Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft
File: hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft (raw, json)
Hash identifier: HRp+TcVPEvwKWEkIkq7U5fUsYFk3xVMuW3xitnGaVm4=
Subject key identifier: ED:B9:56:06:F0:2B:C0:35:CD:05:4C:F2:69:E7:87:97:C1:DE:F8:E0
Authority key identifier: 84:2E:15:83:C6:D2:B9:48:78:C5:A9:83:9E:F6:7F:56:14:4B:85:65
Certificate issuer: /CN=842e1583c6d2b94878c5a9839ef67f56144b8565
Certificate serial: 019CA8D7D1739BA501AC2492BFB9E9B99091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft
Manifest number: 0176
Signing time: Sun 01 Mar 2026 10:00:41 +0000
Manifest this update: Sun 01 Mar 2026 10:00:41 +0000
Manifest next update: Mon 02 Mar 2026 10:00:41 +0000
Files and hashes: 1: 82t5-hxlbBokWJ95cU6-iNwwzGE.roa (hash: /vM2wNO4llhGTKJMkB3GroMrqeVphHqzb5ESd4v5N4Q=)
2: ETMpToqTleOoqImfhhOrXw4lz3Q.asa (hash: CY0wY17SWUl1vZ+zGcUwbXDJHsRR/4ff/AIuJo1+GZo=)
3: hC4Vg8bSuUh4xamDnvZ_VhRLhWU.crl (hash: q4+e+xWSonu6Fj291JOWK17PLQfYDA8iWBCEoVnsuus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d7:d1:73:9b:a5:01:ac:24:92:bf:b9:e9:b9:90:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=842e1583c6d2b94878c5a9839ef67f56144b8565
Validity
Not Before: Mar 1 10:00:41 2026 GMT
Not After : Mar 2 10:00:41 2026 GMT
Subject: CN=edb95606f02bc035cd054cf269e78797c1def8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cd:41:f5:0f:bc:ba:0f:e1:e0:1c:cc:13:a5:
b5:dc:36:74:df:6c:77:c8:ed:22:63:71:eb:ca:6c:
60:39:1f:a3:39:aa:b5:ed:e8:ec:ca:02:4d:a1:21:
98:0d:68:b3:38:a3:3f:85:d6:e1:3e:4c:f6:b4:f9:
e7:42:89:f7:fa:ed:72:bc:52:ce:83:5c:9b:96:d9:
66:63:1e:24:d8:26:79:1f:b5:b2:86:d2:d2:29:22:
a0:61:48:30:a8:91:b3:ff:94:7f:91:be:b2:e5:6f:
15:33:3b:b9:f3:08:87:86:6c:c4:12:de:35:20:a1:
dc:68:09:dc:e6:44:e4:1f:2e:c7:2b:a2:70:05:64:
7c:58:65:73:d5:ed:77:47:57:2e:2c:6f:a9:39:d6:
0c:94:1c:f7:5e:2a:3d:6a:36:e3:7e:73:ce:e2:a3:
68:5b:4b:37:39:5a:15:17:a4:12:63:2b:c9:7d:8b:
31:66:44:92:6e:a5:1a:d9:41:a3:6e:14:b6:ff:6b:
89:93:cc:f2:73:a0:ac:17:5b:db:c2:c7:94:e6:eb:
a5:7d:1e:60:56:8a:37:5e:e9:0a:8e:f7:2a:f6:86:
98:a7:56:92:cb:7b:6a:ab:71:aa:2e:55:d0:4b:19:
f2:7a:a9:b1:0d:37:3d:b7:62:b4:40:46:4e:68:28:
21:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B9:56:06:F0:2B:C0:35:CD:05:4C:F2:69:E7:87:97:C1:DE:F8:E0
X509v3 Authority Key Identifier:
keyid:84:2E:15:83:C6:D2:B9:48:78:C5:A9:83:9E:F6:7F:56:14:4B:85:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f9:1a:ad:74:13:10:04:b2:59:48:e6:2c:c5:21:69:c6:50:
50:ce:0a:e2:30:3d:74:55:e9:a3:96:6b:08:7f:30:95:f0:62:
f3:06:a1:48:7d:6a:22:40:b4:39:55:7e:bb:8a:7f:c3:b5:61:
07:21:cb:63:a1:20:b4:46:95:b7:13:ff:98:4a:cd:e6:1d:f8:
33:64:bd:bb:0a:27:6a:c9:36:3f:19:02:85:97:ce:93:ed:74:
66:bd:9f:02:fd:0c:cb:65:e3:ed:3f:04:ee:2d:2a:d3:f9:24:
2d:6f:da:ed:3f:78:22:11:43:7a:fe:09:a0:05:c2:37:7b:80:
0e:17:93:c0:e3:3b:b1:8c:0a:76:61:b3:7c:d8:73:a6:8a:0a:
ec:8f:cb:0f:9e:a2:aa:0f:2f:4d:9b:0d:d2:f6:be:9f:3c:ce:
18:65:05:22:c4:05:c7:7e:d2:97:3f:ab:b9:95:1d:82:2f:85:
1b:7a:45:df:3f:04:4f:45:0a:db:d0:8a:54:57:c8:7c:63:8b:
ab:22:27:b1:36:e7:42:bc:ac:41:f6:ba:af:7d:64:c0:1c:85:
e2:d6:3e:ef:be:6e:f3:db:d4:2e:f9:95:6f:34:af:f0:8e:b7:
dc:1e:51:7f:81:f6:6c:99:ab:17:f7:60:03:45:57:be:1b:62:
82:d2:37:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyo19Fzm6UBrCSSv7npuZCRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MmUxNTgzYzZkMmI5NDg3OGM1YTk4MzllZjY3ZjU2MTQ0
Yjg1NjUwHhcNMjYwMzAxMTAwMDQxWhcNMjYwMzAyMTAwMDQxWjAzMTEwLwYDVQQD
EyhlZGI5NTYwNmYwMmJjMDM1Y2QwNTRjZjI2OWU3ODc5N2MxZGVmOGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos1B9Q+8ug/h4BzME6W13DZ032x3
yO0iY3HrymxgOR+jOaq17ejsygJNoSGYDWizOKM/hdbhPkz2tPnnQon3+u1yvFLO
g1ybltlmYx4k2CZ5H7WyhtLSKSKgYUgwqJGz/5R/kb6y5W8VMzu58wiHhmzEEt41
IKHcaAnc5kTkHy7HK6JwBWR8WGVz1e13R1cuLG+pOdYMlBz3Xio9ajbjfnPO4qNo
W0s3OVoVF6QSYyvJfYsxZkSSbqUa2UGjbhS2/2uJk8zyc6CsF1vbwseU5uulfR5g
Voo3XukKjvcq9oaYp1aSy3tqq3GqLlXQSxnyeqmxDTc9t2K0QEZOaCghSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO25VgbwK8A1zQVM8mnnh5fB3vjgMB8GA1UdIwQY
MBaAFIQuFYPG0rlIeMWpg572f1YUS4VlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEM0Vmc4YlN1VWg0eGFtRG52Wl9WaFJMaFdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85ZDRlZTktYTI5Yy00ODU5LTgxOWEt
OGNjZWVlZDYyY2Q1LzEvaEM0Vmc4YlN1VWg0eGFtRG52Wl9WaFJMaFdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85ZDRlZTktYTI5Yy00ODU5LTgxOWEtOGNjZWVlZDYyY2Q1
LzEvaEM0Vmc4YlN1VWg0eGFtRG52Wl9WaFJMaFdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABPkarXQT
EASyWUjmLMUhacZQUM4K4jA9dFXpo5ZrCH8wlfBi8wahSH1qIkC0OVV+u4p/w7Vh
ByHLY6EgtEaVtxP/mErN5h34M2S9uwonask2PxkChZfOk+10Zr2fAv0My2Xj7T8E
7i0q0/kkLW/a7T94IhFDev4JoAXCN3uADheTwOM7sYwKdmGzfNhzpooK7I/LD56i
qg8vTZsN0va+nzzOGGUFIsQFx37Slz+ruZUdgi+FG3pF3z8ET0UK29CKVFfIfGOL
qyInsTbnQrysQfa6r31kwByF4tY+775u89vULvmVbzSv8I633B5Rf4H2bJmrF/dg
A0VXvhtigtI3vA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:28:36 2026 by rpki-client