Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
File: hC4XioXWwwtXKyAmHET456S_wnI.mft (raw, json)
Hash identifier: AaSJplJbuB2L4xTVgQP/ndwxDKfqBJ44UKzcmMq1Lr0=
Subject key identifier: 21:F2:69:51:2F:E5:B0:E2:FA:69:16:A3:D2:FA:C3:F3:35:81:9D:9E
Authority key identifier: 84:2E:17:8A:85:D6:C3:0B:57:2B:20:26:1C:44:F8:E7:A4:BF:C2:72
Certificate issuer: /CN=842e178a85d6c30b572b20261c44f8e7a4bfc272
Certificate serial: 019CAA584468F9064C991F540AA3C23D4553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
Manifest number: 0FD6
Signing time: Sun 01 Mar 2026 17:00:37 +0000
Manifest this update: Sun 01 Mar 2026 17:00:37 +0000
Manifest next update: Mon 02 Mar 2026 17:00:37 +0000
Files and hashes: 1: 3widJOutrAHh97YKSptO-b1dBlc.roa (hash: WjqlvhNeLoXjkFAEnq8uZuntv6RT+a3RPjop0QMbaM8=)
2: hC4XioXWwwtXKyAmHET456S_wnI.crl (hash: 717+xbKzzTc1cerLRalwXu4cLvO05YhF2oBEc5kTDCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:44:68:f9:06:4c:99:1f:54:0a:a3:c2:3d:45:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=842e178a85d6c30b572b20261c44f8e7a4bfc272
Validity
Not Before: Mar 1 17:00:37 2026 GMT
Not After : Mar 2 17:00:37 2026 GMT
Subject: CN=21f269512fe5b0e2fa6916a3d2fac3f335819d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:19:57:f2:4a:3e:03:0e:e4:8d:25:d8:3a:
3c:8b:14:ef:2c:c7:92:d9:92:a0:c3:8d:88:a3:6a:
f4:04:d9:fc:9a:53:79:c6:8c:59:52:9e:32:21:23:
c4:96:98:4a:f7:51:91:32:70:ec:3d:b1:23:1d:49:
dd:1f:29:45:be:61:e1:16:68:c6:07:c9:35:bb:3c:
b7:b8:09:3b:d5:aa:34:d8:0f:09:df:34:30:45:d8:
02:31:ea:65:7e:08:9b:59:bd:06:6a:c2:c3:39:50:
9b:ad:10:44:2d:dc:31:4d:32:93:7a:3d:37:4c:44:
55:43:81:cc:a4:7e:05:93:3f:3b:fc:56:1d:9d:2f:
22:12:c7:e6:d4:9f:bc:f8:fe:e4:97:e3:d7:33:2f:
9d:d0:e6:bc:fe:e3:80:9e:00:84:14:ca:04:26:11:
3f:a1:94:99:02:d0:9f:2c:0b:d7:9a:d4:d3:e2:9b:
03:c7:e8:2c:49:be:cc:f5:f3:3a:3b:25:f9:dd:52:
ad:c8:78:5c:71:f6:0e:75:1d:5a:db:04:f9:87:c0:
b5:1d:cf:d6:81:f1:2e:31:ea:90:31:91:1e:5f:65:
53:39:ab:b3:ab:ec:3c:a3:1e:c4:d1:8b:74:94:f8:
c8:92:98:10:b0:62:cd:8a:d1:8d:9a:e0:aa:09:b3:
9e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F2:69:51:2F:E5:B0:E2:FA:69:16:A3:D2:FA:C3:F3:35:81:9D:9E
X509v3 Authority Key Identifier:
keyid:84:2E:17:8A:85:D6:C3:0B:57:2B:20:26:1C:44:F8:E7:A4:BF:C2:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a2:c4:ba:22:c3:b3:6a:e3:6f:f7:b6:34:ad:60:b6:65:5a:
d3:c1:6e:8b:fb:ff:f2:61:f8:6d:c0:3a:90:b2:ab:1e:24:f8:
63:5c:ee:84:e3:79:2e:70:2d:9d:f7:7f:18:69:a6:ab:b7:39:
4d:85:d5:b3:12:e1:37:a6:c2:3e:d5:86:68:17:50:ad:af:3d:
fa:a2:df:a8:c1:c3:b8:7d:ec:a3:fb:68:5c:63:45:ec:9a:01:
c1:52:8f:be:46:ac:de:ff:80:c1:65:f2:53:02:aa:4c:8e:1b:
7c:b5:3d:93:c0:9a:b3:f1:6d:25:5e:d1:6e:a7:c0:25:df:76:
ae:96:46:0f:0f:63:5d:a1:dc:db:29:35:06:cd:85:d0:d5:03:
9a:eb:f2:80:70:40:27:81:c7:d6:12:5e:ab:94:e1:1b:f0:dd:
e8:ab:c2:0b:51:5f:f7:72:1c:d4:e1:22:57:96:43:bb:74:5c:
8d:ee:95:31:ef:aa:cb:86:0a:d0:c3:b5:0a:68:02:40:97:56:
72:fb:35:44:86:25:30:3f:ab:31:ca:ac:d5:22:25:4c:03:f8:
b2:f9:92:ea:44:ea:ad:29:d9:e5:1e:95:6c:b5:ea:f3:6c:f7:
8a:15:15:ea:e1:01:a9:3e:35:50:15:01:79:73:1c:9f:34:bc:
0e:55:5e:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWERo+QZMmR9UCqPCPUVTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MmUxNzhhODVkNmMzMGI1NzJiMjAyNjFjNDRmOGU3YTRi
ZmMyNzIwHhcNMjYwMzAxMTcwMDM3WhcNMjYwMzAyMTcwMDM3WjAzMTEwLwYDVQQD
EygyMWYyNjk1MTJmZTViMGUyZmE2OTE2YTNkMmZhYzNmMzM1ODE5ZDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqUZV/JKPgMO5I0l2Do8ixTvLMeS
2ZKgw42Io2r0BNn8mlN5xoxZUp4yISPElphK91GRMnDsPbEjHUndHylFvmHhFmjG
B8k1uzy3uAk71ao02A8J3zQwRdgCMeplfgibWb0GasLDOVCbrRBELdwxTTKTej03
TERVQ4HMpH4Fkz87/FYdnS8iEsfm1J+8+P7kl+PXMy+d0Oa8/uOAngCEFMoEJhE/
oZSZAtCfLAvXmtTT4psDx+gsSb7M9fM6OyX53VKtyHhccfYOdR1a2wT5h8C1Hc/W
gfEuMeqQMZEeX2VTOauzq+w8ox7E0Yt0lPjIkpgQsGLNitGNmuCqCbOeeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHyaVEv5bDi+mkWo9L6w/M1gZ2eMB8GA1UdIwQY
MBaAFIQuF4qF1sMLVysgJhxE+Oekv8JyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEM0WGlvWFd3d3RYS3lBbUhFVDQ1NlNfd25JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8wNzMwZDEtZmVlMy00NjU0LTlkZWEt
ZTE4N2JlOWI2YzIzLzEvaEM0WGlvWFd3d3RYS3lBbUhFVDQ1NlNfd25JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8wNzMwZDEtZmVlMy00NjU0LTlkZWEtZTE4N2JlOWI2YzIz
LzEvaEM0WGlvWFd3d3RYS3lBbUhFVDQ1NlNfd25JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKaLEuiLD
s2rjb/e2NK1gtmVa08Fui/v/8mH4bcA6kLKrHiT4Y1zuhON5LnAtnfd/GGmmq7c5
TYXVsxLhN6bCPtWGaBdQra89+qLfqMHDuH3so/toXGNF7JoBwVKPvkas3v+AwWXy
UwKqTI4bfLU9k8Cas/FtJV7RbqfAJd92rpZGDw9jXaHc2yk1Bs2F0NUDmuvygHBA
J4HH1hJeq5ThG/Dd6KvCC1Ff93Ic1OEiV5ZDu3Rcje6VMe+qy4YK0MO1CmgCQJdW
cvs1RIYlMD+rMcqs1SIlTAP4svmS6kTqrSnZ5R6VbLXq82z3ihUV6uEBqT41UBUB
eXMcnzS8DlVeuw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:19 2026 by rpki-client