Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
File: HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft (raw, json)
Hash identifier: pZlKJRmhDYRLu3rz6EwHJlDAcDqQ/9wTdpSI8L5+H8c=
Subject key identifier: 51:BC:85:16:7D:AC:2A:0F:CD:A7:29:5D:0D:F8:2C:0A:7D:F3:F9:C4
Authority key identifier: 1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
Certificate issuer: /CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Certificate serial: 019CACEBADE12F3C20F48B9161FB406C8959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
Manifest number: 11B3
Signing time: Mon 02 Mar 2026 05:00:52 +0000
Manifest this update: Mon 02 Mar 2026 05:00:52 +0000
Manifest next update: Tue 03 Mar 2026 05:00:52 +0000
Files and hashes: 1: 2xP9m1PRgrEVDmtd4i2eqIDsm-A.roa (hash: YQaYHIwFaP+vp12w1AQ2mwIWx2mQt+KNJdo+tWceYBM=)
2: 5hq20ZEzfqPUd8jJerdhQ6lvpnQ.roa (hash: QttHQD+33asdEv7t7iqO8hCmG2Lg/3s4dda2hulSCvo=)
3: HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl (hash: +lRG9Uiv848glcCE/PhOA6MLXu76e9FfJeaEHQxYUFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:ad:e1:2f:3c:20:f4:8b:91:61:fb:40:6c:89:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d10e38ed55e3185aed6f079f8bb9bf12d4448db
Validity
Not Before: Mar 2 05:00:52 2026 GMT
Not After : Mar 3 05:00:52 2026 GMT
Subject: CN=51bc85167dac2a0fcda7295d0df82c0a7df3f9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:89:53:a1:57:3e:05:0e:1d:6e:4f:59:78:09:
7b:f8:67:2c:24:a6:f1:8c:de:73:7d:24:9a:45:14:
ec:7d:7e:6e:61:44:5d:0f:ee:37:49:56:eb:75:30:
2a:68:42:f7:94:ba:91:61:91:1f:19:3c:a0:47:5c:
ce:ad:72:4f:34:62:b8:ca:b9:39:c6:03:80:b9:db:
b5:c5:25:04:21:a6:da:30:f6:9e:39:ab:e0:47:15:
92:c9:42:b2:2d:e5:9a:dc:3d:4e:c1:a6:0b:13:95:
e4:08:00:80:ab:2b:6d:fb:93:29:eb:4c:a5:72:70:
4c:f1:71:0b:09:53:51:7d:0a:b4:e6:a9:6d:36:ef:
1c:87:b9:25:a7:41:58:f7:3e:47:f4:70:b5:dd:7d:
08:d7:d2:10:b4:f8:3b:b4:11:30:f0:0b:34:be:70:
a2:5b:64:21:5f:1b:57:ef:8d:59:ae:51:42:45:62:
15:bd:c0:4a:d9:62:b1:e1:cc:73:fb:b4:86:94:ea:
f3:f5:6c:8b:16:80:9e:63:5a:a2:5a:32:96:e0:31:
96:6d:b0:ad:04:64:eb:dc:b4:77:21:51:f6:e5:80:
cd:1c:6e:5b:d4:35:2e:bb:92:c8:13:2c:28:0d:2e:
5c:71:5d:2c:f0:92:06:12:1a:9c:6b:03:37:9c:be:
e8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BC:85:16:7D:AC:2A:0F:CD:A7:29:5D:0D:F8:2C:0A:7D:F3:F9:C4
X509v3 Authority Key Identifier:
keyid:1D:10:E3:8E:D5:5E:31:85:AE:D6:F0:79:F8:BB:9B:F1:2D:44:48:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRDjjtVeMYWu1vB5-Lub8S1ESNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e23969-ffb0-4e57-a36a-760f6b6aabc1/1/HRDjjtVeMYWu1vB5-Lub8S1ESNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:1f:8a:4c:2e:c5:c4:0b:d6:ee:56:17:b2:96:36:ba:b7:a6:
