Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
File: hF3ocysQFxOPhwMrcPo7e4d273E.mft (raw, json)
Hash identifier: blRoMyKmyxzk527552pPZ+1X3CMhNd6EVOygGVTBr10=
Subject key identifier: 78:35:3F:D8:5E:7D:96:F1:42:6B:C8:18:E8:9D:DC:E0:52:FE:D3:E6
Authority key identifier: 84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
Certificate issuer: /CN=845de8732b1017138f87032b70fa3b7b8776ef71
Certificate serial: 019CAA8FD5F188D1EA5B9632FC3395B0D403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
Manifest number: 054D
Signing time: Sun 01 Mar 2026 18:01:18 +0000
Manifest this update: Sun 01 Mar 2026 18:01:18 +0000
Manifest next update: Mon 02 Mar 2026 18:01:18 +0000
Files and hashes: 1: EXFjqp1pXGSV5jmx4tb-VicHFJo.roa (hash: SAiHY7qAn6jJFUL6Y4lo8wfyaergjigidCjHrKuL8KM=)
2: TcfDrpaktt6ck5dfzSZX1rUU-3o.roa (hash: IMmbj46lmVM3D8aBLL2Qo1JPLTBEevvdt670OHWqbPA=)
3: hF3ocysQFxOPhwMrcPo7e4d273E.crl (hash: yuHsX92y2s5mUMrP6a4PYmO7M//rx9x7eOhCwImeoj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:d5:f1:88:d1:ea:5b:96:32:fc:33:95:b0:d4:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845de8732b1017138f87032b70fa3b7b8776ef71
Validity
Not Before: Mar 1 18:01:18 2026 GMT
Not After : Mar 2 18:01:18 2026 GMT
Subject: CN=78353fd85e7d96f1426bc818e89ddce052fed3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c1:8d:9b:98:d3:ad:54:7a:f1:2d:14:08:1d:
f2:95:43:dd:c0:40:14:36:b1:07:f8:fc:d3:13:ee:
bf:86:57:fb:a7:7a:ea:b9:7e:cb:d0:54:29:b3:bd:
97:47:cf:1d:4e:7f:3e:51:8e:5a:0d:91:7d:78:79:
de:73:6d:8f:cb:83:85:a6:4c:66:db:6f:2e:1e:e1:
0d:14:6f:99:2d:c0:c5:14:52:8a:a5:02:c8:2a:7e:
8a:34:11:0d:6b:ab:ef:32:49:1f:39:79:6e:ac:26:
91:65:e4:c2:ea:68:66:87:67:3f:a0:32:6c:8b:34:
b5:ed:98:26:c8:9e:da:cb:27:af:b3:30:65:5c:b9:
ed:26:75:b0:a6:47:e5:c2:a2:69:65:55:95:ba:b7:
7f:fb:b6:65:1e:53:55:d6:b2:0b:c6:eb:60:77:8b:
cb:9a:74:a2:d4:b3:a3:8e:fc:9b:bb:96:11:58:80:
d9:01:62:79:84:4b:0a:3f:78:15:95:75:a3:5b:82:
26:42:15:a2:e6:92:2c:8f:07:28:8b:7d:5b:37:a8:
a3:78:e3:4e:09:30:76:4b:ff:7b:d0:07:0b:98:0e:
57:41:d2:37:6d:96:32:d2:74:2c:30:e3:43:2c:8f:
da:ce:2f:13:2c:03:fa:67:d7:fc:dc:1a:e2:62:f8:
f8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:35:3F:D8:5E:7D:96:F1:42:6B:C8:18:E8:9D:DC:E0:52:FE:D3:E6
X509v3 Authority Key Identifier:
keyid:84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:4b:02:87:c7:78:bb:cb:de:4e:5c:e6:23:d6:f7:3c:b9:71:
