Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
File: hVxdD-JZNayRq1qtpkUmAOWNJaU.mft (raw, json)
Hash identifier: B0LDMFwMR5A+5fzkEq+ZF/nNgVckoUm6WCmPVuF5C4s=
Subject key identifier: 17:BB:D4:5B:45:36:1A:DE:04:2C:E6:80:16:04:B0:22:C3:20:0D:A1
Authority key identifier: 85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
Certificate issuer: /CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Certificate serial: 019D273B30406DF3C69CBF2D25C2FF466977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 23:01:23 +0000
Manifest this update: Wed 25 Mar 2026 23:01:23 +0000
Manifest next update: Thu 26 Mar 2026 23:01:23 +0000
Files and hashes: 1: AUJqipu3yyHL71qKjNkR8O6zHZk.roa (hash: MBekRC7/l4satOgSzoeiW264yhGwWkcNQASr2IourAA=)
2: hVxdD-JZNayRq1qtpkUmAOWNJaU.crl (hash: x1hv75xCb17pOOCPKGYcNbarzCn3w1zFiwP9ORAQJYk=)
3: tcpzIe_pjPXzHyr7azFQbFyZen0.roa (hash: +9WrVu+TeVKO3brb/4DCjwpgqdCP/iS9uN4mB6tGNMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:30:40:6d:f3:c6:9c:bf:2d:25:c2:ff:46:69:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Validity
Not Before: Mar 25 23:01:23 2026 GMT
Not After : Mar 26 23:01:23 2026 GMT
Subject: CN=17bbd45b45361ade042ce6801604b022c3200da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f8:90:7d:22:12:39:c0:89:b3:79:75:df:bc:
45:b4:6d:ba:8d:f0:1c:87:15:40:a3:cf:c5:da:8f:
22:f5:7f:87:b5:26:3f:79:26:71:aa:3c:2b:ab:00:
8d:09:bb:46:6b:cd:57:37:ed:f8:5f:be:c7:a7:4a:
30:d7:e7:cc:67:15:8d:78:d4:dc:11:22:03:36:13:
07:22:e8:9c:1e:95:a6:20:8c:53:3a:b6:62:d0:61:
3e:37:11:79:30:a6:e6:ec:15:38:c2:f8:25:bf:cb:
8e:c7:ce:e8:57:68:59:81:7b:c8:9d:37:b0:7d:7d:
0c:d6:e9:f6:29:07:4b:14:02:2f:0b:bd:44:28:56:
45:10:57:9c:2c:85:3a:51:63:33:49:68:ca:c5:3b:
64:f0:1d:c8:02:31:ff:c0:d8:49:18:fd:33:10:2f:
da:ff:43:0e:5e:17:80:31:43:c7:47:2c:0c:49:03:
ce:9d:87:ad:ed:95:f2:c7:72:2e:a3:08:a1:6f:8d:
b1:81:fa:1a:21:bd:0e:a1:e3:5b:ab:ee:8c:f8:cc:
49:21:ae:ce:ce:ce:b2:29:db:cd:d6:d0:44:4b:63:
a7:fb:2a:91:51:3a:5c:5e:87:5a:f3:fb:fe:17:64:
db:30:3f:0a:2d:fe:d2:87:95:10:d1:71:be:93:2f:
42:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BB:D4:5B:45:36:1A:DE:04:2C:E6:80:16:04:B0:22:C3:20:0D:A1
X509v3 Authority Key Identifier:
keyid:85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:5e:71:c4:fe:b6:a2:b4:71:18:8f:3c:17:16:30:d9:29:14:
fa:9f:42:e3:2d:4c:6e:51:dd:b7:0f:05:9e:7a:4a:d4:5e:ab:
25:93:6e:f4:4a:1a:e6:bd:e0:66:05:39:17:d4:f7:f1:70:e7:
22:a9:91:f1:67:bd:d8:c5:70:73:bc:00:c7:f7:b7:a0:5a:53:
04:dc:98:c1:18:37:80:47:cb:3f:08:8a:c4:6c:57:69:65:8e:
3a:1d:60:e7:ea:23:9b:42:7e:5d:c6:db:70:d3:00:5d:ba:1c:
7c:cc:89:1d:63:b6:db:3f:25:41:a2:74:d4:4e:29:04:02:7b:
4f:c9:9d:c8:a0:46:a2:95:dd:32:1e:7d:0d:f3:af:92:c7:60:
30:6d:15:2a:29:ff:7f:f3:91:2e:3d:ff:9e:c2:7a:ad:fe:72:
5d:f8:09:c4:98:18:5f:5d:20:62:ae:1d:f9:1c:77:2f:f0:c2:
1a:b0:fc:8f:db:34:62:15:7c:5a:93:6d:48:a5:bb:0a:51:f0:
0f:7a:63:3c:a6:ae:fa:ea:c5:db:46:40:24:ef:2c:41:b9:5f:
83:b4:3d:15:a2:6a:a8:f1:8c:c1:03:10:b3:92:69:52:84:02:
6c:6a:56:e9:62:fe:f1:72:ff:3c:1f:d0:44:1f:01:86:ed:89:
67:7d:c0:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOzBAbfPGnL8tJcL/Rml3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NWM1ZDBmZTI1OTM1YWM5MWFiNWFhZGE2NDUyNjAwZTU4
ZDI1YTUwHhcNMjYwMzI1MjMwMTIzWhcNMjYwMzI2MjMwMTIzWjAzMTEwLwYDVQQD
EygxN2JiZDQ1YjQ1MzYxYWRlMDQyY2U2ODAxNjA0YjAyMmMzMjAwZGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArviQfSISOcCJs3l137xFtG26jfAc
hxVAo8/F2o8i9X+HtSY/eSZxqjwrqwCNCbtGa81XN+34X77Hp0ow1+fMZxWNeNTc
ESIDNhMHIuicHpWmIIxTOrZi0GE+NxF5MKbm7BU4wvglv8uOx87oV2hZgXvInTew
fX0M1un2KQdLFAIvC71EKFZFEFecLIU6UWMzSWjKxTtk8B3IAjH/wNhJGP0zEC/a
/0MOXheAMUPHRywMSQPOnYet7ZXyx3Iuowihb42xgfoaIb0OoeNbq+6M+MxJIa7O
zs6yKdvN1tBES2On+yqRUTpcXoda8/v+F2TbMD8KLf7Sh5UQ0XG+ky9CYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBe71FtFNhreBCzmgBYEsCLDIA2hMB8GA1UdIwQY
MBaAFIVcXQ/iWTWskataraZFJgDljSWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFZ4ZEQtSlpOYXlScTFxdHBrVW1BT1dOSmFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMmIwNTEtM2EyMy00ODM1LWIzMGQt
MmFmNDc5MWQ5NmViLzEvaFZ4ZEQtSlpOYXlScTFxdHBrVW1BT1dOSmFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hMmIwNTEtM2EyMy00ODM1LWIzMGQtMmFmNDc5MWQ5NmVi
LzEvaFZ4ZEQtSlpOYXlScTFxdHBrVW1BT1dOSmFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAal5xxP62
orRxGI88FxYw2SkU+p9C4y1MblHdtw8FnnpK1F6rJZNu9Eoa5r3gZgU5F9T38XDn
IqmR8We92MVwc7wAx/e3oFpTBNyYwRg3gEfLPwiKxGxXaWWOOh1g5+ojm0J+Xcbb
cNMAXbocfMyJHWO22z8lQaJ01E4pBAJ7T8mdyKBGopXdMh59DfOvksdgMG0VKin/
f/ORLj3/nsJ6rf5yXfgJxJgYX10gYq4d+Rx3L/DCGrD8j9s0YhV8WpNtSKW7ClHw
D3pjPKau+urF20ZAJO8sQblfg7Q9FaJqqPGMwQMQs5JpUoQCbGpW6WL+8XL/PB/Q
RB8Bhu2JZ33AOg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:37:05 2026 by rpki-client