Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
File: HcHvY3SZioToDl4w2gmmn0_-qJI.mft (raw, json)
Hash identifier: qmu+feegAFebM5NytaE64LHrsZWXnV2/jWpxHOROKUM=
Subject key identifier: D7:C6:AD:CC:1E:F2:DC:49:85:81:E3:37:44:E7:78:7E:AB:9D:8E:1A
Authority key identifier: 1D:C1:EF:63:74:99:8A:84:E8:0E:5E:30:DA:09:A6:9F:4F:FE:A8:92
Certificate issuer: /CN=1dc1ef6374998a84e80e5e30da09a69f4ffea892
Certificate serial: 019CAAC7117D89B5A7AA54CD2A0F45D193B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
Manifest number: FE
Signing time: Sun 01 Mar 2026 19:01:38 +0000
Manifest this update: Sun 01 Mar 2026 19:01:38 +0000
Manifest next update: Mon 02 Mar 2026 19:01:38 +0000
Files and hashes: 1: HcHvY3SZioToDl4w2gmmn0_-qJI.crl (hash: o5k9iO6RN8gILrRXIdIytb3lwvu6xkuH/oZ2SsKMAOM=)
2: eydd9b9yJG4u8PDoXh8HYchwXcQ.asa (hash: XLJ8T9Pn5PjpqOyDdfyyg17qfr7NWdf6Z89qNT5NgvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:11:7d:89:b5:a7:aa:54:cd:2a:0f:45:d1:93:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc1ef6374998a84e80e5e30da09a69f4ffea892
Validity
Not Before: Mar 1 19:01:38 2026 GMT
Not After : Mar 2 19:01:38 2026 GMT
Subject: CN=d7c6adcc1ef2dc498581e33744e7787eab9d8e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f4:7c:55:78:00:12:0e:11:79:22:d9:64:44:
6c:14:ef:db:93:63:1f:e9:b6:4d:4d:e5:e0:2d:20:
24:57:0a:c4:b0:6d:63:b5:cb:8c:19:a8:b3:8f:f7:
50:52:02:40:f9:1d:1c:fa:db:eb:18:82:2a:98:23:
c0:8e:18:0f:58:4b:cf:15:8d:0b:13:17:e4:84:23:
d4:fa:54:1c:13:2d:a9:fa:78:8c:ad:e0:69:1a:76:
1d:82:07:cb:29:aa:09:52:5c:9f:cc:7e:d2:e9:6c:
94:10:b5:69:b8:ec:bc:04:90:32:0a:05:66:8f:42:
f3:28:d3:b0:76:48:72:7f:d3:0e:11:40:cb:aa:e5:
c0:59:0e:2b:16:62:c4:1e:e6:e6:d9:94:6f:a2:aa:
b5:cb:06:af:38:f4:80:8b:e4:18:17:2b:90:ba:00:
a8:88:6b:c0:04:b5:04:9e:7c:17:80:17:ba:4e:a7:
0b:c6:29:fc:73:c7:89:dc:d1:cd:f8:c8:ca:ea:9e:
d2:37:b0:40:be:68:d5:8e:47:7c:ae:47:49:07:07:
53:d0:28:40:b9:dc:86:b2:15:27:0a:15:50:27:24:
83:ec:b0:80:42:3d:29:f3:3d:eb:45:cc:c7:c4:26:
98:1a:c1:b5:c1:5b:6f:0d:c8:f8:98:b9:fe:53:c3:
af:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C6:AD:CC:1E:F2:DC:49:85:81:E3:37:44:E7:78:7E:AB:9D:8E:1A
X509v3 Authority Key Identifier:
keyid:1D:C1:EF:63:74:99:8A:84:E8:0E:5E:30:DA:09:A6:9F:4F:FE:A8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a0:dc:80:79:e7:6b:a9:11:06:aa:8e:84:fa:ea:34:7e:d5:
