Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
File: hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft (raw, json)
Hash identifier: RolWE0Fxcl0tXmYIiw+2/6CSlk2DjKFzashLiYd/ego=
Subject key identifier: 5C:95:E4:D1:BF:9E:C8:CA:A0:90:17:97:0F:A9:CC:C7:D0:CB:06:A3
Authority key identifier: 84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
Certificate issuer: /CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Certificate serial: 019D37F75811B489BD6E68929481CA9F5E2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
Manifest number: 03B2
Signing time: Sun 29 Mar 2026 05:00:49 +0000
Manifest this update: Sun 29 Mar 2026 05:00:49 +0000
Manifest next update: Mon 30 Mar 2026 05:00:49 +0000
Files and hashes: 1: hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl (hash: m4gcEbWhWQr9E+BPSQx411Zeqb9wO95OcJ3hssQ8RFk=)
2: lwdA6JuX3-pn18rffEN0nPoUEzg.roa (hash: 934Mdi6isovZuFn2f0j17OwEt11O6pbILLLQ1tR1JWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:58:11:b4:89:bd:6e:68:92:94:81:ca:9f:5e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Validity
Not Before: Mar 29 05:00:49 2026 GMT
Not After : Mar 30 05:00:49 2026 GMT
Subject: CN=5c95e4d1bf9ec8caa09017970fa9ccc7d0cb06a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:83:c2:ba:e8:5f:5a:9b:71:92:07:e7:10:58:
bb:c1:ab:c4:64:28:c7:5e:4e:09:a2:ac:bc:40:40:
32:bb:2d:78:48:b5:42:0e:79:78:a0:74:a3:74:30:
f8:c8:8d:2f:38:9f:1d:77:09:28:3c:0d:11:76:88:
2b:0b:e0:73:eb:62:db:66:78:f7:57:ad:45:da:bd:
93:57:2b:3f:26:cf:d7:af:3a:57:26:e8:f7:d8:2a:
ba:b7:18:14:d2:d4:6c:b6:e3:de:fa:72:50:93:ca:
ae:5a:e3:19:31:b9:ea:3a:9c:a5:7d:1e:90:ba:5b:
bb:33:62:66:4e:ca:7d:28:c1:a5:37:73:fe:00:40:
18:fd:3d:f6:9c:26:2f:75:21:5f:28:ea:12:0d:78:
28:17:97:ba:58:ec:6c:c6:d7:f2:39:19:c3:fa:54:
97:9a:af:fa:e6:7b:09:a8:76:d1:73:37:80:33:36:
47:ed:f5:0c:0f:83:f5:7f:84:a2:cd:94:0e:99:e0:
df:2c:ce:05:8b:a0:70:e6:28:53:0c:6f:50:77:d8:
44:53:b1:74:2b:a5:dd:06:a2:b9:47:3b:98:8c:5b:
e0:7e:6e:bf:c5:59:a2:91:f9:a8:4f:71:83:cc:80:
0a:4d:18:6b:f6:dc:ca:85:c1:f6:d1:aa:99:59:45:
66:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:95:E4:D1:BF:9E:C8:CA:A0:90:17:97:0F:A9:CC:C7:D0:CB:06:A3
X509v3 Authority Key Identifier:
keyid:84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ff:30:9a:ae:71:74:82:93:60:b9:27:92:37:1d:b6:cc:65:
7e:ec:2d:ae:ea:9b:ac:12:57:80:fa:0b:37:60:e3:e7:00:28:
74:0e:b5:6b:28:27:8b:77:3e:2e:e5:d3:5e:e8:d1:27:b7:b0:
79:3c:99:9a:71:14:61:bb:79:ea:1a:82:84:df:46:89:a2:f7:
0a:9e:04:e1:77:87:6b:53:78:37:00:f9:de:8d:35:fd:bc:56:
c7:5d:0c:02:a8:0e:11:40:67:6e:5f:32:c7:6c:df:c9:c4:a9:
bd:44:7a:aa:47:bd:12:96:b0:c6:2e:d2:f8:53:3f:f3:60:94:
c3:b2:5d:a9:38:4e:eb:ac:70:d0:b0:b1:25:00:06:26:09:93:
fa:a4:d7:39:f9:54:24:41:61:7a:f0:49:3f:15:85:fe:52:1c:
5f:83:d6:53:25:ea:cb:62:3b:92:e2:e3:43:c1:b6:8e:9e:00:
13:ad:ac:a2:d9:14:ef:12:60:57:f5:82:c1:b6:7d:2d:0f:1e:
3f:6d:e8:7f:24:e8:69:5f:c6:bb:54:c1:c5:99:b1:70:94:a4:
62:fc:8b:0f:4c:30:1b:be:5d:47:d5:4b:79:86:84:8f:88:21:
eb:5f:a3:83:69:d2:f0:cd:fd:57:f4:9f:25:ec:16:77:67:2c:
6f:82:35:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0391gRtIm9bmiSlIHKn14vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YWY5OGFlZTM3YTEyODE1YjQ0YmZkNmJlYjRiZTY0YWMw
ZWY2ZTUwHhcNMjYwMzI5MDUwMDQ5WhcNMjYwMzMwMDUwMDQ5WjAzMTEwLwYDVQQD
Eyg1Yzk1ZTRkMWJmOWVjOGNhYTA5MDE3OTcwZmE5Y2NjN2QwY2IwNmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oPCuuhfWptxkgfnEFi7wavEZCjH
Xk4Joqy8QEAyuy14SLVCDnl4oHSjdDD4yI0vOJ8ddwkoPA0RdogrC+Bz62LbZnj3
V61F2r2TVys/Js/XrzpXJuj32Cq6txgU0tRstuPe+nJQk8quWuMZMbnqOpylfR6Q
ulu7M2JmTsp9KMGlN3P+AEAY/T32nCYvdSFfKOoSDXgoF5e6WOxsxtfyORnD+lSX
mq/65nsJqHbRczeAMzZH7fUMD4P1f4SizZQOmeDfLM4Fi6Bw5ihTDG9Qd9hEU7F0
K6XdBqK5RzuYjFvgfm6/xVmikfmoT3GDzIAKTRhr9tzKhcH20aqZWUVmTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyV5NG/nsjKoJAXlw+pzMfQywajMB8GA1UdIwQY
MBaAFISvmK7jehKBW0S/1r60vmSsDvblMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEstWXJ1TjZFb0ZiUkxfV3ZyUy1aS3dPOXVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lMjhhOGEtNjY0ZS00NzNjLTgyNTUt
NzRlMTAwOTlmODFjLzEvaEstWXJ1TjZFb0ZiUkxfV3ZyUy1aS3dPOXVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9lMjhhOGEtNjY0ZS00NzNjLTgyNTUtNzRlMTAwOTlmODFj
LzEvaEstWXJ1TjZFb0ZiUkxfV3ZyUy1aS3dPOXVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/8wmq5x
dIKTYLknkjcdtsxlfuwtruqbrBJXgPoLN2Dj5wAodA61aygni3c+LuXTXujRJ7ew
eTyZmnEUYbt56hqChN9GiaL3Cp4E4XeHa1N4NwD53o01/bxWx10MAqgOEUBnbl8y
x2zfycSpvUR6qke9Epawxi7S+FM/82CUw7JdqThO66xw0LCxJQAGJgmT+qTXOflU
JEFhevBJPxWF/lIcX4PWUyXqy2I7kuLjQ8G2jp4AE62sotkU7xJgV/WCwbZ9LQ8e
P23ofyToaV/Gu1TBxZmxcJSkYvyLD0wwG75dR9VLeYaEj4gh61+jg2nS8M39V/Sf
JewWd2csb4I1bA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:57 2026 by rpki-client