Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
File: pg0SlAGyaTo41bQ3Pcdge_hbim4.mft (raw, json)
Hash identifier: WyIX81rhxWDqQwDEPhHWypJQupvefOwdg9L6xx6M41k=
Subject key identifier: 55:54:EE:4D:7D:A2:D7:F1:41:F8:C4:60:7C:13:58:2C:26:7B:A9:5C
Authority key identifier: A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E
Certificate issuer: /CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
Certificate serial: 019CAC7DF48F20D81B808FF158A75493FC14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
Manifest number: 16FF
Signing time: Mon 02 Mar 2026 03:01:01 +0000
Manifest this update: Mon 02 Mar 2026 03:01:01 +0000
Manifest next update: Tue 03 Mar 2026 03:01:01 +0000
Files and hashes: 1: Il9HTm1cbmAODNYnWgviSsE98jM.roa (hash: 1b1CWbUFPO+dEyWsVHF8SzkLadyx+wcJAfCiROD6bO0=)
2: pg0SlAGyaTo41bQ3Pcdge_hbim4.crl (hash: ZrPeRzEsyxp28/d4wWtBinRH4t1Nt6LcCdODPq3QhK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:f4:8f:20:d8:1b:80:8f:f1:58:a7:54:93:fc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
Validity
Not Before: Mar 2 03:01:01 2026 GMT
Not After : Mar 3 03:01:01 2026 GMT
Subject: CN=5554ee4d7da2d7f141f8c4607c13582c267ba95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1f:2f:63:e7:6b:a8:8c:7a:63:27:d8:70:16:
d7:cd:77:a0:c2:8e:8b:1f:1c:9d:89:1f:4f:35:b5:
48:f0:13:09:a1:97:40:c1:1c:88:12:72:55:50:5b:
ef:6a:00:55:c4:59:6b:5e:02:f5:2d:46:80:29:5c:
c7:34:d7:2c:b7:2d:e7:3f:ea:a0:6a:f0:25:7b:0c:
6f:6a:d7:a6:81:19:38:66:94:9e:83:4d:94:b0:e2:
66:2f:90:39:39:e7:60:7a:fc:6a:76:99:8b:8f:48:
65:6b:c5:6f:68:66:5a:ef:9f:19:2f:5d:0d:e6:1e:
ea:b4:c8:4b:73:8d:09:78:d2:52:48:14:a3:3e:de:
f2:a6:91:ff:83:5e:d7:fb:42:09:54:72:c6:f4:40:
02:5b:78:96:4b:74:08:86:cd:8c:a8:94:f6:35:a6:
72:87:82:81:50:28:ab:9f:f3:64:4e:8e:ee:61:13:
79:d9:59:cb:d5:6c:c1:d9:e4:f2:0d:b7:e3:79:b3:
71:09:65:49:3e:65:68:cc:a2:c7:5f:e5:f7:27:1e:
8f:1c:96:af:b5:b3:54:ef:85:fd:ee:03:f0:60:7e:
e5:d4:8d:3a:92:f4:3c:80:e0:49:d8:9e:8a:df:34:
d4:a0:05:49:fc:25:07:ae:98:20:9a:57:c9:05:1d:
c3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:54:EE:4D:7D:A2:D7:F1:41:F8:C4:60:7C:13:58:2C:26:7B:A9:5C
X509v3 Authority Key Identifier:
keyid:A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:68:00:ae:13:21:f8:88:18:f0:4a:e8:de:5e:d3:6b:0e:a5:
86:bc:2f:db:18:8a:c7:fd:87:4d:6d:97:a4:cc:ac:65:23:a0:
