Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
File: hk3xEo99QsaISGO18nPz66ZZYVY.mft (raw, json)
Hash identifier: IwaoEVhOTFwHGPaD9fkBJCqcMg77ES8K5ZzfUMgETBg=
Subject key identifier: 55:12:F6:18:FC:EC:7D:C1:6F:4F:A3:91:48:13:07:D2:6B:B7:C0:A5
Authority key identifier: 86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56
Certificate issuer: /CN=864df1128f7d42c6884863b5f273f3eba6596156
Certificate serial: 019D3909EEEC405655BCE571284044A41D35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
Manifest number: 045D
Signing time: Sun 29 Mar 2026 10:00:45 +0000
Manifest this update: Sun 29 Mar 2026 10:00:45 +0000
Manifest next update: Mon 30 Mar 2026 10:00:45 +0000
Files and hashes: 1: 1-YhcIhEEArw6IoG9b79g8foLA58.roa (hash: pZFDtYibY4f6p1KpnyYKR++X/1rjAASd4QgMl9sz5X0=)
2: hJF_Qf_RH8PNrcx0oAWzmG_6QvI.roa (hash: ITLAoU923u7FKi0+iXA4NTM9zJ20lGavrZ5Z4X2QkmY=)
3: hk3xEo99QsaISGO18nPz66ZZYVY.crl (hash: 9QfAOOW/y8H5zK8VuKbsRB9N7ZzkqVl6VxtDbhGG5Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:ee:ec:40:56:55:bc:e5:71:28:40:44:a4:1d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864df1128f7d42c6884863b5f273f3eba6596156
Validity
Not Before: Mar 29 10:00:45 2026 GMT
Not After : Mar 30 10:00:45 2026 GMT
Subject: CN=5512f618fcec7dc16f4fa391481307d26bb7c0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:64:c3:cc:82:48:3c:79:5c:43:2b:6a:3e:cb:
cc:12:50:89:5e:5a:8a:a3:25:7b:e5:c3:ec:9d:fb:
99:3f:a9:0c:e4:32:22:40:7a:b9:5a:99:6e:6d:36:
06:54:4e:bd:24:b1:72:00:5b:8c:80:4e:11:26:4a:
31:7f:2c:7e:6b:e5:98:10:93:77:b5:6c:8f:5f:35:
b1:99:d7:6b:a2:f6:7a:3b:3c:04:12:f6:be:39:3c:
6e:4a:13:24:10:db:96:3a:22:b0:ce:85:5e:0c:c1:
79:e6:ba:91:ca:c2:4d:d5:f1:ad:c5:e9:f1:80:ae:
9b:de:d1:d9:6a:ef:b7:1a:dc:c3:c5:bf:77:d0:79:
44:c4:22:a1:28:82:8c:b2:c7:7b:b6:ff:69:37:14:
f8:a0:3d:f5:dc:90:ab:b4:27:52:bb:c2:b7:9a:6d:
e5:d8:5c:e6:10:fa:68:a3:5d:e8:e1:fd:d6:54:df:
16:fb:d9:fb:07:bd:87:88:bb:50:e9:57:53:7c:2f:
ec:b6:01:01:8b:f2:33:f5:d1:a4:02:27:1e:bb:33:
b4:c6:d3:d2:ff:8f:c0:33:25:63:bf:11:9b:03:7a:
3e:4d:11:9b:3f:f2:9e:01:4c:84:b3:52:3d:90:12:
92:c4:9d:a9:31:59:d4:c2:59:6c:95:30:4a:78:e0:
30:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:12:F6:18:FC:EC:7D:C1:6F:4F:A3:91:48:13:07:D2:6B:B7:C0:A5
X509v3 Authority Key Identifier:
keyid:86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:cf:d2:24:20:ed:b7:31:d3:2d:d4:62:03:11:ac:53:a5:fd:
1e:af:85:6c:7e:a9:b4:74:8b:35:66:58:f3:90:fc:89:09:41:
04:4a:06:55:c2:cd:95:8d:cc:af:d7:34:e0:60:d0:d8:96:04:
fa:e4:a9:1b:a8:7a:62:83:b9:b4:e1:62:f7:04:69:fb:c3:df:
63:51:ed:e1:86:95:41:37:fb:ad:77:d1:f5:b1:e6:c9:c5:8b:
a5:0a:ca:16:06:81:86:09:fb:5c:ac:d4:18:0a:fe:5b:ac:c1:
d1:74:ad:7b:76:d5:e3:c4:fd:58:b0:ab:54:fe:ce:06:00:46:
8d:1f:b8:f1:67:79:2c:18:55:69:4a:cb:1f:10:5b:13:47:ca:
38:5c:92:bb:a8:be:0e:92:97:bb:05:60:eb:ea:9d:49:4b:3f:
41:cc:2b:d5:0f:37:c5:39:0a:8f:58:47:2a:2f:7a:28:8d:53:
3a:ed:b9:c2:c1:a8:46:3f:e7:f9:34:9b:57:7f:16:f7:5e:a9:
6c:33:e6:e6:f5:93:3b:7a:31:56:e4:73:fa:21:5f:d1:c4:b7:
76:55:98:43:5d:ce:df:a1:0b:b0:0a:9f:c7:ce:79:54:3e:5f:
46:7f:ce:9f:b7:e6:92:fb:f7:3c:11:b3:02:c9:bf:62:95:7c:
05:65:44:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Ce7sQFZVvOVxKEBEpB01MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NGRmMTEyOGY3ZDQyYzY4ODQ4NjNiNWYyNzNmM2ViYTY1
OTYxNTYwHhcNMjYwMzI5MTAwMDQ1WhcNMjYwMzMwMTAwMDQ1WjAzMTEwLwYDVQQD
Eyg1NTEyZjYxOGZjZWM3ZGMxNmY0ZmEzOTE0ODEzMDdkMjZiYjdjMGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WTDzIJIPHlcQytqPsvMElCJXlqK
oyV75cPsnfuZP6kM5DIiQHq5WplubTYGVE69JLFyAFuMgE4RJkoxfyx+a+WYEJN3
tWyPXzWxmddrovZ6OzwEEva+OTxuShMkENuWOiKwzoVeDMF55rqRysJN1fGtxenx
gK6b3tHZau+3GtzDxb930HlExCKhKIKMssd7tv9pNxT4oD313JCrtCdSu8K3mm3l
2FzmEPpoo13o4f3WVN8W+9n7B72HiLtQ6VdTfC/stgEBi/Iz9dGkAiceuzO0xtPS
/4/AMyVjvxGbA3o+TRGbP/KeAUyEs1I9kBKSxJ2pMVnUwllslTBKeOAwmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUS9hj87H3Bb0+jkUgTB9Jrt8ClMB8GA1UdIwQY
MBaAFIZN8RKPfULGiEhjtfJz8+umWWFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGszeEVvOTlRc2FJU0dPMThuUHo2NlpaWVZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85YjVkMDItMTZmOC00Mjg0LTk0M2Ut
ODBkN2ZhNWRmYmI0LzEvaGszeEVvOTlRc2FJU0dPMThuUHo2NlpaWVZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy85YjVkMDItMTZmOC00Mjg0LTk0M2UtODBkN2ZhNWRmYmI0
LzEvaGszeEVvOTlRc2FJU0dPMThuUHo2NlpaWVZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8/SJCDt
tzHTLdRiAxGsU6X9Hq+FbH6ptHSLNWZY85D8iQlBBEoGVcLNlY3Mr9c04GDQ2JYE
+uSpG6h6YoO5tOFi9wRp+8PfY1Ht4YaVQTf7rXfR9bHmycWLpQrKFgaBhgn7XKzU
GAr+W6zB0XSte3bV48T9WLCrVP7OBgBGjR+48Wd5LBhVaUrLHxBbE0fKOFySu6i+
DpKXuwVg6+qdSUs/Qcwr1Q83xTkKj1hHKi96KI1TOu25wsGoRj/n+TSbV38W916p
bDPm5vWTO3oxVuRz+iFf0cS3dlWYQ13O36ELsAqfx855VD5fRn/On7fmkvv3PBGz
Asm/YpV8BWVEhw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:19 2026 by rpki-client