Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
File: HmXt47aq50dcNUsem4TWp4MrB3s.mft (raw, json)
Hash identifier: 0jE/QKtKHz+R3F+ewXGzWhgnpW+pxfV0ONBm8Lp9RuU=
Subject key identifier: 11:85:CC:3D:1B:1B:C1:F3:1D:E9:20:BE:A3:C8:AD:26:D5:07:EA:96
Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
Certificate issuer: /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Certificate serial: 019D284D5BA056AA084EC56905CA644634D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
Manifest number: 17A1
Signing time: Thu 26 Mar 2026 04:00:51 +0000
Manifest this update: Thu 26 Mar 2026 04:00:51 +0000
Manifest next update: Fri 27 Mar 2026 04:00:51 +0000
Files and hashes: 1: HmXt47aq50dcNUsem4TWp4MrB3s.crl (hash: Sfoqn6iSXDbMtKcM45ltTb6JvB1YKfUwPTe40be0Jro=)
2: LNkknaOANYr2AA8ZuXpEtPtOI2U.roa (hash: NdnyraokPSONSOY68l5BBrIXI7N+cymphtjpwfbN+j8=)
3: VMnWGp7firuAUsWhbCng8rrrFlw.roa (hash: Fy/4ogGN6QuHkOB3ALl0+4oSCn6tCK4BbOxmnXohTkE=)
4: Vav1Ve0V_wYLXop_F-tg15-s9Ck.roa (hash: 2kpbPB/kpBJfWefdjXYSzZRTk/oD3Mu5OJcsFnMDxdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:5b:a0:56:aa:08:4e:c5:69:05:ca:64:46:34:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Validity
Not Before: Mar 26 04:00:51 2026 GMT
Not After : Mar 27 04:00:51 2026 GMT
Subject: CN=1185cc3d1b1bc1f31de920bea3c8ad26d507ea96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:11:6f:16:f6:bd:3a:dc:8a:20:14:81:c7:61:
36:72:55:d2:1b:f0:ef:8e:e1:5b:19:69:67:bc:6a:
e8:92:4a:7b:7a:fc:d4:cc:40:04:2d:2a:87:a7:c3:
31:93:aa:4a:e3:38:ea:5c:c9:ed:21:f4:10:3f:68:
72:d1:d0:99:a2:f7:01:69:8a:8f:9f:e3:42:2d:c5:
ad:e5:7f:20:fd:68:5f:fa:f4:5b:3b:f8:a2:36:1c:
06:ac:c1:27:36:2f:d3:f5:0a:a4:86:05:c7:33:b4:
bf:02:85:2b:2f:d6:d6:72:93:84:ca:b9:28:79:e9:
b7:0a:45:fd:8c:f4:97:c8:10:20:7a:c0:b4:03:fd:
e8:fe:a7:f4:9b:b1:27:82:4e:44:38:a3:a7:f1:4c:
1d:c0:87:df:e4:b5:4f:70:17:0d:74:cd:a6:7e:1f:
29:d4:60:58:24:ea:1c:1a:45:65:aa:e6:ef:b5:4c:
91:d3:81:53:68:36:9c:2e:1e:d2:c1:af:b7:45:e8:
d3:8b:4a:9b:4a:4d:33:d6:37:27:1e:42:54:63:4b:
a7:62:90:05:53:58:a5:0f:2b:98:69:ec:48:65:ce:
40:75:08:46:eb:bd:ca:68:5b:cb:cf:4d:60:b6:83:
6b:45:6d:e6:31:ba:df:83:80:48:7b:80:29:4a:d8:
ad:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:85:CC:3D:1B:1B:C1:F3:1D:E9:20:BE:A3:C8:AD:26:D5:07:EA:96
X509v3 Authority Key Identifier:
keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:4a:a6:a7:8c:30:a3:d3:dc:c0:fe:ce:ff:0c:ec:81:a6:65:
57:c9:aa:62:57:c9:54:9b:84:d2:a8:04:3f:0f:e3:fc:4c:85:
ac:15:ae:1d:df:d1:f7:8c:01:03:1a:ea:b4:95:df:07:61:7f:
f6:dc:78:78:4e:35:61:b3:6c:07:06:9e:81:fa:f3:d8:c5:6c:
79:36:58:46:a9:fd:28:c7:dc:7f:20:bd:b8:37:d1:df:16:a2:
1f:31:97:c7:cf:58:ee:50:db:02:6e:d0:8b:0c:1f:49:27:cf:
ac:b8:e9:a4:ea:74:83:d8:e1:9b:cf:2e:b5:c6:23:63:b4:e1:
11:0e:d4:3c:67:79:e9:6e:41:a8:77:2f:31:4d:bc:27:53:52:
86:4d:7c:1e:7b:de:b7:43:13:ec:f1:5d:2a:72:66:5d:93:a9:
3a:d9:58:fc:bc:3a:52:66:89:d8:74:48:e3:30:2f:ed:2a:cc:
ae:9d:67:5f:d5:e3:d7:90:30:74:fc:cc:ea:e4:28:03:68:99:
1d:26:50:a5:2e:a3:36:cd:09:d3:33:b1:fb:93:96:b2:ca:32:
5a:67:3d:45:2c:cb:d9:e4:ed:27:7a:9d:b2:9a:e6:fd:a0:ed:
03:84:e3:66:d9:57:73:6d:9c:68:35:65:6e:db:1e:5d:b0:d0:
39:5a:54:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTVugVqoITsVpBcpkRjTWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNjVlZGUzYjZhYWU3NDc1YzM1NGIxZTliODRkNmE3ODMy
YjA3N2IwHhcNMjYwMzI2MDQwMDUxWhcNMjYwMzI3MDQwMDUxWjAzMTEwLwYDVQQD
EygxMTg1Y2MzZDFiMWJjMWYzMWRlOTIwYmVhM2M4YWQyNmQ1MDdlYTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxFvFva9OtyKIBSBx2E2clXSG/Dv
juFbGWlnvGrokkp7evzUzEAELSqHp8Mxk6pK4zjqXMntIfQQP2hy0dCZovcBaYqP
n+NCLcWt5X8g/Whf+vRbO/iiNhwGrMEnNi/T9QqkhgXHM7S/AoUrL9bWcpOEyrko
eem3CkX9jPSXyBAgesC0A/3o/qf0m7Engk5EOKOn8UwdwIff5LVPcBcNdM2mfh8p
1GBYJOocGkVlqubvtUyR04FTaDacLh7Swa+3RejTi0qbSk0z1jcnHkJUY0unYpAF
U1ilDyuYaexIZc5AdQhG673KaFvLz01gtoNrRW3mMbrfg4BIe4ApStitsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGFzD0bG8HzHekgvqPIrSbVB+qWMB8GA1UdIwQY
MBaAFB5l7eO2qudHXDVLHpuE1qeDKwd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jOTkxZWYtODRiNC00OTZmLWE4NTYt
NWNlNGQ4ZGJkMTU5LzEvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9jOTkxZWYtODRiNC00OTZmLWE4NTYtNWNlNGQ4ZGJkMTU5
LzEvSG1YdDQ3YXE1MGRjTlVzZW00VFdwNE1yQjNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN0qmp4ww
o9PcwP7O/wzsgaZlV8mqYlfJVJuE0qgEPw/j/EyFrBWuHd/R94wBAxrqtJXfB2F/
9tx4eE41YbNsBwaegfrz2MVseTZYRqn9KMfcfyC9uDfR3xaiHzGXx89Y7lDbAm7Q
iwwfSSfPrLjppOp0g9jhm88utcYjY7ThEQ7UPGd56W5BqHcvMU28J1NShk18Hnve
t0MT7PFdKnJmXZOpOtlY/Lw6UmaJ2HRI4zAv7SrMrp1nX9Xj15AwdPzM6uQoA2iZ
HSZQpS6jNs0J0zOx+5OWssoyWmc9RSzL2eTtJ3qdsprm/aDtA4TjZtlXc22caDVl
btseXbDQOVpUWg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:03:36 2026 by rpki-client