Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
File: hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft (raw, json)
Hash identifier: ASXQ2RtjmLNuP4vJU3F0Jx9vZYp06AjkjzZ9vo+EIBY=
Subject key identifier: C4:47:26:E9:FA:02:A2:C9:57:15:88:13:AF:58:AA:F2:FD:28:EA:57
Authority key identifier: 85:21:D1:03:FC:73:E9:07:5D:CF:1E:22:BC:82:42:B7:0F:98:C8:84
Certificate issuer: /CN=8521d103fc73e9075dcf1e22bc8242b70f98c884
Certificate serial: 019D38D36C45E176B3F6C32A0D357249A598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
Manifest number: 08BB
Signing time: Sun 29 Mar 2026 09:01:13 +0000
Manifest this update: Sun 29 Mar 2026 09:01:13 +0000
Manifest next update: Mon 30 Mar 2026 09:01:13 +0000
Files and hashes: 1: cIAjOguDSgqReQ62gGNwhDs3FsM.roa (hash: TFf8FnZKCR2DKzKeOZFiA2ziGDoeOIEoz46aZNZ0n6U=)
2: hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl (hash: V8hU0XQxGBq9ewgdLAUr/zZkN8gTLd93vY0PW2zvxbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:6c:45:e1:76:b3:f6:c3:2a:0d:35:72:49:a5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8521d103fc73e9075dcf1e22bc8242b70f98c884
Validity
Not Before: Mar 29 09:01:13 2026 GMT
Not After : Mar 30 09:01:13 2026 GMT
Subject: CN=c44726e9fa02a2c957158813af58aaf2fd28ea57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:07:e5:e7:96:e7:ea:74:b8:50:80:fd:c9:21:
86:cd:29:08:17:89:0a:c3:18:a8:61:d6:36:b1:87:
d6:bb:2c:a2:60:8b:fa:98:85:e2:75:be:34:21:48:
60:08:33:fe:0a:de:e2:0b:4b:37:da:64:f2:a7:96:
aa:40:93:c7:70:44:c1:8f:4d:55:57:8e:92:e5:50:
bc:ef:55:2e:f0:0a:20:c1:e6:39:e4:b8:00:1c:0c:
62:29:40:d0:99:0a:fe:a0:03:17:9f:4a:72:ca:36:
27:a2:7a:b9:fc:98:8f:46:d2:de:8c:cb:bb:62:ff:
80:69:35:8c:32:60:d0:0f:bb:3c:c5:21:64:48:f9:
a8:a2:b9:fd:6b:fc:43:c9:e0:ac:09:b3:85:e5:07:
bd:90:f9:1c:db:f5:1b:d5:07:ae:1c:07:57:2b:60:
4a:c0:90:73:26:f2:74:3b:3c:90:7c:fe:d6:4c:55:
df:ed:19:0e:9d:e8:b7:24:a7:b1:4e:3e:13:8a:5e:
92:e9:d1:b4:71:70:c4:12:85:80:21:88:85:b3:a4:
ad:be:a8:32:dc:04:f6:89:22:10:bc:75:b5:93:a3:
c5:05:4f:ca:e1:a0:b3:90:e0:1e:1f:8f:aa:08:ad:
ae:c7:76:e6:0c:10:dc:a5:48:f5:d3:d0:07:1b:38:
69:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:47:26:E9:FA:02:A2:C9:57:15:88:13:AF:58:AA:F2:FD:28:EA:57
X509v3 Authority Key Identifier:
keyid:85:21:D1:03:FC:73:E9:07:5D:CF:1E:22:BC:82:42:B7:0F:98:C8:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6d:45:9d:ec:22:56:da:f8:e9:f4:d5:ac:4d:2a:ed:41:dd:
cb:80:96:6d:b8:8c:2f:fa:96:89:a3:2f:db:ce:35:9b:3e:f7:
dc:62:60:d8:49:b4:23:f3:f7:68:0b:da:b1:e3:1c:a8:6b:58:
30:c8:eb:f9:fd:ae:73:e6:75:7c:24:07:52:ec:6d:34:ad:84:
26:b2:2d:a7:5f:42:cb:c4:ea:b7:3d:8d:16:5c:53:c4:d1:a8:
dc:68:e7:7e:6f:3b:55:6a:35:a6:25:89:85:a9:66:64:d6:2a:
2e:de:ef:de:c8:03:ab:cf:9f:7f:ed:d8:5f:10:1d:e2:d2:65:
1e:bd:06:11:df:1c:c0:9a:4d:c3:24:2c:b3:83:7d:6a:7f:9e:
c1:e0:b4:d8:d6:05:61:00:90:00:71:a7:f1:91:7f:b2:0c:96:
c1:6f:0c:27:8e:54:5a:81:c9:0d:d3:1a:c3:e9:f8:83:c9:ea:
36:3c:70:61:65:8c:44:60:88:d7:9e:67:0f:4b:c1:49:29:12:
de:ee:36:2f:78:2b:54:f6:7c:7f:37:91:6d:53:ce:51:4d:66:
c1:24:26:d2:1f:66:37:6c:d3:72:53:c7:a8:87:22:bf:d7:be:
27:18:3a:c8:8c:e9:9a:57:39:75:f0:74:d5:6b:cc:51:28:10:
e4:c5:36:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0402xF4Xaz9sMqDTVySaWYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MjFkMTAzZmM3M2U5MDc1ZGNmMWUyMmJjODI0MmI3MGY5
OGM4ODQwHhcNMjYwMzI5MDkwMTEzWhcNMjYwMzMwMDkwMTEzWjAzMTEwLwYDVQQD
EyhjNDQ3MjZlOWZhMDJhMmM5NTcxNTg4MTNhZjU4YWFmMmZkMjhlYTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Qfl55bn6nS4UID9ySGGzSkIF4kK
wxioYdY2sYfWuyyiYIv6mIXidb40IUhgCDP+Ct7iC0s32mTyp5aqQJPHcETBj01V
V46S5VC871Uu8AogweY55LgAHAxiKUDQmQr+oAMXn0pyyjYnonq5/JiPRtLejMu7
Yv+AaTWMMmDQD7s8xSFkSPmoorn9a/xDyeCsCbOF5Qe9kPkc2/Ub1QeuHAdXK2BK
wJBzJvJ0OzyQfP7WTFXf7RkOnei3JKexTj4Til6S6dG0cXDEEoWAIYiFs6Stvqgy
3AT2iSIQvHW1k6PFBU/K4aCzkOAeH4+qCK2ux3bmDBDcpUj109AHGzhpQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRHJun6AqLJVxWIE69YqvL9KOpXMB8GA1UdIwQY
MBaAFIUh0QP8c+kHXc8eIryCQrcPmMiEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFNIUkFfeHo2UWRkeng0aXZJSkN0dy1ZeUlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iMzUxZWEtN2UwOS00NWFmLWEwZWUt
ZTQwZGUwODQxM2ZhLzEvaFNIUkFfeHo2UWRkeng0aXZJSkN0dy1ZeUlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9iMzUxZWEtN2UwOS00NWFmLWEwZWUtZTQwZGUwODQxM2Zh
LzEvaFNIUkFfeHo2UWRkeng0aXZJSkN0dy1ZeUlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVG1Fnewi
Vtr46fTVrE0q7UHdy4CWbbiML/qWiaMv2841mz733GJg2Em0I/P3aAvaseMcqGtY
MMjr+f2uc+Z1fCQHUuxtNK2EJrItp19Cy8Tqtz2NFlxTxNGo3Gjnfm87VWo1piWJ
halmZNYqLt7v3sgDq8+ff+3YXxAd4tJlHr0GEd8cwJpNwyQss4N9an+eweC02NYF
YQCQAHGn8ZF/sgyWwW8MJ45UWoHJDdMaw+n4g8nqNjxwYWWMRGCI155nD0vBSSkS
3u42L3grVPZ8fzeRbVPOUU1mwSQm0h9mN2zTclPHqIciv9e+Jxg6yIzpmlc5dfB0
1WvMUSgQ5MU2bQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:58 2026 by rpki-client