Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
File: 4HUznawWU11FeuiGK1NbzlHhIg8.mft (raw, json)
Hash identifier: rZoYs5I7yidT9zKEIJW0SYntUb5MnlONxQ0cg77enXg=
Subject key identifier: 0F:3B:A4:DD:73:43:ED:34:C3:9A:5D:7E:41:C1:D3:10:52:EE:84:57
Authority key identifier: E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F
Certificate issuer: /CN=e075339dac16535d457ae8862b535bce51e1220f
Certificate serial: 019CAE6C1B3BD27800487A4945C9FC099035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
Manifest number: 068E
Signing time: Mon 02 Mar 2026 12:00:46 +0000
Manifest this update: Mon 02 Mar 2026 12:00:46 +0000
Manifest next update: Tue 03 Mar 2026 12:00:46 +0000
Files and hashes: 1: 2mEadFySpEWsuPH6ldVwsZTSUzE.roa (hash: ip58kYIdg4i0vj70PKOUYbGKVF2v+wgNn3j2A07Pob4=)
2: 4HUznawWU11FeuiGK1NbzlHhIg8.crl (hash: EspnOLjeRWZzR6mx3I/lbVhO9IJCdYSh+yzsHcg/KMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:1b:3b:d2:78:00:48:7a:49:45:c9:fc:09:90:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e075339dac16535d457ae8862b535bce51e1220f
Validity
Not Before: Mar 2 12:00:46 2026 GMT
Not After : Mar 3 12:00:46 2026 GMT
Subject: CN=0f3ba4dd7343ed34c39a5d7e41c1d31052ee8457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:18:05:64:a9:2f:98:1c:44:05:d3:ee:a3:cd:
70:4b:16:5a:90:15:fc:17:b4:64:12:c5:7d:27:be:
b8:86:06:67:1e:ec:24:a6:ad:ca:fb:8d:9a:5f:18:
fb:c6:d7:fa:41:1a:cc:c6:fc:e3:cb:90:ab:b2:81:
b0:f4:25:4c:7a:5a:86:79:c5:de:d4:1e:dc:0b:68:
9d:60:b6:7a:4e:df:88:eb:7b:a6:da:75:c4:80:e5:
d7:b4:3c:48:b9:1a:b2:34:b1:e5:8a:3b:13:32:cb:
17:97:31:e2:4e:fe:20:d8:2b:80:ff:a5:a2:d2:74:
ba:ea:6a:75:18:eb:f8:c7:0e:b8:53:65:66:ed:b8:
ba:c2:ce:44:31:ca:dd:9f:26:57:93:a1:79:12:6a:
ca:ea:24:7f:9a:f6:5a:75:68:3c:2d:07:11:fc:02:
05:c2:41:2c:1f:76:6f:19:66:7a:11:3a:8f:3f:73:
5d:6a:b7:8a:23:4a:4c:4d:54:b4:a2:e6:8b:0d:71:
1a:02:22:b5:57:cb:43:53:75:8c:51:a4:3e:74:1e:
8d:c9:b0:5e:af:68:53:66:67:98:44:c8:09:f7:25:
92:3d:45:02:3b:24:49:67:3f:63:7d:c9:49:37:7c:
9b:62:80:cd:4e:5c:3f:d8:90:f5:f7:d6:e7:c3:e8:
e5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3B:A4:DD:73:43:ED:34:C3:9A:5D:7E:41:C1:D3:10:52:EE:84:57
X509v3 Authority Key Identifier:
keyid:E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:cf:fe:93:68:15:e1:a4:c5:56:8a:44:7e:aa:28:e1:5b:f5:
a4:8c:69:ab:51:40:38:e3:5f:43:ac:6e:9b:b2:12:12:4e:eb:
d8:bf:9f:4a:75:b8:5e:83:53:54:ef:01:c4:7b:38:5f:6a:de:
de:19:d8:d8:30:a3:8b:e9:29:fc:ac:35:ae:71:2c:48:0c:24:
14:7c:85:10:e1:65:08:34:3d:c6:f0:29:09:45:ea:5a:44:95:
20:8f:b7:37:33:e5:0c:11:5a:d1:e6:92:53:d8:dd:08:21:13:
4b:3c:8e:92:13:31:e6:37:69:cf:1c:45:70:a6:25:9a:09:e5:
67:45:8f:ff:cf:21:b5:55:c0:b1:e9:90:b9:c9:f3:e9:c7:7c:
6c:31:ba:db:17:cd:2f:f8:39:5c:2f:23:17:b1:9e:ee:eb:13:
8a:f0:fa:aa:d3:f6:31:c6:27:17:34:5f:ff:97:2a:89:10:f8:
a8:7f:f8:aa:7e:03:ba:d3:35:e3:d1:5f:aa:cd:85:06:11:14:
2a:a0:ee:b3:80:5d:e4:35:e3:99:ed:fa:0c:c8:1a:29:9c:ac:
e4:f7:f6:fe:16:67:1c:03:39:21:11:35:f0:06:8c:cc:21:ee:
e8:64:64:13:07:e2:80:42:0e:ab:57:13:62:fe:76:1f:2a:2b:
81:2c:24:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyubBs70ngASHpJRcn8CZA1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNzUzMzlkYWMxNjUzNWQ0NTdhZTg4NjJiNTM1YmNlNTFl
MTIyMGYwHhcNMjYwMzAyMTIwMDQ2WhcNMjYwMzAzMTIwMDQ2WjAzMTEwLwYDVQQD
EygwZjNiYTRkZDczNDNlZDM0YzM5YTVkN2U0MWMxZDMxMDUyZWU4NDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRgFZKkvmBxEBdPuo81wSxZakBX8
F7RkEsV9J764hgZnHuwkpq3K+42aXxj7xtf6QRrMxvzjy5CrsoGw9CVMelqGecXe
1B7cC2idYLZ6Tt+I63um2nXEgOXXtDxIuRqyNLHlijsTMssXlzHiTv4g2CuA/6Wi
0nS66mp1GOv4xw64U2Vm7bi6ws5EMcrdnyZXk6F5EmrK6iR/mvZadWg8LQcR/AIF
wkEsH3ZvGWZ6ETqPP3NdareKI0pMTVS0ouaLDXEaAiK1V8tDU3WMUaQ+dB6NybBe
r2hTZmeYRMgJ9yWSPUUCOyRJZz9jfclJN3ybYoDNTlw/2JD199bnw+jlJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA87pN1zQ+00w5pdfkHB0xBS7oRXMB8GA1UdIwQY
MBaAFOB1M52sFlNdRXrohitTW85R4SIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEhVem5hd1dVMTFGZXVpR0sxTmJ6bEhoSWc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zM2Q2MzktNDljMi00MzAxLWI2YzMt
YmI2YzZjNDU3ODE3LzEvNEhVem5hd1dVMTFGZXVpR0sxTmJ6bEhoSWc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8zM2Q2MzktNDljMi00MzAxLWI2YzMtYmI2YzZjNDU3ODE3
LzEvNEhVem5hd1dVMTFGZXVpR0sxTmJ6bEhoSWc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHM/+k2gV
4aTFVopEfqoo4Vv1pIxpq1FAOONfQ6xum7ISEk7r2L+fSnW4XoNTVO8BxHs4X2re
3hnY2DCji+kp/Kw1rnEsSAwkFHyFEOFlCDQ9xvApCUXqWkSVII+3NzPlDBFa0eaS
U9jdCCETSzyOkhMx5jdpzxxFcKYlmgnlZ0WP/88htVXAsemQucnz6cd8bDG62xfN
L/g5XC8jF7Ge7usTivD6qtP2McYnFzRf/5cqiRD4qH/4qn4DutM149Ffqs2FBhEU
KqDus4Bd5DXjme36DMgaKZys5Pf2/hZnHAM5IRE18AaMzCHu6GRkEwfigEIOq1cT
Yv52HyorgSwkig==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:44:23 2026 by rpki-client