Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
File: HDRPEVl1lIgoU6eVgd0r94nusx8.mft (raw, json)
Hash identifier: fEXbFvq9LC4jqAZ45AuUrrANaxg8mOQNZDlW73Qdn/4=
Subject key identifier: 1F:CC:C6:CB:20:0B:76:2E:DD:6F:D7:08:9A:EA:80:0A:AF:0F:A1:E2
Authority key identifier: 1C:34:4F:11:59:75:94:88:28:53:A7:95:81:DD:2B:F7:89:EE:B3:1F
Certificate issuer: /CN=1c344f11597594882853a79581dd2bf789eeb31f
Certificate serial: 019E307265D50A52D2134FFFE91793BAA587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
Manifest number: 16E3
Signing time: Sat 16 May 2026 11:01:03 +0000
Manifest this update: Sat 16 May 2026 11:01:03 +0000
Manifest next update: Sun 17 May 2026 11:01:03 +0000
Files and hashes: 1: HDRPEVl1lIgoU6eVgd0r94nusx8.crl (hash: 0LU9o0NP5y1/BHLfeSIzeOSKEJQMqnvmHfT97CtUIJg=)
2: ZoMbhLRe32uOkMK8hwS9ali-Eqw.roa (hash: JRuU+ZyopWBcMt/8KJluZ75llM4qdJd/sZ4QglM1TbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:65:d5:0a:52:d2:13:4f:ff:e9:17:93:ba:a5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c344f11597594882853a79581dd2bf789eeb31f
Validity
Not Before: May 16 11:01:03 2026 GMT
Not After : May 17 11:01:03 2026 GMT
Subject: CN=1fccc6cb200b762edd6fd7089aea800aaf0fa1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b6:8b:65:3f:c7:81:a2:c6:dc:2d:63:76:c2:
a4:40:97:52:e1:a5:01:88:d6:97:1d:22:be:4f:25:
d1:1e:8f:1e:91:c2:16:15:38:8d:70:9d:f6:90:ac:
f4:95:1c:ce:b4:53:79:a1:46:6f:31:31:89:cc:bd:
f8:5d:8f:90:17:54:e4:db:a1:e9:a1:04:1e:ac:4c:
ec:ff:a3:77:bb:88:8d:b8:7e:ee:09:5d:99:34:08:
64:8a:f8:26:97:30:54:82:7d:77:23:07:73:37:11:
d9:ca:12:5b:1e:c1:d3:cf:6d:12:cc:85:c6:6b:7e:
f2:0e:fe:a1:51:23:04:d6:2a:a8:fe:4e:f6:99:0d:
1c:d9:de:4b:60:81:1a:79:27:6d:dc:00:f9:cb:89:
cf:18:16:db:63:3b:5b:94:40:2a:64:8c:7b:e2:04:
04:ec:ae:4e:1e:86:a9:8f:05:9d:de:76:bf:98:21:
13:10:e7:7c:7a:3e:db:a6:e3:f4:af:75:bb:9f:3b:
cd:8e:10:75:f8:67:74:25:7a:f5:55:48:f6:ff:36:
57:87:6c:d9:02:e5:54:86:38:38:f2:91:a1:62:c3:
d1:8f:d8:2a:de:38:3e:f5:91:a6:39:d6:b9:d6:d8:
96:21:f2:60:13:f0:a1:a4:90:14:4f:30:3f:f7:66:
a9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CC:C6:CB:20:0B:76:2E:DD:6F:D7:08:9A:EA:80:0A:AF:0F:A1:E2
X509v3 Authority Key Identifier:
keyid:1C:34:4F:11:59:75:94:88:28:53:A7:95:81:DD:2B:F7:89:EE:B3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ff:90:88:2c:4b:33:97:9c:5f:bf:84:d7:ca:a0:37:29:d7:
cf:14:ff:c6:a1:67:a0:33:8a:4c:ee:4a:75:d5:8d:6c:ff:1a:
4b:e9:5c:87:18:ec:3f:fc:b8:84:51:0a:95:a3:51:eb:74:69:
7d:86:5b:6e:36:22:e6:12:8f:69:9b:1a:20:5d:94:73:58:32:
e7:42:b4:fd:33:df:f8:f9:99:81:22:45:1d:7f:ea:e0:06:0f:
a9:3e:be:64:fe:f5:8e:08:b8:d3:76:c7:de:c4:26:26:51:d9:
f3:ae:50:6f:ac:d2:de:c6:d9:20:8e:c1:ef:43:45:cc:d1:be:
cb:67:48:3c:b0:29:28:d2:74:83:b5:0b:67:ed:57:d3:d8:69:
af:94:8d:64:71:f9:79:7e:59:3c:db:87:06:5a:f0:a5:60:29:
33:5c:e5:76:b5:b4:c9:f0:6c:52:b0:84:7b:e8:5e:fe:d0:ef:
55:fd:47:9c:fd:54:48:3a:8b:30:38:1a:71:e2:82:86:1f:c7:
1b:a6:a9:f6:9a:e6:b5:59:a4:90:da:b8:9c:cb:e8:7d:6e:0d:
78:6c:56:cf:10:76:f1:2f:c9:73:30:2a:f4:de:d0:b7:bc:9b:
13:71:dc:23:56:35:e0:8f:69:4f:86:9a:76:06:2e:a0:9d:fe:
c7:76:02:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wcmXVClLSE0//6ReTuqWHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMzQ0ZjExNTk3NTk0ODgyODUzYTc5NTgxZGQyYmY3ODll
ZWIzMWYwHhcNMjYwNTE2MTEwMTAzWhcNMjYwNTE3MTEwMTAzWjAzMTEwLwYDVQQD
EygxZmNjYzZjYjIwMGI3NjJlZGQ2ZmQ3MDg5YWVhODAwYWFmMGZhMWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxraLZT/HgaLG3C1jdsKkQJdS4aUB
iNaXHSK+TyXRHo8ekcIWFTiNcJ32kKz0lRzOtFN5oUZvMTGJzL34XY+QF1Tk26Hp
oQQerEzs/6N3u4iNuH7uCV2ZNAhkivgmlzBUgn13IwdzNxHZyhJbHsHTz20SzIXG
a37yDv6hUSME1iqo/k72mQ0c2d5LYIEaeSdt3AD5y4nPGBbbYztblEAqZIx74gQE
7K5OHoapjwWd3na/mCETEOd8ej7bpuP0r3W7nzvNjhB1+Gd0JXr1VUj2/zZXh2zZ
AuVUhjg48pGhYsPRj9gq3jg+9ZGmOda51tiWIfJgE/ChpJAUTzA/92apzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/MxssgC3Yu3W/XCJrqgAqvD6HiMB8GA1UdIwQY
MBaAFBw0TxFZdZSIKFOnlYHdK/eJ7rMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSERSUEVWbDFsSWdvVTZlVmdkMHI5NG51c3g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9mMDYxOTEtYjBhOC00OTUwLWIwMjct
ZGVlYzZmY2YyZDk1LzEvSERSUEVWbDFsSWdvVTZlVmdkMHI5NG51c3g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9mMDYxOTEtYjBhOC00OTUwLWIwMjctZGVlYzZmY2YyZDk1
LzEvSERSUEVWbDFsSWdvVTZlVmdkMHI5NG51c3g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAv+QiCxL
M5ecX7+E18qgNynXzxT/xqFnoDOKTO5KddWNbP8aS+lchxjsP/y4hFEKlaNR63Rp
fYZbbjYi5hKPaZsaIF2Uc1gy50K0/TPf+PmZgSJFHX/q4AYPqT6+ZP71jgi403bH
3sQmJlHZ865Qb6zS3sbZII7B70NFzNG+y2dIPLApKNJ0g7ULZ+1X09hpr5SNZHH5
eX5ZPNuHBlrwpWApM1zldrW0yfBsUrCEe+he/tDvVf1HnP1USDqLMDgaceKChh/H
G6ap9prmtVmkkNq4nMvofW4NeGxWzxB28S/JczAq9N7Qt7ybE3HcI1Y14I9pT4aa
dgYuoJ3+x3YCcA==
-----END CERTIFICATE-----
Generated at Sat May 16 19:31:05 2026 by rpki-client