Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
File: hVBZemBkyIKuKvP6V1nxP4vR3fw.mft (raw, json)
Hash identifier: E1lyFtlze+1IJ9IXlUjzjGaDkl4KzWFbHBYNvKB7jz0=
Subject key identifier: 07:DD:6E:37:E0:6D:62:A6:5E:A6:AD:7B:6D:D2:FC:62:AF:AE:C0:1F
Authority key identifier: 85:50:59:7A:60:64:C8:82:AE:2A:F3:FA:57:59:F1:3F:8B:D1:DD:FC
Certificate issuer: /CN=8550597a6064c882ae2af3fa5759f13f8bd1ddfc
Certificate serial: 019D378902FD0E22EBE8E2CD7155ECAD7E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
Manifest number: 12C3
Signing time: Sun 29 Mar 2026 03:00:19 +0000
Manifest this update: Sun 29 Mar 2026 03:00:19 +0000
Manifest next update: Mon 30 Mar 2026 03:00:19 +0000
Files and hashes: 1: Kj0HsXicjlUn-679OFq2n6YXriA.roa (hash: oCViwBHC3VWx+KMwr83UJNJcJLGK68aAWyXoMhEGcUQ=)
2: hVBZemBkyIKuKvP6V1nxP4vR3fw.crl (hash: rcNvTKceDYL7hMjmEBtmkIpPsBWKeTAml4CCKj1Zbh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:02:fd:0e:22:eb:e8:e2:cd:71:55:ec:ad:7e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8550597a6064c882ae2af3fa5759f13f8bd1ddfc
Validity
Not Before: Mar 29 03:00:19 2026 GMT
Not After : Mar 30 03:00:19 2026 GMT
Subject: CN=07dd6e37e06d62a65ea6ad7b6dd2fc62afaec01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a6:55:4b:c3:19:bb:19:51:b7:f8:54:6e:28:
fc:85:50:40:f6:c4:a5:46:b7:ba:e9:f2:24:14:a3:
35:a6:bb:75:6e:c9:d9:60:6a:56:c3:14:16:e7:1c:
a6:a2:aa:93:c7:33:e2:b5:33:46:67:6e:f1:c9:49:
03:96:8e:00:a2:84:69:c6:95:41:5b:3a:e2:82:1e:
71:26:55:17:01:bd:96:59:ce:bb:f1:30:c2:b2:e4:
e3:37:d4:14:50:70:50:8d:9c:58:09:1d:64:3d:c6:
84:3c:24:77:98:bb:07:c4:4c:bb:f8:8e:39:32:20:
bc:80:f7:10:2c:78:ef:86:34:b6:4b:80:56:2c:fd:
52:9d:be:0b:7f:81:3f:d0:4d:4c:2e:b8:db:dd:43:
1a:7d:93:0b:e2:a4:ed:de:ff:fa:14:c6:72:54:09:
d6:cb:d6:54:bb:b2:99:dc:4e:00:83:af:9f:8d:76:
c2:2d:3d:d1:16:ae:3d:24:18:91:61:f3:82:0f:18:
59:3e:a4:6b:51:15:cf:13:c3:da:5a:5e:5f:db:2f:
74:82:5b:91:b2:aa:e0:4e:cc:4d:e7:7d:89:2e:22:
37:5e:3c:29:5f:90:14:a3:7f:eb:40:0a:0a:98:90:
9f:fa:5c:42:10:c3:da:7e:20:92:54:b8:4c:e0:e3:
e5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DD:6E:37:E0:6D:62:A6:5E:A6:AD:7B:6D:D2:FC:62:AF:AE:C0:1F
X509v3 Authority Key Identifier:
keyid:85:50:59:7A:60:64:C8:82:AE:2A:F3:FA:57:59:F1:3F:8B:D1:DD:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:44:ab:37:93:af:8c:3a:21:e1:6c:52:f1:9d:b8:82:65:77:
03:d6:1f:e0:32:33:77:2a:10:b1:75:e2:6f:12:bd:55:17:b9:
2b:2b:fa:36:ce:6b:10:2c:1b:8a:6c:92:a3:6e:7a:1f:5f:13:
7d:67:5c:8a:dd:94:6c:d6:47:ac:8c:c7:31:55:eb:af:25:95:
5a:24:c3:40:c9:69:7c:2b:d1:46:6f:dd:d7:43:85:8b:a5:bc:
57:5d:3e:5d:2f:89:0c:85:99:65:d9:da:9b:db:49:da:ab:31:
e4:13:38:bc:68:d4:84:a7:ed:3f:dd:d7:ad:8c:6d:bf:ec:a6:
eb:b6:a2:45:b4:fc:35:94:85:64:a8:1b:07:93:08:5e:ca:c4:
0c:bc:3e:8c:56:40:76:15:3a:6e:78:be:df:ea:99:4c:5d:ca:
df:7f:82:5f:0f:e8:3b:11:85:e4:b5:f1:15:e4:b8:25:7e:95:
4a:2c:cb:52:84:e3:92:15:ae:24:37:c6:de:2f:ad:15:ff:17:
fd:93:ef:13:f1:33:a4:55:76:5f:51:78:65:e5:ab:21:1b:20:
01:05:b9:aa:dd:59:93:8c:aa:6f:36:b9:c2:ae:ff:f7:86:a4:
e8:3b:f0:89:19:24:3a:0b:85:7b:37:53:f3:4e:3f:a2:90:24:
d5:24:09:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iQL9DiLr6OLNcVXsrX5oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NTA1OTdhNjA2NGM4ODJhZTJhZjNmYTU3NTlmMTNmOGJk
MWRkZmMwHhcNMjYwMzI5MDMwMDE5WhcNMjYwMzMwMDMwMDE5WjAzMTEwLwYDVQQD
EygwN2RkNmUzN2UwNmQ2MmE2NWVhNmFkN2I2ZGQyZmM2MmFmYWVjMDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaZVS8MZuxlRt/hUbij8hVBA9sSl
Rre66fIkFKM1prt1bsnZYGpWwxQW5xymoqqTxzPitTNGZ27xyUkDlo4AooRpxpVB
Wzrigh5xJlUXAb2WWc678TDCsuTjN9QUUHBQjZxYCR1kPcaEPCR3mLsHxEy7+I45
MiC8gPcQLHjvhjS2S4BWLP1Snb4Lf4E/0E1MLrjb3UMafZML4qTt3v/6FMZyVAnW
y9ZUu7KZ3E4Ag6+fjXbCLT3RFq49JBiRYfOCDxhZPqRrURXPE8PaWl5f2y90gluR
sqrgTsxN532JLiI3XjwpX5AUo3/rQAoKmJCf+lxCEMPafiCSVLhM4OPlwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfdbjfgbWKmXqate23S/GKvrsAfMB8GA1UdIwQY
MBaAFIVQWXpgZMiCrirz+ldZ8T+L0d38MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFZCWmVtQmt5SUt1S3ZQNlYxbnhQNHZSM2Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8xYzcyYzUtMjk5YS00ZjcwLTgxMmMt
MjVjNWYwNWFlYjVmLzEvaFZCWmVtQmt5SUt1S3ZQNlYxbnhQNHZSM2Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8xYzcyYzUtMjk5YS00ZjcwLTgxMmMtMjVjNWYwNWFlYjVm
LzEvaFZCWmVtQmt5SUt1S3ZQNlYxbnhQNHZSM2Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq0SrN5Ov
jDoh4WxS8Z24gmV3A9Yf4DIzdyoQsXXibxK9VRe5Kyv6Ns5rECwbimySo256H18T
fWdcit2UbNZHrIzHMVXrryWVWiTDQMlpfCvRRm/d10OFi6W8V10+XS+JDIWZZdna
m9tJ2qsx5BM4vGjUhKftP93XrYxtv+ym67aiRbT8NZSFZKgbB5MIXsrEDLw+jFZA
dhU6bni+3+qZTF3K33+CXw/oOxGF5LXxFeS4JX6VSizLUoTjkhWuJDfG3i+tFf8X
/ZPvE/EzpFV2X1F4ZeWrIRsgAQW5qt1Zk4yqbza5wq7/94ak6DvwiRkkOguFezdT
804/opAk1SQJKQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:35 2026 by rpki-client