Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
File: hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft (raw, json)
Hash identifier: 6qY0c2d9J82fm2jeqco90/vz69iWsX/UW3+AYR+GPY4=
Subject key identifier: 27:B2:C8:EE:4F:4E:2F:C0:3E:80:BB:A8:72:FF:7C:39:43:27:9E:33
Authority key identifier: 86:08:58:BC:2D:CB:B3:76:D7:91:A9:BE:9A:F1:52:02:38:53:5D:9F
Certificate issuer: /CN=860858bc2dcbb376d791a9be9af1520238535d9f
Certificate serial: 019E2881E38CF48E40E0E2A8753042195296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
Manifest number: 024B
Signing time: Thu 14 May 2026 22:01:01 +0000
Manifest this update: Thu 14 May 2026 22:01:01 +0000
Manifest next update: Fri 15 May 2026 22:01:01 +0000
Files and hashes: 1: hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl (hash: aEtQezbI1+X6ejzCwYSJ41mBe3anrMrDMg9+aqsJuuE=)
2: ouVL9f4Kp01QdxrOilk4XOoPv2E.asa (hash: BkjPDfglBBFYk69JDCryPzYQnQSRslBsIgc8pXRMNs0=)
3: qEfXUfQHl_EsP_P4Lk42SnqgMYI.roa (hash: 4IfXp7dyRNjrRdAgPWfTKulvifdvK1AOsusHD7QgNHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:81:e3:8c:f4:8e:40:e0:e2:a8:75:30:42:19:52:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860858bc2dcbb376d791a9be9af1520238535d9f
Validity
Not Before: May 14 22:01:01 2026 GMT
Not After : May 15 22:01:01 2026 GMT
Subject: CN=27b2c8ee4f4e2fc03e80bba872ff7c3943279e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0b:86:6a:83:f6:8e:e3:c2:43:a9:5c:15:b3:
86:24:88:e6:36:9a:53:18:92:62:ff:99:ad:6d:a1:
44:b7:30:c6:8e:95:8a:6c:4c:73:80:db:29:40:1f:
e0:5a:8d:12:6d:b1:da:37:c6:b4:fe:3f:fd:3f:06:
e1:6b:32:f0:2f:45:c2:42:71:93:5e:01:6c:a7:51:
8f:4e:5c:f3:71:92:7b:bf:31:e1:2e:f7:e0:1f:77:
92:92:cb:26:62:ca:46:ad:41:74:05:77:fe:04:45:
e9:2c:37:43:ea:4c:f5:6a:d7:c5:74:75:1d:88:9e:
f2:75:21:3c:c2:dc:38:07:f4:bf:54:79:e5:0d:c4:
ea:05:be:2c:f3:a1:fe:c9:1b:6a:de:26:28:6f:30:
98:c9:f0:5d:ce:c7:1a:a8:1a:11:d8:78:eb:2d:37:
c9:40:c1:47:db:f1:30:e9:c3:65:be:04:5f:08:ba:
31:dc:92:e8:a5:bb:2c:37:b7:c0:28:59:1a:80:55:
9c:74:45:39:26:18:6b:8c:91:51:45:e0:bf:d0:19:
73:7b:1a:b6:48:04:0f:9f:0c:6a:11:0d:bd:c0:57:
32:bc:42:1f:36:e2:e1:33:22:7f:3b:b3:d3:d8:84:
f9:f3:6d:c2:2b:c1:c3:2e:7c:67:7f:4f:b0:b0:17:
09:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B2:C8:EE:4F:4E:2F:C0:3E:80:BB:A8:72:FF:7C:39:43:27:9E:33
X509v3 Authority Key Identifier:
keyid:86:08:58:BC:2D:CB:B3:76:D7:91:A9:BE:9A:F1:52:02:38:53:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:01:5f:b7:52:0c:4e:42:b1:26:4f:93:4d:1b:79:ce:78:93:
05:ef:45:e8:c8:d5:22:82:89:68:19:9b:b8:f4:36:c7:f0:25:
be:50:6c:7c:29:08:4b:b2:d9:6e:fe:8f:e2:0e:f0:d1:0f:b3:
33:65:a9:8e:f9:a0:6b:c4:c7:b3:64:7f:05:a9:3e:59:f8:39:
c8:0f:0b:3e:1e:b9:a4:18:a8:bc:3f:70:97:cb:e2:7b:f7:3f:
20:bd:aa:7f:c9:8f:b0:74:78:d2:eb:17:e3:25:93:b3:9a:6e:
99:be:00:68:17:a7:af:0c:df:8a:db:95:1d:2e:2f:3d:a3:ac:
cb:42:c8:c8:9e:7e:c1:dc:49:25:d4:3b:9e:83:d6:ad:4b:eb:
88:73:d4:b3:7c:4a:3a:c1:10:35:9b:36:d0:38:db:ae:d4:4c:
bc:fd:19:a8:19:b6:4c:a8:2d:e8:b7:fc:ab:cd:0c:89:94:97:
8c:3f:37:fb:00:af:f5:29:87:ce:46:6b:23:48:50:d2:9d:dc:
f4:87:34:fa:68:d4:0c:d2:f4:fe:77:90:1a:6a:af:e8:65:51:
da:9e:97:82:3f:95:e6:a4:06:15:3c:01:3d:ab:00:d6:0f:39:
24:37:cd:d9:f5:c8:2c:a5:33:3b:c4:a9:89:c0:cb:1b:4e:f2:
1c:e4:4b:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ogeOM9I5A4OKodTBCGVKWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MDg1OGJjMmRjYmIzNzZkNzkxYTliZTlhZjE1MjAyMzg1
MzVkOWYwHhcNMjYwNTE0MjIwMTAxWhcNMjYwNTE1MjIwMTAxWjAzMTEwLwYDVQQD
EygyN2IyYzhlZTRmNGUyZmMwM2U4MGJiYTg3MmZmN2MzOTQzMjc5ZTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2guGaoP2juPCQ6lcFbOGJIjmNppT
GJJi/5mtbaFEtzDGjpWKbExzgNspQB/gWo0SbbHaN8a0/j/9PwbhazLwL0XCQnGT
XgFsp1GPTlzzcZJ7vzHhLvfgH3eSkssmYspGrUF0BXf+BEXpLDdD6kz1atfFdHUd
iJ7ydSE8wtw4B/S/VHnlDcTqBb4s86H+yRtq3iYobzCYyfBdzscaqBoR2HjrLTfJ
QMFH2/Ew6cNlvgRfCLox3JLopbssN7fAKFkagFWcdEU5JhhrjJFRReC/0Blzexq2
SAQPnwxqEQ29wFcyvEIfNuLhMyJ/O7PT2IT5823CK8HDLnxnf0+wsBcJNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCeyyO5PTi/APoC7qHL/fDlDJ54zMB8GA1UdIwQY
MBaAFIYIWLwty7N215GpvprxUgI4U12fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGdoWXZDM0xzM2JYa2FtLW12RlNBamhUWFo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC84NjEzYTAtZDllYy00YzhhLWIzMzQt
OTkwYmIxY2NkMjBjLzEvaGdoWXZDM0xzM2JYa2FtLW12RlNBamhUWFo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC84NjEzYTAtZDllYy00YzhhLWIzMzQtOTkwYmIxY2NkMjBj
LzEvaGdoWXZDM0xzM2JYa2FtLW12RlNBamhUWFo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADAFft1IM
TkKxJk+TTRt5zniTBe9F6MjVIoKJaBmbuPQ2x/AlvlBsfCkIS7LZbv6P4g7w0Q+z
M2Wpjvmga8THs2R/Bak+Wfg5yA8LPh65pBiovD9wl8vie/c/IL2qf8mPsHR40usX
4yWTs5pumb4AaBenrwzfituVHS4vPaOsy0LIyJ5+wdxJJdQ7noPWrUvriHPUs3xK
OsEQNZs20DjbrtRMvP0ZqBm2TKgt6Lf8q80MiZSXjD83+wCv9SmHzkZrI0hQ0p3c
9Ic0+mjUDNL0/neQGmqv6GVR2p6Xgj+V5qQGFTwBPasA1g85JDfN2fXILKUzO8Sp
icDLG07yHORLAg==
-----END CERTIFICATE-----
Generated at Fri May 15 06:19:52 2026 by rpki-client