Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
File: Hal8rn3msp5W8CWa9TyVkmA0pQI.mft (raw, json)
Hash identifier: a8bSKmijJ1QbvAThmvh82SSXj+r+NAVpvGVxnajK41c=
Subject key identifier: 46:D5:21:81:17:0F:2A:9E:73:D6:EE:71:67:9B:4D:DF:F3:57:BD:EF
Authority key identifier: 1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
Certificate issuer: /CN=1da97cae7de6b29e56f0259af53c95926034a502
Certificate serial: 019CAB6B2E4444C213D0F134CEF1486B84BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
Manifest number: 184C
Signing time: Sun 01 Mar 2026 22:00:53 +0000
Manifest this update: Sun 01 Mar 2026 22:00:53 +0000
Manifest next update: Mon 02 Mar 2026 22:00:53 +0000
Files and hashes: 1: C5XEOKd3fauF5wNLgFLgU_UqhDk.roa (hash: gq6WkJtrJKgQndCeB0nR0Q6T7/UN9Av/CBIcRy+j3B8=)
2: Hal8rn3msp5W8CWa9TyVkmA0pQI.crl (hash: dhrpviHDD3XbIzjnWJ1BWDH/Nd5uxgwvbnz6DYtxciw=)
3: JhmZ_DzVJE8577BFE3vDvK9OMd0.roa (hash: z7gGITh/3gzv8G0JyKWvKpwEUXXNZ5dN/ko+JOVacoE=)
4: WCOH2ijRWITUQhmT6F4yfxrnSS4.roa (hash: 2qWBhToAV4o84zS0ph5XP7s0uUrVjIEKx5W2Lfxk5UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:2e:44:44:c2:13:d0:f1:34:ce:f1:48:6b:84:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da97cae7de6b29e56f0259af53c95926034a502
Validity
Not Before: Mar 1 22:00:53 2026 GMT
Not After : Mar 2 22:00:53 2026 GMT
Subject: CN=46d52181170f2a9e73d6ee71679b4ddff357bdef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:10:f5:d7:85:ec:50:d1:a8:1e:eb:52:b1:
97:82:bf:3b:ab:21:8f:cc:a1:38:1a:a2:76:76:ef:
7c:bf:87:e8:d9:e5:a9:9f:92:91:a1:6d:5a:82:9d:
65:16:eb:38:1a:a5:ee:bc:45:10:c8:f4:27:34:e6:
c4:13:b5:c2:c6:c9:15:90:11:88:af:d4:f5:3b:17:
d8:3b:de:e2:21:1b:ef:b6:96:e9:17:70:3c:00:b5:
65:90:fe:4a:f5:bf:0f:f5:d3:b2:73:8f:1e:b7:4b:
36:14:8b:e3:70:92:c8:6e:c1:b5:bf:6e:b3:58:1f:
0f:b5:52:1c:23:05:d6:ab:22:56:c1:95:64:41:01:
14:b3:58:23:bc:b3:82:6e:6a:94:9f:bc:ef:f7:f8:
06:4f:5b:ef:e1:3a:d7:f5:71:41:fc:34:12:e2:65:
b5:53:b9:b3:31:43:ae:b2:81:57:29:74:b5:d9:83:
92:42:50:34:4a:85:2b:13:f5:7b:72:84:2d:fb:8c:
72:a2:f7:91:3d:4b:bc:0c:58:d7:12:5e:da:15:82:
f8:a4:d1:29:ce:60:8e:47:8e:3f:33:65:f7:7e:ad:
e6:14:f3:17:ae:c6:ce:0d:fc:60:d5:65:17:ac:cd:
51:99:eb:45:6e:a3:94:1c:de:38:eb:4d:29:09:95:
d0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D5:21:81:17:0F:2A:9E:73:D6:EE:71:67:9B:4D:DF:F3:57:BD:EF
X509v3 Authority Key Identifier:
keyid:1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:1e:bd:e5:3c:80:b4:5d:14:24:d9:58:d4:f5:f0:5e:45:c2:
4d:3b:4c:dd:92:90:ed:41:0d:d3:11:cf:86:c2:05:fb:4b:7b:
d6:b6:09:d4:19:ba:b7:fe:5d:3f:1b:3b:c4:ce:91:d9:e2:0b:
55:34:d3:aa:b4:8a:fb:c0:0e:7d:93:15:ea:71:0e:c2:7f:87:
dd:bd:d7:b7:b7:d4:9f:c3:25:7f:56:34:a8:d9:54:09:69:2a:
e6:97:55:6f:4a:d4:e3:d9:d8:10:86:37:93:9d:9c:23:a7:4a:
6d:cc:54:ca:23:fb:2a:29:c8:c6:bb:20:0c:b1:47:a8:26:c5:
ed:b2:80:c5:20:f2:4a:c4:63:62:d9:f2:e0:0e:f1:01:32:40:
b4:50:b3:56:5b:9e:93:36:16:94:10:34:7c:c6:d2:5e:af:3a:
40:61:21:b5:46:18:75:66:13:91:ed:5c:64:63:6f:62:69:07:
e6:5a:92:6a:eb:ed:cd:ec:07:52:2a:bc:76:1e:58:40:0c:7c:
2e:9c:49:5d:35:b1:ec:d5:3f:1b:97:90:10:66:d0:29:80:09:
d3:68:23:44:f3:96:49:04:6f:04:42:0c:a0:1d:cd:55:e2:7e:
4b:15:25:f0:8e:3d:4b:a5:98:c8:f7:4a:02:a2:37:da:b3:24:
83:1d:59:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyray5ERMIT0PE0zvFIa4S7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYTk3Y2FlN2RlNmIyOWU1NmYwMjU5YWY1M2M5NTkyNjAz
NGE1MDIwHhcNMjYwMzAxMjIwMDUzWhcNMjYwMzAyMjIwMDUzWjAzMTEwLwYDVQQD
Eyg0NmQ1MjE4MTE3MGYyYTllNzNkNmVlNzE2NzliNGRkZmYzNTdiZGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX8Q9deF7FDRqB7rUrGXgr87qyGP
zKE4GqJ2du98v4fo2eWpn5KRoW1agp1lFus4GqXuvEUQyPQnNObEE7XCxskVkBGI
r9T1OxfYO97iIRvvtpbpF3A8ALVlkP5K9b8P9dOyc48et0s2FIvjcJLIbsG1v26z
WB8PtVIcIwXWqyJWwZVkQQEUs1gjvLOCbmqUn7zv9/gGT1vv4TrX9XFB/DQS4mW1
U7mzMUOusoFXKXS12YOSQlA0SoUrE/V7coQt+4xyoveRPUu8DFjXEl7aFYL4pNEp
zmCOR44/M2X3fq3mFPMXrsbODfxg1WUXrM1RmetFbqOUHN44600pCZXQ5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbVIYEXDyqec9bucWebTd/zV73vMB8GA1UdIwQY
MBaAFB2pfK595rKeVvAlmvU8lZJgNKUCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGFsOHJuM21zcDVXOENXYTlUeVZrbUEwcFFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC84NWI2NzMtZjFhZC00M2UyLWJmZTct
MGNkNzIzNmIyOWI2LzEvSGFsOHJuM21zcDVXOENXYTlUeVZrbUEwcFFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC84NWI2NzMtZjFhZC00M2UyLWJmZTctMGNkNzIzNmIyOWI2
LzEvSGFsOHJuM21zcDVXOENXYTlUeVZrbUEwcFFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdR695TyA
tF0UJNlY1PXwXkXCTTtM3ZKQ7UEN0xHPhsIF+0t71rYJ1Bm6t/5dPxs7xM6R2eIL
VTTTqrSK+8AOfZMV6nEOwn+H3b3Xt7fUn8Mlf1Y0qNlUCWkq5pdVb0rU49nYEIY3
k52cI6dKbcxUyiP7KinIxrsgDLFHqCbF7bKAxSDySsRjYtny4A7xATJAtFCzVlue
kzYWlBA0fMbSXq86QGEhtUYYdWYTke1cZGNvYmkH5lqSauvtzewHUiq8dh5YQAx8
LpxJXTWx7NU/G5eQEGbQKYAJ02gjRPOWSQRvBEIMoB3NVeJ+SxUl8I49S6WYyPdK
AqI32rMkgx1Z+g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:49:00 2026 by rpki-client