Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
File: hNHcYT105sMty5gUzhJr1htSqqc.mft (raw, json)
Hash identifier: Cb+GLz5BK6FR/WpsAN5WiOmhk1UrJEsMpcZnfMUUje4=
Subject key identifier: 1C:28:1B:F7:0C:6D:43:D9:6D:2C:5D:F2:6F:79:3F:C6:C9:A1:63:CB
Authority key identifier: 84:D1:DC:61:3D:74:E6:C3:2D:CB:98:14:CE:12:6B:D6:1B:52:AA:A7
Certificate issuer: /CN=84d1dc613d74e6c32dcb9814ce126bd61b52aaa7
Certificate serial: 019D25BA5A34B072417DF0CE5344F31C244F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 16:01:02 +0000
Manifest this update: Wed 25 Mar 2026 16:01:02 +0000
Manifest next update: Thu 26 Mar 2026 16:01:02 +0000
Files and hashes: 1: H6AvCEiySRywPqnoqPga4bVAQxg.roa (hash: nQJRt0EmcoJ2XDzeO3DLhVTm+C2u2iMFsb1catI5sW4=)
2: hNHcYT105sMty5gUzhJr1htSqqc.crl (hash: hvLJ4s5byAfyBdX4tsNj0VajgUr2oNcEXau4iboRieM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:5a:34:b0:72:41:7d:f0:ce:53:44:f3:1c:24:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d1dc613d74e6c32dcb9814ce126bd61b52aaa7
Validity
Not Before: Mar 25 16:01:02 2026 GMT
Not After : Mar 26 16:01:02 2026 GMT
Subject: CN=1c281bf70c6d43d96d2c5df26f793fc6c9a163cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ba:2d:d7:f4:e9:41:ae:35:a0:0e:cb:25:89:
9d:1a:7c:9b:08:69:bb:e2:26:7e:8d:b4:6b:0a:5a:
a2:aa:70:20:5e:e3:8a:6f:93:e1:80:aa:76:b8:dd:
97:49:7f:c7:4b:30:fe:85:cc:07:49:f9:d2:53:0d:
9d:98:cc:84:bd:33:c1:14:01:79:09:de:c2:c6:a5:
58:1c:3d:a9:48:66:8e:2a:24:5d:3e:9e:d1:b3:b6:
15:c2:66:aa:5b:c5:67:dc:a3:88:08:53:ab:a3:8d:
b2:70:f8:0a:66:84:2a:6d:26:71:76:fc:c9:24:b1:
40:58:1b:1c:c4:1f:93:88:8f:da:74:2c:c2:7a:05:
b0:7f:e8:71:11:fd:69:12:92:c0:e4:43:69:d3:32:
9c:68:d0:12:4c:0f:36:c4:45:61:9a:45:55:6e:5c:
b4:75:79:99:3a:ba:a1:e3:6f:84:b8:11:48:57:5d:
81:41:7a:22:e4:44:7d:3c:b1:dc:e0:26:53:e4:ac:
d8:94:1f:7b:ce:60:e0:81:33:f0:36:dc:00:98:e3:
cf:9e:a5:60:88:f0:00:ae:95:81:cf:ec:d3:a2:d4:
68:18:0c:84:5e:78:5c:5c:8f:27:88:52:7f:cd:60:
3a:8c:06:be:9b:e0:83:d3:4c:42:0d:11:28:50:f9:
2b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:28:1B:F7:0C:6D:43:D9:6D:2C:5D:F2:6F:79:3F:C6:C9:A1:63:CB
X509v3 Authority Key Identifier:
keyid:84:D1:DC:61:3D:74:E6:C3:2D:CB:98:14:CE:12:6B:D6:1B:52:AA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d0:9e:09:a0:05:39:25:62:07:c0:39:b4:1a:92:cb:2d:05:
cd:f1:ef:92:33:e9:f9:d3:a2:52:96:f2:16:cf:c4:50:c6:c8:
