Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
File: HM0FImy0wZeflqBtLrZoO1sPao4.mft (raw, json)
Hash identifier: VctrdBnRIlLieiYOH31Ghx7LQAOoqpBnXS9Es3uwA7M=
Subject key identifier: B2:2C:E3:0A:23:3B:EB:BA:E7:FC:65:58:83:CE:09:78:A3:1D:5C:0A
Authority key identifier: 1C:CD:05:22:6C:B4:C1:97:9F:96:A0:6D:2E:B6:68:3B:5B:0F:6A:8E
Certificate issuer: /CN=1ccd05226cb4c1979f96a06d2eb6683b5b0f6a8e
Certificate serial: 019E1DFE2E98167FC2397E3B0C3C34218325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
Manifest number: 190C
Signing time: Tue 12 May 2026 21:00:57 +0000
Manifest this update: Tue 12 May 2026 21:00:57 +0000
Manifest next update: Wed 13 May 2026 21:00:57 +0000
Files and hashes: 1: HM0FImy0wZeflqBtLrZoO1sPao4.crl (hash: s1Qz8tv8Gq1fNYMcLt7+n52ISx9yfW2/350yPUYn9Gg=)
2: w0HfD9OyluQqly0Onm0X_I_L5yk.roa (hash: Z0gnGoagQr+uA1M5JDoWrnZSUOuqJJgP2N6rVdd6JcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:2e:98:16:7f:c2:39:7e:3b:0c:3c:34:21:83:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccd05226cb4c1979f96a06d2eb6683b5b0f6a8e
Validity
Not Before: May 12 21:00:57 2026 GMT
Not After : May 13 21:00:57 2026 GMT
Subject: CN=b22ce30a233bebbae7fc655883ce0978a31d5c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:8e:6e:a3:34:d7:2a:ae:a2:08:62:7a:57:
3e:74:7d:23:aa:21:78:a4:b7:af:76:8d:9d:40:71:
13:4e:0e:ee:66:ba:f5:50:c4:ee:47:58:6c:1e:0a:
03:81:16:29:78:93:c3:d0:be:c8:ec:05:5f:33:46:
78:25:21:2f:b2:46:c2:56:95:6c:9f:78:3d:6d:81:
f1:80:2d:78:ea:f1:9c:72:b9:38:e0:09:f9:a1:e0:
57:72:77:2f:f5:42:a5:87:d6:45:81:66:42:2e:bf:
04:60:64:dc:8f:6c:e4:57:65:df:ab:10:3e:d5:50:
31:c5:07:ae:56:93:4a:6b:f7:7f:7e:c4:87:99:25:
c8:a2:3a:a7:fa:39:48:1c:7d:bc:a9:57:c0:d4:57:
8a:db:ef:ee:3d:73:08:9d:9a:5d:9e:f0:b6:76:18:
e1:0b:63:50:e0:c8:fa:97:09:aa:83:af:29:c7:f1:
6b:96:f7:ca:78:30:bb:cc:22:62:58:72:9c:98:0d:
74:b7:15:6d:b4:27:c5:a0:fe:8e:f5:42:77:1c:f0:
df:d4:1c:2a:95:e7:7f:93:db:8b:e7:d9:e1:ad:91:
25:96:65:dc:7c:45:ef:d9:57:8d:d6:29:eb:c2:5f:
24:45:7f:41:3f:a2:57:88:e2:05:b8:53:f2:f9:0a:
15:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2C:E3:0A:23:3B:EB:BA:E7:FC:65:58:83:CE:09:78:A3:1D:5C:0A
X509v3 Authority Key Identifier:
keyid:1C:CD:05:22:6C:B4:C1:97:9F:96:A0:6D:2E:B6:68:3B:5B:0F:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c8:70:85:7b:b3:48:74:8f:45:19:e3:c3:84:fc:73:35:00:
e9:c8:72:04:5a:0b:4b:4f:7f:1e:ae:f7:4f:07:f3:f9:e2:69:
09:8b:bf:d9:61:72:22:23:74:d2:84:24:ef:26:55:f7:a2:09:
66:12:0d:1c:b9:18:51:d8:5f:0f:c2:39:21:05:cc:cf:ac:df:
7a:b0:e9:04:c7:4b:5e:86:a0:5a:0c:79:e4:7a:eb:38:64:ca:
89:81:5e:dc:ef:5e:3b:1c:b1:98:73:77:d3:9a:29:37:a8:ee:
bb:52:45:79:5a:2b:27:a0:5e:4f:85:d6:f1:44:76:83:f5:83:
4a:e8:25:9d:95:cd:c5:d4:8d:5f:cc:b8:06:ad:37:0c:41:c9:
57:99:06:39:b9:3b:e2:8e:14:5f:4e:ed:50:85:b0:6c:fb:3b:
79:3a:24:48:99:19:fd:a6:6d:b1:91:27:48:f2:bb:b6:38:b6:
9f:ea:4e:86:83:dc:b3:d2:52:22:8c:2b:6e:d7:78:ed:ba:ef:
d5:53:e6:3c:8a:6b:74:35:69:45:df:76:be:21:40:40:33:76:
3d:7d:07:5d:7a:f7:1e:d5:91:f2:dd:32:ec:2d:0a:dc:e3:68:
08:a1:6a:83:15:70:6f:f2:19:78:30:6c:a7:f1:8b:0a:e1:59:
06:a8:a6:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/i6YFn/COX47DDw0IYMlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjY2QwNTIyNmNiNGMxOTc5Zjk2YTA2ZDJlYjY2ODNiNWIw
ZjZhOGUwHhcNMjYwNTEyMjEwMDU3WhcNMjYwNTEzMjEwMDU3WjAzMTEwLwYDVQQD
EyhiMjJjZTMwYTIzM2JlYmJhZTdmYzY1NTg4M2NlMDk3OGEzMWQ1YzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMSObqM01yquoghielc+dH0jqiF4
pLevdo2dQHETTg7uZrr1UMTuR1hsHgoDgRYpeJPD0L7I7AVfM0Z4JSEvskbCVpVs
n3g9bYHxgC146vGccrk44An5oeBXcncv9UKlh9ZFgWZCLr8EYGTcj2zkV2XfqxA+
1VAxxQeuVpNKa/d/fsSHmSXIojqn+jlIHH28qVfA1FeK2+/uPXMInZpdnvC2dhjh
C2NQ4Mj6lwmqg68px/FrlvfKeDC7zCJiWHKcmA10txVttCfFoP6O9UJ3HPDf1Bwq
led/k9uL59nhrZEllmXcfEXv2VeN1inrwl8kRX9BP6JXiOIFuFPy+QoVDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIs4wojO+u65/xlWIPOCXijHVwKMB8GA1UdIwQY
MBaAFBzNBSJstMGXn5agbS62aDtbD2qOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE0wRklteTB3WmVmbHFCdExyWm9PMXNQYW80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lMjE3MzktYjAwYi00MWM4LWE2NDUt
ZGI5YzNhMGMwOGI5LzEvSE0wRklteTB3WmVmbHFCdExyWm9PMXNQYW80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9lMjE3MzktYjAwYi00MWM4LWE2NDUtZGI5YzNhMGMwOGI5
LzEvSE0wRklteTB3WmVmbHFCdExyWm9PMXNQYW80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhchwhXuz
SHSPRRnjw4T8czUA6chyBFoLS09/Hq73Twfz+eJpCYu/2WFyIiN00oQk7yZV96IJ
ZhINHLkYUdhfD8I5IQXMz6zferDpBMdLXoagWgx55HrrOGTKiYFe3O9eOxyxmHN3
05opN6juu1JFeVorJ6BeT4XW8UR2g/WDSuglnZXNxdSNX8y4Bq03DEHJV5kGObk7
4o4UX07tUIWwbPs7eTokSJkZ/aZtsZEnSPK7tji2n+pOhoPcs9JSIowrbtd47brv
1VPmPIprdDVpRd92viFAQDN2PX0HXXr3HtWR8t0y7C0K3ONoCKFqgxVwb/IZeDBs
p/GLCuFZBqimaw==
-----END CERTIFICATE-----
Generated at Wed May 13 07:03:40 2026 by rpki-client