41:3d:3d:82:1c:0a:26:cc:b8:c9:bf:d3:5e:3e:5d:48:23:c0:
a2:df:27:8a:5b:f6:af:d7:76:04:a0:c0:57:8a:b2:02:c8:39:
a7:90:9a:3c:0f:22:d2:fe:75:8c:c3:cc:e5:00:af:d6:65:d3:
cb:3c:e0:67:90:8a:65:fb:6d:96:8e:e9:bb:d7:10:47:58:d5:
43:4d:85:40:34:b9:7e:64:b6:5b:90:1a:d2:e2:67:9b:f3:fe:
e4:8b:90:86:19:bc:fa:60:13:86:1a:77:0c:96:7f:76:88:21:
9d:f4:cb:69:a7:da:ad:6c:d5:93:5d:db:33:0b:38:ab:04:39:
cb:31:3a:41:4e:8c:9e:15:d4:65:9a:3f:f4:58:f4:f3:2d:5c:
e0:db:20:b0:9d:24:86:3e:55:25:1c:66:09:ab:83:2f:8a:e5:
9e:52:cf:5f:c9:74:62:77:3f:e8:2c:5f:98:51:26:a3:20:ae:
a7:29:0f:97:d6:be:2b:83:66:a7:0b:33:18:c5:40:b2:db:87:
2e:c6:60:66:42:af:1d:c2:78:3e:28:d1:e5:97:d6:24:0a:71:
3e:90:1d:12:e6:91:52:d6:cd:e6:de:8e:df:d8:cb:73:22:c9:
30:fd:98:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj9XxiNHqW5Yy/DOVsNQDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NWRlODczMmIxMDE3MTM4Zjg3MDMyYjcwZmEzYjdiODc3
NmVmNzEwHhcNMjYwMzAxMTgwMTE4WhcNMjYwMzAyMTgwMTE4WjAzMTEwLwYDVQQD
Eyg3ODM1M2ZkODVlN2Q5NmYxNDI2YmM4MThlODlkZGNlMDUyZmVkM2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8GNm5jTrVR68S0UCB3ylUPdwEAU
NrEH+PzTE+6/hlf7p3rquX7L0FQps72XR88dTn8+UY5aDZF9eHnec22Py4OFpkxm
228uHuENFG+ZLcDFFFKKpQLIKn6KNBENa6vvMkkfOXlurCaRZeTC6mhmh2c/oDJs
izS17ZgmyJ7ayyevszBlXLntJnWwpkflwqJpZVWVurd/+7ZlHlNV1rILxutgd4vL
mnSi1LOjjvybu5YRWIDZAWJ5hEsKP3gVlXWjW4ImQhWi5pIsjwcoi31bN6ijeONO
CTB2S/970AcLmA5XQdI3bZYy0nQsMONDLI/azi8TLAP6Z9f83BriYvj47wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHg1P9hefZbxQmvIGOid3OBS/tPmMB8GA1UdIwQY
MBaAFIRd6HMrEBcTj4cDK3D6O3uHdu9xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEYzb2N5c1FGeE9QaHdNcmNQbzdlNGQyNzNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85YWZiMzMtZTBhYS00OTNiLWE0NmQt
YTg4NWZiNDBkOTBkLzEvaEYzb2N5c1FGeE9QaHdNcmNQbzdlNGQyNzNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85YWZiMzMtZTBhYS00OTNiLWE0NmQtYTg4NWZiNDBkOTBk
LzEvaEYzb2N5c1FGeE9QaHdNcmNQbzdlNGQyNzNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArUsCh8d4
u8veTlzmI9b3PLlxQT09ghwKJsy4yb/TXj5dSCPAot8nilv2r9d2BKDAV4qyAsg5
p5CaPA8i0v51jMPM5QCv1mXTyzzgZ5CKZfttlo7pu9cQR1jVQ02FQDS5fmS2W5Aa
0uJnm/P+5IuQhhm8+mAThhp3DJZ/doghnfTLaafarWzVk13bMws4qwQ5yzE6QU6M
nhXUZZo/9Fj08y1c4NsgsJ0khj5VJRxmCauDL4rlnlLPX8l0Ync/6CxfmFEmoyCu
pykPl9a+K4NmpwszGMVAstuHLsZgZkKvHcJ4PijR5ZfWJApxPpAdEuaRUtbN5t6O
39jLcyLJMP2YgQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:18 2026 by rpki-client