Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
File: HjmCheIngn2PLFHx6plzV1VL5hI.mft (raw, json)
Hash identifier: pA4pV4XAHRfKeo0gIpntaUCvQgkLWmkqXepUaGx1x7w=
Subject key identifier: 74:95:87:21:B3:F5:5E:8E:BA:D0:91:3B:06:C6:B8:F4:A3:C4:F2:D5
Authority key identifier: 1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12
Certificate issuer: /CN=1e398285e227827d8f2c51f1ea997357554be612
Certificate serial: 019CAA90081275D66BE27D9DAA94D70FD5BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
Manifest number: 184D
Signing time: Sun 01 Mar 2026 18:01:31 +0000
Manifest this update: Sun 01 Mar 2026 18:01:31 +0000
Manifest next update: Mon 02 Mar 2026 18:01:31 +0000
Files and hashes: 1: HjmCheIngn2PLFHx6plzV1VL5hI.crl (hash: 3PI/aiasQpekpM/c9zPoyWxFcLcw8D7ymnkMq+GsHaY=)
2: u7HurLe1N6a5tmgpeAM_l46SL2A.roa (hash: FNqj3YMXJAvL9/wTL5cuE2GwV4N05I6EVIR6yQYxrQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:90:08:12:75:d6:6b:e2:7d:9d:aa:94:d7:0f:d5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e398285e227827d8f2c51f1ea997357554be612
Validity
Not Before: Mar 1 18:01:31 2026 GMT
Not After : Mar 2 18:01:31 2026 GMT
Subject: CN=74958721b3f55e8ebad0913b06c6b8f4a3c4f2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:48:ea:77:5c:4a:8b:f6:0e:4b:5a:6a:b0:98:
e8:cd:e5:e3:ec:77:6f:ea:5f:0c:5e:ce:7f:4b:d4:
9c:3c:4c:87:7a:24:05:70:50:f8:64:f6:9f:f8:28:
b9:f8:c7:6b:5a:3b:61:d0:c3:98:01:b1:b5:56:d4:
63:08:13:8c:d9:1b:88:4f:16:e2:b4:62:0d:ad:ca:
5d:2f:86:8f:c9:1f:8b:5d:f7:fd:11:3b:47:be:b0:
11:04:e6:ff:0d:1b:75:7b:ea:63:3e:0a:64:38:1a:
5a:35:a1:3f:00:69:69:9e:ab:e8:40:21:bb:9f:b0:
7b:93:84:0f:c8:7e:fe:05:d6:e6:d6:18:6d:51:cb:
3f:5b:c8:b9:c6:d3:ea:ef:25:73:15:dd:7c:aa:23:
52:4b:14:77:ed:07:58:d3:9d:3c:c0:1e:ac:95:d1:
f9:ac:88:17:5c:42:59:ff:2d:77:9d:7b:53:5b:90:
37:c4:52:7d:7a:b8:42:56:1c:37:08:97:6f:cf:ef:
f2:02:29:63:e3:b7:f6:5f:bf:ca:7e:85:25:43:cb:
d4:04:78:00:35:8c:4a:d1:6b:3b:76:54:3d:d8:5b:
3a:86:64:1b:bf:cf:0b:58:b0:1a:92:bf:8a:31:42:
e2:c1:af:2c:8b:24:9e:e1:0f:86:8c:15:8d:cf:db:
fb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:95:87:21:B3:F5:5E:8E:BA:D0:91:3B:06:C6:B8:F4:A3:C4:F2:D5
X509v3 Authority Key Identifier:
keyid:1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:09:42:58:30:18:ca:84:5f:e7:49:b1:86:36:ed:fa:d4:94:
16:aa:61:e5:b2:78:f6:90:25:af:69:94:45:29:4d:a4:a7:8f:
