Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
File: hGlcglEp42VKUIs7xSn-Ols4ObE.mft (raw, json)
Hash identifier: 2/snWYHuTyJ1bX0SBdfcnzacb3SXCGgjGtgPv7uHCSY=
Subject key identifier: F2:7A:FF:4E:74:68:5F:1B:EC:AD:01:A1:77:F1:25:63:41:5E:C6:6E
Authority key identifier: 84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1
Certificate issuer: /CN=84695c825129e3654a508b3bc529fe3a5b3839b1
Certificate serial: 019CAC475721347E3732E6E5819F19534545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
Manifest number: 1398
Signing time: Mon 02 Mar 2026 02:01:22 +0000
Manifest this update: Mon 02 Mar 2026 02:01:22 +0000
Manifest next update: Tue 03 Mar 2026 02:01:22 +0000
Files and hashes: 1: WJgbjZB87tJLoahMumVDjucLblI.roa (hash: YviU04V4NEhTzYiRRcQuelFb9gp3nZ2OardyM6DZLlI=)
2: hGlcglEp42VKUIs7xSn-Ols4ObE.crl (hash: DgbeKxmChxto98pUWioJG6mTLyDtejRbPTA77OiOBbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:57:21:34:7e:37:32:e6:e5:81:9f:19:53:45:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84695c825129e3654a508b3bc529fe3a5b3839b1
Validity
Not Before: Mar 2 02:01:22 2026 GMT
Not After : Mar 3 02:01:22 2026 GMT
Subject: CN=f27aff4e74685f1becad01a177f12563415ec66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:ae:65:dc:d1:7d:4c:5b:7d:4d:ca:4c:6d:
8b:22:a8:08:68:65:7f:6e:78:0f:7d:3e:70:8d:f7:
b7:80:9a:08:2f:20:48:16:9e:86:bf:1e:b7:e4:8f:
18:04:a8:d9:8a:16:ec:eb:6a:0b:18:d9:4b:e7:6d:
b3:bf:df:ce:66:d0:11:05:e8:fd:73:14:35:25:38:
c9:ef:fb:4e:af:b2:6b:99:f5:28:e5:6e:94:12:e8:
b6:b1:ac:37:e9:17:47:52:f2:ba:e7:80:13:aa:15:
d2:09:25:f0:a6:00:b9:fc:02:79:ff:19:55:2f:1b:
01:99:af:f7:4d:3a:3d:dc:b0:b5:f0:6f:48:eb:ef:
b5:36:1a:ba:bd:95:66:df:79:84:72:12:37:ce:91:
bb:df:f6:3e:36:04:b7:5d:59:4d:97:aa:37:84:9a:
be:3c:2e:2a:69:60:b2:33:ee:6f:a8:5b:58:27:a1:
20:64:6e:47:90:15:25:00:52:a1:bb:6e:65:9a:de:
ac:40:7a:40:4b:dc:16:ef:5b:73:00:02:38:42:ce:
18:ed:19:16:48:bf:4b:a3:a3:40:d7:6f:f9:67:ac:
43:bf:c0:6f:b0:f5:41:86:a5:82:c1:61:b5:cc:a7:
fb:14:29:79:3e:5d:32:f9:73:17:e4:32:15:77:0c:
64:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7A:FF:4E:74:68:5F:1B:EC:AD:01:A1:77:F1:25:63:41:5E:C6:6E
X509v3 Authority Key Identifier:
keyid:84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:83:dc:41:c0:4d:18:d5:0b:b7:4d:be:9a:cd:1e:dd:e7:12:
15:31:86:f4:1c:b6:ee:3f:44:a0:86:76:d4:68:0c:2a:26:6e:
