Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
File: HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft (raw, json)
Hash identifier: zU25F08FGaLvnbIVmO20JZ+23XWF7eGd68/nGeVirIU=
Subject key identifier: 5E:08:9F:83:ED:25:EA:95:AB:EF:12:59:BD:74:05:43:A5:FD:C9:8A
Authority key identifier: 1C:39:D5:79:36:DD:2D:15:21:44:3E:68:DA:DD:9D:09:49:CD:E3:3F
Certificate issuer: /CN=1c39d57936dd2d1521443e68dadd9d0949cde33f
Certificate serial: 019CAA8F5C587E1D6241E341341386B61CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 18:00:47 +0000
Manifest this update: Sun 01 Mar 2026 18:00:47 +0000
Manifest next update: Mon 02 Mar 2026 18:00:47 +0000
Files and hashes: 1: 9rDYh6RoCnRP7wyIaMUt11JFs3w.roa (hash: ceIif/yZZ/uAesVBkNPfdSQjyTnuFeMLRlIbdZ852RQ=)
2: HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl (hash: fDEIdatYhFceu5sRFj+CCNIipTWxzuaD+i7WAwosdhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:5c:58:7e:1d:62:41:e3:41:34:13:86:b6:1c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c39d57936dd2d1521443e68dadd9d0949cde33f
Validity
Not Before: Mar 1 18:00:47 2026 GMT
Not After : Mar 2 18:00:47 2026 GMT
Subject: CN=5e089f83ed25ea95abef1259bd740543a5fdc98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0e:03:56:f7:b7:5a:a3:e6:df:54:16:0c:f4:
5b:47:66:85:71:55:f9:ab:4b:a1:57:3a:32:cb:3f:
52:3d:b3:5f:3c:d0:af:1e:bd:f5:fe:b6:7d:17:34:
82:18:81:ae:5a:97:59:12:a7:5c:6a:11:7c:6b:27:
00:57:ab:44:07:99:8a:65:1d:2a:33:92:43:db:74:
06:bc:6d:6a:95:57:c0:b5:df:ff:bb:97:ba:ae:56:
ae:59:13:d6:a9:28:ab:82:b4:40:26:e0:0e:fd:d8:
30:b3:e3:dc:7d:f0:9b:b9:2f:d8:76:ff:38:a2:1e:
db:a8:e3:59:b5:9e:9e:c5:b3:41:6f:29:03:2f:57:
06:30:f6:b2:68:ce:e2:43:a4:d0:74:48:b8:ec:13:
8c:7e:63:6c:8f:f3:a0:c6:c7:b0:35:b4:ce:87:b6:
8d:43:96:26:8f:ed:c6:de:ba:44:c2:2e:ed:b1:56:
3a:67:ba:ad:bb:e0:0f:da:aa:f0:01:67:6d:b1:df:
33:e5:a9:97:9e:69:64:fc:ed:a6:dd:fc:a8:a9:50:
7e:d6:f6:e9:5d:7d:21:3b:e7:70:b3:60:96:22:1d:
f1:42:46:30:e6:ef:94:2b:22:f4:b6:8c:bc:20:13:
e8:5c:54:d3:80:91:74:e7:6d:00:db:b1:39:92:4a:
02:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:08:9F:83:ED:25:EA:95:AB:EF:12:59:BD:74:05:43:A5:FD:C9:8A
X509v3 Authority Key Identifier:
keyid:1C:39:D5:79:36:DD:2D:15:21:44:3E:68:DA:DD:9D:09:49:CD:E3:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:0c:09:a1:4e:63:d2:66:89:7b:20:20:1d:ba:57:d6:3d:b7:
