Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
File: HcHvY3SZioToDl4w2gmmn0_-qJI.mft (raw, json)
Hash identifier: f1LCYWWINnJb3rrAw5XrdMp2BUz6yUIf35S1t+bHuyU=
Subject key identifier: FA:75:48:83:BF:92:3D:C0:FD:5E:0B:52:9E:02:F6:56:3E:2C:5C:72
Authority key identifier: 1D:C1:EF:63:74:99:8A:84:E8:0E:5E:30:DA:09:A6:9F:4F:FE:A8:92
Certificate issuer: /CN=1dc1ef6374998a84e80e5e30da09a69f4ffea892
Certificate serial: 019CA8D89C606648F89C3863EF81B7CC06C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
Manifest number: FD
Signing time: Sun 01 Mar 2026 10:01:33 +0000
Manifest this update: Sun 01 Mar 2026 10:01:33 +0000
Manifest next update: Mon 02 Mar 2026 10:01:33 +0000
Files and hashes: 1: HcHvY3SZioToDl4w2gmmn0_-qJI.crl (hash: 4aqnBsTXHyhkXpdBcJK1R4TnXic8v8X6pPA23O4WcjI=)
2: eydd9b9yJG4u8PDoXh8HYchwXcQ.asa (hash: XLJ8T9Pn5PjpqOyDdfyyg17qfr7NWdf6Z89qNT5NgvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d8:9c:60:66:48:f8:9c:38:63:ef:81:b7:cc:06:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc1ef6374998a84e80e5e30da09a69f4ffea892
Validity
Not Before: Mar 1 10:01:33 2026 GMT
Not After : Mar 2 10:01:33 2026 GMT
Subject: CN=fa754883bf923dc0fd5e0b529e02f6563e2c5c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bd:ac:36:c3:85:3b:8a:b5:8b:f1:f7:84:90:
c3:80:90:7e:99:42:a2:c8:6b:cc:d0:94:ba:f9:54:
be:ee:99:36:43:bb:53:d0:6f:80:de:3a:af:a5:da:
0d:d3:58:56:18:6c:3c:67:55:77:d2:63:c3:15:d7:
f2:f3:c4:2b:0c:12:98:76:f4:b1:ca:6d:c8:d6:2c:
4f:02:df:1e:f4:83:e2:fd:e4:6d:68:d2:36:81:27:
fb:21:1d:ee:a6:59:25:34:15:38:d8:13:14:5b:ec:
a7:01:7d:4b:85:08:40:6b:ae:26:25:d1:b8:7d:09:
bf:92:d4:c1:3e:11:64:9e:5f:dd:b9:c8:39:45:5b:
05:e8:2a:de:c0:39:3f:76:7d:14:06:77:3f:ff:0f:
31:30:1c:6d:31:53:b5:5b:92:f2:86:75:9e:81:af:
6e:6c:b9:b7:0c:a7:ae:bf:2a:18:3b:41:63:8d:3e:
b8:4b:f5:ec:33:0c:45:4b:f6:60:79:bc:d2:d4:db:
9e:de:74:8e:54:5d:de:df:2a:c4:97:68:62:5b:0a:
ee:81:1e:e3:c2:ee:b7:cc:67:50:5f:61:c1:42:15:
39:7d:bb:b2:a5:1c:54:c8:a8:d8:67:0e:1a:2b:f0:
17:23:9c:26:bc:e6:03:7a:4e:74:b2:f9:e0:e6:0b:
71:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:75:48:83:BF:92:3D:C0:FD:5E:0B:52:9E:02:F6:56:3E:2C:5C:72
X509v3 Authority Key Identifier:
keyid:1D:C1:EF:63:74:99:8A:84:E8:0E:5E:30:DA:09:A6:9F:4F:FE:A8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:8f:dc:67:80:a8:03:49:30:ec:24:94:9d:b7:be:7e:3f:2a:
a9:b2:0a:4d:16:fd:d6:4e:fa:2d:1c:13:d3:38:9f:40:3b:ec:
ba:8e:92:b9:eb:f3:45:83:dd:7f:c5:19:d6:18:3f:78:6f:47:
d5:b8:9b:2f:ea:7e:db:b2:84:bd:e9:c7:41:5f:3c:2c:1f:2a:
b5:a8:ec:c4:f1:bc:16:b3:13:21:19:de:52:ce:14:53:a1:66:
2d:6a:89:dc:22:4e:5e:46:1b:32:6b:74:4b:7c:2f:05:24:3c:
3a:83:60:ef:6a:e8:a8:40:5a:44:8c:0c:0d:c5:4d:a8:cd:20:
42:4d:49:88:f2:d2:d7:85:26:12:e6:96:f3:87:f1:a0:c1:9f:
8d:be:07:4b:38:a0:15:ac:71:b5:76:7a:a0:f2:6d:bc:f7:88:
bc:af:2a:e5:ae:eb:b8:23:3a:17:f5:44:00:64:44:fd:dc:54:
3a:71:ac:96:72:48:3d:01:5b:e4:33:c4:a0:7b:31:6d:f6:87:
07:35:6e:1d:73:d2:16:d4:f0:3d:0b:96:0d:bc:fa:e9:42:bd:
0c:06:e7:d6:49:bf:20:da:97:80:4d:9c:6f:3d:0a:ef:a8:e3:
1a:5f:28:a6:c7:89:16:44:68:ce:5f:99:fb:fb:1d:c5:a2:72:
e9:fd:c2:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyo2JxgZkj4nDhj74G3zAbIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYzFlZjYzNzQ5OThhODRlODBlNWUzMGRhMDlhNjlmNGZm
ZWE4OTIwHhcNMjYwMzAxMTAwMTMzWhcNMjYwMzAyMTAwMTMzWjAzMTEwLwYDVQQD
EyhmYTc1NDg4M2JmOTIzZGMwZmQ1ZTBiNTI5ZTAyZjY1NjNlMmM1YzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3r2sNsOFO4q1i/H3hJDDgJB+mUKi
yGvM0JS6+VS+7pk2Q7tT0G+A3jqvpdoN01hWGGw8Z1V30mPDFdfy88QrDBKYdvSx
ym3I1ixPAt8e9IPi/eRtaNI2gSf7IR3uplklNBU42BMUW+ynAX1LhQhAa64mJdG4
fQm/ktTBPhFknl/ducg5RVsF6CrewDk/dn0UBnc//w8xMBxtMVO1W5LyhnWega9u
bLm3DKeuvyoYO0FjjT64S/XsMwxFS/ZgebzS1Nue3nSOVF3e3yrEl2hiWwrugR7j
wu63zGdQX2HBQhU5fbuypRxUyKjYZw4aK/AXI5wmvOYDek50svng5gtx+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPp1SIO/kj3A/V4LUp4C9lY+LFxyMB8GA1UdIwQY
MBaAFB3B72N0mYqE6A5eMNoJpp9P/qiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGNIdlkzU1ppb1RvRGw0dzJnbW1uMF8tcUpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85NjQzODEtMWU1ZC00ZmY3LWFlMmQt
MTQ2Yzk0NzNiNmNiLzEvSGNIdlkzU1ppb1RvRGw0dzJnbW1uMF8tcUpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS85NjQzODEtMWU1ZC00ZmY3LWFlMmQtMTQ2Yzk0NzNiNmNi
LzEvSGNIdlkzU1ppb1RvRGw0dzJnbW1uMF8tcUpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZI/cZ4Co
A0kw7CSUnbe+fj8qqbIKTRb91k76LRwT0zifQDvsuo6SuevzRYPdf8UZ1hg/eG9H
1bibL+p+27KEvenHQV88LB8qtajsxPG8FrMTIRneUs4UU6FmLWqJ3CJOXkYbMmt0
S3wvBSQ8OoNg72roqEBaRIwMDcVNqM0gQk1JiPLS14UmEuaW84fxoMGfjb4HSzig
FaxxtXZ6oPJtvPeIvK8q5a7ruCM6F/VEAGRE/dxUOnGslnJIPQFb5DPEoHsxbfaH
BzVuHXPSFtTwPQuWDbz66UK9DAbn1km/INqXgE2cbz0K76jjGl8opseJFkRozl+Z
+/sdxaJy6f3CTQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:30:08 2026 by rpki-client