Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
File: HFGW3tW6XWhucJXG1cY4xrj4uto.mft (raw, json)
Hash identifier: Hl1T0kDj66Rl1LEb26rhy9mBsZeVtCTs+apjFyilMgY=
Subject key identifier: 79:ED:97:50:D2:31:F0:90:FC:39:EF:2A:76:27:C3:CE:76:10:8D:08
Authority key identifier: 1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
Certificate issuer: /CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Certificate serial: 019CAB6B61D4E660A82382658C2557253C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
Manifest number: 118B
Signing time: Sun 01 Mar 2026 22:01:07 +0000
Manifest this update: Sun 01 Mar 2026 22:01:07 +0000
Manifest next update: Mon 02 Mar 2026 22:01:07 +0000
Files and hashes: 1: HFGW3tW6XWhucJXG1cY4xrj4uto.crl (hash: BJ53hNuT7TJPL3XwTE+eKiZdu7w/13/Or/EhyNKKpME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:61:d4:e6:60:a8:23:82:65:8c:25:57:25:3c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Validity
Not Before: Mar 1 22:01:07 2026 GMT
Not After : Mar 2 22:01:07 2026 GMT
Subject: CN=79ed9750d231f090fc39ef2a7627c3ce76108d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:63:6d:45:42:ba:14:1c:e2:8e:7b:2a:a8:e6:
d7:c8:b7:63:e3:e9:de:b7:4e:71:b3:53:09:0a:93:
f9:4b:42:3f:a9:80:a3:59:22:a9:0e:b2:33:fd:a1:
f6:24:07:12:79:0d:24:fd:91:72:ca:3e:6d:79:a4:
17:cf:cc:ef:a6:0c:79:37:d6:19:22:c6:ce:b9:5f:
4e:8c:2d:63:ac:02:9d:63:c4:96:03:c8:42:98:d3:
ed:18:52:46:70:d6:b0:fb:c3:be:74:88:11:98:96:
66:a8:f2:7d:7d:a0:72:1e:bd:70:18:37:b0:41:ae:
d9:2d:c8:b8:dc:87:c3:97:8c:5e:31:4f:46:a1:98:
f1:09:7e:16:8b:f0:9f:f6:fa:75:1e:34:bd:86:b6:
0e:f6:c1:8b:7f:cc:05:d8:d8:f8:c0:77:fe:50:e7:
a0:6c:b1:40:27:99:05:2f:07:68:bd:2b:ca:23:d4:
a3:73:09:c6:06:8d:91:50:94:16:80:b2:b8:f9:32:
f0:86:ea:43:9d:1e:87:f2:cc:22:23:bc:86:96:26:
ed:4b:51:ea:da:49:f8:7f:8c:ac:27:72:04:27:9a:
7b:41:75:29:ec:ee:dc:b1:97:ff:af:85:8f:de:cd:
06:a1:18:48:79:90:02:80:5b:61:6b:8c:e0:69:81:
ea:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:ED:97:50:D2:31:F0:90:FC:39:EF:2A:76:27:C3:CE:76:10:8D:08
X509v3 Authority Key Identifier:
keyid:1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b7:f6:d4:05:18:02:c9:8f:5c:6b:7b:a0:f8:a2:de:bf:c3:
b6:d0:32:34:8c:a8:c6:d7:65:c6:a0:24:9c:37:75:21:e0:2b:
ab:a8:a1:ae:97:e5:c6:c9:18:75:70:cf:79:87:e1:77:f8:70:
a3:a7:3a:7e:9f:c6:c5:5d:d8:fb:7b:6b:ce:9d:ce:79:cc:1d:
f8:a8:c9:15:94:e6:61:e0:8d:a9:24:a4:cc:b4:ef:4a:10:77:
f8:ce:a8:61:dc:e9:d7:5f:0a:da:cb:c5:f7:be:9f:12:49:c4:
db:f4:2a:28:52:df:ae:9a:23:21:b0:59:53:e8:e9:32:88:76:
8d:39:7e:98:73:ad:84:64:bc:aa:c1:2f:66:e2:52:06:6f:7f:
41:e3:8a:9e:58:67:d7:db:7c:5c:07:0d:33:74:10:aa:cd:65:
29:20:11:ea:52:3c:38:c9:dc:ed:a3:66:d3:dc:fb:bb:fd:bd:
c3:83:c8:14:51:ac:9f:4f:20:ad:bf:ea:a6:14:ab:e2:7d:e2:
71:a1:2b:f3:a3:d4:3f:16:4f:74:b6:b4:ea:d7:bf:80:fb:00:
fa:fe:f1:9b:10:ae:b2:80:56:7e:ae:e9:42:91:32:e0:82:2f:
29:1b:d8:30:17:35:d4:b2:17:be:b1:7d:6d:2e:31:c9:0e:a7:
14:bb:2c:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra2HU5mCoI4JljCVXJTwGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNTE5NmRlZDViYTVkNjg2ZTcwOTVjNmQ1YzYzOGM2Yjhm
OGJhZGEwHhcNMjYwMzAxMjIwMTA3WhcNMjYwMzAyMjIwMTA3WjAzMTEwLwYDVQQD
Eyg3OWVkOTc1MGQyMzFmMDkwZmMzOWVmMmE3NjI3YzNjZTc2MTA4ZDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GNtRUK6FBzijnsqqObXyLdj4+ne
t05xs1MJCpP5S0I/qYCjWSKpDrIz/aH2JAcSeQ0k/ZFyyj5teaQXz8zvpgx5N9YZ
IsbOuV9OjC1jrAKdY8SWA8hCmNPtGFJGcNaw+8O+dIgRmJZmqPJ9faByHr1wGDew
Qa7ZLci43IfDl4xeMU9GoZjxCX4Wi/Cf9vp1HjS9hrYO9sGLf8wF2Nj4wHf+UOeg
bLFAJ5kFLwdovSvKI9SjcwnGBo2RUJQWgLK4+TLwhupDnR6H8swiI7yGlibtS1Hq
2kn4f4ysJ3IEJ5p7QXUp7O7csZf/r4WP3s0GoRhIeZACgFtha4zgaYHqWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHntl1DSMfCQ/DnvKnYnw852EI0IMB8GA1UdIwQY
MBaAFBxRlt7Vul1obnCVxtXGOMa4+LraMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEZHVzN0VzZYV2h1Y0pYRzFjWTR4cmo0dXRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNTlmYTMtMzE2ZS00ZjVlLThiNjEt
MjBiZjI3NWZkMGU3LzEvSEZHVzN0VzZYV2h1Y0pYRzFjWTR4cmo0dXRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xNTlmYTMtMzE2ZS00ZjVlLThiNjEtMjBiZjI3NWZkMGU3
LzEvSEZHVzN0VzZYV2h1Y0pYRzFjWTR4cmo0dXRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhrf21AUY
AsmPXGt7oPii3r/DttAyNIyoxtdlxqAknDd1IeArq6ihrpflxskYdXDPeYfhd/hw
o6c6fp/GxV3Y+3trzp3Oecwd+KjJFZTmYeCNqSSkzLTvShB3+M6oYdzp118K2svF
976fEknE2/QqKFLfrpojIbBZU+jpMoh2jTl+mHOthGS8qsEvZuJSBm9/QeOKnlhn
19t8XAcNM3QQqs1lKSAR6lI8OMnc7aNm09z7u/29w4PIFFGsn08grb/qphSr4n3i
caEr86PUPxZPdLa06te/gPsA+v7xmxCusoBWfq7pQpEy4IIvKRvYMBc11LIXvrF9
bS4xyQ6nFLssuA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:43:39 2026 by rpki-client