30:ff:80:8c:d9:04:20:0b:71:8c:4c:4d:1e:d4:f1:45:f0:9a:
ed:4a:ee:55:71:a1:49:ae:c9:a9:a1:64:78:69:06:b6:0d:8e:
da:63:73:64:96:ff:60:44:b5:72:bb:bf:74:a5:22:9e:24:01:
a2:8b:00:b0:2c:90:76:94:9d:c2:47:4a:28:d9:29:d8:d3:7a:
65:d6:8c:1a:84:79:37:7e:fc:96:57:3b:84:7e:8b:96:78:ba:
88:e3:e3:ac:cb:7a:e2:b9:c3:fb:38:64:10:78:e0:14:53:fe:
6c:79:d6:ff:7e:42:12:3a:65:ff:d2:ee:39:f1:6c:b8:9b:88:
c8:9b:a6:44:7e:98:fd:9a:4a:87:cb:e7:9d:83:58:cd:1f:88:
b7:65:0a:2d:59:ae:a9:44:91:5d:72:ce:74:9a:1a:c1:e9:a9:
f8:c0:2d:08:fe:a2:65:7b:99:5a:b8:de:7f:7e:ad:e2:8a:36:
63:da:96:72:7f:ef:08:9a:a9:12:9b:61:5c:c7:b0:da:e7:df:
78:58:26:54:a2:21:9e:19:f5:bd:12:1a:94:5a:4a:19:74:db:
dc:8b:80:5b:c6:82:34:d1:e9:ba:7f:ae:2c:0b:e2:18:d3:1e:
c5:42:b5:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj1xYfh1iQeNBNBOGthzwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMzlkNTc5MzZkZDJkMTUyMTQ0M2U2OGRhZGQ5ZDA5NDlj
ZGUzM2YwHhcNMjYwMzAxMTgwMDQ3WhcNMjYwMzAyMTgwMDQ3WjAzMTEwLwYDVQQD
Eyg1ZTA4OWY4M2VkMjVlYTk1YWJlZjEyNTliZDc0MDU0M2E1ZmRjOThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyA4DVve3WqPm31QWDPRbR2aFcVX5
q0uhVzoyyz9SPbNfPNCvHr31/rZ9FzSCGIGuWpdZEqdcahF8aycAV6tEB5mKZR0q
M5JD23QGvG1qlVfAtd//u5e6rlauWRPWqSirgrRAJuAO/dgws+PcffCbuS/Ydv84
oh7bqONZtZ6exbNBbykDL1cGMPayaM7iQ6TQdEi47BOMfmNsj/OgxsewNbTOh7aN
Q5Ymj+3G3rpEwi7tsVY6Z7qtu+AP2qrwAWdtsd8z5amXnmlk/O2m3fyoqVB+1vbp
XX0hO+dws2CWIh3xQkYw5u+UKyL0toy8IBPoXFTTgJF0520A27E5kkoChwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4In4PtJeqVq+8SWb10BUOl/cmKMB8GA1UdIwQY
MBaAFBw51Xk23S0VIUQ+aNrdnQlJzeM/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSERuVmVUYmRMUlVoUkQ1bzJ0MmRDVW5ONHo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kMzg1NmYtMDI5Yy00NDZhLWFlN2Qt
ZDdjNWRhN2MxNjc2LzEvSERuVmVUYmRMUlVoUkQ1bzJ0MmRDVW5ONHo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9kMzg1NmYtMDI5Yy00NDZhLWFlN2QtZDdjNWRhN2MxNjc2
LzEvSERuVmVUYmRMUlVoUkQ1bzJ0MmRDVW5ONHo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACwwJoU5j
0maJeyAgHbpX1j23MP+AjNkEIAtxjExNHtTxRfCa7UruVXGhSa7JqaFkeGkGtg2O
2mNzZJb/YES1cru/dKUiniQBoosAsCyQdpSdwkdKKNkp2NN6ZdaMGoR5N378llc7
hH6Llni6iOPjrMt64rnD+zhkEHjgFFP+bHnW/35CEjpl/9LuOfFsuJuIyJumRH6Y
/ZpKh8vnnYNYzR+It2UKLVmuqUSRXXLOdJoawemp+MAtCP6iZXuZWrjef36t4oo2
Y9qWcn/vCJqpEpthXMew2uffeFgmVKIhnhn1vRIalFpKGXTb3IuAW8aCNNHpun+u
LAviGNMexUK1Aw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:46 2026 by rpki-client