Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
File: hAfwBj7przHYfP5lubwZPrQsiWk.mft (raw, json)
Hash identifier: 4fwx87KNLl1L33xIIEdHD6lfKUj819Kj+GPP7aFdKJU=
Subject key identifier: 04:5B:3B:52:16:F5:78:4D:E8:F9:FF:1A:41:E4:0A:1C:DA:A7:DC:44
Authority key identifier: 84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
Certificate issuer: /CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Certificate serial: 019CABA1B79555D4CB1709234D3025976FCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
Manifest number: 08AA
Signing time: Sun 01 Mar 2026 23:00:28 +0000
Manifest this update: Sun 01 Mar 2026 23:00:28 +0000
Manifest next update: Mon 02 Mar 2026 23:00:28 +0000
Files and hashes: 1: hAfwBj7przHYfP5lubwZPrQsiWk.crl (hash: H7u5Yl1pej7gQi1J9d5Hm3WZTkbVRalko+R5ZHHzHq0=)
2: ilf77_-o9-q6za7MOsqeG7F-F18.roa (hash: QcXY77GP6oWSI7llT54vOOPgAvyMn7s0Et6LlhSw/kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:b7:95:55:d4:cb:17:09:23:4d:30:25:97:6f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Validity
Not Before: Mar 1 23:00:28 2026 GMT
Not After : Mar 2 23:00:28 2026 GMT
Subject: CN=045b3b5216f5784de8f9ff1a41e40a1cdaa7dc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:01:06:f2:83:5f:66:69:ce:14:d3:51:4d:bd:
cf:bb:ff:29:7d:b8:82:31:9a:75:34:05:c7:b7:67:
9f:5e:e6:af:57:bd:61:61:e5:3e:f4:5c:2c:71:ae:
b6:c0:61:86:5c:91:1c:6d:ea:e3:de:e7:05:5e:d1:
05:05:24:1a:bc:7a:7b:6a:7f:ce:d1:8b:95:67:6c:
76:0e:90:e2:56:e5:ce:87:fc:66:7c:df:0e:25:f6:
8d:cb:9b:26:7f:dc:e0:69:ff:90:7b:79:dd:a3:f8:
8f:48:a0:06:2d:9e:21:3f:ec:7d:fa:40:9f:ee:61:
a5:36:ea:6e:5b:84:65:5d:c2:7f:fd:9d:aa:35:1f:
78:9d:0c:40:aa:83:21:44:da:2a:de:bf:70:ef:72:
c6:18:a8:8b:46:06:6c:58:ce:ba:81:d0:79:8e:81:
c4:bc:c6:26:f0:29:3a:a0:27:a9:d3:e8:f0:32:6b:
43:de:85:97:25:00:59:1f:2a:37:7e:da:45:bb:57:
df:5b:77:bf:72:c7:c1:0d:33:66:62:04:8e:86:aa:
28:de:a4:ee:50:0d:52:41:79:5d:9d:e8:69:4a:85:
b6:0d:7a:16:d1:4a:12:42:6c:d1:98:88:85:89:f9:
8a:c5:97:28:e0:ef:3c:5f:c7:31:34:c0:aa:61:94:
4b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5B:3B:52:16:F5:78:4D:E8:F9:FF:1A:41:E4:0A:1C:DA:A7:DC:44
X509v3 Authority Key Identifier:
keyid:84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:0d:72:e7:bd:fe:88:35:47:7c:d0:68:af:11:87:69:4f:7e:
b4:2b:38:cc:92:c8:44:e8:59:79:4c:ae:ee:16:2f:e1:24:62:
2d:4d:18:32:2d:39:64:4d:67:69:41:47:e9:7e:63:db:1f:82:
24:6f:30:cb:81:85:a0:e9:ce:c9:52:3a:1f:a7:95:e3:2e:33:
0c:c4:d4:0b:79:ed:2f:4a:4f:7b:f4:5e:4f:0d:f6:28:95:db:
a7:38:ee:2e:15:95:1d:2d:e9:73:87:07:dd:5f:87:52:09:06:
ed:bd:4b:cf:f8:68:8f:16:bf:71:12:5e:02:b7:f1:60:80:23:
3f:80:fe:b1:9c:32:22:dd:f3:50:b2:5f:91:26:2d:4d:c4:68:
48:bd:12:fc:65:cc:77:8b:de:59:0d:e1:c6:99:19:5e:95:37:
f0:ec:f4:96:08:d7:e1:8e:ed:39:39:fc:48:cf:27:68:f0:5f:
ed:dd:a6:db:f6:19:45:94:5c:9b:f1:04:93:2c:5d:88:de:5a:
e7:77:02:6c:5a:b1:71:b7:dc:7f:12:fd:bd:c7:be:9f:bd:51:
d2:4f:8a:90:53:db:fe:e6:f4:95:62:a3:39:e8:ee:a2:9d:16:
67:f1:8f:ef:d6:3f:ed:e0:ef:8a:d0:7c:be:a8:ce:b9:6e:dd:
50:eb:8b:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrobeVVdTLFwkjTTAll2/NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MDdmMDA2M2VlOWFmMzFkODdjZmU2NWI5YmMxOTNlYjQy
Yzg5NjkwHhcNMjYwMzAxMjMwMDI4WhcNMjYwMzAyMjMwMDI4WjAzMTEwLwYDVQQD
EygwNDViM2I1MjE2ZjU3ODRkZThmOWZmMWE0MWU0MGExY2RhYTdkYzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQEG8oNfZmnOFNNRTb3Pu/8pfbiC
MZp1NAXHt2efXuavV71hYeU+9Fwsca62wGGGXJEcberj3ucFXtEFBSQavHp7an/O
0YuVZ2x2DpDiVuXOh/xmfN8OJfaNy5smf9zgaf+Qe3ndo/iPSKAGLZ4hP+x9+kCf
7mGlNupuW4RlXcJ//Z2qNR94nQxAqoMhRNoq3r9w73LGGKiLRgZsWM66gdB5joHE
vMYm8Ck6oCep0+jwMmtD3oWXJQBZHyo3ftpFu1ffW3e/csfBDTNmYgSOhqoo3qTu
UA1SQXldnehpSoW2DXoW0UoSQmzRmIiFifmKxZco4O88X8cxNMCqYZRLcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARbO1IW9XhN6Pn/GkHkChzap9xEMB8GA1UdIwQY
MBaAFIQH8AY+6a8x2Hz+Zbm8GT60LIlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEFmd0JqN3ByekhZZlA1bHVid1pQclFzaVdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82NTdjNTktZTNiOS00MDRmLWFmYWIt
ZTFlZmNmMmVkMGE3LzEvaEFmd0JqN3ByekhZZlA1bHVid1pQclFzaVdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS82NTdjNTktZTNiOS00MDRmLWFmYWItZTFlZmNmMmVkMGE3
LzEvaEFmd0JqN3ByekhZZlA1bHVid1pQclFzaVdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQ1y573+
iDVHfNBorxGHaU9+tCs4zJLIROhZeUyu7hYv4SRiLU0YMi05ZE1naUFH6X5j2x+C
JG8wy4GFoOnOyVI6H6eV4y4zDMTUC3ntL0pPe/ReTw32KJXbpzjuLhWVHS3pc4cH
3V+HUgkG7b1Lz/hojxa/cRJeArfxYIAjP4D+sZwyIt3zULJfkSYtTcRoSL0S/GXM
d4veWQ3hxpkZXpU38Oz0lgjX4Y7tOTn8SM8naPBf7d2m2/YZRZRcm/EEkyxdiN5a
53cCbFqxcbfcfxL9vce+n71R0k+KkFPb/ub0lWKjOejuop0WZ/GP79Y/7eDvitB8
vqjOuW7dUOuLDA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:35:03 2026 by rpki-client