Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
File: hPmLsajH8dZnQkjEfg8ErgSa-lE.mft (raw, json)
Hash identifier: ljkJYAdMXmHIMZJnY69B/F/IX9yaOwV4t1lUAPF7m4g=
Subject key identifier: D9:70:99:0A:C2:7C:56:17:DB:D9:F0:21:89:40:53:1C:A6:7D:F0:15
Authority key identifier: 84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51
Certificate issuer: /CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51
Certificate serial: 019CAAFD47A9B7EB769A44FD97E1B8690B84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
Manifest number: 0E4F
Signing time: Sun 01 Mar 2026 20:00:51 +0000
Manifest this update: Sun 01 Mar 2026 20:00:51 +0000
Manifest next update: Mon 02 Mar 2026 20:00:51 +0000
Files and hashes: 1: 5Ue6FKrFYwLCWFcV_zsLxP-Ttlc.roa (hash: vHRw1aMy6QtggdL865LadOSRH74ZxGkEgwi3zn9M/rU=)
2: hPmLsajH8dZnQkjEfg8ErgSa-lE.crl (hash: oOL6RF1aiWcHqJ0iSleYa8G1LbrXLd6YKzMbVlTKcfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:47:a9:b7:eb:76:9a:44:fd:97:e1:b8:69:0b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51
Validity
Not Before: Mar 1 20:00:51 2026 GMT
Not After : Mar 2 20:00:51 2026 GMT
Subject: CN=d970990ac27c5617dbd9f0218940531ca67df015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ec:76:4f:af:5a:c6:5d:f3:82:2b:f5:58:ae:
6f:f1:cd:ae:08:ea:18:16:46:53:85:9e:4d:03:fc:
c0:31:f6:d6:a6:36:81:77:ce:94:51:a1:e8:07:33:
ef:bf:bb:7c:b3:17:7d:b0:77:72:07:ce:1a:7e:a9:
ef:55:b5:bc:2d:da:ea:53:e1:29:da:78:0f:eb:c5:
07:58:49:c0:a2:c2:cc:4d:00:14:51:ff:24:c4:07:
a5:74:f2:81:2d:7a:b1:a3:02:b2:08:ac:2e:41:f9:
ac:9f:3f:12:7d:da:b1:08:f5:83:fa:ac:7f:7f:97:
c1:5b:73:3e:63:f9:d6:1d:c4:5b:c4:1d:ca:80:4c:
c1:58:72:1c:8d:2f:d8:57:4a:65:d4:f8:9d:67:c4:
2e:84:13:21:8f:1c:2a:24:76:61:e5:aa:8e:16:3f:
b8:58:ee:f9:81:91:88:ae:e4:51:dd:60:fa:1c:82:
f9:e0:3d:ec:fe:c7:50:5a:15:4c:c8:11:eb:18:d7:
a7:35:7c:19:1e:3a:7a:39:d1:33:65:b1:14:77:b1:
36:ac:4e:95:de:6f:02:8d:d7:84:e4:b2:46:54:77:
57:ab:2b:ff:cc:1f:28:b1:e2:5e:44:a1:d7:af:88:
c6:c9:d5:b3:af:74:01:b9:08:d1:91:10:f6:99:9f:
95:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:70:99:0A:C2:7C:56:17:DB:D9:F0:21:89:40:53:1C:A6:7D:F0:15
X509v3 Authority Key Identifier:
keyid:84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:dc:35:08:7e:52:b2:9f:8b:b1:f5:70:46:90:37:f1:81:49:
58:99:c5:fe:83:07:06:8d:e5:0a:29:e6:16:d0:44:5d:06:e8:
99:04:14:bb:56:be:21:b9:17:5c:40:e9:5d:f3:4e:40:81:e3:
8e:79:de:14:61:9a:59:e7:34:fc:c6:4b:c5:a6:cc:22:0a:9c:
0e:37:35:32:4a:c7:0b:f8:61:89:7d:5d:aa:aa:99:a3:2d:b1:
7a:1d:f6:45:ee:79:6c:27:3a:41:de:b6:87:eb:e2:20:c6:29:
a4:be:13:d2:8a:02:e5:3d:83:bd:29:66:83:0c:07:9b:f2:f5:
56:ff:09:f6:7b:7f:f9:64:73:e2:f5:1f:ab:b4:32:ef:c7:c5:
3c:27:40:e8:5e:12:92:84:98:e2:6e:09:67:37:90:d8:57:17:
0e:0f:09:ed:04:b7:39:23:2c:2e:ee:17:05:5f:8b:3a:1f:60:
12:c6:68:81:38:24:0f:86:48:3f:a5:e0:fa:76:04:3c:b6:ac:
fc:f4:ac:a4:4d:de:51:d4:8d:3f:75:ef:28:a2:d9:fa:70:b1:
45:85:85:c0:bb:bd:75:d9:5f:4e:29:34:0d:ea:e9:3f:c4:cf:
d5:22:66:69:e4:16:1c:c0:47:c7:16:62:fc:c9:0a:b5:5a:b9:
e0:db:4b:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/Uept+t2mkT9l+G4aQuEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0Zjk4YmIxYThjN2YxZDY2NzQyNDhjNDdlMGYwNGFlMDQ5
YWZhNTEwHhcNMjYwMzAxMjAwMDUxWhcNMjYwMzAyMjAwMDUxWjAzMTEwLwYDVQQD
EyhkOTcwOTkwYWMyN2M1NjE3ZGJkOWYwMjE4OTQwNTMxY2E2N2RmMDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvex2T69axl3zgiv1WK5v8c2uCOoY
FkZThZ5NA/zAMfbWpjaBd86UUaHoBzPvv7t8sxd9sHdyB84afqnvVbW8LdrqU+Ep
2ngP68UHWEnAosLMTQAUUf8kxAeldPKBLXqxowKyCKwuQfmsnz8SfdqxCPWD+qx/
f5fBW3M+Y/nWHcRbxB3KgEzBWHIcjS/YV0pl1PidZ8QuhBMhjxwqJHZh5aqOFj+4
WO75gZGIruRR3WD6HIL54D3s/sdQWhVMyBHrGNenNXwZHjp6OdEzZbEUd7E2rE6V
3m8CjdeE5LJGVHdXqyv/zB8oseJeRKHXr4jGydWzr3QBuQjRkRD2mZ+VRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNlwmQrCfFYX29nwIYlAUxymffAVMB8GA1UdIwQY
MBaAFIT5i7Gox/HWZ0JIxH4PBK4EmvpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFBtTHNhakg4ZFpuUWtqRWZnOEVyZ1NhLWxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jNjg1OWQtNmU0Ni00YTY2LWE3YjAt
NGUzNTk0YjJkYTdmLzEvaFBtTHNhakg4ZFpuUWtqRWZnOEVyZ1NhLWxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9jNjg1OWQtNmU0Ni00YTY2LWE3YjAtNGUzNTk0YjJkYTdm
LzEvaFBtTHNhakg4ZFpuUWtqRWZnOEVyZ1NhLWxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASdw1CH5S
sp+LsfVwRpA38YFJWJnF/oMHBo3lCinmFtBEXQbomQQUu1a+IbkXXEDpXfNOQIHj
jnneFGGaWec0/MZLxabMIgqcDjc1MkrHC/hhiX1dqqqZoy2xeh32Re55bCc6Qd62
h+viIMYppL4T0ooC5T2DvSlmgwwHm/L1Vv8J9nt/+WRz4vUfq7Qy78fFPCdA6F4S
koSY4m4JZzeQ2FcXDg8J7QS3OSMsLu4XBV+LOh9gEsZogTgkD4ZIP6Xg+nYEPLas
/PSspE3eUdSNP3XvKKLZ+nCxRYWFwLu9ddlfTik0DerpP8TP1SJmaeQWHMBHxxZi
/MkKtVq54NtL7A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:04 2026 by rpki-client