Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
File: hAVuIt0SPINMCkqnRRbV-zzHfdE.mft (raw, json)
Hash identifier: EV/G2jLbo0iq02DlCI+ggFtjy9d3HRKwWGjV7sTy2h8=
Subject key identifier: 03:52:56:17:80:46:E2:BE:4F:85:BD:14:F5:1F:8B:8C:77:4B:E2:E1
Authority key identifier: 84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1
Certificate issuer: /CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1
Certificate serial: 019D9A74B13F405B36CE2BA9C51A785E8C88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
Manifest number: 073E
Signing time: Fri 17 Apr 2026 08:00:31 +0000
Manifest this update: Fri 17 Apr 2026 08:00:31 +0000
Manifest next update: Sat 18 Apr 2026 08:00:31 +0000
Files and hashes: 1: Hwz33O3GEhUPQENUYSweMk7o9iA.roa (hash: 1HTvbTcGZV1b8MpfW8YABdSoijcVRUnqTe0YqNWbdPc=)
2: hAVuIt0SPINMCkqnRRbV-zzHfdE.crl (hash: 7NvhoSoDevxQt4Mut1n4I3XwU5Ea8HLyVQcw7EsCej8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:b1:3f:40:5b:36:ce:2b:a9:c5:1a:78:5e:8c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1
Validity
Not Before: Apr 17 08:00:31 2026 GMT
Not After : Apr 18 08:00:31 2026 GMT
Subject: CN=035256178046e2be4f85bd14f51f8b8c774be2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:5a:6d:84:02:c0:b5:96:4a:60:06:8c:fc:
91:cf:03:65:84:eb:87:b4:23:94:49:ab:71:24:50:
82:ab:0f:32:d5:d5:48:a7:84:71:33:61:da:e1:ae:
7c:2a:3a:4c:eb:c9:df:61:19:1a:af:40:d1:ab:93:
48:a6:82:da:b3:6b:c5:66:cc:1d:19:31:a8:51:2d:
1e:f7:04:ab:20:8e:5e:9d:d3:45:8a:3d:e2:22:05:
1e:21:29:a8:fd:7b:e6:c3:0a:9f:43:c9:10:90:66:
be:69:ab:d8:c1:b4:65:e5:e1:5a:c3:c3:59:68:e1:
2a:6f:f8:05:6a:8e:89:82:68:a9:bd:57:c3:7e:8a:
6b:02:16:d4:c8:8a:09:ab:c0:6f:ac:98:6a:4e:a2:
07:9a:35:c5:b7:1c:a0:e8:64:f9:f1:15:dd:db:78:
90:c6:48:21:65:b5:b4:7a:e5:73:0b:37:19:ae:7b:
09:8e:f1:a8:fa:62:1f:7b:46:97:74:6f:17:b0:98:
94:09:70:53:e2:ea:3d:5e:35:de:da:76:42:05:76:
0d:79:dd:f2:49:fe:8d:df:94:7b:7b:de:90:b7:99:
8d:1d:69:e8:0e:ad:94:d0:d5:33:78:a9:f5:49:c8:
f0:81:3a:24:76:37:f9:6a:23:7c:cb:a1:29:3a:77:
d9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:52:56:17:80:46:E2:BE:4F:85:BD:14:F5:1F:8B:8C:77:4B:E2:E1
X509v3 Authority Key Identifier:
keyid:84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b3:9b:a8:9e:0f:25:db:f1:6d:d4:9a:d3:2f:98:98:8b:ed:
0f:ab:93:c5:4e:81:c7:10:d4:15:c9:a7:d7:b5:0e:57:2b:25:
f9:63:7a:7b:b8:f9:80:42:cc:00:a0:85:2d:69:fa:5d:ad:be:
47:91:80:f1:6b:bc:3d:71:1c:fe:d0:9b:9f:fd:6d:43:ad:53:
58:32:c4:e2:66:f2:de:50:0d:dd:89:60:00:53:aa:c6:3c:f8:
d0:b2:a1:27:41:b5:99:31:bc:cd:5b:54:ee:da:f2:6f:a8:4b:
1a:14:92:13:8b:2d:99:a8:d0:2e:b7:52:57:58:2f:57:4f:0a:
07:8d:a4:81:63:4a:17:14:8f:f7:9e:30:b7:6c:8c:b2:2b:69:
94:2c:08:b9:89:63:d3:3c:4a:56:6d:ef:b7:fe:4a:af:88:9b:
49:fb:3d:5c:76:04:19:82:66:2a:56:2e:33:fe:ca:ed:3d:7b:
ad:8d:d6:b1:e4:77:09:a6:68:30:d9:b7:c2:bb:57:de:9d:b2:
da:12:f0:48:90:48:f8:7b:d3:30:36:a9:5a:b5:6d:d3:aa:92:
64:43:b6:87:7a:96:30:ee:ce:2d:2c:bc:00:ab:dc:2f:e9:31:
3e:55:c3:8e:a1:7c:7a:52:91:42:ad:82:c6:f5:01:b2:89:52:
71:94:87:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adLE/QFs2ziupxRp4XoyIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MDU2ZTIyZGQxMjNjODM0YzBhNGFhNzQ1MTZkNWZiM2Nj
NzdkZDEwHhcNMjYwNDE3MDgwMDMxWhcNMjYwNDE4MDgwMDMxWjAzMTEwLwYDVQQD
EygwMzUyNTYxNzgwNDZlMmJlNGY4NWJkMTRmNTFmOGI4Yzc3NGJlMmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtItabYQCwLWWSmAGjPyRzwNlhOuH
tCOUSatxJFCCqw8y1dVIp4RxM2Ha4a58KjpM68nfYRkar0DRq5NIpoLas2vFZswd
GTGoUS0e9wSrII5endNFij3iIgUeISmo/XvmwwqfQ8kQkGa+aavYwbRl5eFaw8NZ
aOEqb/gFao6JgmipvVfDfoprAhbUyIoJq8BvrJhqTqIHmjXFtxyg6GT58RXd23iQ
xkghZbW0euVzCzcZrnsJjvGo+mIfe0aXdG8XsJiUCXBT4uo9XjXe2nZCBXYNed3y
Sf6N35R7e96Qt5mNHWnoDq2U0NUzeKn1ScjwgTokdjf5aiN8y6EpOnfZbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANSVheARuK+T4W9FPUfi4x3S+LhMB8GA1UdIwQY
MBaAFIQFbiLdEjyDTApKp0UW1fs8x33RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEFWdUl0MFNQSU5NQ2txblJSYlYtenpIZmRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81M2E3MjEtMWY5MS00ODhhLWI1YTMt
NTljOWMzZmI5OTQ3LzEvaEFWdUl0MFNQSU5NQ2txblJSYlYtenpIZmRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC81M2E3MjEtMWY5MS00ODhhLWI1YTMtNTljOWMzZmI5OTQ3
LzEvaEFWdUl0MFNQSU5NQ2txblJSYlYtenpIZmRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7ObqJ4P
JdvxbdSa0y+YmIvtD6uTxU6BxxDUFcmn17UOVysl+WN6e7j5gELMAKCFLWn6Xa2+
R5GA8Wu8PXEc/tCbn/1tQ61TWDLE4mby3lAN3YlgAFOqxjz40LKhJ0G1mTG8zVtU
7tryb6hLGhSSE4stmajQLrdSV1gvV08KB42kgWNKFxSP954wt2yMsitplCwIuYlj
0zxKVm3vt/5Kr4ibSfs9XHYEGYJmKlYuM/7K7T17rY3WseR3CaZoMNm3wrtX3p2y
2hLwSJBI+HvTMDapWrVt06qSZEO2h3qWMO7OLSy8AKvcL+kxPlXDjqF8elKRQq2C
xvUBsolScZSHzQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:00:01 2026 by rpki-client