Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
File: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft (raw, json)
Hash identifier: zkapdOnn0MhwPkHd7RvkZ1YCcdoZ4Q+m7u5WXLUFSLc=
Subject key identifier: 88:ED:8F:CB:F3:90:A2:93:F9:1F:AB:40:A8:BA:49:4E:DA:03:AA:E9
Authority key identifier: 1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
Certificate issuer: /CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Certificate serial: 019CAED9BDD0FABF28E569755438865B1950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
Manifest number: 11B5
Signing time: Mon 02 Mar 2026 14:00:31 +0000
Manifest this update: Mon 02 Mar 2026 14:00:31 +0000
Manifest next update: Tue 03 Mar 2026 14:00:31 +0000
Files and hashes: 1: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl (hash: HCwmSvg7YsdyZKhEbjhl5NlJngDtXawfm2MBTNieHCQ=)
2: TQDW0DxTU7CzvSKr8TtyPhHtPTc.roa (hash: 1+s5vjQlLwZnrQX0hqnsI0i09wdeDnUbTWGOuKMahfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:bd:d0:fa:bf:28:e5:69:75:54:38:86:5b:19:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Validity
Not Before: Mar 2 14:00:31 2026 GMT
Not After : Mar 3 14:00:31 2026 GMT
Subject: CN=88ed8fcbf390a293f91fab40a8ba494eda03aae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:aa:2a:b4:af:e6:15:79:df:09:da:5e:ba:44:
2e:f8:40:c0:af:19:a0:31:6a:8a:c5:13:fc:8f:43:
fb:eb:e5:fa:2a:c4:6b:19:1c:fe:f2:e2:08:69:74:
b9:34:ce:4a:4f:49:50:cb:2e:6b:7a:a5:f4:01:56:
85:ea:6b:52:ef:ff:89:e7:19:76:e3:a5:56:4a:47:
15:50:1f:2d:68:74:77:24:f8:6e:b5:c5:9b:06:40:
f8:39:30:b1:f1:ad:b4:96:64:4f:f4:5a:16:93:c0:
94:44:60:b4:3e:a4:3b:51:22:c0:77:34:df:b2:ef:
44:44:c1:a3:0b:a3:56:09:f8:4b:a3:81:a5:de:9b:
15:f9:aa:53:86:f3:8b:1f:50:7a:a7:a2:61:f6:4a:
33:ac:67:82:97:41:57:5f:f3:f7:7b:12:d7:64:2c:
78:d6:80:2d:0f:23:3d:b1:d2:07:55:d4:2d:ae:9b:
d5:d8:e3:63:62:3b:52:48:e7:4f:7c:95:61:d3:fc:
8e:20:1d:50:0f:b6:e8:0d:b8:d8:ef:a6:9f:26:f8:
c2:cf:d8:fd:b8:bd:96:65:61:89:14:ed:0d:6b:c8:
ba:69:8a:9b:c7:e9:f1:51:79:97:a7:41:0e:ff:cb:
cb:2d:5e:ec:b7:8b:18:6f:5b:6c:d7:29:74:1e:fc:
9d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:ED:8F:CB:F3:90:A2:93:F9:1F:AB:40:A8:BA:49:4E:DA:03:AA:E9
X509v3 Authority Key Identifier:
keyid:1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a3:b5:5c:e9:6c:14:a7:a2:b7:32:81:02:8d:42:4a:51:ca:
6d:47:f4:6b:d5:5f:2d:36:aa:32:04:3e:c1:e3:27:6a:cd:1b:
40:45:56:18:3e:f4:1c:b5:19:9a:17:c1:db:71:12:a1:3c:5a:
5e:ba:63:1e:53:98:ad:12:89:16:47:3e:58:d2:97:c7:72:91:
0a:53:ec:07:0d:d8:3b:18:87:e3:d6:a1:af:be:7b:72:a2:99:
8b:14:db:62:a7:f1:33:fd:4c:cb:1a:ed:a6:46:82:5e:80:06:
2b:be:68:56:6a:44:83:a1:d7:9f:95:8a:f6:de:5c:b1:6f:a1:
cf:5f:a7:6e:38:b5:73:ec:f3:c5:30:c6:8c:40:f9:0e:67:50:
9c:11:34:1b:9d:87:36:0f:96:df:75:e0:d4:fb:3a:e3:da:45:
ca:c2:87:e7:0d:ec:f9:0d:79:bc:62:ad:a4:74:82:b2:3c:32:
93:2d:98:6b:ef:78:ec:54:b6:64:2d:05:63:e9:8d:b7:c2:3e:
8b:97:fa:bb:92:81:b4:7b:76:dd:d8:f2:27:33:e5:ad:58:5d:
0c:c4:37:1d:dd:96:6f:02:bd:22:31:ad:60:73:9e:69:7f:80:
cd:55:ef:d9:2f:c2:64:fe:42:a4:90:95:93:d9:cc:32:6b:9e:
22:02:06:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyu2b3Q+r8o5Wl1VDiGWxlQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMmIyYjM2ZmI3MjI1MDk0NjVlZDlkOTQ4YzJiZjg5MTE2
MGNkMGUwHhcNMjYwMzAyMTQwMDMxWhcNMjYwMzAzMTQwMDMxWjAzMTEwLwYDVQQD
Eyg4OGVkOGZjYmYzOTBhMjkzZjkxZmFiNDBhOGJhNDk0ZWRhMDNhYWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26oqtK/mFXnfCdpeukQu+EDArxmg
MWqKxRP8j0P76+X6KsRrGRz+8uIIaXS5NM5KT0lQyy5reqX0AVaF6mtS7/+J5xl2
46VWSkcVUB8taHR3JPhutcWbBkD4OTCx8a20lmRP9FoWk8CURGC0PqQ7USLAdzTf
su9ERMGjC6NWCfhLo4Gl3psV+apThvOLH1B6p6Jh9kozrGeCl0FXX/P3exLXZCx4
1oAtDyM9sdIHVdQtrpvV2ONjYjtSSOdPfJVh0/yOIB1QD7boDbjY76afJvjCz9j9
uL2WZWGJFO0Na8i6aYqbx+nxUXmXp0EO/8vLLV7st4sYb1ts1yl0HvydnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjtj8vzkKKT+R+rQKi6SU7aA6rpMB8GA1UdIwQY
MBaAFBwrKzb7ciUJRl7Z2UjCv4kRYM0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSENzck52dHlKUWxHWHRuWlNNS19pUkZnelE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85NzY1YjctYmU0NC00NjVjLTk3NTUt
YzIwMmY3MTdkNDQ3LzEvSENzck52dHlKUWxHWHRuWlNNS19pUkZnelE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC85NzY1YjctYmU0NC00NjVjLTk3NTUtYzIwMmY3MTdkNDQ3
LzEvSENzck52dHlKUWxHWHRuWlNNS19pUkZnelE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHaO1XOls
FKeitzKBAo1CSlHKbUf0a9VfLTaqMgQ+weMnas0bQEVWGD70HLUZmhfB23ESoTxa
XrpjHlOYrRKJFkc+WNKXx3KRClPsBw3YOxiH49ahr757cqKZixTbYqfxM/1Myxrt
pkaCXoAGK75oVmpEg6HXn5WK9t5csW+hz1+nbji1c+zzxTDGjED5DmdQnBE0G52H
Ng+W33Xg1Ps649pFysKH5w3s+Q15vGKtpHSCsjwyky2Ya+947FS2ZC0FY+mNt8I+
i5f6u5KBtHt23djyJzPlrVhdDMQ3Hd2WbwK9IjGtYHOeaX+AzVXv2S/CZP5CpJCV
k9nMMmueIgIGZg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:34:27 2026 by rpki-client