Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
File: hfTuFPbTinzwcSed_3s5FwLjcTU.mft (raw, json)
Hash identifier: a/XTiFENKf7LOhTCLyzhio8bGm1OsK+bbtcR0P2M6TQ=
Subject key identifier: 06:A2:AD:D3:FB:5B:69:32:AC:3B:FE:71:26:AE:1F:AE:4F:EE:2D:73
Authority key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
Certificate issuer: /CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Certificate serial: 019CE6DB09973CC96244126ADE03FD4EA102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
Manifest number: 1703
Signing time: Fri 13 Mar 2026 11:00:40 +0000
Manifest this update: Fri 13 Mar 2026 11:00:40 +0000
Manifest next update: Sat 14 Mar 2026 11:00:40 +0000
Files and hashes: 1: Fbp_lxqUHehCSWbyl7sXqy6NV7c.roa (hash: 2HfCb9kniGEaBDNnHz9GBiRgabhJI0HLcxsnmcMaKY8=)
2: Kw8ydkhlfzZHeJTkr7mnY0TC51Q.roa (hash: A/++N69JbstSCEAobrMDwfyAGtA60/N4ZLrwg/2X2ok=)
3: hfTuFPbTinzwcSed_3s5FwLjcTU.crl (hash: 9eDtHpD+9OEcUS5/p7y/qQH5M/Cd6pUR+X2l7nTgrO8=)
4: tTro6Q3OQALzLcA8FA4eU5RfBWA.roa (hash: jtcqT3NEeBB17kUbe2vD9a8c2cug0yjIQxz7WQqkvtg=)
5: vbHBtb2iPNz_qrAoEkpCxsaIZZc.roa (hash: OIkOu0+4El6Pg/y3PaYXt7py5eZ3TqMx4VnZc06tByw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:db:09:97:3c:c9:62:44:12:6a:de:03:fd:4e:a1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Validity
Not Before: Mar 13 11:00:40 2026 GMT
Not After : Mar 14 11:00:40 2026 GMT
Subject: CN=06a2add3fb5b6932ac3bfe7126ae1fae4fee2d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:f9:72:fa:4f:22:ff:1b:4d:6b:d5:6d:2e:
a2:ca:dd:1a:f9:aa:ba:f4:b4:48:21:81:bc:b6:aa:
30:7b:c1:13:ab:5d:99:77:44:78:a0:6d:e7:70:68:
3a:c6:1e:c6:ff:92:b9:1d:56:0c:e3:88:23:97:7d:
70:9e:04:83:f5:02:a0:a4:b8:56:06:69:3e:5d:7a:
b1:5f:0a:18:a6:83:a8:8c:3b:1a:bd:c3:b4:69:82:
99:a3:a2:2b:cc:bf:e1:8b:da:2e:be:41:bf:46:b1:
30:fb:7e:58:82:1f:d8:f4:58:0a:ff:31:d8:dd:a8:
ad:5e:c4:7e:e7:0b:98:b0:54:3f:70:62:36:6e:f7:
2b:cb:34:3e:75:c4:89:24:6f:32:3b:af:eb:cd:99:
63:c6:bc:04:9c:ec:ea:63:e6:c4:0c:b4:cb:6d:1c:
6b:e0:dc:25:37:e7:72:ff:74:cc:24:3a:64:23:10:
04:87:6f:ee:c7:2c:18:a2:a7:6a:1c:90:89:34:93:
7a:34:4c:f2:c3:75:18:7c:3d:64:68:9f:a0:db:40:
76:d9:99:8e:0f:44:3c:6f:6b:f3:0a:d1:e6:cc:af:
ea:8e:34:38:f8:ed:d4:07:43:a0:e1:82:3a:b0:a7:
38:f5:0b:eb:57:3b:76:a8:b6:78:f5:3b:d4:34:2c:
2d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A2:AD:D3:FB:5B:69:32:AC:3B:FE:71:26:AE:1F:AE:4F:EE:2D:73
X509v3 Authority Key Identifier:
keyid:85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9f:55:9d:b3:6a:eb:ca:f3:88:4f:be:84:2a:56:43:d5:2b:
6d:01:3e:2b:4e:5b:56:91:d2:ab:61:db:36:62:0c:7f:86:99:
6e:d3:18:df:46:3f:aa:09:4f:86:e0:16:be:43:8b:c6:39:95:
ab:c6:28:2f:d5:ff:b4:d3:24:30:51:dd:bc:7d:af:74:13:66:
da:45:29:96:86:25:54:42:d9:af:af:21:30:82:2c:43:b1:14:
19:00:43:cf:2c:77:ac:35:23:10:84:c1:91:3d:1b:9a:d7:43:
95:d8:b9:29:93:5b:fe:01:31:5e:6b:b2:8b:ff:ae:ae:72:b7:
2f:55:2a:d2:e9:6b:e3:b0:d0:75:29:89:ec:2a:84:e0:3b:7e:
37:e9:5c:4f:4b:57:ab:69:25:8d:72:7f:57:1b:53:dd:c2:66:
34:69:14:23:56:d3:0d:fe:a8:ee:05:f7:fb:f9:8b:1f:37:b9:
e4:e7:6f:0b:d7:cd:d8:c2:34:59:81:fb:65:a4:1c:76:cf:47:
6c:a3:2d:22:cd:c9:7e:f7:22:cd:06:3a:83:fc:ac:f9:59:f3:
b5:64:3d:9e:96:ff:cb:88:3a:b5:34:e4:7e:e5:58:65:d7:34:
d1:1b:0a:70:a6:5f:be:f3:a7:ad:18:a3:f6:e6:33:81:b2:04:
ec:02:1b:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzm2wmXPMliRBJq3gP9TqECMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZjRlZTE0ZjZkMzhhN2NmMDcxMjc5ZGZmN2IzOTE3MDJl
MzcxMzUwHhcNMjYwMzEzMTEwMDQwWhcNMjYwMzE0MTEwMDQwWjAzMTEwLwYDVQQD
EygwNmEyYWRkM2ZiNWI2OTMyYWMzYmZlNzEyNmFlMWZhZTRmZWUyZDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7P5cvpPIv8bTWvVbS6iyt0a+aq6
9LRIIYG8tqowe8ETq12Zd0R4oG3ncGg6xh7G/5K5HVYM44gjl31wngSD9QKgpLhW
Bmk+XXqxXwoYpoOojDsavcO0aYKZo6IrzL/hi9ouvkG/RrEw+35Ygh/Y9FgK/zHY
3aitXsR+5wuYsFQ/cGI2bvcryzQ+dcSJJG8yO6/rzZljxrwEnOzqY+bEDLTLbRxr
4NwlN+dy/3TMJDpkIxAEh2/uxywYoqdqHJCJNJN6NEzyw3UYfD1kaJ+g20B22ZmO
D0Q8b2vzCtHmzK/qjjQ4+O3UB0Og4YI6sKc49QvrVzt2qLZ49TvUNCwtzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAairdP7W2kyrDv+cSauH65P7i1zMB8GA1UdIwQY
MBaAFIX07hT204p88HEnnf97ORcC43E1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGZUdUZQYlRpbnp3Y1NlZF8zczVGd0xqY1RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80ZGYzOWEtNzgzYy00ZDdkLWIxYmUt
YmZkOTVhOWE2ZTY0LzEvaGZUdUZQYlRpbnp3Y1NlZF8zczVGd0xqY1RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80ZGYzOWEtNzgzYy00ZDdkLWIxYmUtYmZkOTVhOWE2ZTY0
LzEvaGZUdUZQYlRpbnp3Y1NlZF8zczVGd0xqY1RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZ9VnbNq
68rziE++hCpWQ9UrbQE+K05bVpHSq2HbNmIMf4aZbtMY30Y/qglPhuAWvkOLxjmV
q8YoL9X/tNMkMFHdvH2vdBNm2kUploYlVELZr68hMIIsQ7EUGQBDzyx3rDUjEITB
kT0bmtdDldi5KZNb/gExXmuyi/+urnK3L1Uq0ulr47DQdSmJ7CqE4Dt+N+lcT0tX
q2kljXJ/VxtT3cJmNGkUI1bTDf6o7gX3+/mLHze55OdvC9fN2MI0WYH7ZaQcds9H
bKMtIs3JfvcizQY6g/ys+VnztWQ9npb/y4g6tTTkfuVYZdc00RsKcKZfvvOnrRij
9uYzgbIE7AIbtw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 15:13:03 2026 by rpki-client