Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
File: hTodtQq3cdy1KTZ92VGmfKzEhSc.mft (raw, json)
Hash identifier: 3rs+IhZuFNUXXvaG3g5+TkIH01Zeh91OncEyKqsAC1Q=
Subject key identifier: B6:0B:80:55:63:37:27:DD:58:11:24:17:36:27:3A:99:C4:32:5F:26
Authority key identifier: 85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27
Certificate issuer: /CN=853a1db50ab771dcb529367dd951a67cacc48527
Certificate serial: 019D389BFEA3D0AFB7DC4470A396124B7934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 08:00:40 +0000
Manifest this update: Sun 29 Mar 2026 08:00:40 +0000
Manifest next update: Mon 30 Mar 2026 08:00:40 +0000
Files and hashes: 1: ClZipqAtGVJ2H4srpt_UxqUYg7k.roa (hash: gRSN7asX/fb1bF2/3SBjZi8n62BnbOxEncNI/Hx/1K0=)
2: hTodtQq3cdy1KTZ92VGmfKzEhSc.crl (hash: 6o3eIaPSONQ0dE9ug39HsxnZ4kSsR4Oqt+CXF4IeMhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:fe:a3:d0:af:b7:dc:44:70:a3:96:12:4b:79:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853a1db50ab771dcb529367dd951a67cacc48527
Validity
Not Before: Mar 29 08:00:40 2026 GMT
Not After : Mar 30 08:00:40 2026 GMT
Subject: CN=b60b8055633727dd5811241736273a99c4325f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3a:42:74:7e:c8:7e:0d:0f:ba:0e:de:ae:59:
ed:b1:13:22:aa:7e:42:e0:98:19:8d:8b:2a:26:8b:
8d:c1:eb:0f:1f:44:37:ca:bc:25:cd:bd:94:da:f1:
01:71:a0:02:a2:6b:31:ad:6e:0d:77:e6:ba:96:d5:
e7:0f:61:94:00:07:3d:9e:41:61:fa:ba:55:96:88:
b3:e8:7b:05:e7:c7:34:24:fc:6f:05:c4:43:ba:d8:
c9:c2:f6:c2:c3:ac:8e:df:b6:75:ae:45:ba:a7:04:
9f:de:54:3f:ab:70:e3:f5:2f:b9:90:f9:19:c1:9b:
bf:82:ca:21:b1:98:4d:f1:d0:22:d2:c2:54:12:28:
ec:02:5c:d6:de:06:8b:95:99:ba:39:56:52:c5:52:
37:70:05:47:a4:cb:08:1f:a6:a6:72:08:65:96:02:
ee:37:4f:cc:96:d9:ed:2c:74:31:0e:46:da:6f:b5:
a6:f1:a3:f9:a5:24:84:86:54:d0:f1:ca:24:7c:c2:
a8:d5:b4:af:16:48:b5:3a:5b:2e:f7:db:3d:ad:a8:
b1:da:94:52:3e:63:71:f8:f1:8f:6b:59:73:69:00:
64:94:00:f3:d4:c1:f0:39:d3:f3:97:9f:2f:aa:c5:
fe:2b:dc:ae:ca:63:8e:4a:be:c8:71:9d:b4:96:c3:
49:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0B:80:55:63:37:27:DD:58:11:24:17:36:27:3A:99:C4:32:5F:26
X509v3 Authority Key Identifier:
keyid:85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:65:1c:0a:c3:68:0a:61:1e:33:ce:01:ff:7b:7c:03:88:68:
59:5f:25:26:3b:7d:b2:e9:d7:cb:50:7e:63:d5:5c:f3:ec:5f:
8c:14:0f:e5:d9:bf:13:98:6d:16:f1:9e:66:fa:ba:8a:57:c8:
f8:31:92:a7:06:f8:30:15:07:61:81:9d:bf:b7:b6:af:1c:73:
83:50:31:f7:df:e5:06:c8:1b:8b:e6:a6:86:27:00:e8:c3:4b:
8d:2f:42:d9:1c:70:ae:fd:b1:7b:fb:cf:ae:10:c3:6b:a1:29:
d4:a7:1a:1f:37:89:ad:93:60:55:cb:bb:c5:84:1b:f7:c6:27:
b2:81:b5:65:db:10:4a:bd:63:f2:72:c5:cf:6f:b2:91:c6:ea:
51:64:07:6f:9a:80:73:49:0e:5f:5d:53:f2:77:a3:45:13:a5:
30:a2:3d:b1:dc:2a:54:e3:40:3c:7b:c3:8a:77:23:8f:7b:b8:
25:d0:66:7e:a8:10:bb:b4:66:51:af:13:1a:df:f8:de:39:30:
8b:3b:b3:ab:79:90:56:0d:9b:c8:fc:2d:00:23:04:b5:fd:4d:
1d:d6:93:e7:9d:63:b7:33:14:49:aa:62:98:f8:a2:3f:98:ba:
3d:23:f4:62:b7:e7:50:94:c0:12:0f:1e:4a:12:0a:b8:5e:4e:
7e:42:44:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m/6j0K+33ERwo5YSS3k0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1M2ExZGI1MGFiNzcxZGNiNTI5MzY3ZGQ5NTFhNjdjYWNj
NDg1MjcwHhcNMjYwMzI5MDgwMDQwWhcNMjYwMzMwMDgwMDQwWjAzMTEwLwYDVQQD
EyhiNjBiODA1NTYzMzcyN2RkNTgxMTI0MTczNjI3M2E5OWM0MzI1ZjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DpCdH7Ifg0Pug7erlntsRMiqn5C
4JgZjYsqJouNwesPH0Q3yrwlzb2U2vEBcaAComsxrW4Nd+a6ltXnD2GUAAc9nkFh
+rpVloiz6HsF58c0JPxvBcRDutjJwvbCw6yO37Z1rkW6pwSf3lQ/q3Dj9S+5kPkZ
wZu/gsohsZhN8dAi0sJUEijsAlzW3gaLlZm6OVZSxVI3cAVHpMsIH6amcghllgLu
N0/MltntLHQxDkbab7Wm8aP5pSSEhlTQ8cokfMKo1bSvFki1Olsu99s9raix2pRS
PmNx+PGPa1lzaQBklADz1MHwOdPzl58vqsX+K9yuymOOSr7IcZ20lsNJRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYLgFVjNyfdWBEkFzYnOpnEMl8mMB8GA1UdIwQY
MBaAFIU6HbUKt3HctSk2fdlRpnysxIUnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFRvZHRRcTNjZHkxS1RaOTJWR21mS3pFaFNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9kYzY2ZjMtOGFjOS00MWI5LThlYjgt
NzcyOTVjOWNlODY2LzEvaFRvZHRRcTNjZHkxS1RaOTJWR21mS3pFaFNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9kYzY2ZjMtOGFjOS00MWI5LThlYjgtNzcyOTVjOWNlODY2
LzEvaFRvZHRRcTNjZHkxS1RaOTJWR21mS3pFaFNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2WUcCsNo
CmEeM84B/3t8A4hoWV8lJjt9sunXy1B+Y9Vc8+xfjBQP5dm/E5htFvGeZvq6ilfI
+DGSpwb4MBUHYYGdv7e2rxxzg1Ax99/lBsgbi+amhicA6MNLjS9C2Rxwrv2xe/vP
rhDDa6Ep1KcaHzeJrZNgVcu7xYQb98YnsoG1ZdsQSr1j8nLFz2+ykcbqUWQHb5qA
c0kOX11T8nejRROlMKI9sdwqVONAPHvDincjj3u4JdBmfqgQu7RmUa8TGt/43jkw
izuzq3mQVg2byPwtACMEtf1NHdaT551jtzMUSapimPiiP5i6PSP0YrfnUJTAEg8e
ShIKuF5OfkJEhA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:27 2026 by rpki-client