Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
File: hCVmomcjm6WlPmRH7GrdFiM38NM.mft (raw, json)
Hash identifier: 7airPUZdSfz/s/jKH0VuH+LyyuM/jOEEUu4B1+SNSiI=
Subject key identifier: DB:0B:3C:E3:9F:74:1B:50:20:51:73:57:B5:01:C4:B3:CB:D5:00:DB
Authority key identifier: 84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3
Certificate issuer: /CN=842566a267239ba5a53e6447ec6add162337f0d3
Certificate serial: 019CAD59F2EA0C8435DB925DEB8F91B2585B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
Manifest number: 1117
Signing time: Mon 02 Mar 2026 07:01:19 +0000
Manifest this update: Mon 02 Mar 2026 07:01:19 +0000
Manifest next update: Tue 03 Mar 2026 07:01:19 +0000
Files and hashes: 1: hCVmomcjm6WlPmRH7GrdFiM38NM.crl (hash: 2d/P/62aTbMpg3wCKN5b0S72hjLckiF9yBaq5zz4Mzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:f2:ea:0c:84:35:db:92:5d:eb:8f:91:b2:58:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=842566a267239ba5a53e6447ec6add162337f0d3
Validity
Not Before: Mar 2 07:01:19 2026 GMT
Not After : Mar 3 07:01:19 2026 GMT
Subject: CN=db0b3ce39f741b5020517357b501c4b3cbd500db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:19:9e:db:74:f6:74:2b:3e:e9:3d:3d:b2:da:
43:c3:77:c9:7f:c9:8d:17:01:07:94:96:0e:8c:7d:
fc:1b:45:d0:f4:a0:99:44:25:f8:7d:4a:a1:38:aa:
a1:15:a8:cb:b2:5c:28:0b:fe:6f:8c:72:09:41:31:
32:c9:fd:f9:90:52:c3:63:e1:86:47:10:7d:f3:59:
e1:14:1c:00:6a:d6:21:d8:9d:d4:7c:15:7e:2d:96:
6c:d0:47:79:e6:22:2b:00:e5:3a:c6:fb:94:fc:47:
b1:fa:0b:be:9d:87:47:fa:5f:c9:dd:7b:fe:95:b5:
76:f4:f4:83:8b:98:82:6b:0a:65:11:ca:61:c0:2f:
e9:3e:08:2d:66:ff:2e:3e:ad:42:92:95:4b:d5:84:
c4:30:b8:c2:70:c3:87:c4:97:8c:11:4b:74:2f:a6:
64:dd:24:ad:cf:9b:d9:98:72:fc:86:77:e3:0b:3f:
54:61:b1:93:5c:07:8d:56:7f:19:aa:b6:58:aa:31:
5b:55:03:1e:3b:29:f7:bd:86:8f:2f:1b:b4:fe:64:
78:f4:e8:f7:db:37:65:81:61:65:9c:c1:ec:94:b7:
62:ce:84:1b:97:09:53:62:51:37:e6:c9:3c:44:ce:
4b:69:4b:e3:86:1d:1a:fe:79:27:e6:cb:84:d8:f8:
72:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0B:3C:E3:9F:74:1B:50:20:51:73:57:B5:01:C4:B3:CB:D5:00:DB
X509v3 Authority Key Identifier:
keyid:84:25:66:A2:67:23:9B:A5:A5:3E:64:47:EC:6A:DD:16:23:37:F0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCVmomcjm6WlPmRH7GrdFiM38NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6d2cf2-80ac-438b-8b40-6b1ed6b08c58/1/hCVmomcjm6WlPmRH7GrdFiM38NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:e8:f9:b7:8a:be:82:9e:59:6e:89:55:77:34:79:89:35:46:
15:0b:48:b7:b9:3c:e8:4d:a3:86:35:ee:71:ae:6a:ab:79:9d:
6a:2f:1d:d6:81:92:78:21:0f:30:52:a4:5f:47:6a:6e:1c:c1:
67:5f:15:05:cf:48:c4:4e:23:4c:d0:24:9e:eb:4f:c3:b3:d0:
ba:c3:b9:69:ab:67:b4:6a:59:b8:87:a6:2d:85:2f:96:cd:5d:
68:82:a8:78:6d:c6:f1:a0:0e:aa:ed:06:cf:52:d2:03:2d:a7:
ce:b7:95:2e:a1:0a:e8:82:0e:d6:3b:f2:80:bc:38:fd:ef:6d:
8a:46:77:fb:8e:15:31:5a:85:af:fc:eb:60:49:a8:5b:c8:64:
5a:c5:35:1d:e5:ea:a7:39:c0:f5:f0:3a:25:39:e8:59:89:eb:
c0:09:2e:6d:91:a8:28:b7:d2:c7:58:fc:8d:fe:78:3b:c0:cd:
d2:e5:b7:8b:8d:49:0c:49:1c:fa:87:af:87:39:86:f3:f5:71:
e0:93:bf:ad:aa:8a:77:e8:0e:51:95:03:8c:3c:67:21:13:b1:
3a:53:e6:c7:f3:bd:b2:92:7d:4b:36:cc:82:41:3f:a7:c6:b8:
49:b2:0e:4f:1e:d5:22:d1:4b:7b:61:d6:e6:22:46:d5:3e:3e:
63:e6:2b:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWfLqDIQ125Jd64+RslhbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MjU2NmEyNjcyMzliYTVhNTNlNjQ0N2VjNmFkZDE2MjMz
N2YwZDMwHhcNMjYwMzAyMDcwMTE5WhcNMjYwMzAzMDcwMTE5WjAzMTEwLwYDVQQD
EyhkYjBiM2NlMzlmNzQxYjUwMjA1MTczNTdiNTAxYzRiM2NiZDUwMGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRme23T2dCs+6T09stpDw3fJf8mN
FwEHlJYOjH38G0XQ9KCZRCX4fUqhOKqhFajLslwoC/5vjHIJQTEyyf35kFLDY+GG
RxB981nhFBwAatYh2J3UfBV+LZZs0Ed55iIrAOU6xvuU/Eex+gu+nYdH+l/J3Xv+
lbV29PSDi5iCawplEcphwC/pPggtZv8uPq1CkpVL1YTEMLjCcMOHxJeMEUt0L6Zk
3SStz5vZmHL8hnfjCz9UYbGTXAeNVn8ZqrZYqjFbVQMeOyn3vYaPLxu0/mR49Oj3
2zdlgWFlnMHslLdizoQblwlTYlE35sk8RM5LaUvjhh0a/nkn5suE2PhyzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsLPOOfdBtQIFFzV7UBxLPL1QDbMB8GA1UdIwQY
MBaAFIQlZqJnI5ulpT5kR+xq3RYjN/DTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaENWbW9tY2ptNldsUG1SSDdHcmRGaU0zOE5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC82ZDJjZjItODBhYy00MzhiLThiNDAt
NmIxZWQ2YjA4YzU4LzEvaENWbW9tY2ptNldsUG1SSDdHcmRGaU0zOE5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC82ZDJjZjItODBhYy00MzhiLThiNDAtNmIxZWQ2YjA4YzU4
LzEvaENWbW9tY2ptNldsUG1SSDdHcmRGaU0zOE5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwuj5t4q+
gp5ZbolVdzR5iTVGFQtIt7k86E2jhjXuca5qq3mdai8d1oGSeCEPMFKkX0dqbhzB
Z18VBc9IxE4jTNAknutPw7PQusO5aatntGpZuIemLYUvls1daIKoeG3G8aAOqu0G
z1LSAy2nzreVLqEK6IIO1jvygLw4/e9tikZ3+44VMVqFr/zrYEmoW8hkWsU1HeXq
pznA9fA6JTnoWYnrwAkubZGoKLfSx1j8jf54O8DN0uW3i41JDEkc+oevhzmG8/Vx
4JO/raqKd+gOUZUDjDxnIROxOlPmx/O9spJ9SzbMgkE/p8a4SbIOTx7VItFLe2HW
5iJG1T4+Y+Yrsw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:59 2026 by rpki-client