11:ec:07:1f:e2:10:fb:e5:c9:bb:99:18:e7:ea:60:71:f1:2f:
4c:23:33:f7:7a:27:20:8d:bd:3d:e4:cf:55:bb:63:4b:35:56:
34:00:45:38:ae:3f:4a:d6:c6:7b:cd:e0:12:90:5b:23:09:95:
25:9f:3b:18:d3:41:de:d2:ed:b0:e7:72:fa:3a:01:7a:52:75:
42:76:31:b2:b6:25:3a:0b:a9:26:08:57:02:06:37:f6:93:7d:
e4:c1:e1:9b:da:5e:b6:ce:fb:c0:b2:71:e7:64:7d:9d:1f:23:
65:7e:c0:f1:96:aa:c4:c9:b1:43:d3:a5:4a:32:6e:7c:a3:7e:
47:15:ac:f0:1e:28:ae:e4:a8:3d:77:30:2a:18:81:e0:36:39:
c8:07:6e:20:04:40:17:1b:da:a7:d9:ad:d3:53:8b:f8:cd:a0:
fc:2b:13:8d:23:6b:08:a5:3e:3b:5f:40:63:95:48:23:13:c2:
6d:09:91:0a:93:9f:d9:d1:1c:4a:a4:f8:b4:6c:86:78:9c:77:
bb:15:d1:ab:27:95:d7:89:4e:39:71:ba:d5:2c:a9:0c:c5:98:
0a:90:76:d4:a3:b7:b4:3b:2d:0a:63:95:a5:b9:b0:3d:25:6c:
ec:ee:e6:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxxF9ibWnqlTNKg9F0ZOxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYzFlZjYzNzQ5OThhODRlODBlNWUzMGRhMDlhNjlmNGZm
ZWE4OTIwHhcNMjYwMzAxMTkwMTM4WhcNMjYwMzAyMTkwMTM4WjAzMTEwLwYDVQQD
EyhkN2M2YWRjYzFlZjJkYzQ5ODU4MWUzMzc0NGU3Nzg3ZWFiOWQ4ZTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvR8VXgAEg4ReSLZZERsFO/bk2Mf
6bZNTeXgLSAkVwrEsG1jtcuMGaizj/dQUgJA+R0c+tvrGIIqmCPAjhgPWEvPFY0L
ExfkhCPU+lQcEy2p+niMreBpGnYdggfLKaoJUlyfzH7S6WyUELVpuOy8BJAyCgVm
j0LzKNOwdkhyf9MOEUDLquXAWQ4rFmLEHubm2ZRvoqq1ywavOPSAi+QYFyuQugCo
iGvABLUEnnwXgBe6TqcLxin8c8eJ3NHN+MjK6p7SN7BAvmjVjkd8rkdJBwdT0ChA
udyGshUnChVQJySD7LCAQj0p8z3rRczHxCaYGsG1wVtvDcj4mLn+U8OvUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfGrcwe8txJhYHjN0TneH6rnY4aMB8GA1UdIwQY
MBaAFB3B72N0mYqE6A5eMNoJpp9P/qiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGNIdlkzU1ppb1RvRGw0dzJnbW1uMF8tcUpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85NjQzODEtMWU1ZC00ZmY3LWFlMmQt
MTQ2Yzk0NzNiNmNiLzEvSGNIdlkzU1ppb1RvRGw0dzJnbW1uMF8tcUpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS85NjQzODEtMWU1ZC00ZmY3LWFlMmQtMTQ2Yzk0NzNiNmNi
LzEvSGNIdlkzU1ppb1RvRGw0dzJnbW1uMF8tcUpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfqDcgHnn
a6kRBqqOhPrqNH7VEewHH+IQ++XJu5kY5+pgcfEvTCMz93onII29PeTPVbtjSzVW
NABFOK4/StbGe83gEpBbIwmVJZ87GNNB3tLtsOdy+joBelJ1QnYxsrYlOgupJghX
AgY39pN95MHhm9pets77wLJx52R9nR8jZX7A8ZaqxMmxQ9OlSjJufKN+RxWs8B4o
ruSoPXcwKhiB4DY5yAduIARAFxvap9mt01OL+M2g/CsTjSNrCKU+O19AY5VIIxPC
bQmRCpOf2dEcSqT4tGyGeJx3uxXRqyeV14lOOXG61SypDMWYCpB21KO3tDstCmOV
pbmwPSVs7O7mDg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:35:40 2026 by rpki-client