Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
File: HxKTy74vaSVA08xaboI2YElMQGM.mft (raw, json)
Hash identifier: vZsdMjdGJ0gpXv9dOqZdcjZCM99X/G7uaMetZch879Q=
Subject key identifier: B6:FC:D2:F8:39:E0:0F:10:12:35:9A:3B:D4:86:B6:01:AD:FF:D1:86
Authority key identifier: 1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63
Certificate issuer: /CN=1f1293cbbe2f692540d3cc5a6e823660494c4063
Certificate serial: 019D28F220EFC159D418AF245CF8BC0147F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
Manifest number: 100A
Signing time: Thu 26 Mar 2026 07:00:49 +0000
Manifest this update: Thu 26 Mar 2026 07:00:49 +0000
Manifest next update: Fri 27 Mar 2026 07:00:49 +0000
Files and hashes: 1: HxKTy74vaSVA08xaboI2YElMQGM.crl (hash: Ps4jhlF0VYWtWBD9O2XfiMnImRVsOngwuHCsDOkDgZE=)
2: qZFE4vvvTJ5M0gUNt0iW88jKACg.roa (hash: qVu2Vq/zJz0bGweHHRGe7Gy0T4GqhgX5DzTBtgSOzZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:20:ef:c1:59:d4:18:af:24:5c:f8:bc:01:47:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1293cbbe2f692540d3cc5a6e823660494c4063
Validity
Not Before: Mar 26 07:00:49 2026 GMT
Not After : Mar 27 07:00:49 2026 GMT
Subject: CN=b6fcd2f839e00f1012359a3bd486b601adffd186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:96:7d:11:84:6d:d2:f4:6b:09:65:f3:06:c9:
ed:29:62:c1:fc:a2:7a:4b:fa:52:24:a9:e3:a7:da:
04:b8:95:0a:c6:17:69:a6:e8:e5:33:97:f9:54:2b:
2e:ec:9f:cc:04:21:d8:6d:82:38:cc:9a:d2:77:34:
f8:03:d6:ed:c1:5f:6b:32:f1:81:20:55:1b:82:24:
4d:c8:12:b4:63:6c:2f:3c:12:b5:ea:cf:b7:57:e9:
61:71:fd:f1:46:be:80:7e:ea:b0:f9:05:8f:9f:ca:
48:f9:cf:1f:53:f3:ee:ee:86:3a:6e:5c:fe:6c:2b:
36:17:b3:5e:de:99:b9:da:ff:12:0f:ba:88:c6:40:
c2:d6:f0:4c:55:f8:ca:c1:21:41:f0:c2:e6:7c:29:
a3:0b:61:7d:2b:92:35:d3:00:98:98:43:0d:45:00:
38:b3:71:38:40:25:aa:57:9c:5a:e7:3c:29:76:e7:
83:ed:fe:7d:84:b6:84:7b:9c:b3:05:8a:9d:0a:cd:
50:95:e6:cc:37:1a:f2:f5:96:4d:f3:be:3e:08:ff:
34:b7:ef:65:c1:bd:c8:ed:b3:3a:57:0b:99:dc:4f:
78:6c:01:85:08:7e:75:2a:e2:a4:27:53:99:46:33:
35:69:44:0d:2c:e3:79:97:43:6b:8d:32:11:03:44:
4f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FC:D2:F8:39:E0:0F:10:12:35:9A:3B:D4:86:B6:01:AD:FF:D1:86
X509v3 Authority Key Identifier:
keyid:1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d9:c7:15:c2:50:5a:e6:77:f8:1d:6f:32:a3:42:ba:ae:3f:
50:83:33:bf:7a:f0:1d:ee:43:7c:27:86:f6:06:62:d0:14:6f:
1a:85:48:23:6b:39:3c:8b:13:f8:be:d5:aa:00:b0:8f:3e:ba:
50:2b:0c:19:88:2e:cd:2d:fd:32:bf:4c:5d:0a:98:fe:aa:b1:
0a:9e:1d:ff:29:3a:46:5a:fe:aa:33:e8:14:84:f3:bb:06:ef:
f4:19:dc:41:43:2c:93:14:78:b2:98:29:8a:cb:76:bf:7a:8d:
08:ec:1e:cd:33:6a:22:80:b9:92:35:f4:6d:6d:30:60:ad:63:
f6:80:8c:cf:53:06:3b:bf:20:d7:75:de:c3:f1:fc:93:3d:b8:
9a:45:ec:96:32:df:cc:7b:7e:a1:7e:b7:f2:22:fd:b6:89:6b:
56:fc:3d:90:83:6f:62:4d:a8:3c:47:ea:55:94:88:8b:86:d8:
21:0c:8a:2f:e4:00:e0:2c:7c:32:fa:d1:9d:ed:db:b9:30:5e:
fe:ff:91:2b:b0:40:0f:a1:a4:d9:c6:9d:ac:40:e1:ad:33:b6:
97:e2:ca:b6:dd:b4:54:eb:09:4b:e8:d1:e0:a1:ca:1d:1d:7e:
b8:4f:64:fb:f1:6c:36:0b:97:04:b0:2b:72:9e:ce:12:08:88:
21:7f:c2:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8iDvwVnUGK8kXPi8AUfzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMTI5M2NiYmUyZjY5MjU0MGQzY2M1YTZlODIzNjYwNDk0
YzQwNjMwHhcNMjYwMzI2MDcwMDQ5WhcNMjYwMzI3MDcwMDQ5WjAzMTEwLwYDVQQD
EyhiNmZjZDJmODM5ZTAwZjEwMTIzNTlhM2JkNDg2YjYwMWFkZmZkMTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJZ9EYRt0vRrCWXzBsntKWLB/KJ6
S/pSJKnjp9oEuJUKxhdppujlM5f5VCsu7J/MBCHYbYI4zJrSdzT4A9btwV9rMvGB
IFUbgiRNyBK0Y2wvPBK16s+3V+lhcf3xRr6Afuqw+QWPn8pI+c8fU/Pu7oY6blz+
bCs2F7Ne3pm52v8SD7qIxkDC1vBMVfjKwSFB8MLmfCmjC2F9K5I10wCYmEMNRQA4
s3E4QCWqV5xa5zwpdueD7f59hLaEe5yzBYqdCs1QlebMNxry9ZZN874+CP80t+9l
wb3I7bM6VwuZ3E94bAGFCH51KuKkJ1OZRjM1aUQNLON5l0NrjTIRA0RPvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLb80vg54A8QEjWaO9SGtgGt/9GGMB8GA1UdIwQY
MBaAFB8Sk8u+L2klQNPMWm6CNmBJTEBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHhLVHk3NHZhU1ZBMDh4YWJvSTJZRWxNUUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zZjVlM2MtYWM3Yi00ZjBmLWE4NzQt
MjY5NzE1OTlhNTU0LzEvSHhLVHk3NHZhU1ZBMDh4YWJvSTJZRWxNUUdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8zZjVlM2MtYWM3Yi00ZjBmLWE4NzQtMjY5NzE1OTlhNTU0
LzEvSHhLVHk3NHZhU1ZBMDh4YWJvSTJZRWxNUUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj9nHFcJQ
WuZ3+B1vMqNCuq4/UIMzv3rwHe5DfCeG9gZi0BRvGoVII2s5PIsT+L7VqgCwjz66
UCsMGYguzS39Mr9MXQqY/qqxCp4d/yk6Rlr+qjPoFITzuwbv9BncQUMskxR4spgp
ist2v3qNCOwezTNqIoC5kjX0bW0wYK1j9oCMz1MGO78g13Xew/H8kz24mkXsljLf
zHt+oX638iL9tolrVvw9kINvYk2oPEfqVZSIi4bYIQyKL+QA4Cx8MvrRne3buTBe
/v+RK7BAD6Gk2cadrEDhrTO2l+LKtt20VOsJS+jR4KHKHR1+uE9k+/FsNguXBLAr
cp7OEgiIIX/Cvw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:36:36 2026 by rpki-client