cc:59:82:e8:2e:1e:c7:06:e9:78:a6:0f:34:d9:5e:41:99:ad:
bb:2d:c8:04:65:59:84:5c:61:5d:6a:7d:f4:20:60:4c:39:4e:
4c:a6:92:62:34:32:3c:e9:db:6f:7b:9c:2e:45:f0:2a:28:fd:
1b:06:1c:0c:21:4b:f2:90:1b:38:10:2f:4d:fe:a8:cc:4b:e7:
35:19:d2:d7:e9:f6:d7:8b:9b:d0:2e:30:88:eb:f6:27:69:4a:
ca:80:3a:7e:66:62:4e:96:43:ef:94:c9:2c:95:0e:2e:c9:79:
ad:a6:f8:56:1c:79:06:98:e8:42:37:88:37:64:9c:7f:80:4e:
c5:4e:f4:65:50:22:05:f7:a1:44:14:65:bc:59:b7:0f:db:72:
1d:27:c8:2b:93:4a:42:5b:86:33:96:74:bf:e0:65:62:e1:15:
70:22:64:d6:bb:b9:55:2a:99:b3:50:e9:1d:2d:4b:b8:7f:69:
a5:22:b8:63:c9:ec:74:07:3c:e3:e8:20:da:8a:53:ca:0d:00:
de:a2:1b:33:d6:a7:bc:c1:3b:16:60:d3:64:35:01:6b:f6:b7:
b0:63:41:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lulo0sHJBffDOU0TzHCRPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZDFkYzYxM2Q3NGU2YzMyZGNiOTgxNGNlMTI2YmQ2MWI1
MmFhYTcwHhcNMjYwMzI1MTYwMTAyWhcNMjYwMzI2MTYwMTAyWjAzMTEwLwYDVQQD
EygxYzI4MWJmNzBjNmQ0M2Q5NmQyYzVkZjI2Zjc5M2ZjNmM5YTE2M2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7ot1/TpQa41oA7LJYmdGnybCGm7
4iZ+jbRrClqiqnAgXuOKb5PhgKp2uN2XSX/HSzD+hcwHSfnSUw2dmMyEvTPBFAF5
Cd7CxqVYHD2pSGaOKiRdPp7Rs7YVwmaqW8Vn3KOICFOro42ycPgKZoQqbSZxdvzJ
JLFAWBscxB+TiI/adCzCegWwf+hxEf1pEpLA5ENp0zKcaNASTA82xEVhmkVVbly0
dXmZOrqh42+EuBFIV12BQXoi5ER9PLHc4CZT5KzYlB97zmDggTPwNtwAmOPPnqVg
iPAArpWBz+zTotRoGAyEXnhcXI8niFJ/zWA6jAa+m+CD00xCDREoUPkrOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwoG/cMbUPZbSxd8m95P8bJoWPLMB8GA1UdIwQY
MBaAFITR3GE9dObDLcuYFM4Sa9YbUqqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaE5IY1lUMTA1c010eTVnVXpoSnIxaHRTcXFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy80ZTAyMDEtNGEwNC00MTVmLWE1ZjIt
ZjIxYjY2ZGU5YjU2LzEvaE5IY1lUMTA1c010eTVnVXpoSnIxaHRTcXFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy80ZTAyMDEtNGEwNC00MTVmLWE1ZjItZjIxYjY2ZGU5YjU2
LzEvaE5IY1lUMTA1c010eTVnVXpoSnIxaHRTcXFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMtCeCaAF
OSViB8A5tBqSyy0FzfHvkjPp+dOiUpbyFs/EUMbIzFmC6C4exwbpeKYPNNleQZmt
uy3IBGVZhFxhXWp99CBgTDlOTKaSYjQyPOnbb3ucLkXwKij9GwYcDCFL8pAbOBAv
Tf6ozEvnNRnS1+n214ub0C4wiOv2J2lKyoA6fmZiTpZD75TJLJUOLsl5rab4Vhx5
BpjoQjeIN2Scf4BOxU70ZVAiBfehRBRlvFm3D9tyHSfIK5NKQluGM5Z0v+BlYuEV
cCJk1ru5VSqZs1DpHS1LuH9ppSK4Y8nsdAc84+gg2opTyg0A3qIbM9anvME7FmDT
ZDUBa/a3sGNBLw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:36 2026 by rpki-client