Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
File: HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft (raw, json)
Hash identifier: RpZFl5Wqk+VMqpsKHjSe2VfgVlI92LDNnKdKJj0wtow=
Subject key identifier: DC:48:D2:61:8D:36:04:91:B8:9D:E6:AF:16:7D:57:40:55:BC:42:78
Authority key identifier: 1C:39:D5:79:36:DD:2D:15:21:44:3E:68:DA:DD:9D:09:49:CD:E3:3F
Certificate issuer: /CN=1c39d57936dd2d1521443e68dadd9d0949cde33f
Certificate serial: 019D2816EA365723A4AA8AB30E9532FEC4C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 03:01:23 +0000
Manifest this update: Thu 26 Mar 2026 03:01:23 +0000
Manifest next update: Fri 27 Mar 2026 03:01:23 +0000
Files and hashes: 1: 9rDYh6RoCnRP7wyIaMUt11JFs3w.roa (hash: ceIif/yZZ/uAesVBkNPfdSQjyTnuFeMLRlIbdZ852RQ=)
2: HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl (hash: OwXn4tNWdbB3tknwh3fitnc9naqko6UQHH713MjEfsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:ea:36:57:23:a4:aa:8a:b3:0e:95:32:fe:c4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c39d57936dd2d1521443e68dadd9d0949cde33f
Validity
Not Before: Mar 26 03:01:23 2026 GMT
Not After : Mar 27 03:01:23 2026 GMT
Subject: CN=dc48d2618d360491b89de6af167d574055bc4278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:43:13:fb:84:96:e3:12:4a:4b:37:6a:cb:45:
21:f9:5f:96:9c:15:92:ed:d4:c6:64:a6:a7:1c:d6:
db:4c:b4:98:7d:42:7b:da:e5:84:97:41:31:9d:8f:
3e:e2:66:d7:23:27:7b:ec:c2:52:80:98:56:f0:41:
a2:28:5f:91:59:7c:f5:72:5a:ba:02:69:4f:eb:64:
dd:03:1e:02:51:df:7b:0c:2a:7f:14:95:bc:10:c7:
46:80:b7:70:dc:4c:56:68:6f:ea:af:46:40:1a:46:
7a:43:b4:b1:17:2c:ce:d8:28:df:0f:15:77:7b:af:
18:ad:9f:3c:66:a2:8b:ca:1a:99:e8:50:ff:f3:f4:
e4:72:1f:d8:f9:80:c6:b6:53:a6:a1:58:c3:aa:6f:
4d:0d:5f:4d:dc:d0:d4:a0:75:3c:1a:7d:26:e5:73:
16:ec:28:ed:86:35:36:94:c4:c2:1c:ef:fd:f1:1e:
33:dd:c7:ed:b6:4a:16:92:37:aa:68:a0:e9:2e:9e:
f4:23:96:9f:41:19:81:9f:21:90:af:0a:be:84:c6:
55:61:f2:fd:d1:74:e6:3f:8a:44:7d:24:14:92:db:
d4:eb:0c:ea:0d:12:c9:ca:93:a7:3b:37:fd:58:35:
0e:1a:6e:5f:e9:89:b7:9c:6c:82:d7:84:b5:f2:61:
c3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:48:D2:61:8D:36:04:91:B8:9D:E6:AF:16:7D:57:40:55:BC:42:78
X509v3 Authority Key Identifier:
keyid:1C:39:D5:79:36:DD:2D:15:21:44:3E:68:DA:DD:9D:09:49:CD:E3:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b6:7a:e4:1b:1a:ee:35:01:db:04:fc:a1:29:10:b6:4f:2b:
9c:df:bb:8c:89:ee:24:d3:ed:e0:df:a9:db:74:11:ae:77:4e:
1d:de:53:23:6f:d0:38:55:c8:b4:51:d4:17:32:49:5c:d4:f1:
7c:42:01:49:46:47:34:e1:e1:b2:38:03:e3:7a:04:f3:06:34:
96:f8:e4:45:e9:2d:b9:1d:69:67:74:40:ea:5c:b2:bd:9c:6e:
38:56:36:78:14:48:4f:e5:b3:97:cc:6e:04:42:d1:3a:69:aa:
95:dd:ac:a1:c0:27:69:a6:7f:db:6e:8b:6d:94:6f:7b:26:12:
1e:9d:1d:b5:31:b8:00:cb:a0:f1:fd:53:e8:ca:37:a6:01:a5:
a1:f9:c7:15:7c:7f:21:93:8d:5d:14:39:f1:6a:8e:a9:b9:ea:
b9:45:d1:fc:6f:bd:e7:be:85:83:bc:66:1a:ac:0a:bd:c5:6e:
69:f0:81:18:4e:69:60:25:ed:8b:82:c2:4c:ca:9f:3e:21:b2:
6c:73:59:ec:71:db:fe:63:09:ef:67:d9:59:66:a5:15:51:92:
02:63:d2:28:40:73:70:5a:d6:dd:b3:ae:f9:19:63:5b:f9:a9:
2e:9c:a2:6a:16:60:65:67:1f:ac:99:91:c9:da:a7:2e:90:d4:
17:e1:c6:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFuo2VyOkqoqzDpUy/sTAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMzlkNTc5MzZkZDJkMTUyMTQ0M2U2OGRhZGQ5ZDA5NDlj
ZGUzM2YwHhcNMjYwMzI2MDMwMTIzWhcNMjYwMzI3MDMwMTIzWjAzMTEwLwYDVQQD
EyhkYzQ4ZDI2MThkMzYwNDkxYjg5ZGU2YWYxNjdkNTc0MDU1YmM0Mjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UMT+4SW4xJKSzdqy0Uh+V+WnBWS
7dTGZKanHNbbTLSYfUJ72uWEl0ExnY8+4mbXIyd77MJSgJhW8EGiKF+RWXz1clq6
AmlP62TdAx4CUd97DCp/FJW8EMdGgLdw3ExWaG/qr0ZAGkZ6Q7SxFyzO2CjfDxV3
e68YrZ88ZqKLyhqZ6FD/8/Tkch/Y+YDGtlOmoVjDqm9NDV9N3NDUoHU8Gn0m5XMW
7CjthjU2lMTCHO/98R4z3cfttkoWkjeqaKDpLp70I5afQRmBnyGQrwq+hMZVYfL9
0XTmP4pEfSQUktvU6wzqDRLJypOnOzf9WDUOGm5f6Ym3nGyC14S18mHDWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxI0mGNNgSRuJ3mrxZ9V0BVvEJ4MB8GA1UdIwQY
MBaAFBw51Xk23S0VIUQ+aNrdnQlJzeM/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSERuVmVUYmRMUlVoUkQ1bzJ0MmRDVW5ONHo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kMzg1NmYtMDI5Yy00NDZhLWFlN2Qt
ZDdjNWRhN2MxNjc2LzEvSERuVmVUYmRMUlVoUkQ1bzJ0MmRDVW5ONHo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9kMzg1NmYtMDI5Yy00NDZhLWFlN2QtZDdjNWRhN2MxNjc2
LzEvSERuVmVUYmRMUlVoUkQ1bzJ0MmRDVW5ONHo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnbZ65Bsa
7jUB2wT8oSkQtk8rnN+7jInuJNPt4N+p23QRrndOHd5TI2/QOFXItFHUFzJJXNTx
fEIBSUZHNOHhsjgD43oE8wY0lvjkRektuR1pZ3RA6lyyvZxuOFY2eBRIT+Wzl8xu
BELROmmqld2socAnaaZ/226LbZRveyYSHp0dtTG4AMug8f1T6Mo3pgGlofnHFXx/
IZONXRQ58WqOqbnquUXR/G+9576Fg7xmGqwKvcVuafCBGE5pYCXti4LCTMqfPiGy
bHNZ7HHb/mMJ72fZWWalFVGSAmPSKEBzcFrW3bOu+RljW/mpLpyiahZgZWcfrJmR
ydqnLpDUF+HG5A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:33:32 2026 by rpki-client