Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
File: hR1ONNTkhTnBcEUdTiYTiIf26SI.mft (raw, json)
Hash identifier: 8TVZWd0iCO8tVkf8CKMbzoifN82Qd1/dbnj/+vSbZxg=
Subject key identifier: 33:64:26:22:97:AA:F9:31:84:0E:95:35:83:5E:01:3D:C9:44:F7:32
Authority key identifier: 85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
Certificate issuer: /CN=851d4e34d4e48539c170451d4e26138887f6e922
Certificate serial: 019CE447E26169FAB087AE96924685E10876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
Manifest number: 1410
Signing time: Thu 12 Mar 2026 23:00:42 +0000
Manifest this update: Thu 12 Mar 2026 23:00:42 +0000
Manifest next update: Fri 13 Mar 2026 23:00:42 +0000
Files and hashes: 1: 7Ybe3VwVebBn_3Dp58ErIFU2DCI.roa (hash: uLq5WfI4V9hrlBMvr6SbcLDBsN0jQny54rAkYdIdE3k=)
2: XkEF2FpoYMDNdSJQTi_LayA4Ol4.roa (hash: XlXxPv3rPuv4OjwQn/aSmAl+EcMC4mB71Uh0o84lUwM=)
3: hR1ONNTkhTnBcEUdTiYTiIf26SI.crl (hash: oaIdoPgMOatxpvKx7BeikvESzq0YzAcIHWe2zFBF700=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:47:e2:61:69:fa:b0:87:ae:96:92:46:85:e1:08:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851d4e34d4e48539c170451d4e26138887f6e922
Validity
Not Before: Mar 12 23:00:42 2026 GMT
Not After : Mar 13 23:00:42 2026 GMT
Subject: CN=3364262297aaf931840e9535835e013dc944f732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f3:5c:0b:73:fd:3d:d9:fd:82:3e:6a:60:77:
de:78:97:56:e5:cc:d2:48:18:d4:21:f7:de:3d:39:
54:07:0a:29:bb:45:62:a6:9b:64:b0:41:ad:09:ef:
4d:ff:cb:88:29:18:46:c6:25:22:b1:b0:8e:c9:42:
6c:2e:af:17:35:f0:bd:39:61:01:db:4b:c6:7d:6d:
03:2c:68:0a:2f:c4:0b:e5:26:3c:e3:3b:a1:35:72:
fd:bd:73:1f:29:87:ce:45:87:85:9d:a1:df:e3:af:
18:52:90:8d:a6:b6:2a:66:f2:0c:b7:ab:55:0b:e2:
9d:2b:17:b2:df:f8:9c:1c:10:30:19:c9:c4:17:c6:
98:e2:20:b8:5d:b2:6b:5a:e6:92:28:ec:62:1f:e1:
32:00:54:b1:6f:56:fc:dc:42:4a:10:26:ab:ac:6f:
4c:5f:09:6b:f0:6d:48:a6:77:00:e1:c6:dc:fb:99:
b0:70:10:44:20:30:3f:b0:3f:58:4d:32:e3:a9:77:
07:68:45:cf:8b:75:d4:e1:67:80:db:0b:59:45:2e:
b8:10:92:2a:8f:54:78:e4:03:e7:71:69:b2:1e:99:
30:fa:20:9b:ce:f7:c6:4d:4e:86:d8:fd:e4:d1:88:
13:94:70:e8:1f:a5:c7:5d:87:19:b6:dc:e8:c9:94:
4b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:64:26:22:97:AA:F9:31:84:0E:95:35:83:5E:01:3D:C9:44:F7:32
X509v3 Authority Key Identifier:
keyid:85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:8d:b5:df:c9:e1:7c:ac:49:b1:c5:21:35:af:6e:ad:89:b4:
cf:3e:05:35:37:78:07:d0:99:72:37:cb:31:d3:66:78:54:9d:
82:ce:f8:c0:18:ad:db:99:85:73:bd:e9:2f:68:0b:64:99:e7:
9d:cb:7f:42:2e:84:94:2a:a4:b4:c2:ca:15:11:ef:83:b6:8f:
79:12:64:1a:ba:44:ad:5c:e9:ef:a7:97:e7:4e:83:39:f5:5a:
8c:12:e6:f8:e9:b0:b8:f1:50:e4:d2:40:8f:4f:31:cf:c3:34:
12:88:f0:ae:8f:b1:8b:3d:31:6e:5b:0c:86:eb:c6:29:1e:09:
a3:5b:cb:c9:1d:17:c4:e2:d7:05:b6:72:92:30:9c:ef:16:62:
2b:7c:65:55:09:81:da:bf:77:48:e3:97:af:15:40:9d:7c:b6:
c1:4c:32:48:4d:a7:1e:1f:99:c8:a5:31:48:25:76:e5:d0:d7:
c8:ce:67:e7:37:03:ad:ea:fd:01:12:9d:3e:b6:57:d5:a3:6a:
0b:a7:e4:d7:78:31:c0:5b:a0:06:50:ac:72:bf:ba:d4:8d:6e:
33:93:eb:c5:44:86:2d:ee:3e:2f:87:86:13:fc:46:1f:d2:10:
d6:74:f4:64:96:f0:8c:91:f3:c0:9f:24:12:0c:94:e3:82:be:
a6:ca:52:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzkR+Jhafqwh66WkkaF4Qh2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MWQ0ZTM0ZDRlNDg1MzljMTcwNDUxZDRlMjYxMzg4ODdm
NmU5MjIwHhcNMjYwMzEyMjMwMDQyWhcNMjYwMzEzMjMwMDQyWjAzMTEwLwYDVQQD
EygzMzY0MjYyMjk3YWFmOTMxODQwZTk1MzU4MzVlMDEzZGM5NDRmNzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfNcC3P9Pdn9gj5qYHfeeJdW5czS
SBjUIffePTlUBwopu0VipptksEGtCe9N/8uIKRhGxiUisbCOyUJsLq8XNfC9OWEB
20vGfW0DLGgKL8QL5SY84zuhNXL9vXMfKYfORYeFnaHf468YUpCNprYqZvIMt6tV
C+KdKxey3/icHBAwGcnEF8aY4iC4XbJrWuaSKOxiH+EyAFSxb1b83EJKECarrG9M
Xwlr8G1IpncA4cbc+5mwcBBEIDA/sD9YTTLjqXcHaEXPi3XU4WeA2wtZRS64EJIq
j1R45APncWmyHpkw+iCbzvfGTU6G2P3k0YgTlHDoH6XHXYcZttzoyZRLEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNkJiKXqvkxhA6VNYNeAT3JRPcyMB8GA1UdIwQY
MBaAFIUdTjTU5IU5wXBFHU4mE4iH9ukiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFIxT05OVGtoVG5CY0VVZFRpWVRpSWYyNlNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9iZjE1ODktNmFkZi00NGIzLTk3NDYt
ODFjNDA1NTE0OGUwLzEvaFIxT05OVGtoVG5CY0VVZFRpWVRpSWYyNlNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9iZjE1ODktNmFkZi00NGIzLTk3NDYtODFjNDA1NTE0OGUw
LzEvaFIxT05OVGtoVG5CY0VVZFRpWVRpSWYyNlNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkY2138nh
fKxJscUhNa9urYm0zz4FNTd4B9CZcjfLMdNmeFSdgs74wBit25mFc73pL2gLZJnn
nct/Qi6ElCqktMLKFRHvg7aPeRJkGrpErVzp76eX506DOfVajBLm+OmwuPFQ5NJA
j08xz8M0Eojwro+xiz0xblsMhuvGKR4Jo1vLyR0XxOLXBbZykjCc7xZiK3xlVQmB
2r93SOOXrxVAnXy2wUwySE2nHh+ZyKUxSCV25dDXyM5n5zcDrer9ARKdPrZX1aNq
C6fk13gxwFugBlCscr+61I1uM5PrxUSGLe4+L4eGE/xGH9IQ1nT0ZJbwjJHzwJ8k
EgyU44K+pspSJQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 09:00:34 2026 by rpki-client