Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
File: HsBDSlw88jdMo2AzGSaufSSsNFs.mft (raw, json)
Hash identifier: jk1fP2p6r+yboumUSnW/Av7ShKu2g/dwWR6hP9V9uck=
Subject key identifier: 4D:56:69:9F:E2:27:AF:E9:34:49:0D:3D:B5:33:C6:1F:A8:68:08:EB
Authority key identifier: 1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
Certificate issuer: /CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Certificate serial: 019D2772031610F944754DB2418843B7518E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
Manifest number: 16F0
Signing time: Thu 26 Mar 2026 00:01:16 +0000
Manifest this update: Thu 26 Mar 2026 00:01:16 +0000
Manifest next update: Fri 27 Mar 2026 00:01:16 +0000
Files and hashes: 1: 1-bR6sRmqVUM--gERBLCMb9Ravtw.roa (hash: IEQS2o9NuZUHyISNsWvFCuuFh71uq4ILP2ZvrrGr1Uc=)
2: HsBDSlw88jdMo2AzGSaufSSsNFs.crl (hash: 4Ku1HLYyuG0cRra8SfiQ0GGstn4NC2fkujrpsaRuhyY=)
3: vbqC7dnIYforI52OCrB0B1B9v_E.roa (hash: l+1hvAkiSw6p++rx/Ga348Dp115kPP0Bh0QVsqmz+I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:03:16:10:f9:44:75:4d:b2:41:88:43:b7:51:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Validity
Not Before: Mar 26 00:01:16 2026 GMT
Not After : Mar 27 00:01:16 2026 GMT
Subject: CN=4d56699fe227afe934490d3db533c61fa86808eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5a:c6:55:1f:97:dc:c4:78:99:11:73:dd:9c:
ee:a3:35:05:cc:ae:f9:e8:26:a3:3a:f6:77:99:58:
6c:07:41:19:46:23:d8:38:96:e7:62:4d:b6:ab:2e:
4f:a9:df:64:3b:89:b0:1a:b5:c0:b2:05:98:54:13:
55:8a:66:2f:a7:6d:5a:55:2f:ee:e3:b6:a4:16:1a:
da:6b:51:31:b9:f4:8d:11:c5:4d:7a:24:dc:68:b0:
16:f8:9f:68:29:67:0d:c4:87:b6:0b:12:e8:79:ee:
28:06:71:2f:a5:04:07:0d:cf:46:3c:12:c7:de:78:
2b:5c:c7:8e:14:ed:97:14:c2:ce:2e:ed:bb:f2:97:
88:ee:30:9c:d9:a9:a1:a0:1c:3c:36:75:57:cc:a2:
b7:a2:b5:48:5b:e0:e3:37:e8:0a:db:8c:2a:f4:df:
08:80:9a:0a:f2:52:c6:67:6c:80:79:28:8b:83:35:
0a:8c:19:7a:7d:0a:4f:d8:56:07:68:27:5a:ed:26:
4c:4d:cb:7e:fc:a2:e6:38:c2:c7:5a:47:bb:78:b3:
7c:6b:e4:42:47:c8:74:29:4c:00:ec:23:f8:08:28:
90:a4:ce:40:d7:cb:e9:ef:fd:ff:8f:56:8a:83:0f:
57:74:d0:7e:68:0a:6a:db:87:8c:fc:79:6b:41:e6:
ff:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:56:69:9F:E2:27:AF:E9:34:49:0D:3D:B5:33:C6:1F:A8:68:08:EB
X509v3 Authority Key Identifier:
keyid:1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:70:db:a3:da:30:ee:24:31:52:b9:c1:1f:42:54:42:c0:b0:
97:40:42:e7:12:19:03:1a:89:58:49:5a:dc:34:2f:a0:09:3c:
db:39:e7:07:c9:7c:62:7d:05:c9:39:8f:1c:0b:68:98:21:f0:
f4:a0:4f:0b:fa:5a:d5:33:ee:0c:91:a6:52:50:c3:98:87:c6:
b1:15:50:b8:f6:84:5b:d6:91:21:c8:48:5d:1f:3f:a9:3c:7f:
92:8b:88:19:ef:28:bf:44:49:9b:27:3a:88:67:6d:a1:c0:22:
92:bb:35:1c:48:eb:85:e7:67:87:14:48:a3:35:df:09:4e:20:
ca:23:9f:70:23:6e:67:0b:07:87:86:07:f0:65:db:5e:95:07:
b7:c3:43:ee:ce:aa:2f:2f:66:d0:26:4c:15:72:f5:02:ca:9b:
94:5f:f7:03:f9:d4:7c:67:7c:e7:b2:28:0c:4f:8e:d2:53:36:
08:e4:3b:0e:4e:42:bc:ea:67:7f:e0:53:9d:4c:57:a7:8c:11:
ef:3e:df:21:1d:bf:91:08:3e:db:b5:c6:7f:1d:59:fa:b4:41:
0c:33:b6:12:55:5a:41:32:c2:10:24:27:d0:49:c8:ec:9c:0c:
2d:ca:df:2d:37:7e:bb:a4:d9:a8:a8:c3:65:ed:75:92:ac:dd:
8d:03:c0:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncgMWEPlEdU2yQYhDt1GOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYzA0MzRhNWMzY2YyMzc0Y2EzNjAzMzE5MjZhZTdkMjRh
YzM0NWIwHhcNMjYwMzI2MDAwMTE2WhcNMjYwMzI3MDAwMTE2WjAzMTEwLwYDVQQD
Eyg0ZDU2Njk5ZmUyMjdhZmU5MzQ0OTBkM2RiNTMzYzYxZmE4NjgwOGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlrGVR+X3MR4mRFz3ZzuozUFzK75
6CajOvZ3mVhsB0EZRiPYOJbnYk22qy5Pqd9kO4mwGrXAsgWYVBNVimYvp21aVS/u
47akFhraa1ExufSNEcVNeiTcaLAW+J9oKWcNxIe2CxLoee4oBnEvpQQHDc9GPBLH
3ngrXMeOFO2XFMLOLu278peI7jCc2amhoBw8NnVXzKK3orVIW+DjN+gK24wq9N8I
gJoK8lLGZ2yAeSiLgzUKjBl6fQpP2FYHaCda7SZMTct+/KLmOMLHWke7eLN8a+RC
R8h0KUwA7CP4CCiQpM5A18vp7/3/j1aKgw9XdNB+aApq24eM/HlrQeb/DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1WaZ/iJ6/pNEkNPbUzxh+oaAjrMB8GA1UdIwQY
MBaAFB7AQ0pcPPI3TKNgMxkmrn0krDRbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHNCRFNsdzg4amRNbzJBekdTYXVmU1NzTkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85YzU0MDQtNWVhNC00Nzc2LThjZWMt
YWVkYmJmNDY4MDI4LzEvSHNCRFNsdzg4amRNbzJBekdTYXVmU1NzTkZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC85YzU0MDQtNWVhNC00Nzc2LThjZWMtYWVkYmJmNDY4MDI4
LzEvSHNCRFNsdzg4amRNbzJBekdTYXVmU1NzTkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlnDbo9ow
7iQxUrnBH0JUQsCwl0BC5xIZAxqJWEla3DQvoAk82znnB8l8Yn0FyTmPHAtomCHw
9KBPC/pa1TPuDJGmUlDDmIfGsRVQuPaEW9aRIchIXR8/qTx/kouIGe8ov0RJmyc6
iGdtocAikrs1HEjrhednhxRIozXfCU4gyiOfcCNuZwsHh4YH8GXbXpUHt8ND7s6q
Ly9m0CZMFXL1AsqblF/3A/nUfGd857IoDE+O0lM2COQ7Dk5CvOpnf+BTnUxXp4wR
7z7fIR2/kQg+27XGfx1Z+rRBDDO2ElVaQTLCECQn0EnI7JwMLcrfLTd+u6TZqKjD
Ze11kqzdjQPAHA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:50:47 2026 by rpki-client