Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
File: Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft (raw, json)
Hash identifier: iow/uO69H6aQZHDnG6m7yoA8q7oPYlAbJvxHwh0Cfpo=
Subject key identifier: 21:03:E5:FA:8B:B6:D1:F8:83:98:B7:47:6B:76:84:73:79:0F:AD:99
Authority key identifier: 1E:7E:08:D5:64:75:BA:E4:07:A4:F2:BC:A8:E8:9A:09:97:68:5A:3A
Certificate issuer: /CN=1e7e08d56475bae407a4f2bca8e89a0997685a3a
Certificate serial: 019CAB6ACD7DC496B317AD7E9E5DA165435E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
Manifest number: 08D7
Signing time: Sun 01 Mar 2026 22:00:29 +0000
Manifest this update: Sun 01 Mar 2026 22:00:29 +0000
Manifest next update: Mon 02 Mar 2026 22:00:29 +0000
Files and hashes: 1: Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl (hash: MNGIRtBVlYlNyn0KuO5TMoISw5F3q8uhG+xOciA/o/M=)
2: hBZaHAyGtqRnE1DvLWWpXGTmsPU.roa (hash: hJDZYJp6gaUMZ+FxtfpKN3lHq8XA9oWvb1C80fIulho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:cd:7d:c4:96:b3:17:ad:7e:9e:5d:a1:65:43:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7e08d56475bae407a4f2bca8e89a0997685a3a
Validity
Not Before: Mar 1 22:00:29 2026 GMT
Not After : Mar 2 22:00:29 2026 GMT
Subject: CN=2103e5fa8bb6d1f88398b7476b768473790fad99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2a:29:85:60:4f:00:2a:2e:27:6b:e8:ae:81:
32:a3:b9:79:be:1c:0e:f2:dc:51:0a:bf:9f:78:d5:
db:0b:b9:13:a2:45:4f:17:6a:65:57:44:24:7e:b2:
26:71:c3:db:c0:79:32:08:4d:88:10:7c:56:4a:49:
bc:44:73:05:af:41:93:8f:f2:97:9c:1d:c1:b4:89:
bb:04:0d:c6:fe:f4:68:fd:84:ed:97:93:4a:de:64:
fd:92:a7:0e:dc:a1:52:3a:45:e6:14:08:cb:1f:6e:
ce:b6:bf:d3:f3:11:21:90:86:ce:f4:21:0e:2c:ae:
51:ed:d8:26:a2:10:e2:3e:24:67:0b:1f:1b:4a:40:
74:5a:49:15:d6:6c:a1:48:60:76:42:b8:62:14:81:
15:93:d6:94:7f:50:1f:99:39:84:9b:45:93:eb:c1:
39:0a:08:59:12:80:d3:45:ca:b2:25:6e:1e:1b:4c:
78:88:dd:3a:0c:d0:88:a7:1a:87:0e:d2:45:b3:4f:
bc:d8:f3:1c:9a:c2:70:42:f1:51:9f:8d:f4:97:a0:
f2:db:5e:d9:6b:b3:9c:a9:50:62:8d:9d:55:0d:d1:
7c:dd:14:7b:8e:ee:ef:ff:4a:a2:49:a4:77:4d:06:
06:05:2b:f7:24:60:4b:c1:f0:93:ab:a7:53:b8:99:
32:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:03:E5:FA:8B:B6:D1:F8:83:98:B7:47:6B:76:84:73:79:0F:AD:99
X509v3 Authority Key Identifier:
keyid:1E:7E:08:D5:64:75:BA:E4:07:A4:F2:BC:A8:E8:9A:09:97:68:5A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9d:9a:73:45:87:1d:d1:d5:f8:7e:bc:3f:b2:e3:37:55:9d:
