:e6:e0:4c:26:a5:21:46:ed:a4:3d:
b8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0F:40:FD:36:7F:F7:1B:90:8B:CB:A0:D5:9A:D9:F7:F0:5F:71:C9
X509v3 Authority Key Identifier:
keyid:86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9f:5b:e7:46:b5:8d:46:57:90:98:c9:35:89:e5:03:af:00:
b4:93:82:a2:bc:5c:1a:27:56:f4:3f:7a:44:85:35:2e:13:e5:
ff:e4:61:f5:8b:70:46:a9:25:8a:6a:51:25:1a:fd:f1:b0:83:
cf:0f:5d:45:b8:4f:30:8a:64:a7:f7:10:a2:c1:62:ab:a5:54:
64:69:0a:be:ab:2c:52:ef:ea:7a:15:03:39:9c:a3:44:69:f7:
9b:ce:c5:73:9d:49:fa:cb:13:e6:d3:70:84:34:17:88:98:a4:
27:64:f1:0a:fb:26:61:e2:9a:ac:b0:da:a5:db:c7:d1:5a:62:
7b:32:8e:ff:e7:45:54:4e:2e:35:25:08:cc:29:2f:73:ed:67:
df:48:1d:38:40:54:31:7d:3d:d4:0f:0f:44:48:d9:ee:41:e9:
56:bf:0a:2a:8d:0b:fc:28:1d:02:2c:a3:e5:5b:e0:47:c4:34:
bd:de:69:8f:92:77:f6:1d:1a:a7:be:cf:a5:9e:51:01:4c:44:
75:65:be:97:ce:f3:ff:ee:2e:f6:f9:f2:c1:c1:96:e5:35:9d:
b7:31:11:e8:ab:ea:47:ef:82:a1:1a:34:20:08:6f:65:78:53:
74:40:03:ac:e3:5a:97:8e:e9:b8:64:b0:e5:b2:22:37:c6:77:
60:2b:a0:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDG2IqCXmF5/J5gkgoBKVKWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NjIzYTg0NThlZmYzNDdkNDI0MzQ4NTg4ODI5ZWUxMzdi
NDVhM2YwHhcNMjYwOTIyMDIwMTE0WhcNMjYwOTIzMDIwMTE0WjAzMTEwLwYDVQQD
EygzZDBmNDBmZDM2N2ZmNzFiOTA4YmNiYTBkNTlhZDlmN2YwNWY3MWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr2hNhoiSZdDUyr2Bswm/AyAeAl8
m0GMbCtEJie8mMzq6OyMJxGCNgT2a9nePEDt+/kZkj51Ja3oWAc3OzGsH6aTXg8x
VUVmyWr5LNYYWA9bO6gHa9Ff2IKAbUZjELwBjF75BJ5ddi/kqPsU/3D7Uvre1Voz
9M6RkF6bKmFTrd58ncv8BNVGKZdg69q0Eu4rF4+jFcAF/8hVlmqfx9xmSbSOQBz2
DD4GQn8EQekqjZlOHfFgT9o03hSN13ya2GIalI5LzoHn3h9Ow5YTNssjwK/+l7K0
DybcAnOMLshdqC10Oj7squ6qvGZP5vYhKFEqShK1KObgTCalIUbtpD24DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0PQP02f/cbkIvLoNWa2ffwX3HJMB8GA1UdIwQY
MBaAFIZiOoRY7/NH1CQ0hYiCnuE3tFo/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG1JNmhGanY4MGZVSkRTRmlJS2U0VGUwV2o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8zOWRiNGQtZTkzZi00MTM5LWFhZDgt
NmMyOGJiNDBkNTJlLzEvaG1JNmhGanY4MGZVSkRTRmlJS2U0VGUwV2o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8zOWRiNGQtZTkzZi00MTM5LWFhZDgtNmMyOGJiNDBkNTJl
LzEvaG1JNmhGanY4MGZVSkRTRmlJS2U0VGUwV2o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUp9b50a1
jUZXkJjJNYnlA68AtJOCorxcGidW9D96RIU1LhPl/+Rh9YtwRqklimpRJRr98bCD
zw9dRbhPMIpkp/cQosFiq6VUZGkKvqssUu/qehUDOZyjRGn3m87Fc51J+ssT5tNw
hDQXiJikJ2TxCvsmYeKarLDapdvH0VpiezKO/+dFVE4uNSUIzCkvc+1n30gdOEBU
MX091A8PREjZ7kHpVr8KKo0L/CgdAiyj5VvgR8Q0vd5pj5J39h0ap77PpZ5RAUxE
dWW+l87z/+4u9vnywcGW5TWdtzER6KvqR++CoRo0IAhvZXhTdEADrONal47puGSw
5bIiN8Z3YCugWQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 05:05:18 2026 by rpki-client