Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
File: R_hjAUxgM_HYkkKz5elWFIn5wmo.mft (raw, json)
Hash identifier: kfA75dmCpcsKWbr4M+8vpRQqCcYXmLtm9OZ8/PBpYLU=
Subject key identifier: 6A:DE:F1:5E:0E:D0:87:EE:71:9F:7D:BB:86:F1:2A:58:1D:CB:11:DC
Authority key identifier: 47:F8:63:01:4C:60:33:F1:D8:92:42:B3:E5:E9:56:14:89:F9:C2:6A
Certificate issuer: /CN=47f863014c6033f1d89242b3e5e9561489f9c26a
Certificate serial: 019D390996B257D0422A87C9FC80070EA8D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_hjAUxgM_HYkkKz5elWFIn5wmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
Manifest number: 0275
Signing time: Sun 29 Mar 2026 10:00:22 +0000
Manifest this update: Sun 29 Mar 2026 10:00:22 +0000
Manifest next update: Mon 30 Mar 2026 10:00:22 +0000
Files and hashes: 1: 6BB7YKs_TSVSHzzDi7ISS9QH3JI.roa (hash: SwW2p7kJ+ORVGz5Fk9N9ww/FGh4ApYXs5+iLpFH3B0g=)
2: R_hjAUxgM_HYkkKz5elWFIn5wmo.crl (hash: XAYLjU63M2oQlCnxnYaWV/Chq1IY/+Mn5ZybPq1a8qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_hjAUxgM_HYkkKz5elWFIn5wmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:96:b2:57:d0:42:2a:87:c9:fc:80:07:0e:a8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f863014c6033f1d89242b3e5e9561489f9c26a
Validity
Not Before: Mar 29 10:00:22 2026 GMT
Not After : Mar 30 10:00:22 2026 GMT
Subject: CN=6adef15e0ed087ee719f7dbb86f12a581dcb11dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:25:43:c8:c1:f8:10:b0:ea:96:6b:cc:3a:77:
51:1a:4e:db:82:9b:53:a4:c2:79:88:ae:7d:2b:eb:
16:45:57:27:5c:06:8b:8c:ae:72:e5:0e:bc:03:df:
28:6c:ff:ca:08:56:88:ea:6d:b0:d9:8a:25:c7:c9:
52:ca:ec:74:a4:c6:1b:a8:7e:b4:ed:34:70:f0:ad:
32:ef:26:4c:3b:6b:ca:a7:c2:cf:70:19:af:2e:bd:
37:2a:37:76:13:0b:3b:67:d0:97:2b:3e:83:ae:4e:
9b:5c:5b:63:c1:b6:1f:ba:6c:45:25:6d:2c:d3:e6:
52:03:d7:b7:e3:71:62:07:a9:16:58:72:2c:40:0c:
7e:49:20:3c:a4:96:8d:0c:87:f4:30:05:90:1f:79:
99:b8:a8:53:ce:4d:2d:2b:3f:92:71:eb:86:91:1c:
fa:47:ae:83:83:9c:de:a6:88:91:7c:1d:5f:46:4c:
20:77:d0:96:36:ac:b3:27:78:9a:c9:01:8a:e3:d2:
1f:3e:97:fb:ec:b2:49:40:2f:14:04:cb:67:27:c1:
8d:55:ff:0f:83:37:72:87:f2:0c:02:62:cf:d9:b7:
2b:da:c3:3f:3f:57:21:1a:66:38:be:31:47:d6:b0:
26:81:8e:94:48:7f:50:51:e4:21:f2:c3:2c:6d:be:
6d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DE:F1:5E:0E:D0:87:EE:71:9F:7D:BB:86:F1:2A:58:1D:CB:11:DC
X509v3 Authority Key Identifier:
keyid:47:F8:63:01:4C:60:33:F1:D8:92:42:B3:E5:E9:56:14:89:F9:C2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_hjAUxgM_HYkkKz5elWFIn5wmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/78ec89-bbd7-4403-8325-983dec34be4b/1/R_hjAUxgM_HYkkKz5elWFIn5wmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c5:0e:41:cb:e9:00:e1:e3:da:94:1e:ad:d2:c4:2d:b2:73:
64:4b:b4:a7:ea:65:8a:61:cb:34:b5:c3:93:d5:56:93:1a:2c:
87:04:05:55:1e:eb:41:b7:85:3e:19:e4:29:5e:4b:f8:99:1f:
98:e3:24:bc:1f:62:fa:a2:05:18:0e:0e:8f:61:f3:e2:44:c5:
b2:9a:e8:6f:6c:5c:f1:3f:9d:eb:f6:ac:57:74:37:ca:e6:bf:
02:43:c4:d7:d4:74:6b:26:73:42:24:34:2a:8c:eb:fb:e4:64:
b9:42:9a:2e:da:65:bb:a3:41:0d:92:7c:58:71:09:cf:22:b7:
ea:96:d3:1a:fe:f1:2b:3f:c1:73:6d:5d:6b:79:d4:fb:59:1c:
03:6c:63:34:e1:22:af:61:3b:64:38:30:c5:86:42:b4:93:38:
d3:2a:14:ef:d2:2e:c6:12:0b:05:1e:81:9d:5f:b3:c1:5b:ac:
27:c6:a5:b8:db:d2:e3:4a:70:74:a2:58:fb:b0:30:9d:e6:e1:
04:90:bc:e3:eb:09:74:c2:2d:16:78:a2:0c:a9:64:90:e6:92:
6d:3d:f1:66:25:6e:65:4e:9d:f3:3e:a7:54:f1:11:89:1c:0d:
da:07:65:31:f9:24:99:ff:6f:3f:9a:3a:40:d9:e5:7f:6b:03:
ff:38:80:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CZayV9BCKofJ/IAHDqjWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3Zjg2MzAxNGM2MDMzZjFkODkyNDJiM2U1ZTk1NjE0ODlm
OWMyNmEwHhcNMjYwMzI5MTAwMDIyWhcNMjYwMzMwMTAwMDIyWjAzMTEwLwYDVQQD
Eyg2YWRlZjE1ZTBlZDA4N2VlNzE5ZjdkYmI4NmYxMmE1ODFkY2IxMWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSVDyMH4ELDqlmvMOndRGk7bgptT
pMJ5iK59K+sWRVcnXAaLjK5y5Q68A98obP/KCFaI6m2w2Yolx8lSyux0pMYbqH60
7TRw8K0y7yZMO2vKp8LPcBmvLr03Kjd2Ews7Z9CXKz6Drk6bXFtjwbYfumxFJW0s
0+ZSA9e343FiB6kWWHIsQAx+SSA8pJaNDIf0MAWQH3mZuKhTzk0tKz+SceuGkRz6
R66Dg5zepoiRfB1fRkwgd9CWNqyzJ3iayQGK49IfPpf77LJJQC8UBMtnJ8GNVf8P
gzdyh/IMAmLP2bcr2sM/P1chGmY4vjFH1rAmgY6USH9QUeQh8sMsbb5tnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGre8V4O0IfucZ99u4bxKlgdyxHcMB8GA1UdIwQY
MBaAFEf4YwFMYDPx2JJCs+XpVhSJ+cJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUl9oakFVeGdNX0hZa2tLejVlbFdGSW41d21vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy83OGVjODktYmJkNy00NDAzLTgzMjUt
OTgzZGVjMzRiZTRiLzEvUl9oakFVeGdNX0hZa2tLejVlbFdGSW41d21vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy83OGVjODktYmJkNy00NDAzLTgzMjUtOTgzZGVjMzRiZTRi
LzEvUl9oakFVeGdNX0hZa2tLejVlbFdGSW41d21vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMUOQcvp
AOHj2pQerdLELbJzZEu0p+plimHLNLXDk9VWkxoshwQFVR7rQbeFPhnkKV5L+Jkf
mOMkvB9i+qIFGA4Oj2Hz4kTFsprob2xc8T+d6/asV3Q3yua/AkPE19R0ayZzQiQ0
Kozr++RkuUKaLtplu6NBDZJ8WHEJzyK36pbTGv7xKz/Bc21da3nU+1kcA2xjNOEi
r2E7ZDgwxYZCtJM40yoU79IuxhILBR6BnV+zwVusJ8aluNvS40pwdKJY+7Awnebh
BJC84+sJdMItFniiDKlkkOaSbT3xZiVuZU6d8z6nVPERiRwN2gdlMfkkmf9vP5o6
QNnlf2sD/ziAkQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:10 2026 by rpki-client