Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
File: hEWCynBHF-sMlL5NiUE_S8LYuOU.mft (raw, json)
Hash identifier: 7jXovqkXaCF98Qk+N+VtTrMXJm2YITJYVeFyPKR95ns=
Subject key identifier: 39:3D:9F:09:C5:4C:2B:CE:C9:06:98:6B:E6:9C:C1:D8:37:C7:AA:DA
Authority key identifier: 84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5
Certificate issuer: /CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
Certificate serial: 019D38668DD5FE8FA5207C25EDAE66B6FD6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
Manifest number: 0BD3
Signing time: Sun 29 Mar 2026 07:02:18 +0000
Manifest this update: Sun 29 Mar 2026 07:02:18 +0000
Manifest next update: Mon 30 Mar 2026 07:02:18 +0000
Files and hashes: 1: 0Lowu7hxVeuqlAiVWg9uh-_oyWw.roa (hash: 83FXzGC9XwUj1X8htPlTdsZg8/wSnvklV0n8qfw7AtY=)
2: Y8T6MQ3N6EL6A9u7REeJi88lYjc.roa (hash: yyEUvZCmaFWTlHBddTvd35XB4O+cqU+todAuZd+/9Mk=)
3: hEWCynBHF-sMlL5NiUE_S8LYuOU.crl (hash: EtfVgkNqT+X+01A18y6OCwY7Zz3Uo8yABjv+2PZmKXo=)
4: nv7YrBBjEqeVW-pRBpmKMzYYjNU.roa (hash: kYPGaco3pxLDHifaSJV9n0xVBsh+iPQ3pvB3Ce36XNM=)
5: owHwLyctP8Oxzql0_PgsjnKWR1Q.roa (hash: okd6ixQMASQtM3vodku2s12MniqN1mXlVsNaWbdKM5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:8d:d5:fe:8f:a5:20:7c:25:ed:ae:66:b6:fd:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
Validity
Not Before: Mar 29 07:02:18 2026 GMT
Not After : Mar 30 07:02:18 2026 GMT
Subject: CN=393d9f09c54c2bcec906986be69cc1d837c7aada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dd:0c:59:14:cf:da:dc:1c:1f:78:7f:32:cf:
44:fe:ee:84:88:f3:02:c4:b3:0d:3f:f9:91:81:42:
59:15:da:be:83:c2:3f:ff:00:d5:3c:0f:23:0a:31:
53:ab:7d:34:a4:ee:4e:5e:e1:f1:a0:8b:f2:7a:89:
e5:81:3b:2f:7c:c0:0a:d6:9b:37:c7:08:dd:cc:ab:
b2:10:7d:35:54:d1:42:c1:79:d4:ba:7d:04:1b:1c:
fc:2a:f8:28:0c:c8:ef:96:bd:bb:80:5b:60:b6:b5:
9e:14:e4:80:b7:83:ff:e8:03:46:97:a8:d8:9f:9f:
0a:be:b9:2c:7c:86:3b:72:58:8c:fa:8a:53:40:ba:
d1:fc:6e:40:3b:ae:ce:c4:bc:4a:8a:e7:70:31:d7:
fe:e1:fe:53:fe:57:f0:96:30:07:06:95:fe:73:9e:
ae:21:e3:a1:e6:93:82:7b:f3:df:cc:01:d3:9b:b2:
1d:8c:a1:1b:04:19:d5:cb:89:03:1d:63:63:4a:7c:
f2:14:4d:a2:b7:be:c6:c4:8e:a8:8e:e5:0b:36:18:
90:e9:dc:ce:70:f7:80:96:0c:9b:49:c3:76:ce:b9:
6d:60:8b:71:a7:4c:e3:92:b0:a1:d5:e8:51:60:96:
df:5d:4b:6d:01:6e:29:9b:81:78:86:c3:8c:4b:1f:
c6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3D:9F:09:C5:4C:2B:CE:C9:06:98:6B:E6:9C:C1:D8:37:C7:AA:DA
X509v3 Authority Key Identifier:
keyid:84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:42:5b:ef:8b:bb:4a:da:54:08:40:8a:10:d8:0a:9a:d5:63:
8b:40:e0:8c:77:2c:0a:0c:55:bc:da:11:e6:46:a8:9a:98:f4:
6b:45:9b:49:62:4b:7e:49:f0:10:65:a7:61:47:8a:fb:04:fe:
c0:8a:ad:67:6a:fe:b8:02:4b:78:02:01:f0:5c:f2:42:46:b4:
2a:71:22:ff:2f:7c:88:f5:2a:de:d5:70:40:68:e5:9e:ec:6c:
72:de:f0:df:a6:e2:d2:71:60:4f:80:ea:0a:89:c6:54:32:a2:
a1:b4:ce:25:a9:19:4b:6e:85:ab:0f:89:ef:4a:10:fe:34:85:
20:ac:fb:13:85:97:fc:60:ed:d3:b6:c3:0c:46:11:d6:38:8b:
22:f1:4a:43:23:9f:12:03:7a:20:16:66:fb:99:c9:ea:f5:f1:
ac:1d:29:3b:70:69:06:05:ad:62:9b:b9:f6:bc:15:a3:9c:1b:
bf:7d:ee:36:71:60:b7:54:44:80:cf:4d:8e:75:31:df:8d:7c:
90:d9:df:02:cb:db:d8:46:2f:96:54:3c:54:4e:c9:e7:6c:8a:
90:27:80:7c:14:10:b1:76:42:c8:aa:5b:1d:62:b9:5d:30:e9:
c2:54:3e:8a:f1:51:7c:d7:8a:a0:55:39:f6:54:e6:5a:fe:e7:
85:64:b2:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zo3V/o+lIHwl7a5mtv1vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NDU4MmNhNzA0NzE3ZWIwYzk0YmU0ZDg5NDEzZjRiYzJk
OGI4ZTUwHhcNMjYwMzI5MDcwMjE4WhcNMjYwMzMwMDcwMjE4WjAzMTEwLwYDVQQD
EygzOTNkOWYwOWM1NGMyYmNlYzkwNjk4NmJlNjljYzFkODM3YzdhYWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN0MWRTP2twcH3h/Ms9E/u6EiPMC
xLMNP/mRgUJZFdq+g8I//wDVPA8jCjFTq300pO5OXuHxoIvyeonlgTsvfMAK1ps3
xwjdzKuyEH01VNFCwXnUun0EGxz8KvgoDMjvlr27gFtgtrWeFOSAt4P/6ANGl6jY
n58KvrksfIY7cliM+opTQLrR/G5AO67OxLxKiudwMdf+4f5T/lfwljAHBpX+c56u
IeOh5pOCe/PfzAHTm7IdjKEbBBnVy4kDHWNjSnzyFE2it77GxI6ojuULNhiQ6dzO
cPeAlgybScN2zrltYItxp0zjkrCh1ehRYJbfXUttAW4pm4F4hsOMSx/G2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDk9nwnFTCvOyQaYa+acwdg3x6raMB8GA1UdIwQY
MBaAFIRFgspwRxfrDJS+TYlBP0vC2LjlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEVXQ3luQkhGLXNNbEw1TmlVRV9TOExZdU9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83MzVlNDItYzYwOC00NmI2LThmNzAt
ZjIzZjY2ZjhkMjQyLzEvaEVXQ3luQkhGLXNNbEw1TmlVRV9TOExZdU9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC83MzVlNDItYzYwOC00NmI2LThmNzAtZjIzZjY2ZjhkMjQy
LzEvaEVXQ3luQkhGLXNNbEw1TmlVRV9TOExZdU9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfUJb74u7
StpUCECKENgKmtVji0DgjHcsCgxVvNoR5kaompj0a0WbSWJLfknwEGWnYUeK+wT+
wIqtZ2r+uAJLeAIB8FzyQka0KnEi/y98iPUq3tVwQGjlnuxsct7w36bi0nFgT4Dq
ConGVDKiobTOJakZS26Fqw+J70oQ/jSFIKz7E4WX/GDt07bDDEYR1jiLIvFKQyOf
EgN6IBZm+5nJ6vXxrB0pO3BpBgWtYpu59rwVo5wbv33uNnFgt1REgM9NjnUx3418
kNnfAsvb2EYvllQ8VE7J52yKkCeAfBQQsXZCyKpbHWK5XTDpwlQ+ivFRfNeKoFU5
9lTmWv7nhWSyZw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:32 2026 by rpki-client