Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
File: HY6rk1MM_VDaf7faXroKpEDJ7ww.mft (raw, json)
Hash identifier: Cd2KXblELdtc+ZEOBUAIh3HtlUby4mjmzfnYdZQ1FdE=
Subject key identifier: D0:62:D0:32:04:B5:A0:AF:03:2E:BD:E8:1B:AD:1E:C5:B0:06:BF:1E
Authority key identifier: 1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
Certificate issuer: /CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Certificate serial: 019CC9758EE1F09170664A6CF2064296A704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
Manifest number: 1019
Signing time: Sat 07 Mar 2026 18:00:50 +0000
Manifest this update: Sat 07 Mar 2026 18:00:50 +0000
Manifest next update: Sun 08 Mar 2026 18:00:50 +0000
Files and hashes: 1: HY6rk1MM_VDaf7faXroKpEDJ7ww.crl (hash: 46kJrmCOldDHk/3z0GSloa7KVa/VlyhZTSmW5eALBFM=)
2: YuZ5WXiv26JqcpRPGf_w1FamtRI.roa (hash: EaYcDNS6rfkVwheyBkzxUL8l/p2YFFRpDmPTFV/xjl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:75:8e:e1:f0:91:70:66:4a:6c:f2:06:42:96:a7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Validity
Not Before: Mar 7 18:00:50 2026 GMT
Not After : Mar 8 18:00:50 2026 GMT
Subject: CN=d062d03204b5a0af032ebde81bad1ec5b006bf1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bc:92:a5:21:5f:dd:8e:c7:e2:c5:c6:aa:80:
90:14:f9:9d:1d:4d:7a:0b:81:f1:2c:7c:94:56:ba:
9b:e6:17:e6:a1:00:8a:c9:56:07:9a:b6:02:ca:cf:
4c:2a:ce:de:5c:85:ef:c3:7b:7c:4a:c1:6c:fd:fa:
c8:c7:96:e1:37:74:96:3b:5e:1e:3b:f3:a3:02:ff:
99:3c:11:d6:a7:fa:a0:aa:e0:f0:ef:8c:70:c8:9c:
c8:7e:04:76:60:76:6a:08:93:e0:8a:b3:cd:0f:bc:
fe:f8:45:9f:0a:a9:74:c0:25:61:6f:2c:dd:90:4d:
2c:1a:56:6a:6d:d6:2f:df:6f:d4:53:5a:7e:79:85:
46:7d:bc:23:26:4f:b2:15:b2:69:5c:66:fc:46:2a:
8a:3a:50:1a:06:31:9d:34:ef:30:5e:83:f5:44:13:
0b:b7:f8:c8:7f:95:37:47:93:ff:db:66:7e:c1:f8:
25:47:60:c6:ce:a2:3e:b9:5b:e9:b8:43:59:11:42:
d8:55:d8:9c:97:ff:b4:67:68:32:4c:22:50:de:8b:
c4:cb:0d:9e:59:c7:c1:53:0b:d1:f8:f0:f6:49:98:
8d:62:49:93:48:bf:78:06:c8:e6:31:c5:0f:6f:81:
95:e5:58:b4:fb:8b:33:a4:6c:a5:ae:4b:84:ba:4d:
18:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:62:D0:32:04:B5:A0:AF:03:2E:BD:E8:1B:AD:1E:C5:B0:06:BF:1E
X509v3 Authority Key Identifier:
keyid:1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c2:9e:a8:62:13:36:30:07:ef:a7:b0:63:6e:25:7e:ee:29:
46:61:ce:76:24:dd:45:7e:41:f0:0d:53:02:18:87:45:7c:04:
50:ca:2c:9e:cd:8f:05:be:bb:04:ae:18:f2:99:9e:95:a6:7f:
13:c2:df:39:f5:47:99:c1:7b:c4:09:80:9a:b1:60:6b:f0:d7:
19:74:5d:1c:06:cc:bf:a4:8e:2a:bd:c9:46:29:31:6d:96:35:
53:41:27:27:fd:a6:b0:8f:d0:e0:cb:f2:60:df:b1:5c:ff:63:
98:4d:33:d5:e5:85:5b:f1:62:f6:d1:69:61:5a:a7:6e:c0:a6:
76:a0:6e:b9:3c:fe:86:24:a1:ec:ff:7e:da:d8:f4:d9:79:d7:
28:45:f5:38:ef:07:e1:6c:33:43:50:93:a5:ea:f9:15:d3:4a:
9b:55:91:f6:f5:ab:4e:20:86:c3:06:68:ac:bb:6c:16:f4:32:
07:57:46:da:cb:04:27:6d:a5:c8:8e:36:e3:65:74:71:64:cc:
da:34:27:f2:70:c6:90:ef:9b:66:f6:bd:4b:18:ce:46:74:9d:
13:0d:86:d9:78:cb:e0:ec:36:b5:25:04:f5:69:ca:70:13:0e:
4c:d7:f4:16:c2:76:de:77:4f:27:fa:c5:33:a6:0e:c0:7a:32:
d2:e2:61:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzJdY7h8JFwZkps8gZClqcEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkOGVhYjkzNTMwY2ZkNTBkYTdmYjdkYTVlYmEwYWE0NDBj
OWVmMGMwHhcNMjYwMzA3MTgwMDUwWhcNMjYwMzA4MTgwMDUwWjAzMTEwLwYDVQQD
EyhkMDYyZDAzMjA0YjVhMGFmMDMyZWJkZTgxYmFkMWVjNWIwMDZiZjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbySpSFf3Y7H4sXGqoCQFPmdHU16
C4HxLHyUVrqb5hfmoQCKyVYHmrYCys9MKs7eXIXvw3t8SsFs/frIx5bhN3SWO14e
O/OjAv+ZPBHWp/qgquDw74xwyJzIfgR2YHZqCJPgirPND7z++EWfCql0wCVhbyzd
kE0sGlZqbdYv32/UU1p+eYVGfbwjJk+yFbJpXGb8RiqKOlAaBjGdNO8wXoP1RBML
t/jIf5U3R5P/22Z+wfglR2DGzqI+uVvpuENZEULYVdicl/+0Z2gyTCJQ3ovEyw2e
WcfBUwvR+PD2SZiNYkmTSL94BsjmMcUPb4GV5Vi0+4szpGylrkuEuk0Y6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBi0DIEtaCvAy696ButHsWwBr8eMB8GA1UdIwQY
MBaAFB2Oq5NTDP1Q2n+32l66CqRAye8MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFk2cmsxTU1fVkRhZjdmYVhyb0twRURKN3d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lYmI4M2EtMDEyNi00M2MwLWI5ZWEt
MzJkZDUzNjQwYjljLzEvSFk2cmsxTU1fVkRhZjdmYVhyb0twRURKN3d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9lYmI4M2EtMDEyNi00M2MwLWI5ZWEtMzJkZDUzNjQwYjlj
LzEvSFk2cmsxTU1fVkRhZjdmYVhyb0twRURKN3d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcKeqGIT
NjAH76ewY24lfu4pRmHOdiTdRX5B8A1TAhiHRXwEUMosns2PBb67BK4Y8pmelaZ/
E8LfOfVHmcF7xAmAmrFga/DXGXRdHAbMv6SOKr3JRikxbZY1U0EnJ/2msI/Q4Mvy
YN+xXP9jmE0z1eWFW/Fi9tFpYVqnbsCmdqBuuTz+hiSh7P9+2tj02XnXKEX1OO8H
4WwzQ1CTper5FdNKm1WR9vWrTiCGwwZorLtsFvQyB1dG2ssEJ22lyI4242V0cWTM
2jQn8nDGkO+bZva9SxjORnSdEw2G2XjL4Ow2tSUE9WnKcBMOTNf0FsJ23ndPJ/rF
M6YOwHoy0uJhcg==
-----END CERTIFICATE-----
Generated at Sun Mar 8 01:46:13 2026 by rpki-client