Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
File: HWhumKzyo3vyrsaYB-aWQGCXnLg.mft (raw, json)
Hash identifier: BeFTNNZQasmEm9IqydzhLOQIc/bUaLXKyjGfioud6Zw=
Subject key identifier: CC:30:9F:60:E7:3F:52:E1:E1:3E:B4:08:E2:3F:06:50:94:66:B7:65
Authority key identifier: 1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8
Certificate issuer: /CN=1d686e98acf2a37bf2aec69807e6964060979cb8
Certificate serial: 019CAC105A5444A0227A8791E85D191A2374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 01:01:18 +0000
Manifest this update: Mon 02 Mar 2026 01:01:18 +0000
Manifest next update: Tue 03 Mar 2026 01:01:18 +0000
Files and hashes: 1: HWhumKzyo3vyrsaYB-aWQGCXnLg.crl (hash: ztpCD6tyx8lGwJKKdETY/o0jwqDsjuzRbm1h2+r1qCI=)
2: jo-cApUMfytJRLjyqZu8PQpfm7Q.roa (hash: nKsoRDB1XLESPLhaJ1oOEaKx2I9wuaAQLSTqRK4tXpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:5a:54:44:a0:22:7a:87:91:e8:5d:19:1a:23:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d686e98acf2a37bf2aec69807e6964060979cb8
Validity
Not Before: Mar 2 01:01:18 2026 GMT
Not After : Mar 3 01:01:18 2026 GMT
Subject: CN=cc309f60e73f52e1e13eb408e23f06509466b765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d4:ed:5f:b6:ba:66:a1:3f:04:53:51:28:a9:
c3:14:61:20:01:14:be:47:f5:d4:0e:7b:5c:65:04:
3c:94:58:aa:34:88:81:e3:b4:c6:fa:2c:68:27:97:
64:b0:9a:c5:e2:d4:91:44:90:6a:6e:01:29:32:01:
8b:67:03:4f:25:6f:c3:55:6f:66:21:b2:60:5c:89:
20:78:ed:30:1f:ce:5c:0e:31:0c:2d:77:36:4f:d5:
09:d6:ad:be:25:cc:cc:87:be:0d:c8:cf:dd:12:bd:
a4:4b:05:2b:36:48:64:a3:d5:d9:60:c3:51:d4:86:
68:d7:43:c8:58:53:6d:77:6a:04:02:50:49:ef:05:
06:36:90:71:ce:ab:e2:92:e2:aa:c6:dd:30:58:03:
41:fe:1f:cb:77:6c:51:b2:ed:ef:00:5b:7c:26:63:
50:4d:00:4d:e9:d5:4f:dd:40:07:c7:a6:d6:a3:04:
54:c0:48:3d:86:35:51:73:eb:31:f6:b1:31:7d:91:
50:ee:9b:ff:be:60:dc:6f:71:ce:4b:87:81:04:a9:
c7:d9:a7:2c:41:4e:04:66:af:30:36:b8:0f:77:0d:
0a:5d:95:60:95:75:25:2a:c6:a1:e1:e5:ec:f3:c5:
8c:f4:eb:0f:a9:54:01:83:c3:24:22:c9:f4:02:df:
46:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:30:9F:60:E7:3F:52:E1:E1:3E:B4:08:E2:3F:06:50:94:66:B7:65
X509v3 Authority Key Identifier:
keyid:1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e0:8c:00:14:d2:87:55:73:68:72:59:3e:59:ff:82:6d:ea:
1d:63:bb:9a:21:82:4f:77:ba:0a:59:24:1d:1b:52:db:9d:50:
27:85:ff:61:29:02:d6:08:72:0c:9e:03:df:09:ea:b8:27:6e:
c7:12:e3:54:da:d5:4d:c9:cf:b8:c7:bb:08:04:05:65:73:1d:
f2:6f:d0:3e:60:9c:22:bd:f5:ed:2a:46:46:05:be:1a:fc:9a:
cb:9a:76:88:90:36:14:62:3d:bd:85:58:65:b5:14:f3:a0:19:
ec:25:82:f0:ed:35:71:7d:fe:7b:9c:8f:75:4a:7b:e7:7b:b4:
e9:8c:da:78:1d:60:f9:28:7f:49:1c:bb:35:12:9f:ad:cc:d3:
05:44:24:4f:8d:7c:c9:7e:26:7c:78:aa:1e:71:72:f5:0d:48:
f2:e4:79:7d:11:0c:d5:e4:33:06:4c:23:ca:5e:06:a3:0e:2f:
72:a9:e5:55:2b:ac:76:64:1c:f6:07:7f:a8:01:fe:20:26:00:
ce:2b:26:47:16:1c:2e:dd:10:a2:0e:27:90:df:f3:1a:46:ba:
b6:a3:32:cc:58:e7:e5:3e:13:dc:49:a6:6a:7b:f6:b4:26:a1:
81:c3:07:63:3a:78:ce:6c:15:7b:74:10:cb:d0:8f:d8:ad:8d:
d2:44:9f:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysEFpURKAieoeR6F0ZGiN0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNjg2ZTk4YWNmMmEzN2JmMmFlYzY5ODA3ZTY5NjQwNjA5
NzljYjgwHhcNMjYwMzAyMDEwMTE4WhcNMjYwMzAzMDEwMTE4WjAzMTEwLwYDVQQD
EyhjYzMwOWY2MGU3M2Y1MmUxZTEzZWI0MDhlMjNmMDY1MDk0NjZiNzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttTtX7a6ZqE/BFNRKKnDFGEgARS+
R/XUDntcZQQ8lFiqNIiB47TG+ixoJ5dksJrF4tSRRJBqbgEpMgGLZwNPJW/DVW9m
IbJgXIkgeO0wH85cDjEMLXc2T9UJ1q2+JczMh74NyM/dEr2kSwUrNkhko9XZYMNR
1IZo10PIWFNtd2oEAlBJ7wUGNpBxzqvikuKqxt0wWANB/h/Ld2xRsu3vAFt8JmNQ
TQBN6dVP3UAHx6bWowRUwEg9hjVRc+sx9rExfZFQ7pv/vmDcb3HOS4eBBKnH2acs
QU4EZq8wNrgPdw0KXZVglXUlKsah4eXs88WM9OsPqVQBg8MkIsn0At9GKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwwn2DnP1Lh4T60COI/BlCUZrdlMB8GA1UdIwQY
MBaAFB1obpis8qN78q7GmAfmlkBgl5y4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFdodW1LenlvM3Z5cnNhWUItYVdRR0NYbkxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9hODc3YzgtZTdjYi00NTQwLWJkNDMt
NWFjZGJmNDc0NTQ4LzEvSFdodW1LenlvM3Z5cnNhWUItYVdRR0NYbkxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9hODc3YzgtZTdjYi00NTQwLWJkNDMtNWFjZGJmNDc0NTQ4
LzEvSFdodW1LenlvM3Z5cnNhWUItYVdRR0NYbkxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGuCMABTS
h1VzaHJZPln/gm3qHWO7miGCT3e6ClkkHRtS251QJ4X/YSkC1ghyDJ4D3wnquCdu
xxLjVNrVTcnPuMe7CAQFZXMd8m/QPmCcIr317SpGRgW+Gvyay5p2iJA2FGI9vYVY
ZbUU86AZ7CWC8O01cX3+e5yPdUp753u06YzaeB1g+Sh/SRy7NRKfrczTBUQkT418
yX4mfHiqHnFy9Q1I8uR5fREM1eQzBkwjyl4Gow4vcqnlVSusdmQc9gd/qAH+ICYA
zismRxYcLt0Qog4nkN/zGka6tqMyzFjn5T4T3Emmanv2tCahgcMHYzp4zmwVe3QQ
y9CP2K2N0kSfKA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:36 2026 by rpki-client