3c:8f:ad:72:db:1d:a9:da:76:f7:a2:0b:1a:5f:62:f6:f7:f0:
6e:3d:d4:7a:92:0f:36:a7:6d:9a:00:00:14:74:31:42:6d:e6:
f6:3d:0b:6a:c6:ba:79:0d:18:4c:ff:be:ca:e5:7c:1b:8e:76:
5f:36:61:bb:5f:e2:f1:11:91:19:44:18:5e:89:07:0f:6e:f1:
00:a3:99:04:47:8e:f3:76:44:60:95:5e:7b:8a:32:b7:3c:3c:
ef:a5:8d:4e:2c:d6:aa:b0:29:29:41:cf:b0:c1:0c:79:14:7b:
99:99:85:23:00:ff:3d:c1:e8:5f:23:5a:25:f3:e7:5b:f3:0b:
f4:41:7a:cf:0b:cc:d1:10:fa:c9:ec:30:07:21:c3:6c:cf:d3:
09:48:d1:85:f0:8c:03:17:19:e5:75:f9:ae:59:61:b4:4e:fc:
c6:a8:e3:5c:96:8d:f6:03:91:25:07:e6:cb:d3:9f:6d:8e:a0:
3d:83:aa:3f:8a:cb:1b:7c:0f:48:7f:00:10:01:5c:63:44:44:
54:50:87:5d:48:29:72:05:7b:6b:b2:93:ac:6c:95:4f:48:b2:
f6:b3:23:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqkAgSddZr4n2dqpTXD9W7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMzk4Mjg1ZTIyNzgyN2Q4ZjJjNTFmMWVhOTk3MzU3NTU0
YmU2MTIwHhcNMjYwMzAxMTgwMTMxWhcNMjYwMzAyMTgwMTMxWjAzMTEwLwYDVQQD
Eyg3NDk1ODcyMWIzZjU1ZThlYmFkMDkxM2IwNmM2YjhmNGEzYzRmMmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0jqd1xKi/YOS1pqsJjozeXj7Hdv
6l8MXs5/S9ScPEyHeiQFcFD4ZPaf+Ci5+MdrWjth0MOYAbG1VtRjCBOM2RuITxbi
tGINrcpdL4aPyR+LXff9ETtHvrARBOb/DRt1e+pjPgpkOBpaNaE/AGlpnqvoQCG7
n7B7k4QPyH7+Bdbm1hhtUcs/W8i5xtPq7yVzFd18qiNSSxR37QdY0508wB6sldH5
rIgXXEJZ/y13nXtTW5A3xFJ9erhCVhw3CJdvz+/yAilj47f2X7/KfoUlQ8vUBHgA
NYxK0Ws7dlQ92Fs6hmQbv88LWLAakr+KMULiwa8siySe4Q+GjBWNz9v7hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSVhyGz9V6OutCROwbGuPSjxPLVMB8GA1UdIwQY
MBaAFB45goXiJ4J9jyxR8eqZc1dVS+YSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGptQ2hlSW5nbjJQTEZIeDZwbHpWMVZMNWhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8zMDk5ODAtYWZkNy00NTY5LWEyNWIt
ZTkwOWU0MWEwN2U1LzEvSGptQ2hlSW5nbjJQTEZIeDZwbHpWMVZMNWhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8zMDk5ODAtYWZkNy00NTY5LWEyNWItZTkwOWU0MWEwN2U1
LzEvSGptQ2hlSW5nbjJQTEZIeDZwbHpWMVZMNWhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwlCWDAY
yoRf50mxhjbt+tSUFqph5bJ49pAlr2mURSlNpKePPI+tctsdqdp296ILGl9i9vfw
bj3UepIPNqdtmgAAFHQxQm3m9j0Lasa6eQ0YTP++yuV8G452XzZhu1/i8RGRGUQY
XokHD27xAKOZBEeO83ZEYJVee4oytzw876WNTizWqrApKUHPsMEMeRR7mZmFIwD/
PcHoXyNaJfPnW/ML9EF6zwvM0RD6yewwByHDbM/TCUjRhfCMAxcZ5XX5rllhtE78
xqjjXJaN9gORJQfmy9OfbY6gPYOqP4rLG3wPSH8AEAFcY0REVFCHXUgpcgV7a7KT
rGyVT0iy9rMjzw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:12 2026 by rpki-client