Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
File: hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft (raw, json)
Hash identifier: wU4WVe5I55xvBwZhnUD/sVeR5Ma+RKOvZL0BulC33LY=
Subject key identifier: 77:91:83:2A:20:6B:B7:9D:6E:F2:8E:D2:06:85:AC:CE:41:DB:68:20
Authority key identifier: 86:08:58:BC:2D:CB:B3:76:D7:91:A9:BE:9A:F1:52:02:38:53:5D:9F
Certificate issuer: /CN=860858bc2dcbb376d791a9be9af1520238535d9f
Certificate serial: 019D3909F3A047542627C3404D00194EF2BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
Manifest number: 01CF
Signing time: Sun 29 Mar 2026 10:00:46 +0000
Manifest this update: Sun 29 Mar 2026 10:00:46 +0000
Manifest next update: Mon 30 Mar 2026 10:00:46 +0000
Files and hashes: 1: hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl (hash: lcSCgI+GJzsEP4RsHu6uLu+Tx8VQXrUz92enzCQGpzo=)
2: ouVL9f4Kp01QdxrOilk4XOoPv2E.asa (hash: BkjPDfglBBFYk69JDCryPzYQnQSRslBsIgc8pXRMNs0=)
3: qEfXUfQHl_EsP_P4Lk42SnqgMYI.roa (hash: 4IfXp7dyRNjrRdAgPWfTKulvifdvK1AOsusHD7QgNHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:f3:a0:47:54:26:27:c3:40:4d:00:19:4e:f2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860858bc2dcbb376d791a9be9af1520238535d9f
Validity
Not Before: Mar 29 10:00:46 2026 GMT
Not After : Mar 30 10:00:46 2026 GMT
Subject: CN=7791832a206bb79d6ef28ed20685acce41db6820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e6:a2:b5:fa:46:96:ed:51:e6:44:43:be:31:
14:22:5a:63:a0:6f:cf:c9:11:33:64:f5:44:2c:50:
a3:b8:94:3f:31:c9:cb:16:2c:c5:ca:ec:f0:fa:db:
2e:7c:42:1d:93:d5:95:70:22:25:71:5c:22:50:2d:
42:00:e4:c0:08:bd:e3:12:52:a4:57:3e:fb:11:1a:
55:a2:78:78:0b:fa:9a:e0:4d:0b:15:b0:d3:b1:fc:
64:29:8f:90:ab:bb:6b:8a:73:a8:1a:25:3c:94:27:
a3:94:3b:44:df:3d:9f:d4:f9:f2:7e:a1:9e:c6:97:
11:de:35:49:18:c5:90:5e:28:ad:9c:b0:fc:92:f9:
7b:85:c5:d6:65:6f:2e:5a:fb:f4:37:14:eb:b0:55:
11:1a:1a:ae:68:94:02:1f:3e:a2:24:38:cc:ee:a4:
5d:51:1c:fc:e8:50:44:c0:f2:c0:b0:bc:2d:60:9a:
ca:dc:33:d1:45:87:39:06:da:78:f1:e4:c6:dd:2a:
00:ad:4e:13:80:47:ae:d3:db:79:bf:a8:76:99:c7:
6b:e6:93:31:42:a6:ce:36:6c:0a:05:cb:9f:67:d9:
a1:78:a9:5c:ea:b4:d2:d2:64:2c:59:12:d9:e1:f6:
95:f7:94:08:0a:df:4a:b0:8d:d3:cc:db:67:3f:30:
30:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:91:83:2A:20:6B:B7:9D:6E:F2:8E:D2:06:85:AC:CE:41:DB:68:20
X509v3 Authority Key Identifier:
keyid:86:08:58:BC:2D:CB:B3:76:D7:91:A9:BE:9A:F1:52:02:38:53:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:73:12:1e:5e:7e:21:d5:c6:d2:a3:30:26:e1:54:1a:e8:c9:
