Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
File: hA6dA48bwAXzsJxdyoIK2BCUiz4.mft (raw, json)
Hash identifier: 4yQ/SsPvATpUsOanqvedIeXqHJ1dke+4yVe+0s0WUAE=
Subject key identifier: 4F:A3:43:B0:2B:52:BC:ED:05:EC:B7:F4:8C:51:77:E6:09:59:74:C5
Authority key identifier: 84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
Certificate issuer: /CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Certificate serial: 019D26CCE1A4064B431AD25673989D67EB4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
Manifest number: 1855
Signing time: Wed 25 Mar 2026 21:00:54 +0000
Manifest this update: Wed 25 Mar 2026 21:00:54 +0000
Manifest next update: Thu 26 Mar 2026 21:00:54 +0000
Files and hashes: 1: hA6dA48bwAXzsJxdyoIK2BCUiz4.crl (hash: 0XhxiZTIC4IgKwXSFOHW10W6R6+vx0znipl1YTjxezY=)
2: q8Sc-hb4z8RPWefbF866BBRja54.roa (hash: c2mi+bk32KaktYwhBDhcFoed5UYVyYxJQtaR6VL5ZBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:e1:a4:06:4b:43:1a:d2:56:73:98:9d:67:eb:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Validity
Not Before: Mar 25 21:00:54 2026 GMT
Not After : Mar 26 21:00:54 2026 GMT
Subject: CN=4fa343b02b52bced05ecb7f48c5177e6095974c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5b:57:82:1e:e7:90:ff:90:2a:a0:d9:f9:af:
46:f8:78:35:0a:8e:82:60:2b:e3:e5:cd:59:e3:1c:
a7:cd:49:79:26:2f:7c:bf:7c:ad:b1:69:69:83:d3:
16:f8:d3:26:9e:d8:18:af:ed:f9:23:df:21:3f:75:
02:27:46:1e:3c:72:ec:0a:35:9c:48:43:b0:59:0c:
89:fe:23:30:2b:c6:ec:ac:49:36:16:7e:12:8f:3e:
9c:0a:ed:0d:36:99:f2:df:9d:73:a7:cd:17:7a:68:
af:32:b1:d3:dc:fd:07:af:3c:25:ee:6e:1f:49:f8:
dd:bd:ad:d2:99:31:19:ac:95:0c:86:82:11:2a:6b:
fc:5e:1e:1a:e2:e5:67:b8:b4:dd:82:ce:88:f3:ae:
70:73:b3:17:a2:4c:92:fd:f9:13:af:23:42:62:43:
31:26:9e:6d:02:37:49:9d:81:14:d7:b8:81:59:83:
e7:97:24:51:13:e0:e9:4d:5f:76:ff:39:20:16:e5:
b3:33:fd:76:c5:9b:bf:b9:af:a4:25:4e:f2:d1:f2:
09:aa:3b:c7:a9:e3:75:ba:4c:6f:83:3e:a4:b5:68:
b2:cf:2c:a6:56:f9:b6:ed:a3:46:5e:85:29:b5:ce:
da:31:fb:2e:cd:d2:78:48:ac:9f:fc:74:cd:36:4d:
79:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A3:43:B0:2B:52:BC:ED:05:EC:B7:F4:8C:51:77:E6:09:59:74:C5
X509v3 Authority Key Identifier:
keyid:84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:35:08:e6:82:d9:3c:e3:fe:40:e7:e4:a5:69:38:09:e7:79:
ec:1f:a4:aa:b7:11:b4:8e:0a:f1:0a:30:f8:dc:5e:6d:f1:b6:
28:0d:3a:be:6e:a0:a4:05:23:b1:e7:bd:ad:fd:dc:f2:ae:d5:
74:73:63:ef:71:c3:86:ea:08:f8:61:0f:17:d4:9b:3f:30:f6:
bb:5c:4a:39:55:f2:56:63:1e:5d:87:95:5b:ac:22:ef:90:f5:
3b:71:ef:36:13:4e:41:38:4d:d5:6a:99:3b:4a:d2:7a:9b:a2:
88:99:c1:b9:28:7b:fa:bd:bb:3a:37:c7:51:b6:d6:18:72:d0:
b9:35:cf:2f:17:d6:44:b9:63:79:02:90:e9:9c:b8:a9:92:78:
db:2c:f7:5d:19:75:e6:f4:09:06:c6:d7:88:f2:f7:93:38:9e:
0e:73:41:9f:7d:0d:9e:98:82:83:46:e0:0b:ec:aa:7c:c4:71:
53:a2:a5:06:63:70:f6:8c:c9:e3:c5:0f:aa:1e:af:1c:de:67:
b7:45:65:67:59:36:01:ec:ff:49:42:e9:1b:c4:75:cd:d2:b2:
de:6a:a7:6d:15:a1:c0:00:87:06:63:d4:09:d7:72:fa:51:f7:
24:0c:f4:5f:bd:bc:e8:4a:d6:58:37:02:7b:3f:37:3d:44:59:
3d:a0:b1:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzOGkBktDGtJWc5idZ+tMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MGU5ZDAzOGYxYmMwMDVmM2IwOWM1ZGNhODIwYWQ4MTA5
NDhiM2UwHhcNMjYwMzI1MjEwMDU0WhcNMjYwMzI2MjEwMDU0WjAzMTEwLwYDVQQD
Eyg0ZmEzNDNiMDJiNTJiY2VkMDVlY2I3ZjQ4YzUxNzdlNjA5NTk3NGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyltXgh7nkP+QKqDZ+a9G+Hg1Co6C
YCvj5c1Z4xynzUl5Ji98v3ytsWlpg9MW+NMmntgYr+35I98hP3UCJ0YePHLsCjWc
SEOwWQyJ/iMwK8bsrEk2Fn4Sjz6cCu0NNpny351zp80XemivMrHT3P0Hrzwl7m4f
Sfjdva3SmTEZrJUMhoIRKmv8Xh4a4uVnuLTdgs6I865wc7MXokyS/fkTryNCYkMx
Jp5tAjdJnYEU17iBWYPnlyRRE+DpTV92/zkgFuWzM/12xZu/ua+kJU7y0fIJqjvH
qeN1ukxvgz6ktWiyzyymVvm27aNGXoUptc7aMfsuzdJ4SKyf/HTNNk15PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+jQ7ArUrztBey39IxRd+YJWXTFMB8GA1UdIwQY
MBaAFIQOnQOPG8AF87CcXcqCCtgQlIs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEE2ZEE0OGJ3QVh6c0p4ZHlvSUsyQkNVaXo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yZjM4MGQtODQzZi00MmUyLThmYjMt
Y2U5ZTFiODI5NjdkLzEvaEE2ZEE0OGJ3QVh6c0p4ZHlvSUsyQkNVaXo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8yZjM4MGQtODQzZi00MmUyLThmYjMtY2U5ZTFiODI5Njdk
LzEvaEE2ZEE0OGJ3QVh6c0p4ZHlvSUsyQkNVaXo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsDUI5oLZ
POP+QOfkpWk4Ced57B+kqrcRtI4K8Qow+NxebfG2KA06vm6gpAUjsee9rf3c8q7V
dHNj73HDhuoI+GEPF9SbPzD2u1xKOVXyVmMeXYeVW6wi75D1O3HvNhNOQThN1WqZ
O0rSepuiiJnBuSh7+r27OjfHUbbWGHLQuTXPLxfWRLljeQKQ6Zy4qZJ42yz3XRl1
5vQJBsbXiPL3kzieDnNBn30NnpiCg0bgC+yqfMRxU6KlBmNw9ozJ48UPqh6vHN5n
t0VlZ1k2Aez/SULpG8R1zdKy3mqnbRWhwACHBmPUCddy+lH3JAz0X7286ErWWDcC
ez83PURZPaCxTw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:31:18 2026 by rpki-client