
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
File: hdycVeFZfohWTa9WflpGZZeMe4U.mft (raw, json)
Hash identifier: gGk16y+7rqRKAESo3fAe8QS4ecF7m+KLqk1vSepHCqw=
Subject key identifier: 25:D0:16:2A:0A:1A:F4:46:96:F6:DF:F2:6D:6B:7D:7D:71:E9:01:E3
Authority key identifier: 85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
Certificate issuer: /CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Certificate serial: 019CBFCD666FFD84C91D36AAB19632429178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
Manifest number: 1293
Signing time: Thu 05 Mar 2026 21:00:35 +0000
Manifest this update: Thu 05 Mar 2026 21:00:35 +0000
Manifest next update: Fri 06 Mar 2026 21:00:35 +0000
Files and hashes: 1: 41gdFH-JudL678u_D6BB_y7EfU0.roa (hash: VnQDTpZib3x3twc60ulDPL39Qe1IesXf9+CLXJ4WNxw=)
2: Mpj_3kOIb_YBREm4CDGbZoT8R1s.roa (hash: WSgFrdqhjjGW3gBXPEw9RNID+Xo3I/t20meQJF7GgZg=)
3: X0C-jW-JvrYRehOUZc1q8qR_Alg.roa (hash: kkuwe92elfxQBb6MWA1wN1ame7fs+u6hfUmN0ZMLiZQ=)
4: a-1eulbURZwYdTXjQHmSQrhkepg.roa (hash: dU6/8b7jh8wXrhRwwYJ+BZWPnCRt/iCI6b/zuZGMbbY=)
5: bR0NHkHbblmEtwb2_nY_6Q1NAmE.roa (hash: KrJc5AmVNKuLrZUthurXLuq1KgVncKQfKVwT8ndsj4c=)
6: hdycVeFZfohWTa9WflpGZZeMe4U.crl (hash: j4FcLKAbSNgXVwMWQHg6X2kRr0I2comn9nLmSNRGzFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bf:cd:66:6f:fd:84:c9:1d:36:aa:b1:96:32:42:91:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Validity
Not Before: Mar 5 21:00:35 2026 GMT
Not After : Mar 6 21:00:35 2026 GMT
Subject: CN=25d0162a0a1af44696f6dff26d6b7d7d71e901e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6e:16:6e:f2:32:aa:05:9c:0e:f0:51:28:c5:
4e:07:d9:71:08:4a:dd:da:51:d7:72:56:e3:64:6c:
60:2a:c3:bd:03:93:2c:0b:99:11:73:f6:4d:00:9e:
86:44:43:7b:5d:5b:32:68:d7:87:11:b3:43:a8:1d:
79:5f:21:51:1d:57:3a:91:4d:31:72:5a:16:98:1f:
c1:28:14:04:bc:be:50:60:37:3e:ab:7d:e5:22:0f:
01:05:37:f5:84:8a:a2:db:a5:66:db:52:0a:04:0e:
df:17:9f:1d:df:f0:35:14:bd:38:a1:22:35:b9:0c:
30:ba:86:11:5e:ce:39:83:b1:62:c5:e7:82:33:73:
c6:3e:ad:d5:0d:c6:58:06:b2:92:b1:6c:4b:ff:3a:
d0:09:f6:18:04:22:44:88:29:36:44:c3:8b:a9:9c:
67:d8:02:22:06:45:af:e1:3b:6d:23:f7:61:d0:63:
93:5f:80:6d:98:00:c3:a6:f1:c3:80:a4:01:8e:3a:
3c:1e:51:3e:3b:da:b7:39:5d:50:7d:9c:ba:8b:5c:
fa:7a:bd:5d:22:5e:fc:09:b7:51:dd:ab:d4:86:14:
5b:26:80:93:27:19:bb:86:34:1a:2d:8d:37:0b:cc:
fb:24:c3:45:84:6f:42:5f:fd:f0:72:1d:fe:b1:0c:
1c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D0:16:2A:0A:1A:F4:46:96:F6:DF:F2:6D:6B:7D:7D:71:E9:01:E3
X509v3 Authority Key Identifier:
