Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
File: hk3xEo99QsaISGO18nPz66ZZYVY.mft (raw, json)
Hash identifier: Y71Z9obJIJX5W4T+gn/1BAAt5mOlH+dCYKtZZeoBwMw=
Subject key identifier: F3:9D:D6:F6:77:CF:D7:79:64:25:32:1A:62:AF:DE:D7:13:1D:CA:75
Authority key identifier: 86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56
Certificate issuer: /CN=864df1128f7d42c6884863b5f273f3eba6596156
Certificate serial: 019CADFE1A0242071D3EF7B69B55DB6E47CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
Manifest number: 0415
Signing time: Mon 02 Mar 2026 10:00:36 +0000
Manifest this update: Mon 02 Mar 2026 10:00:36 +0000
Manifest next update: Tue 03 Mar 2026 10:00:36 +0000
Files and hashes: 1: 1-YhcIhEEArw6IoG9b79g8foLA58.roa (hash: pZFDtYibY4f6p1KpnyYKR++X/1rjAASd4QgMl9sz5X0=)
2: hJF_Qf_RH8PNrcx0oAWzmG_6QvI.roa (hash: ITLAoU923u7FKi0+iXA4NTM9zJ20lGavrZ5Z4X2QkmY=)
3: hk3xEo99QsaISGO18nPz66ZZYVY.crl (hash: ejtp7DipDjXrH6wbuSuy5bq5VQgm9MzfRelG90XgJfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:1a:02:42:07:1d:3e:f7:b6:9b:55:db:6e:47:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864df1128f7d42c6884863b5f273f3eba6596156
Validity
Not Before: Mar 2 10:00:36 2026 GMT
Not After : Mar 3 10:00:36 2026 GMT
Subject: CN=f39dd6f677cfd7796425321a62afded7131dca75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5d:53:99:fb:12:05:87:dc:f6:30:2c:06:b6:
df:b2:1c:99:ae:7d:17:89:dc:35:11:2e:45:7d:86:
1e:8a:31:a3:88:a0:bf:71:2d:e6:1e:df:0c:45:89:
f3:f7:64:a8:c7:ee:28:59:48:de:af:28:4d:22:c8:
9a:a5:ce:59:8f:43:6a:07:78:c2:7f:34:2a:18:b2:
24:55:bc:47:82:fc:36:89:b7:cf:c0:09:10:76:17:
85:5e:cd:4c:4b:da:5d:a8:91:40:2c:f2:7e:25:13:
3c:32:87:5e:4b:f4:13:88:88:9d:65:6c:ee:23:c4:
95:43:4e:76:8e:43:4b:2c:25:c3:29:8f:03:96:96:
70:b8:8b:12:43:42:b9:ef:8b:35:fa:84:8f:62:c2:
1a:ef:0b:3e:39:0e:de:6e:26:4a:d9:fe:03:3c:a0:
13:01:3c:6c:44:9c:27:82:e3:03:86:51:e6:aa:6d:
cf:a2:0f:56:67:fc:36:99:93:c5:37:b3:88:47:7f:
fb:8a:38:85:a2:08:af:9a:5e:08:33:ce:93:82:e0:
14:5d:be:51:61:ac:73:52:ce:34:26:d2:0c:f6:7e:
50:8f:31:37:18:70:f5:c4:48:8e:7e:94:08:56:6e:
d0:13:c2:cb:cb:2f:8d:1d:b7:b9:18:80:a6:52:a1:
ab:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9D:D6:F6:77:CF:D7:79:64:25:32:1A:62:AF:DE:D7:13:1D:CA:75
X509v3 Authority Key Identifier:
keyid:86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:09:64:9b:9e:e0:4e:73:70:a5:34:2d:a4:1c:a8:ca:47:a6:
23:97:6d:1a:9c:f6:f3:ef:65:0c:2f:60:52:2c:9e:68:a1:e1:
b7:7c:4a:3e:6a:37:d5:e9:8b:56:45:6e:84:0c:73:8e:a1:07:
53:90:68:d2:d0:0a:f5:2d:b7:df:02:17:a6:98:62:7e:b4:31:
61:eb:a3:80:24:2e:84:c8:e9:8d:e9:fe:1a:c5:7d:76:db:e1:
dc:c1:8f:d0:2e:ec:16:da:75:a4:7a:02:ab:b6:ea:32:7d:8c:
c6:16:e6:be:c5:54:ab:fc:c1:67:72:b4:0f:9c:b5:6a:c1:a6:
50:04:38:9e:87:a0:3f:86:e8:fa:b9:06:c1:7e:d1:2a:6a:58:
4e:de:9f:68:84:15:1f:78:d4:bf:dc:52:b6:5b:fd:6c:dd:70:
55:96:18:34:31:51:38:40:49:60:fc:ff:7d:7b:ae:d2:38:a3:
26:84:2e:64:3d:be:42:a6:5e:77:2e:6a:33:ea:9c:e1:fc:73:
71:55:1a:4a:a4:fe:c9:9c:f9:88:1b:c1:c5:be:d3:b6:25:43:
ed:7f:3c:0a:fa:8c:8b:70:f2:1c:b3:13:4d:23:d7:01:45:aa:
5c:32:7c:36:9d:f9:e3:3a:3f:f5:0a:f4:4b:59:5d:83:e8:f8:
1a:28:ec:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/hoCQgcdPve2m1XbbkfPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NGRmMTEyOGY3ZDQyYzY4ODQ4NjNiNWYyNzNmM2ViYTY1
OTYxNTYwHhcNMjYwMzAyMTAwMDM2WhcNMjYwMzAzMTAwMDM2WjAzMTEwLwYDVQQD
EyhmMzlkZDZmNjc3Y2ZkNzc5NjQyNTMyMWE2MmFmZGVkNzEzMWRjYTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA511TmfsSBYfc9jAsBrbfshyZrn0X
idw1ES5FfYYeijGjiKC/cS3mHt8MRYnz92Sox+4oWUjeryhNIsiapc5Zj0NqB3jC
fzQqGLIkVbxHgvw2ibfPwAkQdheFXs1MS9pdqJFALPJ+JRM8ModeS/QTiIidZWzu
I8SVQ052jkNLLCXDKY8DlpZwuIsSQ0K574s1+oSPYsIa7ws+OQ7ebiZK2f4DPKAT
ATxsRJwnguMDhlHmqm3Pog9WZ/w2mZPFN7OIR3/7ijiFogivml4IM86TguAUXb5R
YaxzUs40JtIM9n5QjzE3GHD1xEiOfpQIVm7QE8LLyy+NHbe5GICmUqGrsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOd1vZ3z9d5ZCUyGmKv3tcTHcp1MB8GA1UdIwQY
MBaAFIZN8RKPfULGiEhjtfJz8+umWWFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGszeEVvOTlRc2FJU0dPMThuUHo2NlpaWVZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85YjVkMDItMTZmOC00Mjg0LTk0M2Ut
ODBkN2ZhNWRmYmI0LzEvaGszeEVvOTlRc2FJU0dPMThuUHo2NlpaWVZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy85YjVkMDItMTZmOC00Mjg0LTk0M2UtODBkN2ZhNWRmYmI0
LzEvaGszeEVvOTlRc2FJU0dPMThuUHo2NlpaWVZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGglkm57g
TnNwpTQtpByoykemI5dtGpz28+9lDC9gUiyeaKHht3xKPmo31emLVkVuhAxzjqEH
U5Bo0tAK9S233wIXpphifrQxYeujgCQuhMjpjen+GsV9dtvh3MGP0C7sFtp1pHoC
q7bqMn2MxhbmvsVUq/zBZ3K0D5y1asGmUAQ4noegP4bo+rkGwX7RKmpYTt6faIQV
H3jUv9xStlv9bN1wVZYYNDFROEBJYPz/fXuu0jijJoQuZD2+QqZedy5qM+qc4fxz
cVUaSqT+yZz5iBvBxb7TtiVD7X88CvqMi3DyHLMTTSPXAUWqXDJ8Np354zo/9Qr0
S1ldg+j4GijsMA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:48:55 2026 by rpki-client