Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
File: hZjLxOjf8YUkBKmSddIwpWERBV8.mft (raw, json)
Hash identifier: SOW0kYCd4Oxm8K/K9G3ewc6g0D+Tdeu1CTuwmsWu6ps=
Subject key identifier: 4D:4B:D2:AD:2D:52:26:6C:D2:33:46:E8:73:CE:F1:26:85:D9:EF:B2
Authority key identifier: 85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
Certificate issuer: /CN=8598cbc4e8dff1852404a99275d230a56111055f
Certificate serial: 019D985087EE60D23E2BD62665BC7CA70592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
Manifest number: 0910
Signing time: Thu 16 Apr 2026 22:01:47 +0000
Manifest this update: Thu 16 Apr 2026 22:01:47 +0000
Manifest next update: Fri 17 Apr 2026 22:01:47 +0000
Files and hashes: 1: 6Zls-m6M9cBINWFd4w7uZTmGtY8.roa (hash: G1IdsClkRwxJrpDcDQsqLk4FP+v4Gfd2cicmc4XSPyc=)
2: hZjLxOjf8YUkBKmSddIwpWERBV8.crl (hash: ytfTHDgMJUEDW5wpbiyHg77bQbDXgC7K7TlzJ8askiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:87:ee:60:d2:3e:2b:d6:26:65:bc:7c:a7:05:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8598cbc4e8dff1852404a99275d230a56111055f
Validity
Not Before: Apr 16 22:01:47 2026 GMT
Not After : Apr 17 22:01:47 2026 GMT
Subject: CN=4d4bd2ad2d52266cd23346e873cef12685d9efb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:86:bc:60:9b:c1:33:c9:60:1c:21:45:96:23:
8d:45:00:31:32:b0:1a:15:07:40:34:73:96:20:a4:
dc:46:ed:ec:45:6f:52:98:f2:0c:09:ac:02:8a:26:
e0:85:c0:ea:a0:5b:80:ea:09:ad:94:e9:1b:5e:61:
4f:e7:87:fc:a1:d1:32:ce:93:ba:1c:5b:ee:c8:76:
51:21:2a:41:69:a5:a8:6e:bb:a3:0a:9d:79:6a:21:
0c:43:5e:e3:19:56:9f:f5:20:7d:4d:97:1d:2b:28:
b1:22:85:b4:1e:06:a3:82:18:7f:20:b1:04:e3:11:
67:b0:5f:5e:0e:33:d0:48:de:1b:ef:21:cd:fb:62:
c2:58:cc:bd:73:eb:8e:ac:76:e9:f6:0b:7e:e9:a9:
57:cd:b6:04:9d:73:2d:d7:d3:b0:40:42:65:15:c6:
5e:9c:2a:f1:f0:25:81:d1:56:c6:ba:43:c3:f9:ac:
78:74:7a:88:82:5d:47:ab:7b:8b:32:be:e1:ee:01:
c9:f9:d6:88:b8:e8:72:e7:66:30:17:16:20:cf:3c:
b5:ca:c3:f2:0e:0a:05:9b:ad:b5:9e:97:4b:ff:6e:
01:30:81:c1:2e:36:29:66:2f:f7:c1:3f:40:2f:d1:
bc:64:99:35:1f:00:62:73:65:7c:7b:6a:f3:13:52:
a9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4B:D2:AD:2D:52:26:6C:D2:33:46:E8:73:CE:F1:26:85:D9:EF:B2
X509v3 Authority Key Identifier:
keyid:85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:69:47:4a:11:b4:11:07:d1:21:35:76:a2:ed:38:ce:d8:b2:
7c:ff:d8:75:a7:d7:51:08:d4:bc:27:e2:e2:7f:65:29:a3:84:
20:f1:9d:9e:b9:b1:7e:4c:46:a2:e9:a1:02:6e:25:9e:0e:0a:
d4:49:66:ee:7d:f8:7d:f2:5f:9a:e6:4a:13:d5:df:98:fa:1b:
b5:29:56:9e:ea:fa:45:e8:ee:10:d3:f0:22:af:2f:ac:9e:a7:
74:c5:37:93:8e:f6:47:3e:64:0b:15:14:b5:56:04:b3:8d:fa:
7a:85:97:17:8e:31:cc:b2:dc:88:e8:5a:00:c4:a7:c4:40:3d:
cb:b7:57:38:47:21:5d:44:75:07:b7:8e:38:15:8f:0b:39:0e:
26:3c:6b:61:ea:0f:11:92:3d:f3:7b:d0:02:06:71:8a:7a:8f:
e2:14:79:d2:37:5f:cb:50:4d:2e:20:e6:be:82:2f:46:bc:fd:
6b:d5:8e:74:61:d6:d6:d8:f8:2c:09:fe:f5:7a:3e:e5:7c:78:
4d:18:c7:60:b6:1c:e9:6c:9f:dd:3f:97:9e:68:61:9c:e0:b9:
ee:2b:b0:69:22:9f:00:fb:d5:61:68:fa:b9:41:5d:78:fe:80:
fc:06:c9:f9:df:bd:03:33:ae:fe:be:e5:aa:78:bb:4f:26:85:
1b:45:a1:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUIfuYNI+K9YmZbx8pwWSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1OThjYmM0ZThkZmYxODUyNDA0YTk5Mjc1ZDIzMGE1NjEx
MTA1NWYwHhcNMjYwNDE2MjIwMTQ3WhcNMjYwNDE3MjIwMTQ3WjAzMTEwLwYDVQQD
Eyg0ZDRiZDJhZDJkNTIyNjZjZDIzMzQ2ZTg3M2NlZjEyNjg1ZDllZmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIa8YJvBM8lgHCFFliONRQAxMrAa
FQdANHOWIKTcRu3sRW9SmPIMCawCiibghcDqoFuA6gmtlOkbXmFP54f8odEyzpO6
HFvuyHZRISpBaaWobrujCp15aiEMQ17jGVaf9SB9TZcdKyixIoW0Hgajghh/ILEE
4xFnsF9eDjPQSN4b7yHN+2LCWMy9c+uOrHbp9gt+6alXzbYEnXMt19OwQEJlFcZe
nCrx8CWB0VbGukPD+ax4dHqIgl1Hq3uLMr7h7gHJ+daIuOhy52YwFxYgzzy1ysPy
DgoFm621npdL/24BMIHBLjYpZi/3wT9AL9G8ZJk1HwBic2V8e2rzE1KpyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1L0q0tUiZs0jNG6HPO8SaF2e+yMB8GA1UdIwQY
MBaAFIWYy8To3/GFJASpknXSMKVhEQVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8wNDlhYjItOTIyNi00YjQwLWFiOGEt
NTFlNGE1ZWFmYzhlLzEvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8wNDlhYjItOTIyNi00YjQwLWFiOGEtNTFlNGE1ZWFmYzhl
LzEvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGlHShG0
EQfRITV2ou04ztiyfP/YdafXUQjUvCfi4n9lKaOEIPGdnrmxfkxGoumhAm4lng4K
1Elm7n34ffJfmuZKE9XfmPobtSlWnur6RejuENPwIq8vrJ6ndMU3k472Rz5kCxUU
tVYEs436eoWXF44xzLLciOhaAMSnxEA9y7dXOEchXUR1B7eOOBWPCzkOJjxrYeoP
EZI983vQAgZxinqP4hR50jdfy1BNLiDmvoIvRrz9a9WOdGHW1tj4LAn+9Xo+5Xx4
TRjHYLYc6Wyf3T+XnmhhnOC57iuwaSKfAPvVYWj6uUFdeP6A/AbJ+d+9AzOu/r7l
qni7TyaFG0Wh8Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:27:11 2026 by rpki-client