Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
File: hD0a_PE70hF9R99oPkCmMocATP4.mft (raw, json)
Hash identifier: SPU6LCn7C7pTPMBrZlMOqf8mPU7gtsklZZr+M8QDFgc=
Subject key identifier: 38:36:D0:69:8B:19:56:5C:2E:94:C7:60:C1:24:21:BA:A3:EE:A7:D1
Authority key identifier: 84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
Certificate issuer: /CN=843d1afcf13bd2117d47df683e40a63287004cfe
Certificate serial: 019D27723F85F9A6B73675B87B0AD3A6ED3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
Manifest number: 1530
Signing time: Thu 26 Mar 2026 00:01:31 +0000
Manifest this update: Thu 26 Mar 2026 00:01:31 +0000
Manifest next update: Fri 27 Mar 2026 00:01:31 +0000
Files and hashes: 1: blJ-TZh-82zY8BmhlGXDYcWlXEM.roa (hash: Fd7qkgfgnAB5yGlcwTOLNMtcHfXu1EK11nyoGzaI4T8=)
2: hD0a_PE70hF9R99oPkCmMocATP4.crl (hash: +yU7sYAq9ENgSFn3/mxFLRLqIWpd0UZ0CzB42mS8mbU=)
3: uGcdeOeH2FGE8oSm_emFftbBDBI.roa (hash: K6Jsrsz0fx7XMWqDVYW8cVOMG7U2AmGR+nHljnd4RYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:3f:85:f9:a6:b7:36:75:b8:7b:0a:d3:a6:ed:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843d1afcf13bd2117d47df683e40a63287004cfe
Validity
Not Before: Mar 26 00:01:31 2026 GMT
Not After : Mar 27 00:01:31 2026 GMT
Subject: CN=3836d0698b19565c2e94c760c12421baa3eea7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:67:21:33:b3:73:fc:61:29:ed:3a:f1:b3:31:
78:83:72:0c:92:da:70:ef:04:e0:4a:f4:f3:9d:11:
0f:85:ca:2a:0c:2d:bb:8b:b9:ff:3a:00:9d:35:c7:
d9:39:c5:15:43:d4:66:18:a2:23:7c:76:21:7b:bd:
78:2f:2f:03:11:30:96:f1:19:5a:d5:69:81:6c:03:
a0:05:83:53:3c:72:1d:14:58:e1:5b:2c:d4:05:fc:
d5:e6:88:cd:55:e3:c5:65:8b:14:bf:cd:ac:60:71:
58:53:de:15:57:d3:89:33:b6:50:d7:5b:14:9b:2a:
52:73:cd:4e:63:14:d2:f7:5f:6c:d5:a1:41:c1:f9:
e1:d7:c3:d0:5e:de:68:05:68:b2:d0:a3:8a:f2:51:
9f:da:09:43:b3:87:23:4b:d8:3b:c8:7b:a4:2d:19:
00:89:f8:a1:58:59:8b:ea:06:61:d6:7a:d9:08:bf:
57:da:d3:7f:8d:5b:8f:7f:87:a2:74:89:d0:10:ff:
d1:86:17:39:49:b0:40:6b:d7:8c:cf:46:81:30:5d:
5d:08:f2:44:64:08:6f:d2:cd:c8:15:fd:ca:3c:1e:
2d:7a:89:d5:f0:6c:97:24:75:bd:57:dc:ed:e9:7c:
66:d0:47:36:14:e2:f0:3e:81:12:4e:1a:aa:3b:e1:
e7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:36:D0:69:8B:19:56:5C:2E:94:C7:60:C1:24:21:BA:A3:EE:A7:D1
X509v3 Authority Key Identifier:
keyid:84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:66:28:33:2a:58:e7:f6:23:91:66:e0:7a:a4:63:7f:61:2c:
c0:da:45:11:92:29:af:db:a0:78:00:4b:55:ae:d6:80:2a:ab:
b6:55:0a:cb:6e:85:9d:64:05:c9:e3:c0:bd:d6:90:ce:ca:28:
e7:35:46:e8:0f:48:31:36:b3:50:11:2c:37:cb:41:ce:58:6e:
ad:cf:98:76:9f:04:a3:cd:6f:ce:ac:e8:8f:d9:c7:3b:38:c0:
4a:c3:4c:2f:c9:81:4c:91:35:99:6e:e5:4a:7a:d5:b3:c8:8e:
f0:35:58:5d:ed:49:4d:65:29:5a:63:d1:3c:fa:05:da:9b:a5:
23:c4:34:8d:49:3b:5d:3d:07:5f:c0:e2:e8:af:82:d0:77:02:
6b:2d:c3:f1:fa:02:cf:a0:81:33:ea:fd:4e:ad:d7:df:65:f6:
39:89:98:ad:66:b3:c6:84:33:75:31:0c:56:f5:f8:01:d1:0b:
1c:ab:a2:af:a2:78:93:9c:0d:3c:88:19:6d:fb:eb:d7:83:82:
9f:4a:c5:17:55:62:8c:49:9d:92:dc:91:ed:b1:0e:8d:97:b9:
cb:b6:d4:e8:dd:eb:1d:98:c2:22:87:97:e1:d6:f5:ac:07:d9:
0f:aa:9a:0d:63:fc:4e:50:1e:6e:6e:7d:35:25:21:bd:0d:7e:
83:a9:88:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncj+F+aa3NnW4ewrTpu0+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0M2QxYWZjZjEzYmQyMTE3ZDQ3ZGY2ODNlNDBhNjMyODcw
MDRjZmUwHhcNMjYwMzI2MDAwMTMxWhcNMjYwMzI3MDAwMTMxWjAzMTEwLwYDVQQD
EygzODM2ZDA2OThiMTk1NjVjMmU5NGM3NjBjMTI0MjFiYWEzZWVhN2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2chM7Nz/GEp7TrxszF4g3IMktpw
7wTgSvTznREPhcoqDC27i7n/OgCdNcfZOcUVQ9RmGKIjfHYhe714Ly8DETCW8Rla
1WmBbAOgBYNTPHIdFFjhWyzUBfzV5ojNVePFZYsUv82sYHFYU94VV9OJM7ZQ11sU
mypSc81OYxTS919s1aFBwfnh18PQXt5oBWiy0KOK8lGf2glDs4cjS9g7yHukLRkA
ifihWFmL6gZh1nrZCL9X2tN/jVuPf4eidInQEP/Rhhc5SbBAa9eMz0aBMF1dCPJE
ZAhv0s3IFf3KPB4teonV8GyXJHW9V9zt6Xxm0Ec2FOLwPoESThqqO+HnKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDg20GmLGVZcLpTHYMEkIbqj7qfRMB8GA1UdIwQY
MBaAFIQ9GvzxO9IRfUffaD5ApjKHAEz+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEQwYV9QRTcwaEY5Ujk5b1BrQ21Nb2NBVFA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8xNzMzMDYtMmRiZC00YWQ4LWJkNTEt
YjFmM2JjYzY3YWFlLzEvaEQwYV9QRTcwaEY5Ujk5b1BrQ21Nb2NBVFA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8xNzMzMDYtMmRiZC00YWQ4LWJkNTEtYjFmM2JjYzY3YWFl
LzEvaEQwYV9QRTcwaEY5Ujk5b1BrQ21Nb2NBVFA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWYoMypY
5/YjkWbgeqRjf2EswNpFEZIpr9ugeABLVa7WgCqrtlUKy26FnWQFyePAvdaQzsoo
5zVG6A9IMTazUBEsN8tBzlhurc+Ydp8Eo81vzqzoj9nHOzjASsNML8mBTJE1mW7l
SnrVs8iO8DVYXe1JTWUpWmPRPPoF2pulI8Q0jUk7XT0HX8Di6K+C0HcCay3D8foC
z6CBM+r9Tq3X32X2OYmYrWazxoQzdTEMVvX4AdELHKuir6J4k5wNPIgZbfvr14OC
n0rFF1VijEmdktyR7bEOjZe5y7bU6N3rHZjCIoeX4db1rAfZD6qaDWP8TlAebm59
NSUhvQ1+g6mISQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:14:48 2026 by rpki-client