Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
File: hdycVeFZfohWTa9WflpGZZeMe4U.mft (raw, json)
Hash identifier: rwaYRuFDJPkTqkcG23bsKEGVd+j/AVj+/2YozFUMhgM=
Subject key identifier: 3A:F6:F1:D8:4B:A6:84:84:56:17:18:E0:6F:0C:0D:CD:AF:3B:CF:FC
Authority key identifier: 85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
Certificate issuer: /CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Certificate serial: 01A0C82171C5C18F8428850C7FC4AB9CBAC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
Manifest number: 14AA
Signing time: Tue 22 Sep 2026 08:00:29 +0000
Manifest this update: Tue 22 Sep 2026 08:00:29 +0000
Manifest next update: Wed 23 Sep 2026 08:00:29 +0000
Files and hashes: 1: 1TVNFB2oqiU4XNjEv0BT-Pb2M0M.roa (hash: 3vvI5UYlWItjTSfQrco2BtzXvJBHGkk/x8CyOBqqD8U=)
2: 41gdFH-JudL678u_D6BB_y7EfU0.roa (hash: VnQDTpZib3x3twc60ulDPL39Qe1IesXf9+CLXJ4WNxw=)
3: Mpj_3kOIb_YBREm4CDGbZoT8R1s.roa (hash: WSgFrdqhjjGW3gBXPEw9RNID+Xo3I/t20meQJF7GgZg=)
4: YQ7UOE0fRKiUXxXL_L3iPhyJx88.roa (hash: 3O80VS4rsgTgEZbTwubyabO64/481tfENVUe6/Id6ow=)
5: a-1eulbURZwYdTXjQHmSQrhkepg.roa (hash: dU6/8b7jh8wXrhRwwYJ+BZWPnCRt/iCI6b/zuZGMbbY=)
6: hdycVeFZfohWTa9WflpGZZeMe4U.crl (hash: ZAjCPmw/piEltP45qa6hJvwcvKinFvHLyRZVmVIxKPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:71:c5:c1:8f:84:28:85:0c:7f:c4:ab:9c:ba:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Validity
Not Before: Sep 22 08:00:29 2026 GMT
Not After : Sep 23 08:00:29 2026 GMT
Subject: CN=3af6f1d84ba68484561718e06f0c0dcdaf3bcffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9b:c8:90:ad:23:76:a0:30:91:9f:0a:35:d7:
31:36:a6:00:d4:0d:0d:22:24:db:c6:e8:5a:41:e1:
9a:d4:ff:ef:5a:50:97:a2:bd:4e:9c:0b:46:c9:91:
5e:2f:3f:3a:f9:e9:8f:0e:f4:6c:57:3d:6c:33:5a:
95:c6:0d:12:cb:49:07:40:c2:b0:b9:4a:ee:16:49:
52:d4:98:4a:40:f8:d8:95:f5:55:7c:29:fc:7d:12:
85:90:5d:88:19:d2:e1:27:9f:c7:1c:37:8b:d8:49:
98:19:8d:bf:04:dd:fd:7c:3a:95:b5:9c:30:18:1e:
04:07:f0:c2:14:e8:4d:bd:07:07:56:1b:8d:db:c6:
48:fa:48:7d:cc:aa:b3:e6:51:ea:99:72:b9:7f:fd:
be:eb:7f:bb:05:d1:cf:42:da:20:a6:84:d4:e1:a5:
73:46:98:ef:66:69:c8:13:85:1d:7e:9a:73:d2:2c:
77:55:46:92:34:17:79:2d:1b:c6:76:78:c7:d2:85:
f2:97:b0:eb:72:4b:28:d3:dc:fa:bd:0c:ae:0f:8d:
45:f3:62:62:dd:58:5e:c4:12:73:68:3c:00:a8:5b:
84:a0:ee:70:43:50:d2:3e:1b:14:24:32:0d:27:91:
1c:1f:e1:e1:68:e9:78:37:78:ed:d8:5c:c4:03:11:
2e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F6:F1:D8:4B:A6:84:84:56:17:18:E0:6F:0C:0D:CD:AF:3B:CF:FC
X509v3 Authority Key Identifier:
keyid:85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:c7:27:9c:de:31:8e:f2:9b:f5:74:86:cc:bf:aa:46:7a:c0:
e6:7a:b1:bd:bc:0e:29:d6:5a:f7:64:27:f2:2e:39:44:68:01:
e7:ff:d2:1b:7c:2a:8a:6f:e2:d0:06:e9:58:d9:79:ee:a6:45:
c8:13:65:03:8b:bc:ed:fc:05:4e:07:6f:d0:17:dc:9e:c1:9d:
2a:60:24:e0:8e:3f:aa:01:f2:a9:4f:57:e6:34:19:45:b1:87:
b1:98:0e:ca:af:79:d1:be:b5:ce:29:09:d2:4a:33:45:76:f4:
ba:77:7c:96:e3:14:e8:e8:53:15:fb:53:20:75:6d:81:70:32:
ff:5e:85:43:39:77:73:ae:b2:a8:47:19:97:b9:7a:d2:4d:c5:
6f:05:9e:11:9d:e1:15:64:6c:a7:67:d4:e1:7a:17:11:c5:5a:
2e:27:11:ce:63:ab:43:c6:28:ca:46:7d:ad:c0:4f:5b:99:75:
52:9f:ba:8b:90:91:35:e5:e6:5a:77:b5:0f:44:87:9a:f0:63:
bb:b8:83:a4:57:c8:4f:34:b8:a7:0d:9e:9c:25:ae:0b:3d:93:
df:01:56:32:a5:7c:ef:7d:ec:ec:89:f5:f5:37:0c:6e:a3:c2:
7d:cc:97:5d:04:d8:8d:3c:c6:f4:a0:26:d8:b5:11:f4:d5:ab:
a6:e9:4e:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIIXHFwY+EKIUMf8SrnLrJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZGM5YzU1ZTE1OTdlODg1NjRkYWY1NjdlNWE0NjY1OTc4
YzdiODUwHhcNMjYwOTIyMDgwMDI5WhcNMjYwOTIzMDgwMDI5WjAzMTEwLwYDVQQD
EygzYWY2ZjFkODRiYTY4NDg0NTYxNzE4ZTA2ZjBjMGRjZGFmM2JjZmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZvIkK0jdqAwkZ8KNdcxNqYA1A0N
IiTbxuhaQeGa1P/vWlCXor1OnAtGyZFeLz86+emPDvRsVz1sM1qVxg0Sy0kHQMKw
uUruFklS1JhKQPjYlfVVfCn8fRKFkF2IGdLhJ5/HHDeL2EmYGY2/BN39fDqVtZww
GB4EB/DCFOhNvQcHVhuN28ZI+kh9zKqz5lHqmXK5f/2+63+7BdHPQtogpoTU4aVz
RpjvZmnIE4Udfppz0ix3VUaSNBd5LRvGdnjH0oXyl7Drckso09z6vQyuD41F82Ji
3VhexBJzaDwAqFuEoO5wQ1DSPhsUJDINJ5EcH+HhaOl4N3jt2FzEAxEu1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDr28dhLpoSEVhcY4G8MDc2vO8/8MB8GA1UdIwQY
MBaAFIXcnFXhWX6IVk2vVn5aRmWXjHuFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGR5Y1ZlRlpmb2hXVGE5V2ZscEdaWmVNZTRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mMDdmYmMtNGMzMi00ZDg3LWE0Mjkt
ODZlYTE5ZDI5MTYzLzEvaGR5Y1ZlRlpmb2hXVGE5V2ZscEdaWmVNZTRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9mMDdmYmMtNGMzMi00ZDg3LWE0MjktODZlYTE5ZDI5MTYz
LzEvaGR5Y1ZlRlpmb2hXVGE5V2ZscEdaWmVNZTRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyMcnnN4x
jvKb9XSGzL+qRnrA5nqxvbwOKdZa92Qn8i45RGgB5//SG3wqim/i0AbpWNl57qZF
yBNlA4u87fwFTgdv0BfcnsGdKmAk4I4/qgHyqU9X5jQZRbGHsZgOyq950b61zikJ
0kozRXb0und8luMU6OhTFftTIHVtgXAy/16FQzl3c66yqEcZl7l60k3FbwWeEZ3h
FWRsp2fU4XoXEcVaLicRzmOrQ8YoykZ9rcBPW5l1Up+6i5CRNeXmWne1D0SHmvBj
u7iDpFfITzS4pw2enCWuCz2T3wFWMqV8733s7In19TcMbqPCfcyXXQTYjTzG9KAm
2LUR9NWrpulOKw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:34:57 2026 by rpki-client