Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
File: HsBDSlw88jdMo2AzGSaufSSsNFs.mft (raw, json)
Hash identifier: 9uilyJMaRwP/zK4aEXIfa7m9Q/xttbDVROk3JlpFr/s=
Subject key identifier: DE:F4:5D:4B:48:3F:AD:3F:17:9A:50:BC:5F:FB:82:8A:6A:2C:12:CB
Authority key identifier: 1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
Certificate issuer: /CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Certificate serial: 019CADC771241D95924806A050FCA39D276D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
Manifest number: 16B1
Signing time: Mon 02 Mar 2026 09:00:54 +0000
Manifest this update: Mon 02 Mar 2026 09:00:54 +0000
Manifest next update: Tue 03 Mar 2026 09:00:54 +0000
Files and hashes: 1: 1-bR6sRmqVUM--gERBLCMb9Ravtw.roa (hash: IEQS2o9NuZUHyISNsWvFCuuFh71uq4ILP2ZvrrGr1Uc=)
2: HsBDSlw88jdMo2AzGSaufSSsNFs.crl (hash: YnDerlbrbT9PsfWGtJNVBMUNnKDUZeHl88PD8ozxlaM=)
3: vbqC7dnIYforI52OCrB0B1B9v_E.roa (hash: l+1hvAkiSw6p++rx/Ga348Dp115kPP0Bh0QVsqmz+I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:71:24:1d:95:92:48:06:a0:50:fc:a3:9d:27:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Validity
Not Before: Mar 2 09:00:54 2026 GMT
Not After : Mar 3 09:00:54 2026 GMT
Subject: CN=def45d4b483fad3f179a50bc5ffb828a6a2c12cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:27:25:d4:60:5c:51:a6:3a:16:72:8d:83:b0:
ed:ab:19:b4:8b:c0:d3:f2:f6:cb:ee:18:71:31:f9:
e1:b7:98:d9:2d:af:10:27:1c:0e:7c:f3:3c:7e:96:
6b:7d:43:49:54:34:f3:8d:a5:c8:e7:5d:fc:02:c3:
79:ba:ea:23:ea:70:a6:d3:8f:fe:9c:d4:51:b8:62:
be:02:40:6e:d6:3d:a1:9c:6d:06:ee:3d:3c:96:a4:
90:e6:b6:79:3e:7a:05:2b:c4:91:59:c6:2e:03:d9:
a2:13:42:53:3a:10:0b:1b:71:74:12:c0:6f:1c:73:
c7:d5:f8:c7:d3:90:5d:0f:8e:17:2e:af:b0:71:da:
ba:dc:59:94:b6:72:94:1a:d7:ab:c2:3b:76:ac:c7:
3a:f3:93:40:2a:19:42:36:48:f6:72:2c:58:54:41:
fb:25:7a:1f:c9:f2:7e:76:6b:09:70:7b:40:e4:c1:
7b:b8:2a:60:74:c3:c5:62:db:6a:59:6c:cb:6e:56:
d1:92:00:1d:39:1a:2d:97:4c:1c:b1:b1:0e:81:a4:
95:36:57:eb:7b:aa:f9:de:b7:8b:ab:89:7f:02:a6:
24:99:e0:e6:89:44:24:b4:c7:d5:7d:16:27:0a:fd:
ea:10:2b:ec:0b:47:f3:ad:33:6e:bf:7d:70:a2:75:
17:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F4:5D:4B:48:3F:AD:3F:17:9A:50:BC:5F:FB:82:8A:6A:2C:12:CB
X509v3 Authority Key Identifier:
keyid:1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f1:3a:c6:87:b6:51:26:22:45:1f:81:13:94:e8:d6:be:e8:
09:0e:3f:f2:32:de:21:94:cf:e1:3d:f1:8b:e4:4d:6e:96:69:
69:a3:10:9b:1a:f3:72:ac:a7:4c:64:a9:82:a1:dd:00:f4:b6:
f4:fb:dd:1a:63:58:08:e4:b2:04:a0:e7:4d:36:b6:ba:f7:58:
ea:b5:df:e4:ef:f2:51:dc:d2:96:73:d7:76:04:9a:9e:0c:1e:
42:23:7f:4d:b8:bd:fd:7b:bd:f9:56:0f:44:5e:be:5c:56:c4:
bb:ce:54:43:b1:b6:e7:a1:f0:36:23:df:56:9d:ca:17:d8:fc:
1f:bf:d9:38:42:c6:0f:c6:95:1c:be:92:61:b8:7e:32:61:b1:
a2:cd:09:d8:37:44:43:fb:88:ce:1f:14:7b:75:08:56:3b:38:
10:30:57:be:6e:13:16:e8:7c:7b:4b:42:33:3a:ee:fb:67:78:
77:b7:96:b9:9b:f8:8c:05:7c:78:f7:94:f2:12:18:46:0a:a2:
71:f4:48:83:72:df:0c:26:f6:5e:ac:14:f4:c2:9b:01:36:e1:
45:56:25:08:77:45:28:12:7b:1f:d6:fc:98:34:b3:f1:ab:12:
ce:5a:68:9b:ae:41:43:a7:b1:59:3e:8b:8f:b3:0b:bc:73:49:
3a:8e:4d:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx3EkHZWSSAagUPyjnSdtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYzA0MzRhNWMzY2YyMzc0Y2EzNjAzMzE5MjZhZTdkMjRh
YzM0NWIwHhcNMjYwMzAyMDkwMDU0WhcNMjYwMzAzMDkwMDU0WjAzMTEwLwYDVQQD
EyhkZWY0NWQ0YjQ4M2ZhZDNmMTc5YTUwYmM1ZmZiODI4YTZhMmMxMmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnScl1GBcUaY6FnKNg7Dtqxm0i8DT
8vbL7hhxMfnht5jZLa8QJxwOfPM8fpZrfUNJVDTzjaXI5138AsN5uuoj6nCm04/+
nNRRuGK+AkBu1j2hnG0G7j08lqSQ5rZ5PnoFK8SRWcYuA9miE0JTOhALG3F0EsBv
HHPH1fjH05BdD44XLq+wcdq63FmUtnKUGterwjt2rMc685NAKhlCNkj2cixYVEH7
JXofyfJ+dmsJcHtA5MF7uCpgdMPFYttqWWzLblbRkgAdORotl0wcsbEOgaSVNlfr
e6r53reLq4l/AqYkmeDmiUQktMfVfRYnCv3qECvsC0fzrTNuv31wonUXgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN70XUtIP60/F5pQvF/7gopqLBLLMB8GA1UdIwQY
MBaAFB7AQ0pcPPI3TKNgMxkmrn0krDRbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHNCRFNsdzg4amRNbzJBekdTYXVmU1NzTkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85YzU0MDQtNWVhNC00Nzc2LThjZWMt
YWVkYmJmNDY4MDI4LzEvSHNCRFNsdzg4amRNbzJBekdTYXVmU1NzTkZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC85YzU0MDQtNWVhNC00Nzc2LThjZWMtYWVkYmJmNDY4MDI4
LzEvSHNCRFNsdzg4amRNbzJBekdTYXVmU1NzTkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPE6xoe2
USYiRR+BE5To1r7oCQ4/8jLeIZTP4T3xi+RNbpZpaaMQmxrzcqynTGSpgqHdAPS2
9PvdGmNYCOSyBKDnTTa2uvdY6rXf5O/yUdzSlnPXdgSangweQiN/Tbi9/Xu9+VYP
RF6+XFbEu85UQ7G256HwNiPfVp3KF9j8H7/ZOELGD8aVHL6SYbh+MmGxos0J2DdE
Q/uIzh8Ue3UIVjs4EDBXvm4TFuh8e0tCMzru+2d4d7eWuZv4jAV8ePeU8hIYRgqi
cfRIg3LfDCb2XqwU9MKbATbhRVYlCHdFKBJ7H9b8mDSz8asSzlpom65BQ6exWT6L
j7MLvHNJOo5NPw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:59:05 2026 by rpki-client