bd:9b:2a:c5:e6:92:9f:f4:88:b7:af:f0:8e:24:ef:ce:a4:cd:
bd:ac:af:63:a4:85:69:ae:5d:a1:f1:60:9d:0c:a6:72:73:54:
1b:49:e1:dd:66:65:60:1e:de:d2:a6:38:7e:f0:e2:05:88:eb:
1a:53:49:d0:5d:d1:a8:3d:e7:ab:2c:e5:97:be:2f:1c:bb:f8:
40:18:55:59:2e:8f:de:5c:ae:31:87:c3:0e:40:49:7c:9e:43:
27:aa:34:f6:9f:a9:92:44:e5:1a:86:90:ac:af:0e:70:ef:e0:
2e:da:ff:c8:2e:78:4f:0b:26:e6:26:3c:88:b8:8c:0a:2c:cd:
31:85:c1:c2:1e:c9:d2:fa:47:db:75:d5:a6:7a:ed:29:84:69:
b4:7f:ae:f4:0c:79:82:67:7d:44:27:c4:da:64:c3:a1:b4:2c:
c0:c5:71:d1:d1:0f:25:2b:ee:24:2d:ea:37:df:22:47:6d:39:
c1:52:f8:ce:73:75:db:bc:89:d1:a9:ff:82:d6:ae:ec:79:7e:
4c:37:56:fa:1e:e8:4a:93:b6:9b:fc:fa:84:6c:5e:65:51:c5:
1d:6d:21:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR1chNH43MublgZ8ZU0VFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0Njk1YzgyNTEyOWUzNjU0YTUwOGIzYmM1MjlmZTNhNWIz
ODM5YjEwHhcNMjYwMzAyMDIwMTIyWhcNMjYwMzAzMDIwMTIyWjAzMTEwLwYDVQQD
EyhmMjdhZmY0ZTc0Njg1ZjFiZWNhZDAxYTE3N2YxMjU2MzQxNWVjNjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhCuZdzRfUxbfU3KTG2LIqgIaGV/
bngPfT5wjfe3gJoILyBIFp6Gvx635I8YBKjZihbs62oLGNlL522zv9/OZtARBej9
cxQ1JTjJ7/tOr7JrmfUo5W6UEui2saw36RdHUvK654ATqhXSCSXwpgC5/AJ5/xlV
LxsBma/3TTo93LC18G9I6++1Nhq6vZVm33mEchI3zpG73/Y+NgS3XVlNl6o3hJq+
PC4qaWCyM+5vqFtYJ6EgZG5HkBUlAFKhu25lmt6sQHpAS9wW71tzAAI4Qs4Y7RkW
SL9Lo6NA12/5Z6xDv8BvsPVBhqWCwWG1zKf7FCl5Pl0y+XMX5DIVdwxknwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJ6/050aF8b7K0BoXfxJWNBXsZuMB8GA1UdIwQY
MBaAFIRpXIJRKeNlSlCLO8Up/jpbODmxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEdsY2dsRXA0MlZLVUlzN3hTbi1PbHM0T2JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9hMGU5MGYtMjE5OC00NDJlLTk1ZmMt
YjdmNjM0MjNmMTkyLzEvaEdsY2dsRXA0MlZLVUlzN3hTbi1PbHM0T2JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9hMGU5MGYtMjE5OC00NDJlLTk1ZmMtYjdmNjM0MjNmMTky
LzEvaEdsY2dsRXA0MlZLVUlzN3hTbi1PbHM0T2JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYPcQcBN
GNULt02+ms0e3ecSFTGG9By27j9EoIZ21GgMKiZuvZsqxeaSn/SIt6/wjiTvzqTN
vayvY6SFaa5dofFgnQymcnNUG0nh3WZlYB7e0qY4fvDiBYjrGlNJ0F3RqD3nqyzl
l74vHLv4QBhVWS6P3lyuMYfDDkBJfJ5DJ6o09p+pkkTlGoaQrK8OcO/gLtr/yC54
Twsm5iY8iLiMCizNMYXBwh7J0vpH23XVpnrtKYRptH+u9Ax5gmd9RCfE2mTDobQs
wMVx0dEPJSvuJC3qN98iR205wVL4znN127yJ0an/gtau7Hl+TDdW+h7oSpO2m/z6
hGxeZVHFHW0hiA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:54:59 2026 by rpki-client