Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft
File: Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft (raw, json)
Hash identifier: mh+ynwmX/2Lcvcv1P4K02bdOPwBAnxviCffWuyRY/CI=
Subject key identifier: C7:B2:C8:0A:CB:1F:17:3E:B1:B6:59:57:69:5E:E2:21:23:79:E5:29
Authority key identifier: 1E:47:E2:BF:39:74:72:1E:AF:BF:B8:C3:1F:C5:27:30:39:D5:05:F3
Certificate issuer: /CN=1e47e2bf3974721eafbfb8c31fc5273039d505f3
Certificate serial: 019CAAC661B13F4F8A143AB0E27C71E689EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hkfivzl0ch6vv7jDH8UnMDnVBfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft
Manifest number: 0E74
Signing time: Sun 01 Mar 2026 19:00:53 +0000
Manifest this update: Sun 01 Mar 2026 19:00:53 +0000
Manifest next update: Mon 02 Mar 2026 19:00:53 +0000
Files and hashes: 1: Hkfivzl0ch6vv7jDH8UnMDnVBfM.crl (hash: X7a2ZQJazfpydvMRc7M+UJag3ZVNT86BVCFd4YXxVWU=)
2: m3UA_nkf1VwU3ag8qI5g5Qt-9tA.roa (hash: lDuAUkNMZFlM3dVZhNno1BqGdq4IWHifd59bAym6MAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hkfivzl0ch6vv7jDH8UnMDnVBfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:61:b1:3f:4f:8a:14:3a:b0:e2:7c:71:e6:89:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e47e2bf3974721eafbfb8c31fc5273039d505f3
Validity
Not Before: Mar 1 19:00:53 2026 GMT
Not After : Mar 2 19:00:53 2026 GMT
Subject: CN=c7b2c80acb1f173eb1b65957695ee2212379e529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1e:09:2e:71:a2:c0:70:af:e9:bb:87:e7:e3:
3c:af:71:35:3d:15:5e:6e:d0:bb:1a:5b:04:6d:f2:
06:c3:11:c0:5e:da:99:a2:e5:00:32:64:40:8d:6c:
d8:7c:ab:d7:38:ed:f3:b8:be:7f:5d:33:5d:95:eb:
1e:a0:5e:dc:11:aa:5a:ac:de:1c:ee:57:0e:94:4b:
2c:b0:61:78:36:7c:79:e1:6c:96:d4:65:b0:13:53:
0a:92:89:b7:e6:10:72:b0:f6:4d:25:ad:c5:f2:b7:
a2:9c:9d:9b:d3:b4:29:d7:bb:a5:02:a0:1a:49:fa:
26:d4:20:18:cc:08:18:84:c6:51:bc:46:17:10:50:
c1:0f:6d:dc:e6:6e:dd:5a:c0:a7:d9:d0:b2:3d:c4:
52:dc:0b:2b:42:b4:7f:e8:f9:d4:4d:0d:05:17:e2:
5f:da:01:0a:6b:ef:0c:4f:c4:9c:d5:1f:69:58:07:
39:80:63:ba:d5:ba:3d:fb:20:74:bd:e6:5b:dd:06:
11:e1:7c:de:66:65:9f:25:1c:fa:ef:4f:89:96:31:
b3:dd:2e:09:c0:73:04:3f:b0:db:4a:c7:f6:9f:93:
a6:8f:ee:f1:0e:f4:77:33:e0:57:92:0d:b7:db:a4:
85:72:4d:1f:09:73:74:16:72:e1:a4:d9:25:19:39:
4c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B2:C8:0A:CB:1F:17:3E:B1:B6:59:57:69:5E:E2:21:23:79:E5:29
X509v3 Authority Key Identifier:
keyid:1E:47:E2:BF:39:74:72:1E:AF:BF:B8:C3:1F:C5:27:30:39:D5:05:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hkfivzl0ch6vv7jDH8UnMDnVBfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/Hkfivzl0ch6vv7jDH8UnMDnVBfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ae:13:20:e0:af:2c:91:f0:0c:c9:eb:9c:06:f4:c6:43:de:
a0:48:0d:6b:3a:f4:a9:d0:4f:a2:de:de:91:72:42:38:54:e9:
e2:5d:3e:55:6f:47:fe:f1:0b:d1:81:e4:eb:06:ef:16:e3:f9:
73:20:d9:a9:e9:02:06:ba:8e:41:cb:d4:1b:64:46:fe:fc:ab:
e4:2b:7d:e4:ed:39:b4:e6:2c:18:d8:70:e0:f2:31:e3:81:9c:
62:93:c5:0a:97:15:a4:2f:e9:bb:d2:7d:38:a9:34:8b:cb:10:
fe:66:1f:84:f4:6a:c1:0a:7f:0c:19:c2:05:c2:8e:d1:b7:03:
fd:b6:fe:e5:b9:1f:00:73:f2:ea:9e:7a:91:c7:fc:f7:9c:d5:
8f:98:a1:0a:8d:e7:08:6b:7f:94:d8:6f:50:d7:83:01:f9:a9:
08:dc:2c:45:43:f3:6f:bb:6d:04:78:79:ad:ef:46:8d:a1:41:
e3:09:45:ed:66:76:2d:77:16:50:eb:68:c3:71:96:84:d0:a0:
09:af:b6:ba:ce:26:3d:f3:d5:2c:a4:e9:ba:cb:f2:58:29:a0:
9e:5f:18:06:3c:1a:9a:c0:cd:87:1a:1b:89:bc:d4:e4:c8:e5:
24:59:e3:5b:72:da:b4:95:08:c1:c1:c8:80:ba:ee:8e:e6:16:
68:51:3f:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxmGxP0+KFDqw4nxx5onuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNDdlMmJmMzk3NDcyMWVhZmJmYjhjMzFmYzUyNzMwMzlk
NTA1ZjMwHhcNMjYwMzAxMTkwMDUzWhcNMjYwMzAyMTkwMDUzWjAzMTEwLwYDVQQD
EyhjN2IyYzgwYWNiMWYxNzNlYjFiNjU5NTc2OTVlZTIyMTIzNzllNTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjR4JLnGiwHCv6buH5+M8r3E1PRVe
btC7GlsEbfIGwxHAXtqZouUAMmRAjWzYfKvXOO3zuL5/XTNdleseoF7cEaparN4c
7lcOlEsssGF4Nnx54WyW1GWwE1MKkom35hBysPZNJa3F8reinJ2b07Qp17ulAqAa
Sfom1CAYzAgYhMZRvEYXEFDBD23c5m7dWsCn2dCyPcRS3AsrQrR/6PnUTQ0FF+Jf
2gEKa+8MT8Sc1R9pWAc5gGO61bo9+yB0veZb3QYR4XzeZmWfJRz670+JljGz3S4J
wHMEP7DbSsf2n5Omj+7xDvR3M+BXkg2326SFck0fCXN0FnLhpNklGTlM7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMeyyArLHxc+sbZZV2le4iEjeeUpMB8GA1UdIwQY
MBaAFB5H4r85dHIer7+4wx/FJzA51QXzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGtmaXZ6bDBjaDZ2djdqREg4VW5NRG5WQmZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9hZmExMDYtNmFmOC00MzEwLWI0ZDQt
ZTM2OWQ2NjAyZTZmLzEvSGtmaXZ6bDBjaDZ2djdqREg4VW5NRG5WQmZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9hZmExMDYtNmFmOC00MzEwLWI0ZDQtZTM2OWQ2NjAyZTZm
LzEvSGtmaXZ6bDBjaDZ2djdqREg4VW5NRG5WQmZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV64TIOCv
LJHwDMnrnAb0xkPeoEgNazr0qdBPot7ekXJCOFTp4l0+VW9H/vEL0YHk6wbvFuP5
cyDZqekCBrqOQcvUG2RG/vyr5Ct95O05tOYsGNhw4PIx44GcYpPFCpcVpC/pu9J9
OKk0i8sQ/mYfhPRqwQp/DBnCBcKO0bcD/bb+5bkfAHPy6p56kcf895zVj5ihCo3n
CGt/lNhvUNeDAfmpCNwsRUPzb7ttBHh5re9GjaFB4wlF7WZ2LXcWUOtow3GWhNCg
Ca+2us4mPfPVLKTpusvyWCmgnl8YBjwamsDNhxobibzU5MjlJFnjW3LatJUIwcHI
gLrujuYWaFE/gA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:36 2026 by rpki-client