93:a0:0f:6a:d1:41:98:4d:80:2c:86:2c:c9:33:41:4b:82:21:
4f:92:33:bd:02:37:b7:f5:b7:c0:4a:31:5f:b2:d5:d0:db:a0:
1f:cf:21:58:da:cf:3e:d8:56:e3:31:7c:13:75:1b:37:70:3f:
00:c4:cc:25:f3:73:6a:ae:64:b0:05:ce:8b:b5:54:fe:7a:e5:
0c:73:eb:4f:04:ca:c4:19:48:48:35:7b:21:10:fe:40:43:fd:
d1:50:b6:79:94:86:c5:fc:8e:3f:ef:5a:5d:87:7f:83:fc:15:
b1:8f:e7:42:39:e1:a8:93:5a:19:04:65:8b:af:64:3f:71:ef:
38:9b:a5:5a:b1:a1:e6:2f:43:8c:80:cb:77:af:b6:d9:ed:58:
55:94:ec:31:cd:89:81:56:f8:77:a5:c4:0e:1b:26:3d:6a:d4:
f0:91:0a:92:20:65:e5:c0:dd:d4:a5:b6:b8:6f:51:44:82:af:
f5:90:87:8a:da:e7:de:f6:7a:6e:91:c0:20:bf:54:e6:57:b4:
17:d8:25:87:1d:f7:36:8e:b1:ca:04:db:cb:71:aa:84:17:7b:
48:05:57:04:20:5c:5e:29:d1:7e:e0:5b:bf:41:b1:3f:62:49:
76:5f:12:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys663hLzwg9IuRYftAbIlZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMTBlMzhlZDU1ZTMxODVhZWQ2ZjA3OWY4YmI5YmYxMmQ0
NDQ4ZGIwHhcNMjYwMzAyMDUwMDUyWhcNMjYwMzAzMDUwMDUyWjAzMTEwLwYDVQQD
Eyg1MWJjODUxNjdkYWMyYTBmY2RhNzI5NWQwZGY4MmMwYTdkZjNmOWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IlToVc+BQ4dbk9ZeAl7+GcsJKbx
jN5zfSSaRRTsfX5uYURdD+43SVbrdTAqaEL3lLqRYZEfGTygR1zOrXJPNGK4yrk5
xgOAudu1xSUEIabaMPaeOavgRxWSyUKyLeWa3D1OwaYLE5XkCACAqytt+5Mp60yl
cnBM8XELCVNRfQq05qltNu8ch7klp0FY9z5H9HC13X0I19IQtPg7tBEw8As0vnCi
W2QhXxtX741ZrlFCRWIVvcBK2WKx4cxz+7SGlOrz9WyLFoCeY1qiWjKW4DGWbbCt
BGTr3LR3IVH25YDNHG5b1DUuu5LIEywoDS5ccV0s8JIGEhqcawM3nL7ooQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFG8hRZ9rCoPzacpXQ34LAp98/nEMB8GA1UdIwQY
MBaAFB0Q447VXjGFrtbwefi7m/EtREjbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFJEamp0VmVNWVd1MXZCNS1MdWI4UzFFU05zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lMjM5NjktZmZiMC00ZTU3LWEzNmEt
NzYwZjZiNmFhYmMxLzEvSFJEamp0VmVNWVd1MXZCNS1MdWI4UzFFU05zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9lMjM5NjktZmZiMC00ZTU3LWEzNmEtNzYwZjZiNmFhYmMx
LzEvSFJEamp0VmVNWVd1MXZCNS1MdWI4UzFFU05zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsB+KTC7F
xAvW7lYXspY2uremk6APatFBmE2ALIYsyTNBS4IhT5IzvQI3t/W3wEoxX7LV0Nug
H88hWNrPPthW4zF8E3UbN3A/AMTMJfNzaq5ksAXOi7VU/nrlDHPrTwTKxBlISDV7
IRD+QEP90VC2eZSGxfyOP+9aXYd/g/wVsY/nQjnhqJNaGQRli69kP3HvOJulWrGh
5i9DjIDLd6+22e1YVZTsMc2JgVb4d6XEDhsmPWrU8JEKkiBl5cDd1KW2uG9RRIKv
9ZCHitrn3vZ6bpHAIL9U5le0F9glhx33No6xygTby3GqhBd7SAVXBCBcXinRfuBb
v0GxP2JJdl8Suw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:55 2026 by rpki-client