Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
File: HkwyCG4emEUFaRsB9Zhd96NrJK4.mft (raw, json)
Hash identifier: tFejarGgR4tOHXakFxOTPEK/X1cRDMWeMyr/l+rGWZg=
Subject key identifier: 2A:17:DE:AA:31:82:DA:BD:AB:13:47:4E:69:AF:4E:7B:5A:DC:E0:8C
Authority key identifier: 1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
Certificate issuer: /CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Certificate serial: 019CACEBB8C462A1654BC82004745F910767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
Manifest number: 14CD
Signing time: Mon 02 Mar 2026 05:00:55 +0000
Manifest this update: Mon 02 Mar 2026 05:00:55 +0000
Manifest next update: Tue 03 Mar 2026 05:00:55 +0000
Files and hashes: 1: 4BSkcYmhr5NVj087jPH0UVEqIOM.roa (hash: K3WcOTsUriKcpWXE1oQcG3kJpx5GuCFTz9zkPDyBd4I=)
2: CpYXrnLvjR2OacRHrAwyXhQn-54.roa (hash: QEMefUV+U9Y/lW0Jd6Vawm/+aN0QKHnAj1lMOhtlgXc=)
3: HkwyCG4emEUFaRsB9Zhd96NrJK4.crl (hash: 7FlLagn+VN0Xo//8MMUyfLx8NTOuWtVkO7vIH+wODW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:b8:c4:62:a1:65:4b:c8:20:04:74:5f:91:07:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Validity
Not Before: Mar 2 05:00:55 2026 GMT
Not After : Mar 3 05:00:55 2026 GMT
Subject: CN=2a17deaa3182dabdab13474e69af4e7b5adce08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a4:e4:95:b2:aa:42:1a:00:d3:91:7d:cb:82:
ea:76:f2:c9:01:af:5e:b5:14:8f:dc:90:0f:e6:d6:
d5:3b:7c:51:e3:e7:ed:9e:97:61:e7:19:d5:63:52:
7f:9d:73:70:c4:55:8b:ef:e0:10:c4:42:b3:f9:9a:
a2:fe:e5:13:2f:50:41:e4:b9:7b:d9:28:9e:b2:8f:
4a:35:53:9b:44:82:17:38:de:43:32:4b:5e:91:8f:
47:1f:56:ad:62:59:13:9b:f5:38:8c:a9:7e:4b:40:
7a:9c:0c:23:cf:94:32:b1:c5:5e:db:b3:b1:25:34:
5a:10:e6:eb:89:f1:6a:2e:7c:70:93:64:f0:c7:fd:
0e:f8:4d:fc:a0:2d:87:f0:e5:c3:c1:ed:f2:34:09:
4b:60:14:d8:87:e1:dd:3f:ce:14:d8:9e:3d:d7:87:
2e:a3:50:ae:32:b8:05:eb:f4:da:77:a8:4d:25:32:
3a:cd:33:cf:b4:16:1c:82:f6:c5:a7:e9:dc:14:6a:
e6:3d:2f:ef:1b:ed:d4:68:91:3c:fd:ce:c9:13:3d:
26:92:db:7a:a4:c2:b6:a1:4f:90:1d:04:9d:03:c3:
74:d3:33:75:e0:ce:0e:a9:fc:02:15:8c:59:01:0b:
ad:23:be:89:07:5b:3e:cc:07:06:bd:2c:ee:59:75:
cc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:17:DE:AA:31:82:DA:BD:AB:13:47:4E:69:AF:4E:7B:5A:DC:E0:8C
X509v3 Authority Key Identifier:
keyid:1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c2:7b:f0:17:79:a8:0b:d1:bc:19:cd:17:9a:dd:62:b1:b5:
8c:1e:39:35:37:63:d9:0a:5a:89:c0:f6:1d:53:44:58:6f:d9:
fc:52:9e:17:15:80:c1:e7:40:72:49:e1:e1:eb:d4:e2:30:03:
35:f9:ea:46:9f:77:3c:8e:90:8e:d3:31:d7:3a:a3:2a:e0:a0:
1e:e8:40:05:92:6f:a5:5b:81:2a:fa:2f:34:6e:25:c3:da:82:
2b:bb:15:59:ec:d4:bf:68:8e:31:b4:2a:8c:73:a3:b5:ec:e0:
1b:fc:ca:94:91:dd:2f:b2:eb:d7:ba:f0:58:53:70:0a:ab:84:
b0:54:e5:db:63:cc:75:a6:77:41:4e:8c:45:83:30:84:23:18:
8b:8e:c1:e0:c6:4a:67:ca:75:c6:60:43:d9:2f:2b:7f:8c:d5:
db:c7:7b:dd:25:b4:45:6b:06:cd:10:bb:ca:a4:c0:9a:49:7f:
bb:19:10:fc:43:e8:3d:13:02:76:ae:ac:45:67:e6:dd:3d:f7:
eb:27:66:62:27:ba:cb:4a:be:88:22:ab:15:7b:71:7f:5c:d8:
c5:eb:77:96:71:2e:16:f8:c8:12:36:d5:ae:b9:bf:19:29:7f:
5d:b8:eb:e6:33:ff:e6:74:02:79:fb:81:c7:fb:dd:59:96:a4:
15:ae:dc:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys67jEYqFlS8ggBHRfkQdnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNGMzMjA4NmUxZTk4NDUwNTY5MWIwMWY1OTg1ZGY3YTM2
YjI0YWUwHhcNMjYwMzAyMDUwMDU1WhcNMjYwMzAzMDUwMDU1WjAzMTEwLwYDVQQD
EygyYTE3ZGVhYTMxODJkYWJkYWIxMzQ3NGU2OWFmNGU3YjVhZGNlMDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaTklbKqQhoA05F9y4LqdvLJAa9e
tRSP3JAP5tbVO3xR4+ftnpdh5xnVY1J/nXNwxFWL7+AQxEKz+Zqi/uUTL1BB5Ll7
2Sieso9KNVObRIIXON5DMktekY9HH1atYlkTm/U4jKl+S0B6nAwjz5QyscVe27Ox
JTRaEObrifFqLnxwk2Twx/0O+E38oC2H8OXDwe3yNAlLYBTYh+HdP84U2J4914cu
o1CuMrgF6/Tad6hNJTI6zTPPtBYcgvbFp+ncFGrmPS/vG+3UaJE8/c7JEz0mktt6
pMK2oU+QHQSdA8N00zN14M4OqfwCFYxZAQutI76JB1s+zAcGvSzuWXXMDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCoX3qoxgtq9qxNHTmmvTnta3OCMMB8GA1UdIwQY
MBaAFB5MMghuHphFBWkbAfWYXfejaySuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGt3eUNHNGVtRVVGYVJzQjlaaGQ5Nk5ySks0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9kNDgwOTAtMmRiZi00Yjg0LTg1OTYt
OThjZTE0NmYxODI0LzEvSGt3eUNHNGVtRVVGYVJzQjlaaGQ5Nk5ySks0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9kNDgwOTAtMmRiZi00Yjg0LTg1OTYtOThjZTE0NmYxODI0
LzEvSGt3eUNHNGVtRVVGYVJzQjlaaGQ5Nk5ySks0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsJ78Bd5
qAvRvBnNF5rdYrG1jB45NTdj2QpaicD2HVNEWG/Z/FKeFxWAwedAcknh4evU4jAD
NfnqRp93PI6QjtMx1zqjKuCgHuhABZJvpVuBKvovNG4lw9qCK7sVWezUv2iOMbQq
jHOjtezgG/zKlJHdL7Lr17rwWFNwCquEsFTl22PMdaZ3QU6MRYMwhCMYi47B4MZK
Z8p1xmBD2S8rf4zV28d73SW0RWsGzRC7yqTAmkl/uxkQ/EPoPRMCdq6sRWfm3T33
6ydmYie6y0q+iCKrFXtxf1zYxet3lnEuFvjIEjbVrrm/GSl/Xbjr5jP/5nQCefuB
x/vdWZakFa7c2w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:05 2026 by rpki-client