7f:8f:ca:3f:a3:ff:cf:32:25:e2:e0:ad:d9:66:ca:8f:56:8f:
ea:01:da:59:41:e6:3a:9f:81:16:12:b5:08:e9:c4:51:69:69:
32:52:1b:96:b3:d2:18:97:dc:99:66:e1:8a:31:d5:cb:a5:7c:
ff:58:1e:c5:4f:58:5d:70:db:05:37:16:14:2f:db:e5:05:a7:
c2:a0:06:7e:cb:b1:a4:3b:83:6d:cb:7a:aa:87:d3:d4:d2:cf:
71:d4:65:05:39:1e:4e:73:fc:2b:7c:14:f6:56:6e:90:f7:58:
71:fd:b5:d6:c6:b2:93:7b:ce:d1:49:01:f9:09:07:ff:be:ba:
f8:32:98:58:c2:d9:b1:f1:ce:d2:a5:7c:6b:a8:cc:cb:f4:5a:
e1:c0:2f:3a:7d:dc:a8:af:1f:49:89:86:ab:7c:f3:70:b3:52:
43:0c:de:b7:9a:36:f6:a8:7c:4d:e9:b5:41:8b:a1:56:30:a7:
c4:6b:1a:80:6a:28:a5:a0:80:69:17:3d:0a:83:4f:18:34:8d:
34:34:57:0e:87:25:1e:9e:a0:b5:c5:23:04:51:16:10:48:d4:
03:c3:b0:11:13:96:a8:49:9a:03:2d:41:f0:49:db:41:b8:b0:
28:ad:b2:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CfOgR1QmJ8NATQAZTvK7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MDg1OGJjMmRjYmIzNzZkNzkxYTliZTlhZjE1MjAyMzg1
MzVkOWYwHhcNMjYwMzI5MTAwMDQ2WhcNMjYwMzMwMTAwMDQ2WjAzMTEwLwYDVQQD
Eyg3NzkxODMyYTIwNmJiNzlkNmVmMjhlZDIwNjg1YWNjZTQxZGI2ODIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOaitfpGlu1R5kRDvjEUIlpjoG/P
yREzZPVELFCjuJQ/McnLFizFyuzw+tsufEIdk9WVcCIlcVwiUC1CAOTACL3jElKk
Vz77ERpVonh4C/qa4E0LFbDTsfxkKY+Qq7trinOoGiU8lCejlDtE3z2f1PnyfqGe
xpcR3jVJGMWQXiitnLD8kvl7hcXWZW8uWvv0NxTrsFURGhquaJQCHz6iJDjM7qRd
URz86FBEwPLAsLwtYJrK3DPRRYc5Btp48eTG3SoArU4TgEeu09t5v6h2mcdr5pMx
QqbONmwKBcufZ9mheKlc6rTS0mQsWRLZ4faV95QICt9KsI3TzNtnPzAw2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHeRgyoga7edbvKO0gaFrM5B22ggMB8GA1UdIwQY
MBaAFIYIWLwty7N215GpvprxUgI4U12fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGdoWXZDM0xzM2JYa2FtLW12RlNBamhUWFo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC84NjEzYTAtZDllYy00YzhhLWIzMzQt
OTkwYmIxY2NkMjBjLzEvaGdoWXZDM0xzM2JYa2FtLW12RlNBamhUWFo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC84NjEzYTAtZDllYy00YzhhLWIzMzQtOTkwYmIxY2NkMjBj
LzEvaGdoWXZDM0xzM2JYa2FtLW12RlNBamhUWFo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQnMSHl5+
IdXG0qMwJuFUGujJf4/KP6P/zzIl4uCt2WbKj1aP6gHaWUHmOp+BFhK1COnEUWlp
MlIblrPSGJfcmWbhijHVy6V8/1gexU9YXXDbBTcWFC/b5QWnwqAGfsuxpDuDbct6
qofT1NLPcdRlBTkeTnP8K3wU9lZukPdYcf211sayk3vO0UkB+QkH/766+DKYWMLZ
sfHO0qV8a6jMy/Ra4cAvOn3cqK8fSYmGq3zzcLNSQwzet5o29qh8Tem1QYuhVjCn
xGsagGoopaCAaRc9CoNPGDSNNDRXDoclHp6gtcUjBFEWEEjUA8OwEROWqEmaAy1B
8EnbQbiwKK2ymg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:17 2026 by rpki-client