Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
File: HJe0gj08nhIexkmCHgDwp5rrm40.mft (raw, json)
Hash identifier: eP3WxFccdoJYmtS/NYfQozHnmtBO1Qo2ziy8xcjmgIQ=
Subject key identifier: C5:81:CA:5A:C9:B4:93:82:AA:C6:0C:22:8E:DA:A3:10:B5:EE:EC:59
Authority key identifier: 1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
Certificate issuer: /CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Certificate serial: 019CAC1036FE21EBBE567F6F5BDC017C1BBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 01:01:09 +0000
Manifest this update: Mon 02 Mar 2026 01:01:09 +0000
Manifest next update: Tue 03 Mar 2026 01:01:09 +0000
Files and hashes: 1: 0hxpuIK8Xk-q0BTmptbEA31tBQM.roa (hash: F/+sSqgxCKBUwr4EismpQjVJRCU5s8RFO6y5G1id7CM=)
2: HJe0gj08nhIexkmCHgDwp5rrm40.crl (hash: xZFqRlXksMvlZHq+ux2kqGklDiRNLL6LwIK4QQDpvAw=)
3: mJI9sTFN4UGhJtiQDPusSm1Vr68.roa (hash: wLOIgdPRaxsc7dyazG8dcE1RzCgvcxysuqvRPBkd3XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:36:fe:21:eb:be:56:7f:6f:5b:dc:01:7c:1b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Validity
Not Before: Mar 2 01:01:09 2026 GMT
Not After : Mar 3 01:01:09 2026 GMT
Subject: CN=c581ca5ac9b49382aac60c228edaa310b5eeec59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:27:74:3b:5c:d9:72:4c:6d:6f:d6:b7:11:41:
c8:b1:17:3c:24:d7:2d:ca:2d:ec:86:9a:d5:02:9d:
2e:8c:c9:e2:de:b9:b3:d8:54:ba:fd:0d:d5:97:7e:
3e:06:a1:0c:a9:e6:00:74:6e:05:3b:67:bc:56:9f:
18:c1:fd:d1:ce:1e:e8:5f:a8:4d:cc:5e:7e:bb:ea:
58:21:f3:47:ae:e7:20:ac:c6:9f:44:c7:30:89:78:
09:f7:11:9a:9d:ce:26:ff:cf:8f:67:65:63:79:eb:
da:79:b2:2f:12:dd:53:28:ac:3d:6f:af:8d:95:55:
00:63:a2:bf:84:6c:99:b8:0a:69:73:9e:9a:50:42:
9a:8f:ec:ec:ad:ed:ac:f5:5c:fc:b7:fc:3b:e0:11:
f2:6e:f0:aa:90:32:7f:1d:b9:90:ef:22:b1:ad:da:
d0:4b:89:bc:77:96:93:15:19:eb:0b:c9:b7:ec:14:
da:e4:41:00:1c:bc:4a:09:5a:a7:11:84:f1:9e:c2:
da:0c:0b:fd:76:48:21:c3:aa:85:e5:4f:1b:e0:31:
1c:38:28:bd:d2:ca:77:85:b6:6d:84:4a:c4:46:07:
5f:80:44:83:db:5d:54:32:74:d5:e7:a1:b6:16:c8:
23:97:ba:63:64:4e:cd:84:15:de:73:94:ba:21:ea:
5f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:81:CA:5A:C9:B4:93:82:AA:C6:0C:22:8E:DA:A3:10:B5:EE:EC:59
X509v3 Authority Key Identifier:
keyid:1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b4:06:d5:15:86:0c:cb:b6:33:29:2c:42:5c:46:39:5c:63:
3f:a2:05:ae:ce:a5:6a:e1:fc:41:f0:df:db:76:5a:f0:49:11:
e6:5e:29:a7:e1:24:76:6f:5c:01:33:e3:10:22:6e:db:b8:07:
e9:3e:04:70:e5:49:2d:0b:1e:37:69:a8:e9:05:b6:1a:89:94:
27:92:f7:e1:96:31:6e:58:42:04:ee:29:d0:94:19:f5:03:fd:
34:c5:bf:82:25:ab:5a:aa:47:d5:77:35:cd:9e:d4:e4:36:ad:
ef:73:16:4a:f1:c4:8e:24:d6:e1:4f:ba:e6:25:4e:eb:11:8b:
84:3d:f0:a2:34:6a:13:1b:d5:07:33:27:e7:c3:d0:1c:c7:7c:
6a:fd:48:a6:8e:a6:b7:c2:f6:05:9d:51:07:c1:98:55:71:4f:
41:c1:60:c6:68:b7:3c:c0:27:eb:5d:b1:9b:43:09:ec:e7:ed:
71:69:02:7b:e7:02:41:21:33:46:d9:03:12:7e:57:17:df:e3:
9d:27:dc:8a:c9:70:44:00:23:cc:b9:77:9b:c2:16:0d:a6:cc:
e4:65:cd:fe:71:d0:32:0b:0e:5b:29:1a:18:bc:d1:ba:f3:00:
2d:19:4a:9e:87:67:ae:9d:9a:39:ab:07:8a:89:f1:c5:ff:9d:
99:7b:d0:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysEDb+Ieu+Vn9vW9wBfBu+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTdiNDgyM2QzYzllMTIxZWM2NDk4MjFlMDBmMGE3OWFl
YjliOGQwHhcNMjYwMzAyMDEwMTA5WhcNMjYwMzAzMDEwMTA5WjAzMTEwLwYDVQQD
EyhjNTgxY2E1YWM5YjQ5MzgyYWFjNjBjMjI4ZWRhYTMxMGI1ZWVlYzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSd0O1zZckxtb9a3EUHIsRc8JNct
yi3shprVAp0ujMni3rmz2FS6/Q3Vl34+BqEMqeYAdG4FO2e8Vp8Ywf3Rzh7oX6hN
zF5+u+pYIfNHrucgrMafRMcwiXgJ9xGanc4m/8+PZ2VjeevaebIvEt1TKKw9b6+N
lVUAY6K/hGyZuAppc56aUEKaj+zsre2s9Vz8t/w74BHybvCqkDJ/HbmQ7yKxrdrQ
S4m8d5aTFRnrC8m37BTa5EEAHLxKCVqnEYTxnsLaDAv9dkghw6qF5U8b4DEcOCi9
0sp3hbZthErERgdfgESD211UMnTV56G2Fsgjl7pjZE7NhBXec5S6IepfQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWBylrJtJOCqsYMIo7aoxC17uxZMB8GA1UdIwQY
MBaAFByXtII9PJ4SHsZJgh4A8Kea65uNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEplMGdqMDhuaElleGttQ0hnRHdwNXJybTQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xNTY0MWEtNjYxNC00NWU0LWEyYTkt
OWI5Y2Q4OTY1OWUwLzEvSEplMGdqMDhuaElleGttQ0hnRHdwNXJybTQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8xNTY0MWEtNjYxNC00NWU0LWEyYTktOWI5Y2Q4OTY1OWUw
LzEvSEplMGdqMDhuaElleGttQ0hnRHdwNXJybTQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjrQG1RWG
DMu2MyksQlxGOVxjP6IFrs6lauH8QfDf23Za8EkR5l4pp+Ekdm9cATPjECJu27gH
6T4EcOVJLQseN2mo6QW2GomUJ5L34ZYxblhCBO4p0JQZ9QP9NMW/giWrWqpH1Xc1
zZ7U5Dat73MWSvHEjiTW4U+65iVO6xGLhD3wojRqExvVBzMn58PQHMd8av1Ipo6m
t8L2BZ1RB8GYVXFPQcFgxmi3PMAn612xm0MJ7OftcWkCe+cCQSEzRtkDEn5XF9/j
nSfcislwRAAjzLl3m8IWDabM5GXN/nHQMgsOWykaGLzRuvMALRlKnodnrp2aOasH
ionxxf+dmXvQ+g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:09 2026 by rpki-client