keyid:85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b6:24:83:e4:23:e6:e0:4f:57:34:b9:bb:09:37:1b:c7:f1:
28:ab:d0:56:9c:d0:3c:80:93:36:b8:3c:98:42:c0:8d:a7:10:
dc:79:89:27:a5:8a:47:ea:16:10:92:21:b0:74:45:f9:c8:d2:
45:98:11:4d:04:2a:a8:45:36:91:7b:c9:7e:10:56:03:be:27:
35:0e:a2:41:89:7e:16:15:eb:8a:d0:2a:4e:4b:b9:8e:b7:86:
9b:ed:d5:56:45:75:01:8e:fb:de:15:bd:cb:c6:2f:33:8c:d8:
d4:74:2e:b0:f9:44:57:41:a2:bb:0e:03:82:8d:bb:dd:29:39:
c6:6f:ca:5f:0f:ca:04:7d:1c:ae:7a:93:02:2e:58:f1:f8:77:
1d:ae:0b:2c:97:da:90:0d:3e:54:cf:1b:74:24:8e:17:49:20:
13:a6:88:30:8b:97:49:e4:bd:7d:a7:de:1b:0d:ba:ab:60:21:
de:1d:56:c4:b1:e9:3b:58:5c:35:72:54:cb:64:9d:34:bd:c4:
61:02:85:7d:d8:73:4c:ee:fa:e4:8e:cf:17:cb:89:ec:93:69:
4c:80:38:3b:96:14:b2:b4:62:95:cf:a9:73:0e:ee:3f:83:8a:
71:1c:18:69:9d:0e:8c:ba:33:e4:05:35:8e:7e:71:40:17:0c:
90:69:15:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZy/zWZv/YTJHTaqsZYyQpF4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZGM5YzU1ZTE1OTdlODg1NjRkYWY1NjdlNWE0NjY1OTc4
YzdiODUwHhcNMjYwMzA1MjEwMDM1WhcNMjYwMzA2MjEwMDM1WjAzMTEwLwYDVQQD
EygyNWQwMTYyYTBhMWFmNDQ2OTZmNmRmZjI2ZDZiN2Q3ZDcxZTkwMWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr24WbvIyqgWcDvBRKMVOB9lxCErd
2lHXclbjZGxgKsO9A5MsC5kRc/ZNAJ6GREN7XVsyaNeHEbNDqB15XyFRHVc6kU0x
cloWmB/BKBQEvL5QYDc+q33lIg8BBTf1hIqi26Vm21IKBA7fF58d3/A1FL04oSI1
uQwwuoYRXs45g7FixeeCM3PGPq3VDcZYBrKSsWxL/zrQCfYYBCJEiCk2RMOLqZxn
2AIiBkWv4TttI/dh0GOTX4BtmADDpvHDgKQBjjo8HlE+O9q3OV1QfZy6i1z6er1d
Il78CbdR3avUhhRbJoCTJxm7hjQaLY03C8z7JMNFhG9CX/3wch3+sQwcjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXQFioKGvRGlvbf8m1rfX1x6QHjMB8GA1UdIwQY
MBaAFIXcnFXhWX6IVk2vVn5aRmWXjHuFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGR5Y1ZlRlpmb2hXVGE5V2ZscEdaWmVNZTRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mMDdmYmMtNGMzMi00ZDg3LWE0Mjkt
ODZlYTE5ZDI5MTYzLzEvaGR5Y1ZlRlpmb2hXVGE5V2ZscEdaWmVNZTRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9mMDdmYmMtNGMzMi00ZDg3LWE0MjktODZlYTE5ZDI5MTYz
LzEvaGR5Y1ZlRlpmb2hXVGE5V2ZscEdaWmVNZTRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbYkg+Qj
5uBPVzS5uwk3G8fxKKvQVpzQPICTNrg8mELAjacQ3HmJJ6WKR+oWEJIhsHRF+cjS
RZgRTQQqqEU2kXvJfhBWA74nNQ6iQYl+FhXritAqTku5jreGm+3VVkV1AY773hW9
y8YvM4zY1HQusPlEV0Giuw4Dgo273Sk5xm/KXw/KBH0crnqTAi5Y8fh3Ha4LLJfa
kA0+VM8bdCSOF0kgE6aIMIuXSeS9fafeGw26q2Ah3h1WxLHpO1hcNXJUy2SdNL3E
YQKFfdhzTO765I7PF8uJ7JNpTIA4O5YUsrRilc+pcw7uP4OKcRwYaZ0OjLoz5AU1
jn5xQBcMkGkVcQ==
-----END CERTIFICATE-----
Generated at Fri Mar 6 03:59:17 2026 by rpki-client