Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
File: hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft (raw, json)
Hash identifier: XBxER++iKC6qC6O8WACvGP6BOZJmQAGDAApV6zwu984=
Subject key identifier: FA:28:72:ED:99:05:29:5A:44:B8:33:F9:B3:DA:20:EA:54:C9:E2:07
Authority key identifier: 84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
Certificate issuer: /CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Certificate serial: 019D389BB88C05AC5CFD8F43AAD70F2F2F4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 08:00:22 +0000
Manifest this update: Sun 29 Mar 2026 08:00:22 +0000
Manifest next update: Mon 30 Mar 2026 08:00:22 +0000
Files and hashes: 1: MiEsRtqbk8f9Jyv8IyxMZOx2e2E.roa (hash: 0+M0KN/0qMyXVee1yKyBcwMkTGKxSKcvVUW4ZAOcFIQ=)
2: hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl (hash: zZfVjA6W2wg4F8lLwV4o6eJVKMsYtKHdaUEYjT4P/Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:b8:8c:05:ac:5c:fd:8f:43:aa:d7:0f:2f:2f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Validity
Not Before: Mar 29 08:00:22 2026 GMT
Not After : Mar 30 08:00:22 2026 GMT
Subject: CN=fa2872ed9905295a44b833f9b3da20ea54c9e207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:93:b3:24:7b:56:a5:41:ab:a8:f4:44:d0:45:
a9:67:54:97:9b:45:7f:02:87:71:a6:8f:5f:1a:a7:
34:9a:67:af:59:74:58:b7:cb:df:e7:5d:a2:24:5c:
86:60:a3:96:16:7f:96:18:f7:eb:b7:c4:de:1e:72:
00:00:3f:9d:3f:e9:bc:28:ed:e7:ef:ce:bf:6e:29:
38:36:48:aa:f8:a9:7a:4b:b5:86:b4:9e:97:be:12:
e3:c8:43:b9:de:38:13:0e:30:4e:71:6a:1e:f2:56:
c3:87:30:d4:ec:ed:c4:42:aa:fd:5c:d9:6b:12:21:
ea:f7:65:3e:bb:d6:85:3a:2d:64:8d:23:07:84:57:
c5:91:fc:16:0e:46:ec:66:62:dd:6d:ed:76:3e:30:
3d:d0:a0:a5:3c:21:90:23:b1:38:59:d3:eb:ec:0b:
d9:b6:bd:62:74:e9:98:28:9e:77:8e:39:e3:f1:6c:
65:ed:bb:82:8b:41:08:e6:3a:5a:0c:a4:28:51:a7:
b0:6e:e7:49:11:bf:17:0d:6c:d1:b9:1b:07:90:40:
40:e8:64:99:7b:ca:56:86:52:95:ed:13:63:c2:ab:
53:35:7c:cc:19:60:c9:16:f1:d9:3c:dc:04:d7:87:
76:d1:8e:f2:5b:df:b2:d7:5c:04:e2:e1:e2:dc:46:
02:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:28:72:ED:99:05:29:5A:44:B8:33:F9:B3:DA:20:EA:54:C9:E2:07
X509v3 Authority Key Identifier:
keyid:84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7a:ee:6a:03:60:82:2a:8e:4c:11:d6:1f:69:0f:70:c8:34:
1e:96:ba:c9:31:05:c5:27:4d:5d:5e:14:52:55:fd:3d:5e:24:
b3:43:f8:b4:c7:92:e0:ec:fd:e2:c4:8e:79:3c:8f:e0:6d:a8:
c9:bd:91:2e:5a:47:40:41:fe:5d:c5:c7:b2:f8:19:f3:34:46:
fb:99:b7:b5:cf:0d:4a:c2:ff:b2:90:7d:3f:27:e2:cc:12:b3:
1e:e6:3d:8f:bb:65:17:31:92:16:f8:ae:93:03:d1:a0:ec:20:
86:c8:ff:2f:dc:67:b7:47:3e:46:92:5e:dd:69:1b:80:dd:24:
63:b5:f3:28:5d:5b:f4:76:96:2e:74:81:80:bc:ae:ae:ef:cc:
69:10:39:0a:6e:f7:28:f5:4c:7d:23:97:e3:29:b4:dc:2a:41:
96:c5:b4:8a:fe:df:b1:fc:f6:f0:37:26:5f:92:ea:56:53:81:
9e:94:51:9f:75:26:7b:26:e9:1a:6b:79:40:e4:93:6a:cf:d0:
c2:09:39:71:eb:d0:8c:dc:d9:c0:5a:db:16:2b:76:da:66:b1:
73:a9:fb:25:3a:92:12:54:3c:ce:db:22:5e:41:3a:43:fb:4c:
cc:b8:1c:89:21:ac:99:13:b7:87:1a:50:67:40:a3:c7:79:da:
61:f4:a7:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m7iMBaxc/Y9DqtcPLy9KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZGY1NGJkYzEwNDEwNmNkYjI5OWUwMWVmMDhhNjA5ODVl
YzM1ZmIwHhcNMjYwMzI5MDgwMDIyWhcNMjYwMzMwMDgwMDIyWjAzMTEwLwYDVQQD
EyhmYTI4NzJlZDk5MDUyOTVhNDRiODMzZjliM2RhMjBlYTU0YzllMjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJOzJHtWpUGrqPRE0EWpZ1SXm0V/
Aodxpo9fGqc0mmevWXRYt8vf512iJFyGYKOWFn+WGPfrt8TeHnIAAD+dP+m8KO3n
786/bik4Nkiq+Kl6S7WGtJ6XvhLjyEO53jgTDjBOcWoe8lbDhzDU7O3EQqr9XNlr
EiHq92U+u9aFOi1kjSMHhFfFkfwWDkbsZmLdbe12PjA90KClPCGQI7E4WdPr7AvZ
tr1idOmYKJ53jjnj8Wxl7buCi0EI5jpaDKQoUaewbudJEb8XDWzRuRsHkEBA6GSZ
e8pWhlKV7RNjwqtTNXzMGWDJFvHZPNwE14d20Y7yW9+y11wE4uHi3EYC1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoocu2ZBSlaRLgz+bPaIOpUyeIHMB8GA1UdIwQY
MBaAFITfVL3BBBBs2ymeAe8IpgmF7DX7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaE45VXZjRUVFR3piS1o0Qjd3aW1DWVhzTmZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9mOTNkYTItMTQ1Ny00Y2Q5LTkwNzMt
ODA2YTMxNWRkMWZkLzEvaE45VXZjRUVFR3piS1o0Qjd3aW1DWVhzTmZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9mOTNkYTItMTQ1Ny00Y2Q5LTkwNzMtODA2YTMxNWRkMWZk
LzEvaE45VXZjRUVFR3piS1o0Qjd3aW1DWVhzTmZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHruagNg
giqOTBHWH2kPcMg0Hpa6yTEFxSdNXV4UUlX9PV4ks0P4tMeS4Oz94sSOeTyP4G2o
yb2RLlpHQEH+XcXHsvgZ8zRG+5m3tc8NSsL/spB9PyfizBKzHuY9j7tlFzGSFviu
kwPRoOwghsj/L9xnt0c+RpJe3WkbgN0kY7XzKF1b9HaWLnSBgLyuru/MaRA5Cm73
KPVMfSOX4ym03CpBlsW0iv7fsfz28DcmX5LqVlOBnpRRn3UmeybpGmt5QOSTas/Q
wgk5cevQjNzZwFrbFit22maxc6n7JTqSElQ8ztsiXkE6Q/tMzLgciSGsmRO3hxpQ
Z0Cjx3naYfSntQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:27 2026 by rpki-client