Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
File: H0rytHmBXwfNgun4K6sv6hP7IbE.mft (raw, json)
Hash identifier: ViB3c3c/+bw7oGbNaviCFQLcjjdvnMlB1V1oPkAOXt8=
Subject key identifier: 9A:EE:A4:95:7A:04:A4:75:6A:BF:29:47:3C:84:D1:3D:B7:7A:E6:8B
Authority key identifier: 1F:4A:F2:B4:79:81:5F:07:CD:82:E9:F8:2B:AB:2F:EA:13:FB:21:B1
Certificate issuer: /CN=1f4af2b479815f07cd82e9f82bab2fea13fb21b1
Certificate serial: 019CAAFD24E760A7304771D4ACC1378A3DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
Manifest number: 1100
Signing time: Sun 01 Mar 2026 20:00:42 +0000
Manifest this update: Sun 01 Mar 2026 20:00:42 +0000
Manifest next update: Mon 02 Mar 2026 20:00:42 +0000
Files and hashes: 1: H0rytHmBXwfNgun4K6sv6hP7IbE.crl (hash: 0+0uynuyLzb2ayZFcIzpnTSEC6OKAVI7UGgx7tCBzRs=)
2: Vf77xukhBIpUTcfDdQGILMMSa4Q.roa (hash: tmWyKSyKboTPLB52PoBpJE8efgve3egkhQ+0cqtz0+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:24:e7:60:a7:30:47:71:d4:ac:c1:37:8a:3d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4af2b479815f07cd82e9f82bab2fea13fb21b1
Validity
Not Before: Mar 1 20:00:42 2026 GMT
Not After : Mar 2 20:00:42 2026 GMT
Subject: CN=9aeea4957a04a4756abf29473c84d13db77ae68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8a:6d:38:da:d6:68:6a:d1:63:b9:ca:a3:21:
f4:90:20:a6:4f:0b:73:4c:10:7e:65:74:80:b2:c9:
be:3e:29:87:79:8f:7f:2b:79:34:3e:92:47:ed:bc:
54:ee:34:0a:ab:c7:41:f3:54:a2:2e:71:6c:ec:c9:
c9:2d:49:e3:41:b3:90:a9:e0:33:65:5d:0a:2d:81:
d5:c9:af:76:a3:fa:35:bd:de:29:cd:59:f8:13:a0:
93:19:c3:89:2b:34:d5:76:07:c7:a3:3e:77:03:c7:
57:60:52:8f:8e:f0:72:62:5d:ab:6a:bd:1a:50:cc:
ca:bc:04:fc:06:a4:fa:50:72:3b:a6:17:e0:85:ad:
6a:74:7f:21:bb:39:b8:9d:09:57:0f:06:c6:d8:0f:
fa:68:ab:66:b8:61:de:72:35:7b:51:c7:90:6d:b3:
19:43:35:7a:30:0e:1e:3b:0e:17:b7:53:a8:fc:8a:
f9:40:ba:d4:79:86:86:ef:c7:ab:fa:96:41:96:ff:
9b:52:87:35:fb:19:33:19:0d:f9:b9:16:ba:5d:8a:
22:78:cf:22:ae:ef:a6:63:48:41:c3:13:f7:d6:42:
a0:94:18:50:34:94:bf:2d:79:09:77:d7:41:a9:86:
e4:b1:5c:65:be:eb:6f:d5:2b:db:44:64:0d:e8:a2:
42:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EE:A4:95:7A:04:A4:75:6A:BF:29:47:3C:84:D1:3D:B7:7A:E6:8B
X509v3 Authority Key Identifier:
keyid:1F:4A:F2:B4:79:81:5F:07:CD:82:E9:F8:2B:AB:2F:EA:13:FB:21:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ce:8e:87:82:62:12:8c:23:67:9b:11:2d:d2:3d:2d:fa:d7:
e3:51:72:c5:88:e3:89:17:24:0d:e0:45:22:54:93:86:9f:20:
61:2d:2f:8d:97:ee:24:16:b3:d5:e1:fd:e2:1f:35:e9:0e:39:
8a:d1:22:07:22:54:e4:83:a3:08:41:ea:ae:97:8b:01:e2:0a:
78:5a:d8:80:f5:5c:ef:b5:5e:99:3d:5d:ff:48:e7:ab:a8:0f:
b9:cb:34:e1:fe:2d:18:35:5b:8f:d2:13:6e:b2:b8:c6:48:34:
a1:9a:1a:23:7e:f4:89:62:50:46:0d:e4:fd:cb:57:10:0a:e7:
74:9f:a8:c8:72:cf:af:0f:49:db:aa:5a:f6:14:a1:e2:1a:b1:
c0:5e:7b:04:32:f2:a3:fa:1b:ed:85:a2:14:f9:ed:c5:d9:c3:
03:3c:00:21:18:24:cd:8c:68:a8:dc:f1:be:b1:a1:be:cf:05:
f4:c5:a2:b7:e2:46:39:a1:ce:21:c9:6b:2c:c8:14:90:2b:c1:
56:c7:0e:df:6a:18:43:2b:5a:1c:a1:db:03:f5:e6:34:a0:07:
09:16:9d:c9:57:a3:ec:16:89:d6:ca:10:94:5a:99:20:ff:66:
68:a8:51:5b:a5:0e:9e:44:14:d5:41:2f:1c:dc:14:07:e2:f6:
eb:d1:cd:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/STnYKcwR3HUrME3ij3sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNGFmMmI0Nzk4MTVmMDdjZDgyZTlmODJiYWIyZmVhMTNm
YjIxYjEwHhcNMjYwMzAxMjAwMDQyWhcNMjYwMzAyMjAwMDQyWjAzMTEwLwYDVQQD
Eyg5YWVlYTQ5NTdhMDRhNDc1NmFiZjI5NDczYzg0ZDEzZGI3N2FlNjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYptONrWaGrRY7nKoyH0kCCmTwtz
TBB+ZXSAssm+PimHeY9/K3k0PpJH7bxU7jQKq8dB81SiLnFs7MnJLUnjQbOQqeAz
ZV0KLYHVya92o/o1vd4pzVn4E6CTGcOJKzTVdgfHoz53A8dXYFKPjvByYl2rar0a
UMzKvAT8BqT6UHI7phfgha1qdH8huzm4nQlXDwbG2A/6aKtmuGHecjV7UceQbbMZ
QzV6MA4eOw4Xt1Oo/Ir5QLrUeYaG78er+pZBlv+bUoc1+xkzGQ35uRa6XYoieM8i
ru+mY0hBwxP31kKglBhQNJS/LXkJd9dBqYbksVxlvutv1SvbRGQN6KJCXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrupJV6BKR1ar8pRzyE0T23euaLMB8GA1UdIwQY
MBaAFB9K8rR5gV8HzYLp+CurL+oT+yGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDByeXRIbUJYd2ZOZ3VuNEs2c3Y2aFA3SWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wZjI1YjctNGY4MS00ZjQxLWExNjIt
MDg2YzE2ZjczNmIxLzEvSDByeXRIbUJYd2ZOZ3VuNEs2c3Y2aFA3SWJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wZjI1YjctNGY4MS00ZjQxLWExNjItMDg2YzE2ZjczNmIx
LzEvSDByeXRIbUJYd2ZOZ3VuNEs2c3Y2aFA3SWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALM6Oh4Ji
EowjZ5sRLdI9LfrX41FyxYjjiRckDeBFIlSThp8gYS0vjZfuJBaz1eH94h816Q45
itEiByJU5IOjCEHqrpeLAeIKeFrYgPVc77VemT1d/0jnq6gPucs04f4tGDVbj9IT
brK4xkg0oZoaI370iWJQRg3k/ctXEArndJ+oyHLPrw9J26pa9hSh4hqxwF57BDLy
o/ob7YWiFPntxdnDAzwAIRgkzYxoqNzxvrGhvs8F9MWit+JGOaHOIclrLMgUkCvB
VscO32oYQytaHKHbA/XmNKAHCRadyVej7BaJ1soQlFqZIP9maKhRW6UOnkQU1UEv
HNwUB+L269HNoQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:49:30 2026 by rpki-client