Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
File: hNYNLcatgqJXDgAA_dmTlIvEVNg.mft (raw, json)
Hash identifier: jAmyZy3U03R7EL46Pst14HwQoZGQIjycVH8tMPrUOtg=
Subject key identifier: AF:37:8B:3F:62:9F:C2:43:AC:3F:13:BE:C5:D0:9E:41:85:41:17:02
Authority key identifier: 84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
Certificate issuer: /CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Certificate serial: 019D38D32FFC017F44E7C9CA26898972D9B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 09:00:57 +0000
Manifest this update: Sun 29 Mar 2026 09:00:57 +0000
Manifest next update: Mon 30 Mar 2026 09:00:57 +0000
Files and hashes: 1: hNYNLcatgqJXDgAA_dmTlIvEVNg.crl (hash: tQejY/6+mRrI0oHcKHGmeOgAPapuVUJg7DdK8b67a/c=)
2: jGp8qngPwrRcfMZ46Nc0uXv4tqI.roa (hash: W/pO2gP/Hnrcu+Gr8iHWv61QQmdy+1W+lWNUobK5q7E=)
3: wtGM5BsZqPclLmQJVZ4Qugj0xo0.roa (hash: 2XlLOO+ABU/ZZshWxT2yxE7ljUn/cRbzQybAhDOI4UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:2f:fc:01:7f:44:e7:c9:ca:26:89:89:72:d9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Validity
Not Before: Mar 29 09:00:57 2026 GMT
Not After : Mar 30 09:00:57 2026 GMT
Subject: CN=af378b3f629fc243ac3f13bec5d09e4185411702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:68:b1:22:9f:10:c0:bf:25:46:d3:76:38:76:
2d:ee:71:27:9d:45:fe:19:87:50:88:92:18:a1:de:
fe:8f:a7:87:49:56:9d:46:26:43:83:dc:1a:cc:73:
e2:fd:6d:68:4d:5c:68:32:1f:58:ee:62:c0:1a:e8:
67:dd:74:a2:6e:91:33:97:68:7c:8c:c0:a0:44:14:
76:93:ab:31:2f:78:00:fd:12:45:92:87:2d:b0:e1:
d7:25:ed:64:17:7d:83:63:e0:8a:51:ce:b8:e1:65:
16:86:02:83:36:61:6c:d8:8b:6a:6e:f6:ff:4a:41:
d3:67:30:67:ce:7c:57:81:61:26:ad:15:14:17:e7:
ec:45:95:84:d5:26:2f:c1:98:bc:fb:d8:8c:38:d3:
bd:b6:3f:4c:7c:ee:03:ae:89:11:ac:b9:d9:a5:6c:
92:61:8b:a3:9f:af:f8:8b:4c:b7:25:e0:92:be:62:
d3:b4:12:b1:c9:6d:74:13:5f:36:ab:3b:3e:ba:0f:
0e:59:8b:46:ee:a2:a8:47:f3:f3:b7:2d:b8:10:93:
27:94:4e:1a:70:e2:8c:14:ba:5e:9a:e7:d5:dd:1e:
e1:5b:d1:98:f1:45:09:d4:8c:85:be:79:b3:5d:15:
1e:64:75:15:42:00:bc:26:70:48:b6:2d:16:1b:4a:
05:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:37:8B:3F:62:9F:C2:43:AC:3F:13:BE:C5:D0:9E:41:85:41:17:02
X509v3 Authority Key Identifier:
keyid:84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:28:f1:7a:64:80:5a:4b:5d:34:aa:47:10:d4:30:2b:b8:e7:
78:f0:e7:16:29:c1:9a:f3:07:d9:f1:c3:8c:fa:fd:e9:9e:ec:
