Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
File: HFGW3tW6XWhucJXG1cY4xrj4uto.mft (raw, json)
Hash identifier: Ru/8nNRMFi2lpkWHqdCtH0D7Zgd+PijdZ68h+YWPs1Q=
Subject key identifier: 4D:82:59:C4:07:AF:C3:0C:D0:02:0B:AB:9C:A9:9E:B2:EC:40:64:82
Authority key identifier: 1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
Certificate issuer: /CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Certificate serial: 019D98F5053DB02A9A00E302ED0B8DA228A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
Manifest number: 1206
Signing time: Fri 17 Apr 2026 01:01:27 +0000
Manifest this update: Fri 17 Apr 2026 01:01:27 +0000
Manifest next update: Sat 18 Apr 2026 01:01:27 +0000
Files and hashes: 1: HFGW3tW6XWhucJXG1cY4xrj4uto.crl (hash: 6S+SyPpkqNTndW/W1538mnclWFY8j+LfsHPAyBJsy2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:05:3d:b0:2a:9a:00:e3:02:ed:0b:8d:a2:28:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Validity
Not Before: Apr 17 01:01:27 2026 GMT
Not After : Apr 18 01:01:27 2026 GMT
Subject: CN=4d8259c407afc30cd0020bab9ca99eb2ec406482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ba:e0:2a:ef:e6:fb:ab:0d:11:b6:4c:f7:76:
be:c2:21:d9:8d:53:a4:73:da:8f:3e:06:9e:9a:04:
c4:b1:28:86:72:e5:d0:22:39:3c:a8:61:a3:9d:af:
de:52:17:55:97:1d:23:5c:bf:14:78:b5:f0:6f:75:
b6:a5:9f:d4:a1:0a:a7:59:3b:a6:2d:2b:87:f5:41:
76:57:ca:75:b8:89:ac:09:b7:09:ca:61:94:18:39:
6d:d3:69:1a:f9:91:e0:91:ed:37:92:2d:62:c0:47:
25:b0:a2:f4:ad:b4:3a:97:89:c1:de:5f:04:c4:7b:
1e:29:19:3a:9d:d6:01:e3:0e:14:ad:a4:39:4c:24:
fb:62:e9:bc:9f:2f:5b:65:5d:49:7a:93:48:e7:4e:
c9:80:d6:4b:6c:4b:2a:1d:05:bc:ce:d9:aa:af:5f:
20:82:98:60:94:0d:bd:46:b4:1a:27:16:58:90:cc:
1d:83:b0:48:74:13:a2:b4:3d:9d:5e:0f:06:4a:9e:
b8:2f:8d:3c:62:61:61:1d:b9:98:33:a5:d6:c1:f7:
4a:00:76:00:70:c7:b6:5c:d2:48:70:67:1f:53:79:
7d:8b:fd:36:32:b4:17:0a:2b:14:e7:6e:de:ed:07:
83:e6:e8:1d:67:b1:b6:14:20:f6:d8:1f:62:6d:05:
37:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:82:59:C4:07:AF:C3:0C:D0:02:0B:AB:9C:A9:9E:B2:EC:40:64:82
X509v3 Authority Key Identifier:
keyid:1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:bc:0a:cb:67:21:d7:c3:5c:93:7b:0f:88:b6:8c:a3:72:2d:
d5:62:2e:8c:5a:0c:55:9f:87:0e:e5:3f:c6:47:d5:ef:00:eb:
92:2e:13:b7:e6:ac:c5:8f:c4:38:03:85:6e:7e:72:d5:b0:48:
db:44:ea:74:ad:7f:e0:26:da:db:76:0a:6c:27:4e:9c:27:74:
b6:db:ff:4f:ae:c8:92:dc:f5:59:fc:f8:48:0c:bd:58:f7:fe:
73:0c:8a:aa:98:b5:29:a1:ff:ab:a4:ff:b2:2e:41:85:50:0b:
04:3b:89:2d:46:2b:f6:76:76:f7:26:5b:fc:7b:e7:bd:86:76:
3e:65:98:84:5d:fa:04:92:a9:25:d4:72:f7:60:fc:50:69:18:
8d:d3:97:f6:cc:c3:85:82:17:8f:e7:9f:4b:bd:f9:36:af:d9:
14:d3:1e:f7:17:78:f7:85:e2:ec:5e:20:78:3d:92:7b:d2:33:
47:49:b1:32:87:fe:2b:60:32:cc:d0:fd:1d:5a:49:fd:a7:ca:
af:33:27:8f:7b:8b:80:c3:54:63:cd:6e:29:1f:db:a0:de:2c:
56:5d:75:b1:0f:c2:b7:9e:d6:62:ae:c1:6a:99:7a:16:5d:f8:
dc:8e:ec:83:fc:b5:a0:74:b0:79:4e:9b:54:db:70:5e:c4:f5:
98:18:a6:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9QU9sCqaAOMC7QuNoiioMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNTE5NmRlZDViYTVkNjg2ZTcwOTVjNmQ1YzYzOGM2Yjhm
OGJhZGEwHhcNMjYwNDE3MDEwMTI3WhcNMjYwNDE4MDEwMTI3WjAzMTEwLwYDVQQD
Eyg0ZDgyNTljNDA3YWZjMzBjZDAwMjBiYWI5Y2E5OWViMmVjNDA2NDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbrgKu/m+6sNEbZM93a+wiHZjVOk
c9qPPgaemgTEsSiGcuXQIjk8qGGjna/eUhdVlx0jXL8UeLXwb3W2pZ/UoQqnWTum
LSuH9UF2V8p1uImsCbcJymGUGDlt02ka+ZHgke03ki1iwEclsKL0rbQ6l4nB3l8E
xHseKRk6ndYB4w4UraQ5TCT7Yum8ny9bZV1JepNI507JgNZLbEsqHQW8ztmqr18g
gphglA29RrQaJxZYkMwdg7BIdBOitD2dXg8GSp64L408YmFhHbmYM6XWwfdKAHYA
cMe2XNJIcGcfU3l9i/02MrQXCisU527e7QeD5ugdZ7G2FCD22B9ibQU3iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2CWcQHr8MM0AILq5ypnrLsQGSCMB8GA1UdIwQY
MBaAFBxRlt7Vul1obnCVxtXGOMa4+LraMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEZHVzN0VzZYV2h1Y0pYRzFjWTR4cmo0dXRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNTlmYTMtMzE2ZS00ZjVlLThiNjEt
MjBiZjI3NWZkMGU3LzEvSEZHVzN0VzZYV2h1Y0pYRzFjWTR4cmo0dXRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xNTlmYTMtMzE2ZS00ZjVlLThiNjEtMjBiZjI3NWZkMGU3
LzEvSEZHVzN0VzZYV2h1Y0pYRzFjWTR4cmo0dXRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ7wKy2ch
18Nck3sPiLaMo3It1WIujFoMVZ+HDuU/xkfV7wDrki4Tt+asxY/EOAOFbn5y1bBI
20TqdK1/4Cba23YKbCdOnCd0ttv/T67Iktz1Wfz4SAy9WPf+cwyKqpi1KaH/q6T/
si5BhVALBDuJLUYr9nZ29yZb/HvnvYZ2PmWYhF36BJKpJdRy92D8UGkYjdOX9szD
hYIXj+efS735Nq/ZFNMe9xd494Xi7F4geD2Se9IzR0mxMof+K2AyzND9HVpJ/afK
rzMnj3uLgMNUY81uKR/boN4sVl11sQ/Ct57WYq7Bapl6Fl343I7sg/y1oHSweU6b
VNtwXsT1mBimYw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:07:45 2026 by rpki-client