Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
File: hAVuIt0SPINMCkqnRRbV-zzHfdE.mft (raw, json)
Hash identifier: KPMdnqmymtG4lHGKnDwsY9cMLgOvlNsMROQMn2dZAr8=
Subject key identifier: 50:6F:3D:A5:F4:08:97:1B:2D:E0:E8:1D:8F:38:5C:57:DE:6B:2F:F2
Authority key identifier: 84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1
Certificate issuer: /CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1
Certificate serial: 019D2695D5414E5358EC6DF882740E18CC82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
Manifest number: 0702
Signing time: Wed 25 Mar 2026 20:00:46 +0000
Manifest this update: Wed 25 Mar 2026 20:00:46 +0000
Manifest next update: Thu 26 Mar 2026 20:00:46 +0000
Files and hashes: 1: Hwz33O3GEhUPQENUYSweMk7o9iA.roa (hash: 1HTvbTcGZV1b8MpfW8YABdSoijcVRUnqTe0YqNWbdPc=)
2: hAVuIt0SPINMCkqnRRbV-zzHfdE.crl (hash: gGZAqbvenr01KexdlUIwFupdAI2MNWpPKmPuZ8xaglI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:d5:41:4e:53:58:ec:6d:f8:82:74:0e:18:cc:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1
Validity
Not Before: Mar 25 20:00:46 2026 GMT
Not After : Mar 26 20:00:46 2026 GMT
Subject: CN=506f3da5f408971b2de0e81d8f385c57de6b2ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:49:9d:33:d3:16:ca:13:52:51:65:42:51:8f:
64:58:41:64:a2:83:61:0b:90:93:44:2f:f3:12:fe:
ae:e4:37:6d:99:ed:ed:cd:87:ab:d1:fc:8f:75:48:
64:c1:69:3f:9a:08:f6:5d:50:fb:d1:24:3c:d0:13:
65:70:e1:e6:c9:b8:44:ae:7c:3e:19:54:27:7d:44:
95:2f:11:6e:a4:86:e3:95:b3:a4:1f:36:cd:ea:83:
22:fb:7f:53:43:ae:71:3e:b4:43:8b:d1:f1:20:e1:
52:5c:0f:3c:8a:92:9f:df:f6:a6:26:4b:b5:cd:72:
ed:18:02:ae:18:bd:f3:01:ad:6e:62:d4:b9:77:5e:
03:c5:ef:74:ba:1b:7e:13:fb:76:38:59:ec:04:d2:
68:71:af:1d:eb:68:6f:1e:1c:5e:d2:fa:96:e8:8b:
a1:db:98:87:59:fe:0a:ae:6d:fe:c1:e2:a7:aa:43:
6d:9b:81:12:b3:b0:35:83:35:12:23:0e:cb:54:9f:
1a:2b:bf:a3:c3:12:df:5e:56:1d:3e:91:46:32:fc:
5d:33:2d:48:96:4d:a2:13:3f:d9:ab:74:b0:d9:0d:
05:38:5f:40:7e:f1:15:77:69:c1:1e:e4:cf:e8:e6:
d4:c9:0c:41:b8:ed:2b:87:14:c2:d9:ac:d4:77:f4:
ae:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6F:3D:A5:F4:08:97:1B:2D:E0:E8:1D:8F:38:5C:57:DE:6B:2F:F2
X509v3 Authority Key Identifier:
keyid:84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:24:6c:8d:4c:8a:02:ff:84:be:c3:5c:19:ed:4d:1f:e6:02:
38:68:e7:91:2f:d5:d0:5f:7a:98:32:3f:1e:2a:02:26:59:59:
98:39:c2:9b:c9:61:7e:e0:52:7e:cd:0c:7a:0b:d6:c1:dd:9a:
d5:38:0c:10:0b:e4:53:ea:81:3e:3b:12:f1:22:98:80:6f:36:
f0:2c:fe:38:49:c4:79:6c:28:b9:f5:f9:97:9b:00:df:4b:04:
9a:65:4d:e1:9c:80:f9:f1:ab:17:4a:a2:c9:a1:ca:32:85:6b:
2c:e6:f2:b3:78:86:31:ef:c1:2b:8e:c1:df:93:05:19:0d:da:
cf:66:6e:bb:59:c7:2f:95:05:1a:a1:6f:c5:be:1c:1c:3c:b0:
e1:fe:25:29:d5:b0:4c:e6:86:0b:f3:93:c3:6b:a5:68:4e:3b:
54:df:a2:b0:3a:99:45:70:ca:8f:58:6e:5d:65:2a:11:10:ae:
a2:58:06:b5:df:4a:e5:bf:a3:1d:ed:ae:dc:1e:45:5a:8c:96:
a0:d0:5c:9a:f0:a6:48:06:71:91:d4:e2:97:16:d4:47:f8:7d:
e2:2f:e3:17:fe:cc:10:99:4c:11:12:14:90:c3:f0:2c:00:d3:
33:3d:92:bf:f7:c5:d0:04:73:4c:0c:2d:6a:be:d5:99:d1:4c:
c3:10:a5:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mldVBTlNY7G34gnQOGMyCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MDU2ZTIyZGQxMjNjODM0YzBhNGFhNzQ1MTZkNWZiM2Nj
NzdkZDEwHhcNMjYwMzI1MjAwMDQ2WhcNMjYwMzI2MjAwMDQ2WjAzMTEwLwYDVQQD
Eyg1MDZmM2RhNWY0MDg5NzFiMmRlMGU4MWQ4ZjM4NWM1N2RlNmIyZmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EmdM9MWyhNSUWVCUY9kWEFkooNh
C5CTRC/zEv6u5Ddtme3tzYer0fyPdUhkwWk/mgj2XVD70SQ80BNlcOHmybhErnw+
GVQnfUSVLxFupIbjlbOkHzbN6oMi+39TQ65xPrRDi9HxIOFSXA88ipKf3/amJku1
zXLtGAKuGL3zAa1uYtS5d14Dxe90uht+E/t2OFnsBNJoca8d62hvHhxe0vqW6Iuh
25iHWf4Krm3+weKnqkNtm4ESs7A1gzUSIw7LVJ8aK7+jwxLfXlYdPpFGMvxdMy1I
lk2iEz/Zq3Sw2Q0FOF9AfvEVd2nBHuTP6ObUyQxBuO0rhxTC2azUd/Su6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBvPaX0CJcbLeDoHY84XFfeay/yMB8GA1UdIwQY
MBaAFIQFbiLdEjyDTApKp0UW1fs8x33RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEFWdUl0MFNQSU5NQ2txblJSYlYtenpIZmRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81M2E3MjEtMWY5MS00ODhhLWI1YTMt
NTljOWMzZmI5OTQ3LzEvaEFWdUl0MFNQSU5NQ2txblJSYlYtenpIZmRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC81M2E3MjEtMWY5MS00ODhhLWI1YTMtNTljOWMzZmI5OTQ3
LzEvaEFWdUl0MFNQSU5NQ2txblJSYlYtenpIZmRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYyRsjUyK
Av+EvsNcGe1NH+YCOGjnkS/V0F96mDI/HioCJllZmDnCm8lhfuBSfs0MegvWwd2a
1TgMEAvkU+qBPjsS8SKYgG828Cz+OEnEeWwoufX5l5sA30sEmmVN4ZyA+fGrF0qi
yaHKMoVrLObys3iGMe/BK47B35MFGQ3az2Zuu1nHL5UFGqFvxb4cHDyw4f4lKdWw
TOaGC/OTw2ulaE47VN+isDqZRXDKj1huXWUqERCuolgGtd9K5b+jHe2u3B5FWoyW
oNBcmvCmSAZxkdTilxbUR/h94i/jF/7MEJlMERIUkMPwLADTMz2Sv/fF0ARzTAwt
ar7VmdFMwxClVg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:31 2026 by rpki-client