Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
File: HkXMabTR7hUbUCdEL7upRMJ035c.mft (raw, json)
Hash identifier: HAfts0D225WcGqdQXrm8BhtfhZqN7BD/NWJ3c6GgEr4=
Subject key identifier: C9:81:29:17:22:3B:F0:B1:38:95:DB:15:15:2E:10:EA:F7:53:27:50
Authority key identifier: 1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
Certificate issuer: /CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Certificate serial: 019D25BAB6E2D32E715F234A1C26D7A53D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
Manifest number: 1801
Signing time: Wed 25 Mar 2026 16:01:26 +0000
Manifest this update: Wed 25 Mar 2026 16:01:26 +0000
Manifest next update: Thu 26 Mar 2026 16:01:26 +0000
Files and hashes: 1: HkXMabTR7hUbUCdEL7upRMJ035c.crl (hash: /tMW6MS/Q/4ee1Ht3hFk6rjODDH2cnMyBp47qdE+WrQ=)
2: aZ1Tmj5Fb0n-wAOpGfFgPSrHdBE.roa (hash: Gos9McZbPOXHaQCrEQsYEbpvs5QjrqdpWFlMgXSAVtE=)
3: cmpuXpIT4rvzqBUAC8x_2HfS7ko.asa (hash: oUrQJpTPJIb/YuIVBdY/6NRHdTxNTlQPuGs1oAK8Nmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:b6:e2:d3:2e:71:5f:23:4a:1c:26:d7:a5:3d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Validity
Not Before: Mar 25 16:01:26 2026 GMT
Not After : Mar 26 16:01:26 2026 GMT
Subject: CN=c9812917223bf0b13895db15152e10eaf7532750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:16:0b:e4:03:23:f5:f9:6c:6b:a6:4d:3c:
cb:dd:61:9d:c7:da:72:83:45:66:9a:87:39:fb:94:
7e:79:d5:e0:dc:4a:f4:a8:3d:df:11:18:08:f8:fd:
13:41:c7:13:62:a2:f9:66:90:8f:8a:1c:c8:33:27:
33:7d:c2:8f:7f:48:52:84:97:1d:4b:16:e2:8d:31:
ac:39:18:56:bd:ed:94:c5:50:51:14:6d:56:5e:3d:
a2:5c:08:53:fa:4b:92:39:f4:8a:fa:9c:00:aa:52:
0c:bb:d6:b3:8a:91:d7:a0:5a:39:4d:8a:54:56:a1:
a3:31:f8:06:1b:c0:44:21:5b:e6:a6:22:25:4f:a4:
1d:de:6d:3b:94:19:58:89:1c:b1:46:80:e6:da:0a:
40:de:51:0c:97:bf:ba:31:61:f1:7e:4c:53:ad:6e:
d1:6e:b6:55:c8:bb:53:1c:9c:b9:56:cf:e5:55:04:
c5:30:76:8d:d7:8a:4a:ce:97:19:66:6b:93:b1:1c:
fc:24:c2:60:f9:9f:a3:5d:42:36:49:f2:c3:75:36:
10:84:6e:3c:76:fc:10:19:34:b9:dc:79:58:41:d3:
f9:4a:13:f1:65:ed:54:c2:32:64:9e:49:e4:35:67:
32:94:e0:e4:aa:da:d0:be:84:a7:60:ac:08:41:5f:
20:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:81:29:17:22:3B:F0:B1:38:95:DB:15:15:2E:10:EA:F7:53:27:50
X509v3 Authority Key Identifier:
keyid:1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:bb:17:fd:b8:21:43:52:b6:d8:1a:f8:06:58:45:eb:c7:ea:
51:89:4c:48:ee:69:57:7f:b2:94:73:36:64:23:22:53:ae:c9:
f6:5b:f7:6a:eb:e3:93:da:7d:16:66:27:b8:4d:e8:b7:d6:1c:
6b:79:b5:d1:ee:e6:6f:e5:f0:47:8b:56:f8:3c:99:f2:07:3e:
39:e1:0e:89:30:88:73:79:93:4f:5a:70:24:f9:1b:b3:88:b0:
99:f3:f8:45:97:34:48:4b:9c:43:9c:1c:3e:11:0d:3a:0a:f3:
52:a2:5d:af:03:c6:77:93:57:91:de:2a:6d:9a:66:cf:f4:0d:
03:9b:48:c0:90:f8:eb:e1:83:5e:f0:fb:7f:9e:5b:fc:df:b7:
9c:78:2e:91:84:03:a4:0b:47:96:62:d1:f1:d5:e9:a8:c3:e0:
0d:da:12:6d:57:c9:d9:5c:14:ad:b2:50:2f:06:47:20:8d:e6:
e7:df:7f:86:83:e1:73:56:90:86:5a:e0:c5:3d:d7:a1:6c:a4:
ad:cc:c4:9b:dd:71:4a:13:79:03:0c:7b:0d:e8:32:a1:32:7e:
ef:2b:08:b2:04:0d:0c:ee:e7:c0:44:be:b2:f9:21:c5:e9:aa:
14:b5:f0:2d:4d:d6:ac:85:a5:a1:f0:f8:57:a9:ce:fb:89:c6:
f7:9d:55:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lurbi0y5xXyNKHCbXpT0pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNDVjYzY5YjRkMWVlMTUxYjUwMjc0NDJmYmJhOTQ0YzI3
NGRmOTcwHhcNMjYwMzI1MTYwMTI2WhcNMjYwMzI2MTYwMTI2WjAzMTEwLwYDVQQD
EyhjOTgxMjkxNzIyM2JmMGIxMzg5NWRiMTUxNTJlMTBlYWY3NTMyNzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPoWC+QDI/X5bGumTTzL3WGdx9py
g0Vmmoc5+5R+edXg3Er0qD3fERgI+P0TQccTYqL5ZpCPihzIMyczfcKPf0hShJcd
SxbijTGsORhWve2UxVBRFG1WXj2iXAhT+kuSOfSK+pwAqlIMu9azipHXoFo5TYpU
VqGjMfgGG8BEIVvmpiIlT6Qd3m07lBlYiRyxRoDm2gpA3lEMl7+6MWHxfkxTrW7R
brZVyLtTHJy5Vs/lVQTFMHaN14pKzpcZZmuTsRz8JMJg+Z+jXUI2SfLDdTYQhG48
dvwQGTS53HlYQdP5ShPxZe1UwjJknknkNWcylODkqtrQvoSnYKwIQV8gQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmBKRciO/CxOJXbFRUuEOr3UydQMB8GA1UdIwQY
MBaAFB5FzGm00e4VG1AnRC+7qUTCdN+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGtYTWFiVFI3aFViVUNkRUw3dXBSTUowMzVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kNDk1MjgtMmFhNC00YTdkLTk4NDUt
YzI0NDNhYTU0N2UyLzEvSGtYTWFiVFI3aFViVUNkRUw3dXBSTUowMzVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9kNDk1MjgtMmFhNC00YTdkLTk4NDUtYzI0NDNhYTU0N2Uy
LzEvSGtYTWFiVFI3aFViVUNkRUw3dXBSTUowMzVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADrsX/bgh
Q1K22Br4BlhF68fqUYlMSO5pV3+ylHM2ZCMiU67J9lv3auvjk9p9FmYnuE3ot9Yc
a3m10e7mb+XwR4tW+DyZ8gc+OeEOiTCIc3mTT1pwJPkbs4iwmfP4RZc0SEucQ5wc
PhENOgrzUqJdrwPGd5NXkd4qbZpmz/QNA5tIwJD46+GDXvD7f55b/N+3nHgukYQD
pAtHlmLR8dXpqMPgDdoSbVfJ2VwUrbJQLwZHII3m599/hoPhc1aQhlrgxT3XoWyk
rczEm91xShN5Awx7DegyoTJ+7ysIsgQNDO7nwES+svkhxemqFLXwLU3WrIWlofD4
V6nO+4nG951VTA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:19:35 2026 by rpki-client