Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
File: hiuiH8_MNMnZtafGCBWF4KDucK4.mft (raw, json)
Hash identifier: XAzGAmycXsip7xLrC/8bEC+l++vUfVxruZYiA0QWEZc=
Subject key identifier: 51:DF:D2:A5:A3:D5:FB:4F:50:EA:45:6C:30:EC:78:D2:EB:75:A9:83
Authority key identifier: 86:2B:A2:1F:CF:CC:34:C9:D9:B5:A7:C6:08:15:85:E0:A0:EE:70:AE
Certificate issuer: /CN=862ba21fcfcc34c9d9b5a7c6081585e0a0ee70ae
Certificate serial: 019D26285285698E90F71584650CDA6EEF31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
Manifest number: 0980
Signing time: Wed 25 Mar 2026 18:01:09 +0000
Manifest this update: Wed 25 Mar 2026 18:01:09 +0000
Manifest next update: Thu 26 Mar 2026 18:01:09 +0000
Files and hashes: 1: Ac2g8HVyNDYwzqmo6Q0KVIwOBDo.roa (hash: Um65HfZZDJKesTmcrahWX7j2iQcfK801xXJSJGbgafE=)
2: hiuiH8_MNMnZtafGCBWF4KDucK4.crl (hash: DbSE+1HbD4gH2ghjSSFt0Y3JdposWaaoujvXypN3zo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:52:85:69:8e:90:f7:15:84:65:0c:da:6e:ef:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=862ba21fcfcc34c9d9b5a7c6081585e0a0ee70ae
Validity
Not Before: Mar 25 18:01:09 2026 GMT
Not After : Mar 26 18:01:09 2026 GMT
Subject: CN=51dfd2a5a3d5fb4f50ea456c30ec78d2eb75a983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1e:6f:5f:1d:09:d4:09:95:53:ce:74:f9:f9:
eb:5c:ab:9a:df:dc:fc:09:96:07:37:cb:ad:20:d9:
c5:39:de:56:ac:b0:06:7d:3e:03:b1:9f:57:d6:83:
8a:1f:62:b7:1d:99:70:7e:4d:fa:43:9f:b4:a6:93:
66:cd:b3:37:53:cd:6d:a2:cd:7f:46:f2:d7:2c:f8:
24:2c:3d:9d:65:6a:38:53:ef:c4:4c:76:1d:d4:12:
5d:f0:53:e7:3e:8c:e5:41:27:c7:74:2e:85:5e:98:
af:52:3f:33:9c:8f:d2:24:76:e0:76:70:86:0d:b7:
5b:48:9b:0f:dc:48:9c:56:ba:2e:aa:6c:94:cc:78:
9a:7e:a3:40:93:6d:ef:58:3f:fe:e9:3f:7d:0c:c9:
e3:28:26:17:27:39:e4:be:49:36:c5:34:77:04:cd:
5d:72:1d:5e:08:a8:9d:81:bc:1c:b7:f2:ee:8c:16:
b6:8a:fb:03:1c:ab:17:53:e6:65:74:92:65:68:e9:
4b:6e:7e:94:3d:32:e5:80:f9:36:8e:be:2a:fb:b4:
36:ef:1c:08:b1:97:39:c4:4a:d9:b8:97:b7:dd:6d:
6f:3d:45:b0:ba:0e:df:b9:90:25:1e:fb:37:b1:ef:
e9:c7:95:0f:2f:11:2a:db:77:d2:c6:b2:f4:dd:b7:
20:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DF:D2:A5:A3:D5:FB:4F:50:EA:45:6C:30:EC:78:D2:EB:75:A9:83
X509v3 Authority Key Identifier:
keyid:86:2B:A2:1F:CF:CC:34:C9:D9:B5:A7:C6:08:15:85:E0:A0:EE:70:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiuiH8_MNMnZtafGCBWF4KDucK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/475e6f-89a5-43e8-83b9-495a959b16e7/1/hiuiH8_MNMnZtafGCBWF4KDucK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:cb:4d:0d:8e:05:5a:f7:91:67:81:e1:7d:6d:02:7f:69:70:
a7:99:e2:bd:12:b8:3f:ff:27:fa:fa:6f:4b:18:e9:b1:13:ee:
ab:a3:ad:57:c2:15:73:8d:e1:f0:87:c9:d4:c8:25:e3:a2:42:
8e:67:89:15:70:ba:a4:ce:7e:bb:92:b9:00:21:ed:bf:54:7c:
dd:a4:c3:a4:3f:d1:6e:aa:b7:e9:fa:4a:e8:36:82:24:15:c3:
31:79:e1:40:3f:90:33:2b:9e:97:50:5f:eb:79:7f:ca:75:8a:
3d:b5:68:18:af:58:d4:98:9f:42:b5:5e:40:bc:7a:0e:52:cf:
68:6e:15:05:53:2c:32:b1:43:e9:31:bd:47:0f:58:dc:16:e8:
fa:a1:d2:de:9b:41:17:0e:57:83:47:4c:92:48:e8:00:13:6e:
66:d1:17:e9:02:15:a4:d9:b9:c2:0c:44:5c:26:e9:21:47:f4:
1f:32:c9:3e:1e:8a:06:93:09:4d:d2:b0:68:35:17:6b:ec:3a:
bd:e5:22:82:aa:60:b0:1f:26:75:77:57:ae:2f:80:13:61:0c:
8e:e3:3c:78:d6:74:d4:e8:07:76:b1:2f:f4:c8:b4:c7:80:fd:
91:4e:cc:58:c5:2c:5a:d9:a9:15:44:15:5e:8d:9d:02:2e:ad:
17:a5:4c:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKFKFaY6Q9xWEZQzabu8xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MmJhMjFmY2ZjYzM0YzlkOWI1YTdjNjA4MTU4NWUwYTBl
ZTcwYWUwHhcNMjYwMzI1MTgwMTA5WhcNMjYwMzI2MTgwMTA5WjAzMTEwLwYDVQQD
Eyg1MWRmZDJhNWEzZDVmYjRmNTBlYTQ1NmMzMGVjNzhkMmViNzVhOTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6x5vXx0J1AmVU850+fnrXKua39z8
CZYHN8utINnFOd5WrLAGfT4DsZ9X1oOKH2K3HZlwfk36Q5+0ppNmzbM3U81tos1/
RvLXLPgkLD2dZWo4U+/ETHYd1BJd8FPnPozlQSfHdC6FXpivUj8znI/SJHbgdnCG
DbdbSJsP3EicVrouqmyUzHiafqNAk23vWD/+6T99DMnjKCYXJznkvkk2xTR3BM1d
ch1eCKidgbwct/LujBa2ivsDHKsXU+ZldJJlaOlLbn6UPTLlgPk2jr4q+7Q27xwI
sZc5xErZuJe33W1vPUWwug7fuZAlHvs3se/px5UPLxEq23fSxrL03bcgUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHf0qWj1ftPUOpFbDDseNLrdamDMB8GA1UdIwQY
MBaAFIYroh/PzDTJ2bWnxggVheCg7nCuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGl1aUg4X01OTW5adGFmR0NCV0Y0S0R1Y0s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni80NzVlNmYtODlhNS00M2U4LTgzYjkt
NDk1YTk1OWIxNmU3LzEvaGl1aUg4X01OTW5adGFmR0NCV0Y0S0R1Y0s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni80NzVlNmYtODlhNS00M2U4LTgzYjktNDk1YTk1OWIxNmU3
LzEvaGl1aUg4X01OTW5adGFmR0NCV0Y0S0R1Y0s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8tNDY4F
WveRZ4HhfW0Cf2lwp5nivRK4P/8n+vpvSxjpsRPuq6OtV8IVc43h8IfJ1Mgl46JC
jmeJFXC6pM5+u5K5ACHtv1R83aTDpD/Rbqq36fpK6DaCJBXDMXnhQD+QMyuel1Bf
63l/ynWKPbVoGK9Y1JifQrVeQLx6DlLPaG4VBVMsMrFD6TG9Rw9Y3Bbo+qHS3ptB
Fw5Xg0dMkkjoABNuZtEX6QIVpNm5wgxEXCbpIUf0HzLJPh6KBpMJTdKwaDUXa+w6
veUigqpgsB8mdXdXri+AE2EMjuM8eNZ01OgHdrEv9Mi0x4D9kU7MWMUsWtmpFUQV
Xo2dAi6tF6VM5A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:10 2026 by rpki-client