Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
File: hZjLxOjf8YUkBKmSddIwpWERBV8.mft (raw, json)
Hash identifier: TC0jXsKTjY7z7GPdGmiTIn6D+sWaOJO3uQd9YcC9/3E=
Subject key identifier: A4:82:F2:D3:98:66:1D:6F:92:6D:23:FF:B7:15:23:FE:6C:1A:A1:45
Authority key identifier: 85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
Certificate issuer: /CN=8598cbc4e8dff1852404a99275d230a56111055f
Certificate serial: 019CC9ACDE7F4F17607664DF9F204DBC17C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
Manifest number: 08A5
Signing time: Sat 07 Mar 2026 19:01:15 +0000
Manifest this update: Sat 07 Mar 2026 19:01:15 +0000
Manifest next update: Sun 08 Mar 2026 19:01:15 +0000
Files and hashes: 1: 6Zls-m6M9cBINWFd4w7uZTmGtY8.roa (hash: G1IdsClkRwxJrpDcDQsqLk4FP+v4Gfd2cicmc4XSPyc=)
2: hZjLxOjf8YUkBKmSddIwpWERBV8.crl (hash: 8R66Cme48Y/vJvVsKHWzXJmLKtVvPbmfk9gHuAajrVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:ac:de:7f:4f:17:60:76:64:df:9f:20:4d:bc:17:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8598cbc4e8dff1852404a99275d230a56111055f
Validity
Not Before: Mar 7 19:01:15 2026 GMT
Not After : Mar 8 19:01:15 2026 GMT
Subject: CN=a482f2d398661d6f926d23ffb71523fe6c1aa145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:91:6f:6d:5b:3a:da:fa:a0:64:62:56:40:d5:
ee:d0:a1:54:00:ff:31:ce:c1:02:23:65:a3:07:b3:
2b:10:84:a7:4a:4c:37:95:13:2d:0d:81:03:94:df:
3d:74:b1:4f:9c:70:81:22:0d:7e:17:28:9f:b8:0c:
8d:43:f2:d4:80:dd:5b:d9:32:e6:22:65:9c:f9:23:
81:e8:28:36:a5:1f:c5:68:7a:b5:bd:e7:c4:c4:4a:
95:43:16:f0:bd:b3:cb:b0:54:12:d5:29:f1:23:50:
7f:e8:b4:26:00:a4:84:5b:11:07:e1:ea:f4:fb:23:
bf:fc:35:86:d9:87:44:fd:e6:04:7d:e6:8b:6e:9e:
cf:31:6d:41:ee:10:93:ad:b3:97:1a:f0:67:02:db:
71:f9:fc:6b:b0:c5:a8:fb:91:5c:94:ec:39:b3:58:
40:25:f4:0c:c8:dc:d3:6a:34:d4:d8:fa:78:1f:a3:
a1:05:30:3e:0c:d2:48:82:de:1b:d3:04:43:bc:9d:
39:e1:13:bc:b4:db:81:ae:fe:dd:45:b0:c4:f0:8a:
4b:d0:59:4e:d9:a2:d0:fe:19:88:ee:a8:dc:eb:95:
58:7d:cd:f9:73:6b:52:24:03:18:b4:89:db:98:0c:
db:3c:67:41:b3:8c:1c:47:1e:c8:3a:34:30:17:ea:
ca:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:82:F2:D3:98:66:1D:6F:92:6D:23:FF:B7:15:23:FE:6C:1A:A1:45
X509v3 Authority Key Identifier:
keyid:85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:6e:50:38:d8:1f:90:e1:f9:b8:7c:f8:c5:8d:2c:6d:3f:1f:
8d:fa:aa:70:2f:e1:a6:e4:c5:cf:7f:73:18:5a:e2:1c:1a:28:
16:be:8c:93:cb:c3:ec:4e:c4:c9:1d:0b:af:0d:a2:c2:d2:05:
f6:f4:aa:af:e0:c3:00:3a:c3:77:3f:7c:22:40:8e:b1:56:7f:
1c:a8:01:50:7f:6f:9c:87:8e:e3:1c:4a:8a:fd:8a:20:46:8f:
5c:b7:3c:3c:03:6b:21:20:45:0f:29:90:d6:36:98:e2:19:e8:
65:b2:b1:93:d1:79:57:a1:24:50:95:c6:2a:60:a5:1f:d7:d1:
c4:31:29:78:e1:f3:66:23:05:59:86:b3:eb:a1:8e:2d:25:fb:
78:37:99:6f:bb:c2:a0:41:57:c8:c4:b3:ad:d6:ad:8f:65:f0:
3a:53:e6:7a:9a:59:88:59:f5:d2:59:13:01:79:85:67:3c:76:
c1:73:d3:6a:15:70:2b:86:a1:98:61:c7:50:b1:1b:9b:52:df:
33:f4:1a:f1:c1:3f:f4:31:72:a1:14:32:0d:39:51:eb:08:a1:
59:3e:68:3c:00:8f:d8:a5:49:7c:df:1c:9e:cd:ac:c4:5c:4d:
e6:67:6a:76:ac:3b:c9:7c:83:c6:6c:d1:0f:96:b9:6a:67:b9:
73:c0:dd:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzJrN5/TxdgdmTfnyBNvBfIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1OThjYmM0ZThkZmYxODUyNDA0YTk5Mjc1ZDIzMGE1NjEx
MTA1NWYwHhcNMjYwMzA3MTkwMTE1WhcNMjYwMzA4MTkwMTE1WjAzMTEwLwYDVQQD
EyhhNDgyZjJkMzk4NjYxZDZmOTI2ZDIzZmZiNzE1MjNmZTZjMWFhMTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZFvbVs62vqgZGJWQNXu0KFUAP8x
zsECI2WjB7MrEISnSkw3lRMtDYEDlN89dLFPnHCBIg1+FyifuAyNQ/LUgN1b2TLm
ImWc+SOB6Cg2pR/FaHq1vefExEqVQxbwvbPLsFQS1SnxI1B/6LQmAKSEWxEH4er0
+yO//DWG2YdE/eYEfeaLbp7PMW1B7hCTrbOXGvBnAttx+fxrsMWo+5FclOw5s1hA
JfQMyNzTajTU2Pp4H6OhBTA+DNJIgt4b0wRDvJ054RO8tNuBrv7dRbDE8IpL0FlO
2aLQ/hmI7qjc65VYfc35c2tSJAMYtInbmAzbPGdBs4wcRx7IOjQwF+rKkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSC8tOYZh1vkm0j/7cVI/5sGqFFMB8GA1UdIwQY
MBaAFIWYy8To3/GFJASpknXSMKVhEQVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8wNDlhYjItOTIyNi00YjQwLWFiOGEt
NTFlNGE1ZWFmYzhlLzEvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8wNDlhYjItOTIyNi00YjQwLWFiOGEtNTFlNGE1ZWFmYzhl
LzEvaFpqTHhPamY4WVVrQkttU2RkSXdwV0VSQlY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeG5QONgf
kOH5uHz4xY0sbT8fjfqqcC/hpuTFz39zGFriHBooFr6Mk8vD7E7EyR0Lrw2iwtIF
9vSqr+DDADrDdz98IkCOsVZ/HKgBUH9vnIeO4xxKiv2KIEaPXLc8PANrISBFDymQ
1jaY4hnoZbKxk9F5V6EkUJXGKmClH9fRxDEpeOHzZiMFWYaz66GOLSX7eDeZb7vC
oEFXyMSzrdatj2XwOlPmeppZiFn10lkTAXmFZzx2wXPTahVwK4ahmGHHULEbm1Lf
M/Qa8cE/9DFyoRQyDTlR6wihWT5oPACP2KVJfN8cns2sxFxN5mdqdqw7yXyDxmzR
D5a5ame5c8DdoQ==
-----END CERTIFICATE-----
Generated at Sun Mar 8 02:52:48 2026 by rpki-client