Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
File: hGbpF0La0bn0x5ayOzfres2FgWE.mft (raw, json)
Hash identifier: kWtkLxOP5F/eae+x/hn4tUU8tt0eEcDhpdCDJ7wUcTI=
Subject key identifier: B7:01:27:C3:18:33:4E:D6:3A:81:AE:43:1F:33:57:21:4A:BF:C6:8F
Authority key identifier: 84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
Certificate issuer: /CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Certificate serial: 019CE447BF016000FBC83F659C2F4DCFA9DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
Manifest number: 1305
Signing time: Thu 12 Mar 2026 23:00:33 +0000
Manifest this update: Thu 12 Mar 2026 23:00:33 +0000
Manifest next update: Fri 13 Mar 2026 23:00:33 +0000
Files and hashes: 1: V6Mvsnc7Z774Ev5q6h6Mb-ytj-8.roa (hash: /GNFnTbzQDf+YRxBgnXt7mG8KTDdxxNld8mJ/4Y6skk=)
2: hGbpF0La0bn0x5ayOzfres2FgWE.crl (hash: h4/R9HJxE2eY/L6CMYz8a+os8HLF88kiZHM3PFJC6e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:47:bf:01:60:00:fb:c8:3f:65:9c:2f:4d:cf:a9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Validity
Not Before: Mar 12 23:00:33 2026 GMT
Not After : Mar 13 23:00:33 2026 GMT
Subject: CN=b70127c318334ed63a81ae431f3357214abfc68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ac:e4:f9:59:31:b9:54:1d:8f:f9:13:f4:e3:
5d:1d:3a:a4:a2:59:d5:22:68:b7:81:f7:28:51:2b:
2c:53:b1:01:4e:f2:e7:8a:9a:a3:d6:58:1b:2d:0d:
0e:a2:78:67:d0:b9:76:dd:19:41:70:43:d5:43:f7:
55:90:4d:de:4c:ed:f2:b3:6d:a7:84:5f:75:2c:9b:
b2:81:e2:0f:fd:67:69:6a:25:05:c7:9d:ec:85:1c:
d2:6d:89:0e:3e:3d:83:d5:e5:3c:1a:51:52:55:e4:
da:38:8f:4f:d8:b0:b5:f8:4c:a9:f7:83:c4:09:58:
e2:4a:7a:be:99:0f:2d:a3:a4:43:75:2d:31:55:fe:
63:46:16:b6:fa:bc:b6:b6:7f:98:1c:f4:58:13:de:
af:38:f9:b0:0c:02:bc:ea:51:e8:d4:7d:4f:03:0f:
5e:3c:e4:b5:c2:38:6f:ec:6a:ff:36:ea:0f:47:7c:
3b:12:9e:6a:a9:ea:c2:64:b5:60:49:9c:dd:99:93:
b3:3a:cb:19:c3:9d:69:74:8a:e9:f6:f8:a9:fe:b5:
a4:30:5e:dd:a6:8b:56:bd:a4:50:16:ea:96:1a:c5:
63:54:2d:8f:01:86:c8:7c:6d:b1:3a:38:09:97:72:
b1:47:b3:4b:21:9b:94:2b:c6:3c:2e:99:8d:66:7c:
a6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:01:27:C3:18:33:4E:D6:3A:81:AE:43:1F:33:57:21:4A:BF:C6:8F
X509v3 Authority Key Identifier:
keyid:84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c0:f5:b8:9a:7e:eb:7e:fc:07:68:59:fd:97:d7:21:c8:40:
12:ef:62:e0:d5:13:00:65:f1:6e:c7:d7:c9:26:27:cc:ec:8f:
3f:58:2f:e0:e1:49:9d:b8:b5:39:3f:d2:fd:d2:c0:e4:2d:4f:
a5:66:08:ef:d5:21:62:ca:89:1b:83:e4:48:3f:0a:c0:ed:4c:
f6:d3:28:f3:c4:7b:ff:5d:09:70:5a:b7:04:7a:9e:23:43:08:
c5:81:fc:ae:fd:bd:4e:82:dd:1b:a3:a0:71:ef:3c:15:30:16:
92:b9:eb:87:6d:19:2d:40:bb:c2:48:f0:3c:b7:9b:2c:58:29:
82:bb:80:41:2a:b7:22:bb:d5:63:23:d9:2c:2d:1b:a5:b2:53:
67:4f:71:b7:07:d2:62:08:c5:d3:aa:65:b6:e0:44:85:15:30:
44:54:b4:1c:69:5b:9b:b2:1f:f0:5d:0b:00:ed:38:cd:12:47:
0c:6b:cc:07:0e:4b:d4:75:01:1a:d4:69:a4:cc:4d:9e:23:1e:
a8:32:7a:02:99:a6:55:25:1b:c1:bb:39:ae:81:11:e6:5e:0d:
78:a8:1f:b5:04:c7:87:d9:6e:8b:9d:08:3c:de:c3:9d:b0:49:
bf:a2:a0:18:10:db:d1:8b:66:d3:11:20:c9:10:84:9f:b1:a2:
32:d4:93:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzkR78BYAD7yD9lnC9Nz6nbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NjZlOTE3NDJkYWQxYjlmNGM3OTZiMjNiMzdlYjdhY2Q4
NTgxNjEwHhcNMjYwMzEyMjMwMDMzWhcNMjYwMzEzMjMwMDMzWjAzMTEwLwYDVQQD
EyhiNzAxMjdjMzE4MzM0ZWQ2M2E4MWFlNDMxZjMzNTcyMTRhYmZjNjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqzk+VkxuVQdj/kT9ONdHTqkolnV
Imi3gfcoUSssU7EBTvLnipqj1lgbLQ0Oonhn0Ll23RlBcEPVQ/dVkE3eTO3ys22n
hF91LJuygeIP/WdpaiUFx53shRzSbYkOPj2D1eU8GlFSVeTaOI9P2LC1+Eyp94PE
CVjiSnq+mQ8to6RDdS0xVf5jRha2+ry2tn+YHPRYE96vOPmwDAK86lHo1H1PAw9e
POS1wjhv7Gr/NuoPR3w7Ep5qqerCZLVgSZzdmZOzOssZw51pdIrp9vip/rWkMF7d
potWvaRQFuqWGsVjVC2PAYbIfG2xOjgJl3KxR7NLIZuUK8Y8LpmNZnymqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcBJ8MYM07WOoGuQx8zVyFKv8aPMB8GA1UdIwQY
MBaAFIRm6RdC2tG59MeWsjs363rNhYFhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEdicEYwTGEwYm4weDVheU96ZnJlczJGZ1dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hNjY5YjctMDc3OS00NTlhLTkyMjAt
NGUzMmM4YjhlZTM2LzEvaEdicEYwTGEwYm4weDVheU96ZnJlczJGZ1dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9hNjY5YjctMDc3OS00NTlhLTkyMjAtNGUzMmM4YjhlZTM2
LzEvaEdicEYwTGEwYm4weDVheU96ZnJlczJGZ1dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8D1uJp+
6378B2hZ/ZfXIchAEu9i4NUTAGXxbsfXySYnzOyPP1gv4OFJnbi1OT/S/dLA5C1P
pWYI79UhYsqJG4PkSD8KwO1M9tMo88R7/10JcFq3BHqeI0MIxYH8rv29ToLdG6Og
ce88FTAWkrnrh20ZLUC7wkjwPLebLFgpgruAQSq3IrvVYyPZLC0bpbJTZ09xtwfS
YgjF06pltuBEhRUwRFS0HGlbm7If8F0LAO04zRJHDGvMBw5L1HUBGtRppMxNniMe
qDJ6ApmmVSUbwbs5roER5l4NeKgftQTHh9lui50IPN7DnbBJv6KgGBDb0Ytm0xEg
yRCEn7GiMtST6g==
-----END CERTIFICATE-----
Generated at Fri Mar 13 07:10:22 2026 by rpki-client