Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
File: HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft (raw, json)
Hash identifier: G067ivVDYNvVo2xN69+/BqEwPSKAg93C7509mU97E+A=
Subject key identifier: 14:E0:0D:C2:CA:5D:62:87:82:3B:1E:2A:5B:87:15:D4:73:50:C6:7F
Authority key identifier: 1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
Certificate issuer: /CN=1c766b058c096753a34ad625d53275cd2dba5b33
Certificate serial: 019CAB33F990AE7C89199A53AEA91DA10163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
Manifest number: 158B
Signing time: Sun 01 Mar 2026 21:00:36 +0000
Manifest this update: Sun 01 Mar 2026 21:00:36 +0000
Manifest next update: Mon 02 Mar 2026 21:00:36 +0000
Files and hashes: 1: GNlEKqFh-Tv2hz0SznfgxA4czj8.roa (hash: 43aHiWheagiqIIyy3ZQAw5+wp/fUUv/1/kOcWYJ6M+c=)
2: HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl (hash: 41goHR5Mp3AFSNTu8XOjPIuVqKben5NVBmFYQXxPrXQ=)
3: lJxYVzr-KS-fYsC57OKvflP8A4c.roa (hash: 4pvbPMsGzdgVlC585Dyoz1kyokZkz2DdP27jl7Yydb4=)
4: r-1SzrZjoEXcWaVFk74aF23TjJ0.roa (hash: sRjFv0mWTbb1HZj7c7GM888be2VPScRA9imdmTy3Guc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:f9:90:ae:7c:89:19:9a:53:ae:a9:1d:a1:01:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c766b058c096753a34ad625d53275cd2dba5b33
Validity
Not Before: Mar 1 21:00:36 2026 GMT
Not After : Mar 2 21:00:36 2026 GMT
Subject: CN=14e00dc2ca5d6287823b1e2a5b8715d47350c67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:5a:4a:f2:fa:f5:24:97:14:a9:6d:3f:a9:
32:8c:be:67:56:b7:7b:ce:77:c5:8e:53:34:af:1f:
de:e5:8c:56:01:84:13:14:fa:b2:a5:4e:c5:88:1f:
c5:c8:2e:2d:ac:80:bf:05:7e:ee:a0:16:20:c9:58:
d5:de:34:4d:b7:0a:10:1e:5f:be:c8:f1:65:26:3e:
f0:1a:f0:62:4f:f8:d3:1c:0d:cb:ca:d5:cc:48:bb:
78:c5:09:81:4f:cc:94:90:c7:b7:f7:ec:28:c8:63:
cf:87:6e:29:ad:03:e2:43:be:9e:da:19:bd:8e:70:
c9:1a:76:54:a7:76:91:1d:66:ba:85:d8:93:80:ae:
e1:06:a0:1d:6e:31:5e:35:4b:fe:cf:2c:11:85:ea:
a4:12:9e:88:b1:fd:9c:99:33:44:16:06:ec:c7:53:
18:76:59:62:e4:db:06:59:55:06:a6:92:23:03:83:
f4:13:fc:2c:af:44:15:77:e8:a6:67:8b:eb:35:94:
80:5b:3a:a6:12:9f:df:ee:a7:4e:77:a2:87:b4:5d:
64:1a:0f:12:c6:aa:d7:79:df:9c:e0:12:31:6a:e3:
b3:60:4f:ae:e2:f5:b9:c7:a9:24:1c:46:a9:8d:9d:
c6:c0:5d:01:72:48:e8:81:8c:d6:99:67:36:59:9e:
7a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E0:0D:C2:CA:5D:62:87:82:3B:1E:2A:5B:87:15:D4:73:50:C6:7F
X509v3 Authority Key Identifier:
keyid:1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:20:c6:32:f7:64:4c:4b:0e:20:f5:59:ba:70:84:2d:6d:4a:
91:a6:14:c0:98:c1:be:35:58:03:5d:da:39:2c:db:78:6e:6c:
48:b7:71:d7:6a:76:22:43:3e:5b:90:a1:46:fd:37:89:48:0e:
43:6c:71:30:af:fc:77:76:ff:c9:dd:85:17:83:cc:65:39:ed:
2b:0c:dd:37:fb:4f:5c:4f:8f:2e:ee:ce:c1:9c:83:b8:74:de:
ff:c0:ab:ac:a5:8b:4f:36:10:be:33:4a:c9:e3:75:9f:c5:13:
c1:a1:ac:66:d9:79:9a:52:2d:fe:05:f7:74:7c:74:8f:dc:d5:
14:4e:14:61:2b:26:6c:b9:58:d8:62:64:b7:c0:b5:9e:a4:e8:
56:42:05:8e:7e:86:aa:a8:80:ea:bd:57:c2:09:54:85:5a:ee:
a2:4e:49:2d:be:25:43:f6:e7:8a:d7:8e:41:bd:32:65:a9:ba:
3c:04:a8:ef:71:9b:7c:92:ba:c5:2b:37:9d:8e:ff:fe:a1:84:
e0:bf:83:b6:ae:3c:58:34:f6:fe:29:b3:e7:74:51:6c:d9:08:
26:81:48:0d:ca:65:7e:56:0d:58:55:d0:2d:9a:82:3d:0b:59:
9f:ba:fd:c0:13:3b:50:09:69:e3:dc:e0:25:db:3a:98:7d:ba:
15:1d:8f:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrM/mQrnyJGZpTrqkdoQFjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNzY2YjA1OGMwOTY3NTNhMzRhZDYyNWQ1MzI3NWNkMmRi
YTViMzMwHhcNMjYwMzAxMjEwMDM2WhcNMjYwMzAyMjEwMDM2WjAzMTEwLwYDVQQD
EygxNGUwMGRjMmNhNWQ2Mjg3ODIzYjFlMmE1Yjg3MTVkNDczNTBjNjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6NaSvL69SSXFKltP6kyjL5nVrd7
znfFjlM0rx/e5YxWAYQTFPqypU7FiB/FyC4trIC/BX7uoBYgyVjV3jRNtwoQHl++
yPFlJj7wGvBiT/jTHA3LytXMSLt4xQmBT8yUkMe39+woyGPPh24prQPiQ76e2hm9
jnDJGnZUp3aRHWa6hdiTgK7hBqAdbjFeNUv+zywRheqkEp6Isf2cmTNEFgbsx1MY
dlli5NsGWVUGppIjA4P0E/wsr0QVd+imZ4vrNZSAWzqmEp/f7qdOd6KHtF1kGg8S
xqrXed+c4BIxauOzYE+u4vW5x6kkHEapjZ3GwF0BckjogYzWmWc2WZ56gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTgDcLKXWKHgjseKluHFdRzUMZ/MB8GA1UdIwQY
MBaAFBx2awWMCWdTo0rWJdUydc0tulszMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhackJZd0paMU9qU3RZbDFUSjF6UzI2V3pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hYjgzZGMtYzBlNy00ZWMzLWFmNzIt
ODE5MTdkZmZkY2Q3LzEvSEhackJZd0paMU9qU3RZbDFUSjF6UzI2V3pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9hYjgzZGMtYzBlNy00ZWMzLWFmNzItODE5MTdkZmZkY2Q3
LzEvSEhackJZd0paMU9qU3RZbDFUSjF6UzI2V3pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARyDGMvdk
TEsOIPVZunCELW1KkaYUwJjBvjVYA13aOSzbeG5sSLdx12p2IkM+W5ChRv03iUgO
Q2xxMK/8d3b/yd2FF4PMZTntKwzdN/tPXE+PLu7OwZyDuHTe/8CrrKWLTzYQvjNK
yeN1n8UTwaGsZtl5mlIt/gX3dHx0j9zVFE4UYSsmbLlY2GJkt8C1nqToVkIFjn6G
qqiA6r1XwglUhVruok5JLb4lQ/bniteOQb0yZam6PASo73GbfJK6xSs3nY7//qGE
4L+Dtq48WDT2/imz53RRbNkIJoFIDcplflYNWFXQLZqCPQtZn7r9wBM7UAlp49zg
Jds6mH26FR2PDg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:37:09 2026 by rpki-client