Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.mft
File: hB6IIdAaloi57nryrruVnLvtBys.mft (raw, json)
Hash identifier: m1AljT9S3z0RzzBJPXxm5bTB/QFLM2kOOSuszIhuHTk=
Subject key identifier: 69:1C:A6:FB:AD:1E:31:B7:DD:8A:30:4C:68:F3:51:14:17:DE:D6:69
Authority key identifier: 84:1E:88:21:D0:1A:96:88:B9:EE:7A:F2:AE:BB:95:9C:BB:ED:07:2B
Certificate issuer: /CN=841e8821d01a9688b9ee7af2aebb959cbbed072b
Certificate serial: 01A128436A2FDA39B2FDD5F16540A80C1E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hB6IIdAaloi57nryrruVnLvtBys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.mft
Manifest number: 02D0
Signing time: Sun 11 Oct 2026 00:01:09 +0000
Manifest this update: Sun 11 Oct 2026 00:01:09 +0000
Manifest next update: Mon 12 Oct 2026 00:01:09 +0000
Files and hashes: 1: OBBBpbRLtAoopWvDF4V0_36vRjc.roa (hash: rORQCAXSnhZhLeVmf7l/rxG4Y1xlgxBiqBOAQvHavUw=)
2: hB6IIdAaloi57nryrruVnLvtBys.crl (hash: 9e/WK38hOl0ZlZYnXcb8Xme69xqQBIIkG6Rb7YXVMbQ=)
3: n-u3pAbtCpun8Sd3e8bI1PdPQbA.asa (hash: UfFTiG8cIxuK4yk1unwjFoEQCnOqxLEmjULdwQNY6gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.mft
rsync://rpki.ripe.net/repository/DEFAULT/hB6IIdAaloi57nryrruVnLvtBys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:43:6a:2f:da:39:b2:fd:d5:f1:65:40:a8:0c:1e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=841e8821d01a9688b9ee7af2aebb959cbbed072b
Validity
Not Before: Oct 11 00:01:09 2026 GMT
Not After : Oct 12 00:01:09 2026 GMT
Subject: CN=691ca6fbad1e31b7dd8a304c68f3511417ded669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:81:ff:93:84:e3:2d:b3:8c:5f:a8:08:bf:7e:
48:71:24:1e:7a:7c:2f:08:3e:3d:5c:62:bd:4d:fe:
2e:e9:2a:63:2d:9a:01:7b:ed:51:97:e3:30:e0:08:
2e:c2:54:7c:fa:98:9d:60:52:6a:f7:45:d5:9b:e2:
91:32:8c:6f:27:12:c8:77:92:90:da:a6:f9:38:df:
d5:fc:e1:ff:1b:a4:9b:78:ad:c3:93:9f:51:53:8a:
28:16:7b:80:44:49:1d:21:a8:51:97:82:8a:27:a0:
39:e0:bc:2a:46:ea:3a:d6:5a:7f:b0:78:31:62:fd:
cc:0b:0e:01:9e:13:fc:b7:b2:44:7d:1a:26:6a:2e:
85:fe:6b:1c:3d:35:f5:6e:4c:58:77:74:bf:00:3e:
41:e0:41:81:62:25:9a:58:9a:e3:53:5f:3e:5f:ff:
50:86:80:68:e3:e6:a6:dc:37:69:b3:2d:f3:6f:e5:
b3:a3:f8:0f:37:fe:a2:87:d0:7b:52:97:25:e1:3b:
1b:01:75:54:9e:76:1e:d5:37:46:64:a2:ea:9d:2a:
86:8c:20:b8:7f:20:cf:9c:df:91:bd:59:95:ce:e7:
0b:e0:14:7c:d2:45:b3:8e:06:08:99:11:60:f0:d2:
67:6c:be:33:08:b4:06:49:fe:d7:4b:83:1f:a3:ba:
d4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1C:A6:FB:AD:1E:31:B7:DD:8A:30:4C:68:F3:51:14:17:DE:D6:69
X509v3 Authority Key Identifier:
keyid:84:1E:88:21:D0:1A:96:88:B9:EE:7A:F2:AE:BB:95:9C:BB:ED:07:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hB6IIdAaloi57nryrruVnLvtBys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:b6:aa:c6:94:72:29:14:aa:d9:0a:c0:9f:5e:ba:9b:4d:90:
ff:b5:0f:ea:c5:82:b0:37:eb:64:bc:77:04:93:7b:e9:09:a2:
66:0a:11:bd:02:15:bb:f7:cc:40:9f:c7:6e:59:c9:53:53:69:
0b:04:84:18:b1:e9:7f:a5:7e:45:b9:84:65:06:34:55:15:54:
2d:4d:e2:37:3b:23:72:29:8d:c9:29:79:dc:16:88:a1:76:dc:
80:4a:d1:cf:04:47:f8:4d:96:e1:d5:5e:a8:db:94:9a:fb:71:
89:01:51:de:ba:f2:66:d1:ff:3d:42:13:f1:79:51:9a:ae:84:
f4:13:9d:d6:03:04:00:4b:f8:8d:10:74:e5:c1:df:be:c3:02:
0f:5b:ac:0b:93:2b:7b:4b:9d:8a:6e:53:0a:cb:24:8c:d8:ca:
55:ce:56:3e:20:0a:45:fa:20:13:8d:9f:99:99:49:66:c0:b3:
89:28:27:ba:5b:96:0d:40:90:57:f5:62:30:78:0f:a3:7d:19:
92:64:80:7d:4a:70:a6:b5:4f:e9:cd:97:dd:73:2f:f7:c4:92:
b1:49:24:3f:cb:88:f9:8b:f6:95:41:1c:53:40:69:7e:96:d0:
24:4c:d6:91:c2:f6:4b:a5:91:ae:e4:e1:fb:5b:c4:7c:f3:4f:
bf:3f:4d:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEoQ2ov2jmy/dXxZUCoDB5sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MWU4ODIxZDAxYTk2ODhiOWVlN2FmMmFlYmI5NTljYmJl
ZDA3MmIwHhcNMjYxMDExMDAwMTA5WhcNMjYxMDEyMDAwMTA5WjAzMTEwLwYDVQQD
Eyg2OTFjYTZmYmFkMWUzMWI3ZGQ4YTMwNGM2OGYzNTExNDE3ZGVkNjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4H/k4TjLbOMX6gIv35IcSQeenwv
CD49XGK9Tf4u6SpjLZoBe+1Rl+Mw4AguwlR8+pidYFJq90XVm+KRMoxvJxLId5KQ
2qb5ON/V/OH/G6SbeK3Dk59RU4ooFnuAREkdIahRl4KKJ6A54LwqRuo61lp/sHgx
Yv3MCw4BnhP8t7JEfRomai6F/mscPTX1bkxYd3S/AD5B4EGBYiWaWJrjU18+X/9Q
hoBo4+am3Ddpsy3zb+Wzo/gPN/6ih9B7Upcl4TsbAXVUnnYe1TdGZKLqnSqGjCC4
fyDPnN+RvVmVzucL4BR80kWzjgYImRFg8NJnbL4zCLQGSf7XS4Mfo7rUAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkcpvutHjG33YowTGjzURQX3tZpMB8GA1UdIwQY
MBaAFIQeiCHQGpaIue568q67lZy77QcrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEI2SUlkQWFsb2k1N25yeXJydVZuTHZ0QnlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9iMDY3ZGItOWFiMS00YjEzLTliNzAt
YTEzMjM3NjEzNDU5LzEvaEI2SUlkQWFsb2k1N25yeXJydVZuTHZ0QnlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9iMDY3ZGItOWFiMS00YjEzLTliNzAtYTEzMjM3NjEzNDU5
LzEvaEI2SUlkQWFsb2k1N25yeXJydVZuTHZ0QnlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv7aqxpRy
KRSq2QrAn166m02Q/7UP6sWCsDfrZLx3BJN76QmiZgoRvQIVu/fMQJ/HblnJU1Np
CwSEGLHpf6V+RbmEZQY0VRVULU3iNzsjcimNySl53BaIoXbcgErRzwRH+E2W4dVe
qNuUmvtxiQFR3rryZtH/PUIT8XlRmq6E9BOd1gMEAEv4jRB05cHfvsMCD1usC5Mr
e0udim5TCsskjNjKVc5WPiAKRfogE42fmZlJZsCziSgnuluWDUCQV/ViMHgPo30Z
kmSAfUpwprVP6c2X3XMv98SSsUkkP8uI+Yv2lUEcU0BpfpbQJEzWkcL2S6WRruTh
+1vEfPNPvz9NgA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 10:36:36 2026 by rpki-client