Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
File: H9CHXNAFHQwJJaygQQNOeECmdws.mft (raw, json)
Hash identifier: 9IFU2qpqli7VWvCEJtorF2EDN80OgAXI0x7u6BFPf7A=
Subject key identifier: EA:2A:11:4D:FC:BB:B4:3C:8D:C5:03:45:F1:87:81:F2:0A:08:8E:61
Authority key identifier: 1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
Certificate issuer: /CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Certificate serial: 01A0CA0FA7854826753F76E21203E6414E77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
Manifest number: 0A3B
Signing time: Tue 22 Sep 2026 17:00:18 +0000
Manifest this update: Tue 22 Sep 2026 17:00:18 +0000
Manifest next update: Wed 23 Sep 2026 17:00:18 +0000
Files and hashes: 1: Dz46KAYraGcTikQMGoMJVAAInHQ.roa (hash: NU2HWGZh7sQrY1k6J9xhsLm4R4NqLLcBXrqTHwrCQfs=)
2: FC-j2DCq34hCFuPalVqFP_Va_c4.roa (hash: jfYCQqEdA0WNXwP1ahEI1VJ/4GR5skI19EQziW64bRA=)
3: H9CHXNAFHQwJJaygQQNOeECmdws.crl (hash: KUYqz/xYxCfTJWRF9qFxa61miJD6jnT7V01U8tR4cJs=)
4: RzzdhI5WQTfIRJ5CT4m2Ue9mGN4.roa (hash: xrR61qMY4oBctclJGvQvpdXymPubQyCDbVzByy1zses=)
5: atjpUn5m_olYo4VMnv5o9bZkp10.roa (hash: zhJgLfRaNhUfkrFUtufurP1akqxnjTREPo55ccYjvXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:0f:a7:85:48:26:75:3f:76:e2:12:03:e6:41:4e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Validity
Not Before: Sep 22 17:00:18 2026 GMT
Not After : Sep 23 17:00:18 2026 GMT
Subject: CN=ea2a114dfcbbb43c8dc50345f18781f20a088e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:63:4a:c9:07:ee:4b:da:19:a6:44:a8:d1:6e:
16:75:ec:49:c6:20:02:e7:11:09:76:3c:68:85:ef:
60:e8:5c:7d:cc:cd:b2:a3:00:57:98:e6:22:a3:46:
63:68:cd:f9:cf:22:5a:53:65:50:7e:3f:0f:2a:68:
fd:38:0d:98:9b:45:48:14:f6:8a:b2:e0:13:56:35:
c0:66:19:1c:4d:a3:45:4d:df:e3:79:14:9e:3d:f5:
d9:56:a7:49:85:e6:cc:f0:dc:e7:d0:37:dd:35:a2:
26:bb:ab:d0:75:ee:f9:90:6a:f3:18:c6:2a:0e:19:
7e:93:34:4d:14:dc:7c:ba:39:7e:55:2d:35:b1:2a:
6b:e1:74:5e:72:f0:3d:47:05:ae:ed:34:85:4f:c5:
ab:18:54:39:7a:ca:37:de:6c:f5:98:97:2d:74:3c:
7f:0b:d5:84:f3:e7:64:e6:a5:c8:ae:10:86:c8:ea:
79:41:b7:bc:a3:88:40:a9:a0:05:9d:23:a5:8c:3c:
54:14:49:70:ab:fb:67:78:99:a0:58:09:16:fe:4e:
30:d0:d8:24:ea:b2:68:13:b8:49:4c:ca:7c:3f:9c:
09:b4:77:b8:0f:0a:29:ec:6a:93:43:10:f3:70:3e:
d5:c8:92:05:7f:cc:77:c8:d5:44:d5:ef:17:5d:2f:
70:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2A:11:4D:FC:BB:B4:3C:8D:C5:03:45:F1:87:81:F2:0A:08:8E:61
X509v3 Authority Key Identifier:
keyid:1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f2:f0:66:66:7c:21:fb:87:9b:4c:bc:13:b7:a9:6a:ad:f2:
bb:f3:cb:4c:5f:40:a7:08:3f:bb:af:65:00:67:50:ae:56:19:
a2:ea:1a:88:88:af:90:f6:62:79:af:3e:90:c8:70:44:d0:ee:
92:f2:fb:d7:be:2b:92:b1:43:75:35:79:35:64:cb:7d:43:b2:
7a:e5:04:51:c9:1b:eb:dc:70:97:85:f0:c1:13:c9:3e:13:57:
14:ee:b6:a2:06:0a:10:90:56:c1:b2:44:2e:ca:ef:15:f4:9f:
36:85:29:1d:d0:f0:91:3c:d8:61:a3:8d:b5:c2:70:25:9e:90:
34:0b:bf:af:82:43:9a:02:f4:16:6a:86:72:02:a7:ef:ae:b7:
a7:9f:5e:32:d9:85:b6:2c:a7:82:f4:c9:54:92:17:fa:a9:b7:
d9:fc:a2:00:15:54:ff:22:99:9b:de:88:9f:29:5f:46:4e:aa:
5f:38:38:de:b5:a6:d3:2a:9d:4c:98:63:70:34:e2:d1:9d:ec:
9c:33:4e:5c:8d:75:0a:9f:d9:22:00:04:92:c9:77:5a:3a:ef:
30:6c:1e:5a:da:a6:67:b2:73:5d:b8:1c:12:32:28:27:77:be:
da:e0:dd:ab:f0:42:68:5c:8f:ea:7d:43:7e:a3:ec:1b:24:4c:
db:ec:ea:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKD6eFSCZ1P3biEgPmQU53MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZDA4NzVjZDAwNTFkMGMwOTI1YWNhMDQxMDM0ZTc4NDBh
Njc3MGIwHhcNMjYwOTIyMTcwMDE4WhcNMjYwOTIzMTcwMDE4WjAzMTEwLwYDVQQD
EyhlYTJhMTE0ZGZjYmJiNDNjOGRjNTAzNDVmMTg3ODFmMjBhMDg4ZTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWNKyQfuS9oZpkSo0W4WdexJxiAC
5xEJdjxohe9g6Fx9zM2yowBXmOYio0ZjaM35zyJaU2VQfj8PKmj9OA2Ym0VIFPaK
suATVjXAZhkcTaNFTd/jeRSePfXZVqdJhebM8Nzn0DfdNaImu6vQde75kGrzGMYq
Dhl+kzRNFNx8ujl+VS01sSpr4XRecvA9RwWu7TSFT8WrGFQ5eso33mz1mJctdDx/
C9WE8+dk5qXIrhCGyOp5Qbe8o4hAqaAFnSOljDxUFElwq/tneJmgWAkW/k4w0Ngk
6rJoE7hJTMp8P5wJtHe4Dwop7GqTQxDzcD7VyJIFf8x3yNVE1e8XXS9wwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOoqEU38u7Q8jcUDRfGHgfIKCI5hMB8GA1UdIwQY
MBaAFB/Qh1zQBR0MCSWsoEEDTnhApncLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDlDSFhOQUZIUXdKSmF5Z1FRTk9lRUNtZHdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yMjEwNDgtM2JhZC00NjljLWI5MzMt
ZTA4MDJmNDc0NDQ0LzEvSDlDSFhOQUZIUXdKSmF5Z1FRTk9lRUNtZHdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8yMjEwNDgtM2JhZC00NjljLWI5MzMtZTA4MDJmNDc0NDQ0
LzEvSDlDSFhOQUZIUXdKSmF5Z1FRTk9lRUNtZHdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfLwZmZ8
IfuHm0y8E7epaq3yu/PLTF9Apwg/u69lAGdQrlYZouoaiIivkPZiea8+kMhwRNDu
kvL7174rkrFDdTV5NWTLfUOyeuUEUckb69xwl4XwwRPJPhNXFO62ogYKEJBWwbJE
LsrvFfSfNoUpHdDwkTzYYaONtcJwJZ6QNAu/r4JDmgL0FmqGcgKn7663p59eMtmF
tiyngvTJVJIX+qm32fyiABVU/yKZm96InylfRk6qXzg43rWm0yqdTJhjcDTi0Z3s
nDNOXI11Cp/ZIgAEksl3WjrvMGweWtqmZ7JzXbgcEjIoJ3e+2uDdq/BCaFyP6n1D
fqPsGyRM2+zq+w==
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:30:34 2026 by rpki-client