Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
File: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft (raw, json)
Hash identifier: Yfj/ramKL1NEQUcp4rYy8lRIxNKImHowWNwM3mdUGAA=
Subject key identifier: EC:BF:9C:64:62:52:2E:42:0A:56:91:E9:7A:B1:40:57:F3:F7:7A:23
Authority key identifier: 85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
Certificate issuer: /CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Certificate serial: 019CA9EB0B9535F6C26F0314A58671E6455A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
Manifest number: 16DD
Signing time: Sun 01 Mar 2026 15:01:19 +0000
Manifest this update: Sun 01 Mar 2026 15:01:19 +0000
Manifest next update: Mon 02 Mar 2026 15:01:19 +0000
Files and hashes: 1: 4KbAohA8ssFR1i33E3s1iD_d4NM.roa (hash: hNIZfJq4/MLB3UNEqiTbF6882A38pDgGoQNN1odn41g=)
2: 63y8SGT1xErvBSh2Z_hJttu62lM.roa (hash: JI2NXJcRm68/TBBkycOEqEDZ5p5swkLFyZRc8a9XM30=)
3: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl (hash: oTHQCgakKJApX/q34/AIZ3y0IBszgJz9grITYy2UQFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:0b:95:35:f6:c2:6f:03:14:a5:86:71:e6:45:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Validity
Not Before: Mar 1 15:01:19 2026 GMT
Not After : Mar 2 15:01:19 2026 GMT
Subject: CN=ecbf9c6462522e420a5691e97ab14057f3f77a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:e7:ae:e5:5f:00:52:70:89:c5:cd:94:02:
c5:56:88:a8:9b:f9:78:93:81:56:54:8d:a5:98:e1:
0a:55:8c:40:6e:09:cf:fb:e3:b5:19:74:35:e8:b1:
50:1b:e6:50:a0:97:71:b5:7f:1e:db:df:69:55:67:
79:61:9f:8d:3f:6e:df:88:db:0d:2d:50:5b:c9:1f:
e2:92:c4:b7:a4:1b:c7:ee:4b:b8:8d:9d:9b:b1:ae:
41:67:74:b2:13:d5:72:1d:41:15:ef:ab:cd:ec:02:
a0:ab:3c:b1:ec:67:d9:89:49:c5:d4:4b:8b:66:7b:
21:31:59:bd:68:0f:78:5a:22:17:89:0e:ff:35:c1:
bb:2b:03:0f:22:7c:db:dd:c4:7c:59:eb:e5:ae:30:
2c:69:9b:eb:7c:e1:3b:0d:44:79:95:90:cd:8e:a6:
df:ad:75:4a:37:b9:6f:08:d2:57:97:58:06:53:fa:
6d:90:28:1c:95:eb:aa:eb:11:c5:fd:e7:c7:db:f4:
a4:88:55:90:e2:1f:91:bd:43:39:09:46:2a:7d:84:
27:40:fb:29:e6:b8:61:ab:6d:4d:9a:af:1e:b3:27:
95:9c:b8:4c:a9:74:40:d4:fd:02:00:89:27:66:cb:
b7:dc:21:d3:3d:a9:6c:44:75:ed:48:b6:7d:0b:c8:
c5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BF:9C:64:62:52:2E:42:0A:56:91:E9:7A:B1:40:57:F3:F7:7A:23
X509v3 Authority Key Identifier:
keyid:85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:0b:67:87:6d:eb:26:fa:8e:7f:9d:d2:ec:f7:3a:42:0f:ec:
6f:79:39:59:fc:cb:6b:33:e4:de:56:34:a1:f2:16:2d:ad:88:
37:09:bb:b5:62:07:7a:6a:44:d2:da:75:61:b3:45:04:ce:4b:
71:6f:e9:e1:ce:a1:d6:37:ab:02:5b:b2:88:7b:59:cb:cf:f4:
d8:e3:83:52:7b:11:74:1a:23:ee:5c:ea:75:02:f5:f1:0e:13:
3d:7e:56:bb:d9:dd:0c:20:8e:2a:a1:0b:21:57:7f:a1:9d:92:
dc:85:76:69:81:7a:48:90:19:d0:a8:13:86:95:1c:63:bb:f6:
c9:f2:a8:15:31:5a:8e:83:24:06:07:c2:e1:d3:9e:63:5b:90:
d2:f6:c1:0e:fe:1f:39:ba:b9:f7:32:8d:32:b8:84:40:01:21:
23:28:4f:d7:21:8b:3f:dc:3e:41:1f:15:7c:87:14:92:39:5c:
84:1f:da:e9:35:61:60:9b:85:83:09:e5:19:b4:f4:e9:61:3a:
1c:94:47:9f:6d:6c:ab:2b:a7:04:32:76:db:ed:f7:87:22:7b:
67:cf:c0:25:f1:5d:31:95:b0:f6:76:85:11:78:0c:65:12:26:
ab:47:b9:26:10:ab:91:a6:65:a3:3b:d9:5e:81:0a:14:e4:73:
0f:6b:ee:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp6wuVNfbCbwMUpYZx5kVaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MzcwY2M1ZDI2MGYzZTJhZWZmNWRkOGY4ZjRhNDE1YTIz
NDVhODEwHhcNMjYwMzAxMTUwMTE5WhcNMjYwMzAyMTUwMTE5WjAzMTEwLwYDVQQD
EyhlY2JmOWM2NDYyNTIyZTQyMGE1NjkxZTk3YWIxNDA1N2YzZjc3YTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsODnruVfAFJwicXNlALFVoiom/l4
k4FWVI2lmOEKVYxAbgnP++O1GXQ16LFQG+ZQoJdxtX8e299pVWd5YZ+NP27fiNsN
LVBbyR/iksS3pBvH7ku4jZ2bsa5BZ3SyE9VyHUEV76vN7AKgqzyx7GfZiUnF1EuL
ZnshMVm9aA94WiIXiQ7/NcG7KwMPInzb3cR8WevlrjAsaZvrfOE7DUR5lZDNjqbf
rXVKN7lvCNJXl1gGU/ptkCgcleuq6xHF/efH2/SkiFWQ4h+RvUM5CUYqfYQnQPsp
5rhhq21Nmq8esyeVnLhMqXRA1P0CAIknZsu33CHTPalsRHXtSLZ9C8jF9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOy/nGRiUi5CClaR6XqxQFfz93ojMB8GA1UdIwQY
MBaAFIU3DMXSYPPirv9d2Pj0pBWiNFqBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFRjTXhkSmc4LUt1XzEzWS1QU2tGYUkwV29FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80ZjcyNDYtY2U4Zi00NGY4LWE4MzEt
YWU2MGJlYTA2YTljLzEvaFRjTXhkSmc4LUt1XzEzWS1QU2tGYUkwV29FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS80ZjcyNDYtY2U4Zi00NGY4LWE4MzEtYWU2MGJlYTA2YTlj
LzEvaFRjTXhkSmc4LUt1XzEzWS1QU2tGYUkwV29FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYAtnh23r
JvqOf53S7Pc6Qg/sb3k5WfzLazPk3lY0ofIWLa2INwm7tWIHempE0tp1YbNFBM5L
cW/p4c6h1jerAluyiHtZy8/02OODUnsRdBoj7lzqdQL18Q4TPX5Wu9ndDCCOKqEL
IVd/oZ2S3IV2aYF6SJAZ0KgThpUcY7v2yfKoFTFajoMkBgfC4dOeY1uQ0vbBDv4f
Obq59zKNMriEQAEhIyhP1yGLP9w+QR8VfIcUkjlchB/a6TVhYJuFgwnlGbT06WE6
HJRHn21sqyunBDJ22+33hyJ7Z8/AJfFdMZWw9naFEXgMZRImq0e5JhCrkaZlozvZ
XoEKFORzD2vu9Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:40:21 2026 by rpki-client