87:52:9a:b0:b7:ab:c7:c4:bc:17:87:1c:d4:0c:98:85:84:fe:
04:16:7b:ee:d4:55:f3:5c:bd:21:d2:3c:ab:f8:34:7b:4f:98:
3e:70:c1:63:37:48:c7:1a:87:38:01:e1:a7:a1:6e:73:07:75:
2f:fa:d3:a9:49:ae:52:87:17:90:29:b3:ce:9f:5d:d4:49:1a:
62:4e:5a:31:09:a0:a7:1f:1c:6c:79:9f:6b:c1:67:dd:7d:ad:
2a:19:d5:07:50:99:99:8b:19:fb:08:6c:96:7d:81:ee:82:81:
b9:1b:3a:34:6d:b0:2c:37:48:7e:39:90:ba:62:4c:54:83:72:
ce:8d:3b:c6:fd:f2:1b:95:48:e2:e3:69:a7:35:04:a5:46:0f:
98:45:c7:19:59:b4:85:af:c9:af:11:a8:e3:3d:2c:6f:84:31:
36:90:e2:23:61:d5:00:23:15:fc:18:b2:8d:5f:a6:2c:ba:6a:
6b:99:05:b8:c4:a8:24:7b:42:8f:91:f2:fb:c6:c1:86:75:6b:
a3:5b:3c:2c:f7:e2:b7:88:3b:42:ab:50:34:17:23:2d:91:1b:
2e:27:97:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040y/8AX9E58nKJomJctmyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZDYwZDJkYzZhZDgyYTI1NzBlMDAwMGZkZDk5Mzk0OGJj
NDU0ZDgwHhcNMjYwMzI5MDkwMDU3WhcNMjYwMzMwMDkwMDU3WjAzMTEwLwYDVQQD
EyhhZjM3OGIzZjYyOWZjMjQzYWMzZjEzYmVjNWQwOWU0MTg1NDExNzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2ixIp8QwL8lRtN2OHYt7nEnnUX+
GYdQiJIYod7+j6eHSVadRiZDg9wazHPi/W1oTVxoMh9Y7mLAGuhn3XSibpEzl2h8
jMCgRBR2k6sxL3gA/RJFkoctsOHXJe1kF32DY+CKUc644WUWhgKDNmFs2Itqbvb/
SkHTZzBnznxXgWEmrRUUF+fsRZWE1SYvwZi8+9iMONO9tj9MfO4DrokRrLnZpWyS
YYujn6/4i0y3JeCSvmLTtBKxyW10E182qzs+ug8OWYtG7qKoR/Pzty24EJMnlE4a
cOKMFLpemufV3R7hW9GY8UUJ1IyFvnmzXRUeZHUVQgC8JnBIti0WG0oFIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK83iz9in8JDrD8TvsXQnkGFQRcCMB8GA1UdIwQY
MBaAFITWDS3GrYKiVw4AAP3Zk5SLxFTYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaE5ZTkxjYXRncUpYRGdBQV9kbVRsSXZFVk5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni81MGQ5YzYtZjI0YS00NGFmLThhZTAt
NTRmNmJjODVhYWMwLzEvaE5ZTkxjYXRncUpYRGdBQV9kbVRsSXZFVk5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni81MGQ5YzYtZjI0YS00NGFmLThhZTAtNTRmNmJjODVhYWMw
LzEvaE5ZTkxjYXRncUpYRGdBQV9kbVRsSXZFVk5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWijxemSA
WktdNKpHENQwK7jnePDnFinBmvMH2fHDjPr96Z7sh1KasLerx8S8F4cc1AyYhYT+
BBZ77tRV81y9IdI8q/g0e0+YPnDBYzdIxxqHOAHhp6Fucwd1L/rTqUmuUocXkCmz
zp9d1EkaYk5aMQmgpx8cbHmfa8Fn3X2tKhnVB1CZmYsZ+whsln2B7oKBuRs6NG2w
LDdIfjmQumJMVINyzo07xv3yG5VI4uNppzUEpUYPmEXHGVm0ha/JrxGo4z0sb4Qx
NpDiI2HVACMV/BiyjV+mLLpqa5kFuMSoJHtCj5Hy+8bBhnVro1s8LPfit4g7QqtQ
NBcjLZEbLieXMg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:13:12 2026 by rpki-client