Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
File: HAKBccHlLIrK1NspuS0hazMvAyA.mft (raw, json)
Hash identifier: 33l8ncTw5SYm2gaSaOu6vGtegYCWtRVcTqpKI79cXxA=
Subject key identifier: 8B:75:4E:9F:71:A1:32:30:3B:45:35:81:B5:51:46:5A:C7:2C:EA:4D
Authority key identifier: 1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
Certificate issuer: /CN=1c028171c1e52c8acad4db29b92d216b332f0320
Certificate serial: 019E1F11275257DB41ADE5217CFCF6C7257C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
Manifest number: 037E
Signing time: Wed 13 May 2026 02:01:18 +0000
Manifest this update: Wed 13 May 2026 02:01:18 +0000
Manifest next update: Thu 14 May 2026 02:01:18 +0000
Files and hashes: 1: G9jujcQZlUdVMOptG1eSDU2YY8I.roa (hash: EJGVSoBSNBmuI6zXcVl26rucMI4v4bwSguQQOZP/asw=)
2: HAKBccHlLIrK1NspuS0hazMvAyA.crl (hash: 1NyxLmQcmcVKdbfQNLK2/iLlKimVvXvpDOs1Iu+418k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:27:52:57:db:41:ad:e5:21:7c:fc:f6:c7:25:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c028171c1e52c8acad4db29b92d216b332f0320
Validity
Not Before: May 13 02:01:18 2026 GMT
Not After : May 14 02:01:18 2026 GMT
Subject: CN=8b754e9f71a132303b453581b551465ac72cea4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ce:d4:40:e8:1c:53:ed:e9:25:f8:d1:2d:95:
9c:5c:15:c4:2b:b9:3d:3c:01:8a:72:94:ed:80:33:
ac:ee:b7:ef:cf:40:22:5a:a4:0f:9f:24:6c:a6:f0:
6e:2d:3d:de:4a:02:d7:2c:b7:6d:7e:1a:8c:24:0f:
a1:33:7b:30:0a:35:ee:93:12:bd:cd:6e:12:91:21:
07:c0:bc:65:65:74:58:b8:57:c9:f9:9c:7d:d2:d3:
90:7e:e1:0a:0d:81:4f:80:a4:52:71:09:f0:3f:65:
a4:bb:3f:4a:9b:2a:b3:0b:8e:e0:ae:52:fd:8e:63:
66:43:a2:99:7b:4c:ab:38:7d:93:2b:17:29:94:b9:
68:7b:be:25:7f:2c:6e:c7:ec:33:d6:91:a9:c3:17:
1f:3d:d7:44:d6:1a:d8:01:45:91:41:a2:f1:f9:2e:
36:8c:e0:29:dc:41:d8:e8:72:60:89:e7:65:cd:d2:
85:2b:33:7e:d9:8d:00:5d:8c:5b:2b:df:ed:a8:27:
22:d6:9c:ba:4f:3a:0e:f7:d9:42:e4:0a:47:bd:9b:
ec:7e:d1:6e:00:e0:a1:85:8b:fc:10:7e:a7:34:48:
c8:34:15:16:bf:9a:97:22:3a:e8:33:3e:19:df:38:
bc:b4:6d:6c:a0:6e:5d:02:fc:0b:d9:69:28:02:98:
f7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:75:4E:9F:71:A1:32:30:3B:45:35:81:B5:51:46:5A:C7:2C:EA:4D
X509v3 Authority Key Identifier:
keyid:1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:90:2b:65:05:8f:9e:ba:f2:ec:3a:6c:66:09:50:05:87:39:
af:a4:f5:8d:fc:63:76:db:ad:06:4f:c4:d1:d4:80:f2:da:fe:
ac:93:dc:52:45:11:d9:d5:9b:ef:3a:0a:39:90:98:ea:36:cb:
26:79:93:fc:cb:48:ef:59:6c:8f:b7:d8:5e:e6:87:7a:ab:0f:
65:bd:c1:3c:41:f5:dd:b7:e9:a1:3b:90:0d:84:71:f3:2d:d1:
43:d4:59:b5:6b:c3:df:27:02:3e:88:d4:e2:03:de:fa:15:16:
87:21:fd:04:82:4f:be:11:7f:54:20:58:23:7d:4a:31:30:41:
7f:07:c3:ba:c7:99:af:49:93:6c:ab:fc:13:ac:e5:ee:ec:02:
21:68:0f:7c:77:7c:fb:1c:6c:0e:66:a5:c1:27:c8:9c:53:aa:
d1:8d:ea:d7:fd:05:91:dc:6d:b1:44:74:41:04:01:45:15:3d:
ee:b9:0f:5c:2d:bf:a8:cd:6c:0c:e9:a3:ac:7d:cc:df:c5:86:
87:93:8c:40:26:2e:bb:4f:a7:15:bc:f1:b2:44:5e:1b:08:2f:
48:0c:07:3a:61:c1:db:e1:1f:a8:c0:9c:12:4f:62:bc:9a:69:
70:0e:97:72:12:fa:86:07:fd:f2:a1:23:8c:36:5c:8a:06:b1:
f2:89:6b:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fESdSV9tBreUhfPz2xyV8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMDI4MTcxYzFlNTJjOGFjYWQ0ZGIyOWI5MmQyMTZiMzMy
ZjAzMjAwHhcNMjYwNTEzMDIwMTE4WhcNMjYwNTE0MDIwMTE4WjAzMTEwLwYDVQQD
Eyg4Yjc1NGU5ZjcxYTEzMjMwM2I0NTM1ODFiNTUxNDY1YWM3MmNlYTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts7UQOgcU+3pJfjRLZWcXBXEK7k9
PAGKcpTtgDOs7rfvz0AiWqQPnyRspvBuLT3eSgLXLLdtfhqMJA+hM3swCjXukxK9
zW4SkSEHwLxlZXRYuFfJ+Zx90tOQfuEKDYFPgKRScQnwP2Wkuz9KmyqzC47grlL9
jmNmQ6KZe0yrOH2TKxcplLloe74lfyxux+wz1pGpwxcfPddE1hrYAUWRQaLx+S42
jOAp3EHY6HJgiedlzdKFKzN+2Y0AXYxbK9/tqCci1py6TzoO99lC5ApHvZvsftFu
AOChhYv8EH6nNEjINBUWv5qXIjroMz4Z3zi8tG1soG5dAvwL2WkoApj3WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIt1Tp9xoTIwO0U1gbVRRlrHLOpNMB8GA1UdIwQY
MBaAFBwCgXHB5SyKytTbKbktIWszLwMgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEFLQmNjSGxMSXJLMU5zcHVTMGhhek12QXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9mZjYzY2UtY2YyMC00M2UzLWFkM2Yt
NjRkMWIyZDU2ZTk1LzEvSEFLQmNjSGxMSXJLMU5zcHVTMGhhek12QXlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9mZjYzY2UtY2YyMC00M2UzLWFkM2YtNjRkMWIyZDU2ZTk1
LzEvSEFLQmNjSGxMSXJLMU5zcHVTMGhhek12QXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5ArZQWP
nrry7DpsZglQBYc5r6T1jfxjdtutBk/E0dSA8tr+rJPcUkUR2dWb7zoKOZCY6jbL
JnmT/MtI71lsj7fYXuaHeqsPZb3BPEH13bfpoTuQDYRx8y3RQ9RZtWvD3ycCPojU
4gPe+hUWhyH9BIJPvhF/VCBYI31KMTBBfwfDuseZr0mTbKv8E6zl7uwCIWgPfHd8
+xxsDmalwSfInFOq0Y3q1/0FkdxtsUR0QQQBRRU97rkPXC2/qM1sDOmjrH3M38WG
h5OMQCYuu0+nFbzxskReGwgvSAwHOmHB2+EfqMCcEk9ivJppcA6XchL6hgf98qEj
jDZcigax8olrKg==
-----END CERTIFICATE-----
Generated at Wed May 13 11:49:35 2026 by rpki-client