Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft
File: hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft (raw, json)
Hash identifier: PfMQyxaKVPa4BRCBAuzUyoEE3dksypzn24TxDGAhM5k=
Subject key identifier: FE:8F:E1:AD:2F:C8:4C:2E:20:62:26:00:84:42:FC:34:44:46:5A:EF
Authority key identifier: 85:29:6E:D0:66:55:B7:E2:6D:65:9E:96:BC:2E:C6:FE:0F:2E:D3:3E
Certificate issuer: /CN=85296ed06655b7e26d659e96bc2ec6fe0f2ed33e
Certificate serial: 019CA8D801FF3D88D27590DCB83010ED7CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft
Manifest number: 0349
Signing time: Sun 01 Mar 2026 10:00:54 +0000
Manifest this update: Sun 01 Mar 2026 10:00:54 +0000
Manifest next update: Mon 02 Mar 2026 10:00:54 +0000
Files and hashes: 1: hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl (hash: 0z6p8uiMGv1rGA5R7RbtG+VE8Axck0gXT6Ngc9xnJBQ=)
2: ooFxLqhCIZCemIV8aeFSy5Bxm4w.asa (hash: v7QZ8HhFIWG34nVuRTJxlOgKji8pCozgn4SVeyKdDG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d8:01:ff:3d:88:d2:75:90:dc:b8:30:10:ed:7c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85296ed06655b7e26d659e96bc2ec6fe0f2ed33e
Validity
Not Before: Mar 1 10:00:54 2026 GMT
Not After : Mar 2 10:00:54 2026 GMT
Subject: CN=fe8fe1ad2fc84c2e206226008442fc3444465aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f8:29:ea:62:c5:ef:7b:c6:e2:78:75:aa:3c:
94:42:98:e9:df:09:dc:d1:e9:38:89:fc:00:57:8e:
26:19:21:54:2d:c8:f0:49:b1:ba:cf:a2:7d:d0:e7:
16:e8:36:f5:b2:9c:c4:32:3b:37:0e:f7:1b:40:59:
21:e1:61:ce:28:1a:2d:a5:bd:2b:26:c3:02:d8:fd:
e9:7d:3c:62:f8:6c:0c:a0:29:74:d5:dc:3b:5b:8b:
8e:b3:6f:01:48:63:a1:69:83:b9:d8:4f:f4:ed:f2:
f8:c0:94:13:20:a7:2e:5b:9c:26:e6:0c:77:7d:80:
2b:f5:3e:d2:4e:b5:43:25:ab:06:5a:18:77:b5:a4:
43:e0:5b:44:19:9a:3c:e1:31:75:39:56:d5:fa:a5:
be:80:81:86:d4:05:43:5c:2a:46:e9:b4:41:05:c0:
69:c6:cd:e1:7f:62:5b:7f:d6:da:d9:60:af:a9:8f:
31:7a:ee:73:73:dc:95:41:2a:f9:e3:f9:4a:ea:20:
68:d0:0d:51:db:ff:61:af:1e:66:6a:d1:7c:34:c6:
d8:0c:f6:30:39:62:af:ba:3d:ea:9c:2f:73:96:3f:
f1:08:0c:f4:b3:6e:f0:1e:00:b8:0e:46:41:0a:e4:
52:6d:1e:5b:a6:e0:40:aa:1d:81:c2:d6:48:a1:8b:
3e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8F:E1:AD:2F:C8:4C:2E:20:62:26:00:84:42:FC:34:44:46:5A:EF
X509v3 Authority Key Identifier:
keyid:85:29:6E:D0:66:55:B7:E2:6D:65:9E:96:BC:2E:C6:FE:0F:2E:D3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cd6815-4c28-435c-8f3f-01ff04b0a1a4/1/hSlu0GZVt-JtZZ6WvC7G_g8u0z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:91:7f:3b:c0:35:0e:60:6d:f9:75:3d:66:a5:17:4b:36:fe:
d7:ec:1b:0d:e2:68:a5:ba:40:d1:e2:b6:e2:82:6c:90:cf:6e:
f4:a8:2e:2f:e6:30:81:0c:c3:84:ae:ab:8e:7d:86:69:5a:3e:
d3:59:60:09:a2:d4:40:a0:08:3a:c0:e7:d0:ed:61:73:35:89:
41:bf:f4:88:12:c0:1a:28:42:32:57:40:7c:35:b6:64:8c:1a:
0f:50:3d:9f:dd:0e:fa:43:8c:0f:8e:f0:f7:1e:c6:11:be:e6:
7e:df:2d:40:ad:bf:1c:be:4c:1d:47:b6:91:1b:20:51:2f:ad:
a8:20:32:4a:85:c5:52:f3:bd:6e:6c:b7:1f:15:54:09:d3:e8:
43:a5:5c:b5:5c:59:6e:ef:b8:e4:30:6f:55:37:98:27:52:ee:
6e:d4:7a:cd:24:dd:d5:6a:b8:d8:cf:79:33:76:ab:c1:82:04:
13:60:b1:fd:ba:8b:6a:56:ce:ab:70:8e:82:c0:53:47:a3:9f:
d4:1b:10:98:c7:9f:c1:c2:cd:4d:59:8a:ea:2b:5b:ec:8b:97:
8d:f6:76:9c:4c:fb:64:e5:7c:6f:eb:9b:3d:ff:85:19:72:7c:
24:a1:83:0f:7c:f4:f1:49:ca:4e:1b:86:41:31:c1:02:ca:16:
01:1e:13:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyo2AH/PYjSdZDcuDAQ7XziMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1Mjk2ZWQwNjY1NWI3ZTI2ZDY1OWU5NmJjMmVjNmZlMGYy
ZWQzM2UwHhcNMjYwMzAxMTAwMDU0WhcNMjYwMzAyMTAwMDU0WjAzMTEwLwYDVQQD
EyhmZThmZTFhZDJmYzg0YzJlMjA2MjI2MDA4NDQyZmMzNDQ0NDY1YWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/gp6mLF73vG4nh1qjyUQpjp3wnc
0ek4ifwAV44mGSFULcjwSbG6z6J90OcW6Db1spzEMjs3DvcbQFkh4WHOKBotpb0r
JsMC2P3pfTxi+GwMoCl01dw7W4uOs28BSGOhaYO52E/07fL4wJQTIKcuW5wm5gx3
fYAr9T7STrVDJasGWhh3taRD4FtEGZo84TF1OVbV+qW+gIGG1AVDXCpG6bRBBcBp
xs3hf2Jbf9ba2WCvqY8xeu5zc9yVQSr54/lK6iBo0A1R2/9hrx5matF8NMbYDPYw
OWKvuj3qnC9zlj/xCAz0s27wHgC4DkZBCuRSbR5bpuBAqh2BwtZIoYs+6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6P4a0vyEwuIGImAIRC/DRERlrvMB8GA1UdIwQY
MBaAFIUpbtBmVbfibWWelrwuxv4PLtM+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFNsdTBHWlZ0LUp0Wlo2V3ZDN0dfZzh1MHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9jZDY4MTUtNGMyOC00MzVjLThmM2Yt
MDFmZjA0YjBhMWE0LzEvaFNsdTBHWlZ0LUp0Wlo2V3ZDN0dfZzh1MHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9jZDY4MTUtNGMyOC00MzVjLThmM2YtMDFmZjA0YjBhMWE0
LzEvaFNsdTBHWlZ0LUp0Wlo2V3ZDN0dfZzh1MHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJF/O8A1
DmBt+XU9ZqUXSzb+1+wbDeJopbpA0eK24oJskM9u9KguL+YwgQzDhK6rjn2GaVo+
01lgCaLUQKAIOsDn0O1hczWJQb/0iBLAGihCMldAfDW2ZIwaD1A9n90O+kOMD47w
9x7GEb7mft8tQK2/HL5MHUe2kRsgUS+tqCAySoXFUvO9bmy3HxVUCdPoQ6VctVxZ
bu+45DBvVTeYJ1LubtR6zSTd1Wq42M95M3arwYIEE2Cx/bqLalbOq3COgsBTR6Of
1BsQmMefwcLNTVmK6itb7IuXjfZ2nEz7ZOV8b+ubPf+FGXJ8JKGDD3z08UnKThuG
QTHBAsoWAR4Txg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 14:48:07 2026 by rpki-client