05:99:a0:64:ce:d5:79:d6:dd:46:f2:34:3f:90:5f:37:54:74:
56:07:1e:e2:3f:04:5d:30:50:06:06:4b:86:7a:32:a0:58:f4:
35:db:5c:bf:99:03:d1:74:c1:fc:f2:c2:96:1e:da:52:ae:f4:
5c:ce:ca:67:a3:82:44:ad:cd:75:20:9b:d8:72:fd:7b:f2:29:
b5:9b:2b:eb:64:ee:2f:b7:7b:f1:68:3d:d8:9f:c2:87:73:87:
7f:30:55:4d:59:21:af:4d:d9:db:ad:3e:9c:49:39:e8:bf:02:
be:73:e5:eb:9c:24:2b:c1:c4:e5:65:b6:bc:a0:ef:5b:cd:24:
59:4b:4a:3c:b3:02:3e:36:c0:07:25:06:fc:86:c8:fb:76:75:
0b:60:59:43:1c:02:7b:d6:f9:2a:93:5c:21:9f:35:d3:43:2a:
da:2d:68:29:fd:a5:27:26:c9:2d:bd:29:da:e5:b9:ce:37:7f:
5c:5d:c6:b4:ab:26:d1:47:44:e8:2a:6a:e4:55:6a:d0:5e:d1:
87:71:dd:87:a6:a8:27:8e:f3:ac:1d:94:56:ad:76:cc:b5:f4:
05:0d:c9:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysffSPINgbgI/xWKdUk/wUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MGQxMjk0MDFiMjY5M2EzOGQ1YjQzNzNkYzc2MDdiZjg1
YjhhNmUwHhcNMjYwMzAyMDMwMTAxWhcNMjYwMzAzMDMwMTAxWjAzMTEwLwYDVQQD
Eyg1NTU0ZWU0ZDdkYTJkN2YxNDFmOGM0NjA3YzEzNTgyYzI2N2JhOTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh8vY+drqIx6YyfYcBbXzXegwo6L
HxydiR9PNbVI8BMJoZdAwRyIEnJVUFvvagBVxFlrXgL1LUaAKVzHNNcsty3nP+qg
avAlewxvatemgRk4ZpSeg02UsOJmL5A5OedgevxqdpmLj0hla8VvaGZa758ZL10N
5h7qtMhLc40JeNJSSBSjPt7yppH/g17X+0IJVHLG9EACW3iWS3QIhs2MqJT2NaZy
h4KBUCirn/NkTo7uYRN52VnL1WzB2eTyDbfjebNxCWVJPmVozKLHX+X3Jx6PHJav
tbNU74X97gPwYH7l1I06kvQ8gOBJ2J6K3zTUoAVJ/CUHrpggmlfJBR3DzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVU7k19otfxQfjEYHwTWCwme6lcMB8GA1UdIwQY
MBaAFKYNEpQBsmk6ONW0Nz3HYHv4W4puMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGcwU2xBR3lhVG80MWJRM1BjZGdlX2hiaW00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8zZDExZDgtZmFlMC00Yjk3LWFmZGYt
OWMyYmJkOGM5NDk2LzEvcGcwU2xBR3lhVG80MWJRM1BjZGdlX2hiaW00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8zZDExZDgtZmFlMC00Yjk3LWFmZGYtOWMyYmJkOGM5NDk2
LzEvcGcwU2xBR3lhVG80MWJRM1BjZGdlX2hiaW00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWgArhMh
+IgY8Ero3l7Taw6lhrwv2xiKx/2HTW2XpMysZSOgBZmgZM7VedbdRvI0P5BfN1R0
Vgce4j8EXTBQBgZLhnoyoFj0Ndtcv5kD0XTB/PLClh7aUq70XM7KZ6OCRK3NdSCb
2HL9e/IptZsr62TuL7d78Wg92J/Ch3OHfzBVTVkhr03Z260+nEk56L8CvnPl65wk
K8HE5WW2vKDvW80kWUtKPLMCPjbAByUG/IbI+3Z1C2BZQxwCe9b5KpNcIZ8100Mq
2i1oKf2lJybJLb0p2uW5zjd/XF3GtKsm0UdE6Cpq5FVq0F7Rh3Hdh6aoJ47zrB2U
Vq12zLX0BQ3Jcg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:15:53 2026 by rpki-client