Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
File: hVLmDnmh3nUzQ9eBW4cMloDArn8.mft (raw, json)
Hash identifier: 3d8Dj/GQSpbSLiOH5eyvHtg6wM24JIyCBpkPCUHwIYk=
Subject key identifier: 7D:67:98:6C:8A:4D:D3:3F:A4:10:AC:A1:DA:6C:A8:C9:7B:B7:15:A1
Authority key identifier: 85:52:E6:0E:79:A1:DE:75:33:43:D7:81:5B:87:0C:96:80:C0:AE:7F
Certificate issuer: /CN=8552e60e79a1de753343d7815b870c9680c0ae7f
Certificate serial: 019D2703F0C13FEB9B583C06B9FBE0E73461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVLmDnmh3nUzQ9eBW4cMloDArn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
Manifest number: 0E57
Signing time: Wed 25 Mar 2026 22:01:02 +0000
Manifest this update: Wed 25 Mar 2026 22:01:02 +0000
Manifest next update: Thu 26 Mar 2026 22:01:02 +0000
Files and hashes: 1: hVLmDnmh3nUzQ9eBW4cMloDArn8.crl (hash: dJ0+Ff0xce9t2d5XySBl5RdzWfhFLecJ3c1+gselvl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVLmDnmh3nUzQ9eBW4cMloDArn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:f0:c1:3f:eb:9b:58:3c:06:b9:fb:e0:e7:34:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8552e60e79a1de753343d7815b870c9680c0ae7f
Validity
Not Before: Mar 25 22:01:02 2026 GMT
Not After : Mar 26 22:01:02 2026 GMT
Subject: CN=7d67986c8a4dd33fa410aca1da6ca8c97bb715a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:77:a4:7e:e5:92:ec:fc:b1:94:9c:29:ad:
e1:1e:e6:fd:42:20:73:d0:1b:a4:e1:08:84:22:c5:
d6:7e:fd:3a:54:31:8c:bc:ff:28:bf:e2:fc:24:b0:
4a:61:f4:c9:33:52:e0:6b:3f:2c:49:e0:f1:09:7e:
da:96:b1:56:97:5d:84:5a:5a:a6:87:37:74:69:96:
67:e0:47:9e:22:47:a0:53:4d:53:38:70:62:92:66:
ad:08:36:a2:01:08:7e:34:ba:10:95:28:21:48:63:
7a:72:b9:a1:e7:90:c1:20:0e:51:5c:ac:f1:04:48:
f7:27:b5:65:d1:f6:2d:fb:d1:a5:5d:e4:a5:e3:6d:
4b:82:f8:35:d7:1c:8d:36:a1:ab:37:16:50:22:cf:
bd:07:b3:0e:74:2b:bf:04:83:02:1f:4b:e2:dc:28:
1e:33:85:ce:33:87:4f:50:07:9e:04:19:bb:54:43:
2b:94:99:7d:c8:d4:b7:18:19:41:a2:49:6f:44:dc:
66:73:c1:d2:88:57:42:6b:4f:17:8b:4c:e3:f2:0a:
3c:23:5e:de:a9:51:e3:55:af:77:93:94:79:0e:03:
39:53:cc:d1:85:46:08:4e:eb:c1:79:df:18:55:90:
d3:33:df:0e:2c:1f:fd:aa:6b:ff:93:1e:09:95:2f:
7b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:67:98:6C:8A:4D:D3:3F:A4:10:AC:A1:DA:6C:A8:C9:7B:B7:15:A1
X509v3 Authority Key Identifier:
keyid:85:52:E6:0E:79:A1:DE:75:33:43:D7:81:5B:87:0C:96:80:C0:AE:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVLmDnmh3nUzQ9eBW4cMloDArn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:df:16:76:99:15:f5:2a:49:83:a8:ec:40:6c:94:15:84:3f:
dd:47:02:5b:79:b3:b6:63:8c:82:47:2e:64:93:33:06:45:23:
e3:17:9f:b0:74:bc:a7:93:f0:93:3e:da:2e:a9:45:66:a9:00:
40:6c:7b:6d:f9:ad:41:6f:ce:39:c0:5f:a6:cf:77:c9:87:cd:
0c:fc:03:56:29:a6:6b:a7:32:ca:3f:15:ca:64:69:a1:62:82:
21:0a:be:96:c2:3f:e1:7e:18:87:dc:5a:47:07:92:e0:28:e4:
c9:63:66:71:01:a4:ce:65:a7:5a:b8:4a:6f:24:81:2a:61:15:
91:bb:5a:ef:f2:a1:1e:af:8f:a4:b2:af:3e:29:74:63:fe:01:
b1:4b:72:ec:5e:0a:34:90:93:3c:88:73:43:21:5a:46:c4:53:
8c:b1:ee:b4:6c:e6:d8:92:19:eb:cc:52:98:76:37:c2:45:44:
f2:cc:14:83:a4:66:bb:f8:42:98:99:f0:6c:3e:97:73:0d:54:
01:ba:53:b5:f7:c4:d9:9b:b7:42:2a:1d:85:00:93:4a:dc:f6:
f4:5f:94:4d:cd:ff:0e:58:41:da:3e:56:76:94:58:a3:5c:3a:
09:54:83:f3:0b:dd:d4:05:fc:7f:b0:c3:bc:08:22:68:2d:15:
ab:d2:70:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA/DBP+ubWDwGufvg5zRhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NTJlNjBlNzlhMWRlNzUzMzQzZDc4MTViODcwYzk2ODBj
MGFlN2YwHhcNMjYwMzI1MjIwMTAyWhcNMjYwMzI2MjIwMTAyWjAzMTEwLwYDVQQD
Eyg3ZDY3OTg2YzhhNGRkMzNmYTQxMGFjYTFkYTZjYThjOTdiYjcxNWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoF3pH7lkuz8sZScKa3hHub9QiBz
0Buk4QiEIsXWfv06VDGMvP8ov+L8JLBKYfTJM1Lgaz8sSeDxCX7alrFWl12EWlqm
hzd0aZZn4EeeIkegU01TOHBikmatCDaiAQh+NLoQlSghSGN6crmh55DBIA5RXKzx
BEj3J7Vl0fYt+9GlXeSl421Lgvg11xyNNqGrNxZQIs+9B7MOdCu/BIMCH0vi3Cge
M4XOM4dPUAeeBBm7VEMrlJl9yNS3GBlBoklvRNxmc8HSiFdCa08Xi0zj8go8I17e
qVHjVa93k5R5DgM5U8zRhUYITuvBed8YVZDTM98OLB/9qmv/kx4JlS977QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1nmGyKTdM/pBCsodpsqMl7txWhMB8GA1UdIwQY
MBaAFIVS5g55od51M0PXgVuHDJaAwK5/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFZMbURubWgzblV6UTllQlc0Y01sb0RBcm44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8zNzI0ZDMtMjEyZi00OGJmLWEyYzEt
OWZmYTYwZGI4ZjcxLzEvaFZMbURubWgzblV6UTllQlc0Y01sb0RBcm44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8zNzI0ZDMtMjEyZi00OGJmLWEyYzEtOWZmYTYwZGI4Zjcx
LzEvaFZMbURubWgzblV6UTllQlc0Y01sb0RBcm44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEt8WdpkV
9SpJg6jsQGyUFYQ/3UcCW3mztmOMgkcuZJMzBkUj4xefsHS8p5Pwkz7aLqlFZqkA
QGx7bfmtQW/OOcBfps93yYfNDPwDVimma6cyyj8VymRpoWKCIQq+lsI/4X4Yh9xa
RweS4CjkyWNmcQGkzmWnWrhKbySBKmEVkbta7/KhHq+PpLKvPil0Y/4BsUty7F4K
NJCTPIhzQyFaRsRTjLHutGzm2JIZ68xSmHY3wkVE8swUg6Rmu/hCmJnwbD6Xcw1U
AbpTtffE2Zu3QiodhQCTStz29F+UTc3/DlhB2j5WdpRYo1w6CVSD8wvd1AX8f7DD
vAgiaC0Vq9Jwsg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:35 2026 by rpki-client