Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
File: HGnHYzivyQhbj71mm4t0vXqS1DE.mft (raw, json)
Hash identifier: 4ZjX/EIysXsmGJyuNnvV5fFhETvgMtC5by5suX8zBd0=
Subject key identifier: 03:C3:E6:C6:5A:31:3B:62:26:0D:42:E8:26:D9:F4:08:4F:BC:BC:5E
Authority key identifier: 1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
Certificate issuer: /CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
Certificate serial: 01A13590B872456A8F3F486A8C11EE6E6188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
Manifest number: 178D
Signing time: Tue 13 Oct 2026 14:00:39 +0000
Manifest this update: Tue 13 Oct 2026 14:00:39 +0000
Manifest next update: Wed 14 Oct 2026 14:00:39 +0000
Files and hashes: 1: HGnHYzivyQhbj71mm4t0vXqS1DE.crl (hash: 1QaWesHoAsHXEjGgOhwHMrk5kOHBqR5RbmtJTNPKVbY=)
2: WAiJPERlMEAh5qrgyMMcndKbs6c.roa (hash: zfIldmOVBvuxzGlnGLqlwDlsMvOVa6R4F1tNInZRtk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:90:b8:72:45:6a:8f:3f:48:6a:8c:11:ee:6e:61:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
Validity
Not Before: Oct 13 14:00:39 2026 GMT
Not After : Oct 14 14:00:39 2026 GMT
Subject: CN=03c3e6c65a313b62260d42e826d9f4084fbcbc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c6:f9:11:dc:7a:d7:3a:b1:d7:c0:3b:c6:35:
e3:20:2a:e6:a7:62:d0:0d:6d:58:93:ac:a6:64:4e:
cc:c8:9f:8c:03:de:a1:e8:60:d7:c0:55:fd:db:79:
1d:91:f1:3e:03:6b:03:3e:2d:b8:ff:93:a4:fb:70:
f2:07:92:48:20:c5:c2:f4:e3:49:36:25:7c:58:ca:
33:1b:b7:59:2a:38:6b:26:51:66:54:72:84:e1:fb:
16:77:b8:6f:e3:2c:04:cc:f1:1b:fc:aa:e8:06:87:
71:3a:57:19:c1:6c:5c:67:cd:71:d3:ee:5d:b9:4b:
61:1c:f8:27:1e:03:de:42:e8:5c:11:86:83:66:9c:
06:d9:f3:6a:6f:be:77:14:5b:3e:57:c5:ca:2b:81:
f1:e6:48:54:92:eb:c7:bf:90:1a:01:d5:fa:2a:68:
c4:b3:36:cb:0f:ba:ae:c0:50:94:ac:e1:66:00:c5:
25:d7:cf:ab:11:8e:09:83:6b:23:f8:28:f0:d5:ad:
bb:cd:e8:0e:54:f9:7e:90:6a:bc:fd:41:57:14:69:
fa:c1:33:c7:80:7d:82:06:ee:95:1e:3a:47:e8:64:
64:55:24:61:6f:a2:9c:4a:e0:a4:46:e4:3b:60:80:
5f:aa:ce:20:f4:30:93:a7:09:02:53:a9:22:ef:ad:
67:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C3:E6:C6:5A:31:3B:62:26:0D:42:E8:26:D9:F4:08:4F:BC:BC:5E
X509v3 Authority Key Identifier:
keyid:1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f2:f2:b7:81:23:55:04:94:71:e7:6a:39:75:36:bf:ee:14:
27:49:b1:e0:0c:58:97:40:84:f1:f5:c3:8a:d3:f0:25:48:f6:
5f:43:a0:ce:01:95:1e:15:b7:6d:5b:21:56:36:55:15:ef:ae:
4d:30:20:be:21:c2:55:f3:cb:1f:9f:fc:f5:bf:81:6c:9a:7b:
17:fe:ce:88:ce:f3:db:a3:ab:b9:7e:54:e8:ff:6b:45:0e:78:
86:6d:2f:83:8c:96:11:6d:ef:f8:d5:25:66:f7:08:87:c0:1e:
be:76:0c:c6:81:90:4e:b5:12:0f:d5:24:5b:81:dd:f7:82:50:
ce:9f:df:6a:41:77:96:0d:1e:0c:80:d0:cd:1a:94:e1:07:70:
1d:fe:0b:0b:4a:55:80:a4:33:03:77:95:2e:8d:c8:b9:72:99:
0a:0e:bb:91:e1:7c:3b:03:8c:1a:ac:79:4c:47:17:2c:34:ee:
c5:b5:cb:52:d6:4f:5f:59:e8:0c:e9:ab:a8:39:4b:c2:82:37:
40:3f:c6:02:4f:e0:e2:ba:3a:2a:3d:49:40:5c:de:04:25:7d:
44:89:11:40:ab:ef:23:30:c4:b8:c5:97:27:5e:cc:a4:af:f4:
45:76:23:ec:ca:81:7a:e9:cb:1c:41:05:51:3a:ea:a4:e1:3f:
71:ec:47:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE1kLhyRWqPP0hqjBHubmGIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNjljNzYzMzhhZmM5MDg1YjhmYmQ2NjliOGI3NGJkN2E5
MmQ0MzEwHhcNMjYxMDEzMTQwMDM5WhcNMjYxMDE0MTQwMDM5WjAzMTEwLwYDVQQD
EygwM2MzZTZjNjVhMzEzYjYyMjYwZDQyZTgyNmQ5ZjQwODRmYmNiYzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28b5Edx61zqx18A7xjXjICrmp2LQ
DW1Yk6ymZE7MyJ+MA96h6GDXwFX923kdkfE+A2sDPi24/5Ok+3DyB5JIIMXC9ONJ
NiV8WMozG7dZKjhrJlFmVHKE4fsWd7hv4ywEzPEb/KroBodxOlcZwWxcZ81x0+5d
uUthHPgnHgPeQuhcEYaDZpwG2fNqb753FFs+V8XKK4Hx5khUkuvHv5AaAdX6KmjE
szbLD7quwFCUrOFmAMUl18+rEY4Jg2sj+Cjw1a27zegOVPl+kGq8/UFXFGn6wTPH
gH2CBu6VHjpH6GRkVSRhb6KcSuCkRuQ7YIBfqs4g9DCTpwkCU6ki761ntwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPD5sZaMTtiJg1C6CbZ9AhPvLxeMB8GA1UdIwQY
MBaAFBxpx2M4r8kIW4+9ZpuLdL16ktQxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEduSFl6aXZ5UWhiajcxbW00dDB2WHFTMURFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9hMjA4OGItYTEyNi00YmE2LTg3MWMt
NTc1OWI0MjdmNGQxLzEvSEduSFl6aXZ5UWhiajcxbW00dDB2WHFTMURFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9hMjA4OGItYTEyNi00YmE2LTg3MWMtNTc1OWI0MjdmNGQx
LzEvSEduSFl6aXZ5UWhiajcxbW00dDB2WHFTMURFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/Lyt4Ej
VQSUcedqOXU2v+4UJ0mx4AxYl0CE8fXDitPwJUj2X0OgzgGVHhW3bVshVjZVFe+u
TTAgviHCVfPLH5/89b+BbJp7F/7OiM7z26OruX5U6P9rRQ54hm0vg4yWEW3v+NUl
ZvcIh8AevnYMxoGQTrUSD9UkW4Hd94JQzp/fakF3lg0eDIDQzRqU4QdwHf4LC0pV
gKQzA3eVLo3IuXKZCg67keF8OwOMGqx5TEcXLDTuxbXLUtZPX1noDOmrqDlLwoI3
QD/GAk/g4ro6Kj1JQFzeBCV9RIkRQKvvIzDEuMWXJ17MpK/0RXYj7MqBeunLHEEF
UTrqpOE/cexHyQ==
-----END CERTIFICATE-----
Generated at Tue Oct 13 19:46:05 2026 by rpki-client