9a:3b:01:99:69:73:78:d0:2c:f7:82:9b:d3:68:9f:23:9e:b1:
d8:a4:14:0c:bb:ae:1b:73:6a:27:59:fa:79:63:80:0c:f3:9f:
80:d6:f8:bd:4e:7c:3e:05:af:e8:e5:ec:61:81:86:a5:ed:89:
da:d9:14:02:46:19:33:4b:4c:0e:fc:52:79:5d:7a:53:53:6f:
6e:f2:45:5a:2e:25:7f:bc:33:ac:3d:98:9f:49:19:d3:eb:fa:
ec:2a:50:6e:84:9e:ce:37:c4:c9:86:91:11:ad:b8:2c:45:28:
72:2b:ba:7d:62:0b:62:da:1d:0b:68:57:29:4d:06:bf:29:72:
30:19:6f:ef:4d:d0:a6:c3:e5:88:aa:cf:7d:e3:bc:04:1c:25:
30:16:ed:34:2f:aa:61:e8:a2:5a:2f:e1:6c:cd:88:de:f8:5d:
75:b9:91:d9:af:ea:5e:1f:e1:00:1d:9f:87:c8:d2:22:04:23:
a8:f0:1c:19:ce:1c:73:9c:cc:79:72:54:df:87:c8:8d:40:1e:
3c:3e:fa:60:6b:8e:ce:0b:91:63:cb:b9:31:5d:b5:32:85:5e:
19:49:28:cd:c5:3b:2a:c6:cc:57:95:9b:ed:1b:bf:04:f2:95:
c8:5f:60:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyras19xJazF61+nl2hZUNeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlN2UwOGQ1NjQ3NWJhZTQwN2E0ZjJiY2E4ZTg5YTA5OTc2
ODVhM2EwHhcNMjYwMzAxMjIwMDI5WhcNMjYwMzAyMjIwMDI5WjAzMTEwLwYDVQQD
EygyMTAzZTVmYThiYjZkMWY4ODM5OGI3NDc2Yjc2ODQ3Mzc5MGZhZDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCophWBPACouJ2voroEyo7l5vhwO
8txRCr+feNXbC7kTokVPF2plV0QkfrImccPbwHkyCE2IEHxWSkm8RHMFr0GTj/KX
nB3BtIm7BA3G/vRo/YTtl5NK3mT9kqcO3KFSOkXmFAjLH27Otr/T8xEhkIbO9CEO
LK5R7dgmohDiPiRnCx8bSkB0WkkV1myhSGB2QrhiFIEVk9aUf1AfmTmEm0WT68E5
CghZEoDTRcqyJW4eG0x4iN06DNCIpxqHDtJFs0+82PMcmsJwQvFRn430l6Dy217Z
a7OcqVBijZ1VDdF83RR7ju7v/0qiSaR3TQYGBSv3JGBLwfCTq6dTuJky0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCED5fqLttH4g5i3R2t2hHN5D62ZMB8GA1UdIwQY
MBaAFB5+CNVkdbrkB6TyvKjomgmXaFo6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG40STFXUjF1dVFIcFBLOHFPaWFDWmRvV2pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kMjc1NjctNzEwYy00OGNkLTllNWQt
MzAwMmRmODI1ZDVkLzEvSG40STFXUjF1dVFIcFBLOHFPaWFDWmRvV2pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9kMjc1NjctNzEwYy00OGNkLTllNWQtMzAwMmRmODI1ZDVk
LzEvSG40STFXUjF1dVFIcFBLOHFPaWFDWmRvV2pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZp2ac0WH
HdHV+H68P7LjN1WdmjsBmWlzeNAs94Kb02ifI56x2KQUDLuuG3NqJ1n6eWOADPOf
gNb4vU58PgWv6OXsYYGGpe2J2tkUAkYZM0tMDvxSeV16U1NvbvJFWi4lf7wzrD2Y
n0kZ0+v67CpQboSezjfEyYaREa24LEUociu6fWILYtodC2hXKU0GvylyMBlv703Q
psPliKrPfeO8BBwlMBbtNC+qYeiiWi/hbM2I3vhddbmR2a/qXh/hAB2fh8jSIgQj
qPAcGc4cc5zMeXJU34fIjUAePD76YGuOzguRY8u5MV21MoVeGUkozcU7KsbMV5Wb
7Ru/BPKVyF9g/w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:17:14 2026 by rpki-client