Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
File: hEoXkcsH8dhhI8Y9w63P11TbEBs.mft (raw, json)
Hash identifier: z8wL7oVsqqLVhj+0FFnNtRPxD3r41cxkLM+a/guV9oQ=
Subject key identifier: E7:3B:47:CE:CF:CC:F1:F6:FD:90:03:E3:63:64:64:0D:0D:85:E1:E4
Authority key identifier: 84:4A:17:91:CB:07:F1:D8:61:23:C6:3D:C3:AD:CF:D7:54:DB:10:1B
Certificate issuer: /CN=844a1791cb07f1d86123c63dc3adcfd754db101b
Certificate serial: 019D2816D8EBE3A8DC295592DEBCBEBD4A02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
Manifest number: 0C98
Signing time: Thu 26 Mar 2026 03:01:18 +0000
Manifest this update: Thu 26 Mar 2026 03:01:18 +0000
Manifest next update: Fri 27 Mar 2026 03:01:18 +0000
Files and hashes: 1: EaRvqzzZ4WLrsiOnFG9kIdBFPGo.roa (hash: PN+ow0E5ikp9C/ApCEWcQ9LIaP3NSeY86i0Td9fsxZc=)
2: JuG7AUgythULffPdDYDIoVusgls.roa (hash: TjT7c6XjgFC6qy9Niuuvvzz9Cwlb8UzAUWc3tb4emnE=)
3: hEoXkcsH8dhhI8Y9w63P11TbEBs.crl (hash: 6kSnzyq8wRbYyUDAKdbv3ytR4qc0kAP8sYQJlDpgSso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:d8:eb:e3:a8:dc:29:55:92:de:bc:be:bd:4a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844a1791cb07f1d86123c63dc3adcfd754db101b
Validity
Not Before: Mar 26 03:01:18 2026 GMT
Not After : Mar 27 03:01:18 2026 GMT
Subject: CN=e73b47cecfccf1f6fd9003e36364640d0d85e1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9f:7d:f6:1c:75:44:00:a5:86:15:94:d2:24:
2d:b4:fa:e7:da:cc:09:68:60:da:e6:b8:38:af:2e:
2e:c7:59:f4:6a:29:2b:a5:c3:3e:a8:cf:cf:0c:8b:
31:66:db:55:e3:f1:5b:61:4e:0c:f7:a4:70:46:4f:
93:48:0a:ff:e2:bf:7c:15:00:3d:12:1b:08:e3:d3:
a7:81:78:11:09:40:6c:53:7b:f2:39:b7:84:6a:e0:
8c:33:6f:b1:a3:c0:ca:b9:05:89:af:39:85:9f:77:
6b:51:7f:4f:d6:f7:e8:df:9b:7a:c0:58:04:81:37:
71:67:70:a3:52:78:91:04:80:7e:e6:67:65:b8:0e:
93:d1:0d:a7:e5:48:20:58:21:0b:3a:b0:ba:df:82:
52:69:fd:6f:b3:40:bf:7d:71:5e:e5:35:86:f5:f4:
8a:32:53:c7:c3:f6:11:16:e2:94:b7:6c:6d:1b:87:
41:5a:e7:14:fe:aa:2e:38:cd:3d:4f:aa:11:9e:86:
f5:b3:ac:e8:34:d7:2e:84:5b:fb:47:c4:b8:74:13:
1f:d1:9e:da:b8:35:59:0e:19:b5:49:a0:48:3b:2e:
97:bb:cc:bb:9e:f4:af:fd:62:ee:2c:ef:a2:44:c6:
69:af:70:34:3f:34:99:71:21:0b:14:50:47:0c:28:
99:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3B:47:CE:CF:CC:F1:F6:FD:90:03:E3:63:64:64:0D:0D:85:E1:E4
X509v3 Authority Key Identifier:
keyid:84:4A:17:91:CB:07:F1:D8:61:23:C6:3D:C3:AD:CF:D7:54:DB:10:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:35:55:d4:db:30:7a:38:e3:c2:a8:80:40:f9:54:57:d4:ec:
