Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/hVvB1897acjrUdDG1U9_-t94DKc.mft
File: hVvB1897acjrUdDG1U9_-t94DKc.mft (raw, json)
Hash identifier: 2eJPi9CwUpbiuUDcGx9ahx4hep3jK8g7IvZsOiNABQY=
Subject key identifier: F5:3D:C2:0F:79:7B:94:F0:7F:9D:18:D7:45:7B:46:AE:84:FE:04:0A
Authority key identifier: 85:5B:C1:D7:CF:7B:69:C8:EB:51:D0:C6:D5:4F:7F:FA:DF:78:0C:A7
Certificate issuer: /CN=855bc1d7cf7b69c8eb51d0c6d54f7ffadf780ca7
Certificate serial: 019D389BFCA23443875844D7F87A5F2EC59E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVvB1897acjrUdDG1U9_-t94DKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/hVvB1897acjrUdDG1U9_-t94DKc.mft
Manifest number: 0171
Signing time: Sun 29 Mar 2026 08:00:39 +0000
Manifest this update: Sun 29 Mar 2026 08:00:39 +0000
Manifest next update: Mon 30 Mar 2026 08:00:39 +0000
Files and hashes: 1: Pz4IoeM603cAvuIqtI8K9Tn1BOE.roa (hash: 6HZMEqczbXuFmk1IxBNJVGD8h5NW47gUJ1UH+hRq8po=)
2: hVvB1897acjrUdDG1U9_-t94DKc.crl (hash: Sy3L0d03FRXjvNET+PmKSifrZz+Gp/3Q6ZztUFidK7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/hVvB1897acjrUdDG1U9_-t94DKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/hVvB1897acjrUdDG1U9_-t94DKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVvB1897acjrUdDG1U9_-t94DKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:fc:a2:34:43:87:58:44:d7:f8:7a:5f:2e:c5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855bc1d7cf7b69c8eb51d0c6d54f7ffadf780ca7
Validity
Not Before: Mar 29 08:00:39 2026 GMT
Not After : Mar 30 08:00:39 2026 GMT
Subject: CN=f53dc20f797b94f07f9d18d7457b46ae84fe040a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:8a:09:6b:dd:ff:6b:55:e8:50:2b:ab:75:ca:
54:d2:04:4e:65:54:f6:40:35:cd:d5:bf:e0:03:88:
ce:57:79:e1:89:14:dd:06:ed:21:8b:2e:c8:e3:9e:
d6:38:bb:35:60:5f:36:27:ba:e9:0b:5f:55:c3:98:
89:fb:07:4d:92:e5:df:65:87:7d:b9:0e:46:87:95:
74:ab:ac:e6:a0:70:47:12:c6:4f:e5:4a:a5:95:44:
b2:bc:b8:cd:f5:0d:1c:6d:cf:da:e3:24:41:ec:87:
67:64:80:cd:64:ea:24:87:d4:c5:ed:03:f7:32:30:
90:58:09:18:95:85:68:50:95:21:6b:88:7c:7c:36:
53:30:49:a5:1c:98:51:99:ef:5c:78:ea:b5:a2:4a:
cc:57:38:96:e5:46:99:68:f2:c5:31:77:30:da:b7:
93:68:d4:d9:01:3b:c2:8e:cb:df:d8:f0:2e:d4:95:
af:e1:91:d6:e1:73:0b:e5:7e:5c:51:68:86:c4:cc:
3a:90:79:b5:22:22:63:80:72:5a:08:cc:7f:d5:c1:
de:2a:2c:bd:29:06:b3:64:07:ff:e4:98:3b:85:24:
b8:57:51:17:3b:bd:b7:c4:c8:85:90:5e:48:3b:35:
1e:61:de:58:74:5c:bd:92:50:9b:69:ef:c9:b4:4c:
73:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3D:C2:0F:79:7B:94:F0:7F:9D:18:D7:45:7B:46:AE:84:FE:04:0A
X509v3 Authority Key Identifier:
keyid:85:5B:C1:D7:CF:7B:69:C8:EB:51:D0:C6:D5:4F:7F:FA:DF:78:0C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVvB1897acjrUdDG1U9_-t94DKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/hVvB1897acjrUdDG1U9_-t94DKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/hVvB1897acjrUdDG1U9_-t94DKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:de:56:0b:e7:9f:9a:c5:28:8c:f6:4f:26:0e:ab:29:5f:9d:
82:8b:34:bd:03:1e:74:79:ed:2c:7c:52:65:57:2f:7d:98:40:
aa:8a:e1:df:d0:4a:d5:23:01:b2:ef:30:3f:04:01:35:ba:26:
85:f9:6b:75:15:e4:61:ce:bf:c2:be:63:5a:b1:90:45:df:f2:
07:7a:3c:7f:e6:59:5c:49:5e:cb:78:fa:12:08:3f:44:d2:ed:
45:08:0e:57:79:78:8b:e3:3a:6f:5d:71:bc:5b:ec:cd:e1:68:
cc:04:1b:77:98:62:1b:3e:da:92:f1:ff:d2:77:39:8d:9b:15:
db:69:89:0d:8c:ed:a6:d5:64:d3:8a:93:51:59:b8:82:aa:32:
09:c3:50:71:de:2b:a8:05:92:41:d8:9f:c8:3f:67:72:ad:c0:
0e:c0:7b:b7:d8:f6:c6:17:89:8b:af:40:63:10:92:f2:78:ff:
17:17:45:a3:79:87:1d:b1:cb:d0:b4:08:17:b1:d7:10:f5:3c:
27:89:6a:09:ee:b7:d8:ba:88:d4:8d:a1:a6:ea:c2:d2:ab:70:
20:cf:87:c1:9e:56:5a:44:3b:a0:bb:1e:bd:97:a9:00:0c:a0:
08:6c:81:b0:a9:49:ab:1b:8d:b0:ba:4f:51:c7:cd:7e:9c:32:
8a:f5:29:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m/yiNEOHWETX+HpfLsWeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NWJjMWQ3Y2Y3YjY5YzhlYjUxZDBjNmQ1NGY3ZmZhZGY3
ODBjYTcwHhcNMjYwMzI5MDgwMDM5WhcNMjYwMzMwMDgwMDM5WjAzMTEwLwYDVQQD
EyhmNTNkYzIwZjc5N2I5NGYwN2Y5ZDE4ZDc0NTdiNDZhZTg0ZmUwNDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+IoJa93/a1XoUCurdcpU0gROZVT2
QDXN1b/gA4jOV3nhiRTdBu0hiy7I457WOLs1YF82J7rpC19Vw5iJ+wdNkuXfZYd9
uQ5Gh5V0q6zmoHBHEsZP5UqllUSyvLjN9Q0cbc/a4yRB7IdnZIDNZOokh9TF7QP3
MjCQWAkYlYVoUJUha4h8fDZTMEmlHJhRme9ceOq1okrMVziW5UaZaPLFMXcw2reT
aNTZATvCjsvf2PAu1JWv4ZHW4XML5X5cUWiGxMw6kHm1IiJjgHJaCMx/1cHeKiy9
KQazZAf/5Jg7hSS4V1EXO723xMiFkF5IOzUeYd5YdFy9klCbae/JtExzRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPU9wg95e5Twf50Y10V7Rq6E/gQKMB8GA1UdIwQY
MBaAFIVbwdfPe2nI61HQxtVPf/rfeAynMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFZ2QjE4OTdhY2pyVWRERzFVOV8tdDk0REtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lM2Q2ZmYtOGZmYi00NzQxLThmYTQt
MGNjNGQyZDI2ZjA2LzEvaFZ2QjE4OTdhY2pyVWRERzFVOV8tdDk0REtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9lM2Q2ZmYtOGZmYi00NzQxLThmYTQtMGNjNGQyZDI2ZjA2
LzEvaFZ2QjE4OTdhY2pyVWRERzFVOV8tdDk0REtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUN5WC+ef
msUojPZPJg6rKV+dgos0vQMedHntLHxSZVcvfZhAqorh39BK1SMBsu8wPwQBNbom
hflrdRXkYc6/wr5jWrGQRd/yB3o8f+ZZXEley3j6Egg/RNLtRQgOV3l4i+M6b11x
vFvszeFozAQbd5hiGz7akvH/0nc5jZsV22mJDYztptVk04qTUVm4gqoyCcNQcd4r
qAWSQdifyD9ncq3ADsB7t9j2xheJi69AYxCS8nj/FxdFo3mHHbHL0LQIF7HXEPU8
J4lqCe632LqI1I2hpurC0qtwIM+HwZ5WWkQ7oLsevZepAAygCGyBsKlJqxuNsLpP
UcfNfpwyivUpiQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:40 2026 by rpki-client