5a:dd:e8:e5:27:94:59:6c:5d:1b:30:77:8d:ed:33:81:ff:c4:
23:76:65:de:3c:17:44:1c:4c:34:1e:9b:0f:8e:eb:fb:d9:8d:
90:01:ba:cf:83:27:e9:81:13:7b:94:32:29:75:b0:a8:f2:b5:
8f:56:44:9d:85:ae:c6:c1:54:90:71:67:85:9b:a0:85:14:2e:
17:33:e3:26:f3:2d:b0:20:17:af:bf:69:95:a1:28:06:c3:ef:
fd:3a:55:e2:5d:3d:2b:75:52:b2:b6:a9:c8:9d:4a:13:e3:9d:
4f:6b:a0:61:c4:12:17:6b:1d:0c:38:30:4a:fa:c7:82:6d:fa:
00:59:34:c1:58:22:c8:ef:be:a5:22:de:2b:41:63:f4:ac:da:
0d:4b:a5:51:0f:69:2f:4e:cf:03:47:65:5a:7e:3d:3a:9d:81:
7f:f3:60:19:9e:79:25:2b:93:28:3d:87:cf:a9:69:90:ab:88:
3c:90:2b:9d:a7:fd:d5:93:62:f6:86:2e:f8:69:ba:a4:1b:ec:
14:00:43:32:c2:44:e5:28:28:c6:03:1a:44:38:72:67:51:a3:
d8:9d:3f:4c:f1:b1:81:e9:e7:bc:b1:40:5c:94:ae:bb:04:d2:
5b:45:73:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFtjr46jcKVWS3ry+vUoCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NGExNzkxY2IwN2YxZDg2MTIzYzYzZGMzYWRjZmQ3NTRk
YjEwMWIwHhcNMjYwMzI2MDMwMTE4WhcNMjYwMzI3MDMwMTE4WjAzMTEwLwYDVQQD
EyhlNzNiNDdjZWNmY2NmMWY2ZmQ5MDAzZTM2MzY0NjQwZDBkODVlMWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5999hx1RAClhhWU0iQttPrn2swJ
aGDa5rg4ry4ux1n0aikrpcM+qM/PDIsxZttV4/FbYU4M96RwRk+TSAr/4r98FQA9
EhsI49OngXgRCUBsU3vyObeEauCMM2+xo8DKuQWJrzmFn3drUX9P1vfo35t6wFgE
gTdxZ3CjUniRBIB+5mdluA6T0Q2n5UggWCELOrC634JSaf1vs0C/fXFe5TWG9fSK
MlPHw/YRFuKUt2xtG4dBWucU/qouOM09T6oRnob1s6zoNNcuhFv7R8S4dBMf0Z7a
uDVZDhm1SaBIOy6Xu8y7nvSv/WLuLO+iRMZpr3A0PzSZcSELFFBHDCiZjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOc7R87PzPH2/ZAD42NkZA0NheHkMB8GA1UdIwQY
MBaAFIRKF5HLB/HYYSPGPcOtz9dU2xAbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEVvWGtjc0g4ZGhoSThZOXc2M1AxMVRiRUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mMTM3MGEtNTdjYS00NmEwLThhZjQt
NzhiYTZkYzUwMDg2LzEvaEVvWGtjc0g4ZGhoSThZOXc2M1AxMVRiRUJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mMTM3MGEtNTdjYS00NmEwLThhZjQtNzhiYTZkYzUwMDg2
LzEvaEVvWGtjc0g4ZGhoSThZOXc2M1AxMVRiRUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAITVV1Nsw
ejjjwqiAQPlUV9TsWt3o5SeUWWxdGzB3je0zgf/EI3Zl3jwXRBxMNB6bD47r+9mN
kAG6z4Mn6YETe5QyKXWwqPK1j1ZEnYWuxsFUkHFnhZughRQuFzPjJvMtsCAXr79p
laEoBsPv/TpV4l09K3VSsrapyJ1KE+OdT2ugYcQSF2sdDDgwSvrHgm36AFk0wVgi
yO++pSLeK0Fj9KzaDUulUQ9pL07PA0dlWn49Op2Bf/NgGZ55JSuTKD2Hz6lpkKuI
PJArnaf91ZNi9oYu+Gm6pBvsFABDMsJE5SgoxgMaRDhyZ1Gj2J0/TPGxgennvLFA
XJSuuwTSW0Vzkg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:08:11 2026 by rpki-client