Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.mft
File: hlEiwOVi5AeXaCPZThnip5T4y2I.mft (raw, json)
Hash identifier: m697lHqUqd3FPBM+ohh1/TBj/mE74nIcDyFub0rf+SU=
Subject key identifier: FE:9C:17:4D:AE:CF:79:BF:58:F3:C0:C5:EF:11:0A:E4:08:C1:6B:AA
Authority key identifier: 86:51:22:C0:E5:62:E4:07:97:68:23:D9:4E:19:E2:A7:94:F8:CB:62
Certificate issuer: /CN=865122c0e562e407976823d94e19e2a794f8cb62
Certificate serial: 019D27724F22F7F2D0179C3A854912FB8DC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hlEiwOVi5AeXaCPZThnip5T4y2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.mft
Manifest number: 1816
Signing time: Thu 26 Mar 2026 00:01:35 +0000
Manifest this update: Thu 26 Mar 2026 00:01:35 +0000
Manifest next update: Fri 27 Mar 2026 00:01:35 +0000
Files and hashes: 1: YvcDMestY9X7wmYPi3GUVazWTT8.roa (hash: XANK4dLT4WRniF1gFGKD3AM4xZkWl+FQBiK8+nHkS3E=)
2: hlEiwOVi5AeXaCPZThnip5T4y2I.crl (hash: +A64ADwRH2VFhYPb9/Rq/EdIxMC3fltkBTcwPH7BUFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hlEiwOVi5AeXaCPZThnip5T4y2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:4f:22:f7:f2:d0:17:9c:3a:85:49:12:fb:8d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865122c0e562e407976823d94e19e2a794f8cb62
Validity
Not Before: Mar 26 00:01:35 2026 GMT
Not After : Mar 27 00:01:35 2026 GMT
Subject: CN=fe9c174daecf79bf58f3c0c5ef110ae408c16baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4f:81:85:ee:75:be:d3:61:5b:53:dc:3f:b3:
4e:7a:0d:26:c8:2c:72:76:3c:67:d7:22:fd:7f:6e:
02:a9:b9:64:3a:8f:5e:5e:32:ba:01:53:7c:4b:89:
bb:bf:f0:fd:63:a9:38:6c:92:13:7a:43:53:ac:ce:
72:87:9d:db:1f:a7:c2:85:63:1b:14:34:de:94:61:
64:77:b0:c7:68:d6:3f:59:49:75:13:29:20:aa:6b:
d5:42:59:a7:f1:45:39:41:6d:42:bc:95:48:b5:36:
a2:37:05:43:e4:40:98:75:14:e6:1e:1a:4b:5c:58:
68:1d:c3:aa:e5:a9:ac:3f:44:93:c3:7b:0b:1a:e0:
4b:66:dc:b9:f7:b6:99:69:0e:15:73:25:89:17:02:
9f:78:48:73:37:3e:c1:4c:08:70:44:ce:8c:82:68:
45:95:f5:1b:64:85:e4:fa:75:58:b5:94:1e:50:35:
a4:68:d6:64:b9:17:ef:8a:bb:63:1d:25:0f:2e:b6:
f2:b6:b5:a9:be:c2:ea:79:bf:31:05:6c:ca:ce:8d:
5d:ab:30:ea:f2:7b:8b:71:d0:e0:f4:15:3d:21:6f:
0c:10:29:84:d4:b0:80:90:cf:44:3b:e8:0b:16:1f:
15:5c:20:9c:98:ec:35:fe:58:f1:c8:99:78:99:2e:
b0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9C:17:4D:AE:CF:79:BF:58:F3:C0:C5:EF:11:0A:E4:08:C1:6B:AA
X509v3 Authority Key Identifier:
keyid:86:51:22:C0:E5:62:E4:07:97:68:23:D9:4E:19:E2:A7:94:F8:CB:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hlEiwOVi5AeXaCPZThnip5T4y2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/028b82-fe03-4025-9765-b8dd18e48e86/1/hlEiwOVi5AeXaCPZThnip5T4y2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9d:91:91:71:39:ad:cf:1e:3b:67:32:40:4a:0a:28:8a:9d:
25:06:a2:4a:f5:74:9a:dd:c4:7e:20:db:65:c6:76:81:7a:d9:
c9:87:d0:47:df:21:10:ea:21:0d:9e:f0:88:e3:d7:2f:78:10:
81:a5:50:c7:13:db:52:e4:12:f7:24:02:0d:f0:6f:23:27:be:
c8:58:44:a4:6a:35:ea:4f:09:c9:64:83:0c:63:e2:d5:95:14:
5f:57:20:65:4c:8d:c7:0f:42:c3:ff:f3:ad:54:02:5e:b3:ac:
27:af:32:6b:e8:ac:eb:e1:87:38:30:50:43:1f:33:a6:76:20:
80:29:8d:e0:19:16:f9:1c:2c:d4:35:51:f2:03:77:d7:dc:db:
b0:bd:18:af:f9:4f:7f:57:42:99:bf:d2:ea:9e:cb:55:11:68:
25:b9:c9:7f:d1:df:c8:d4:e0:75:eb:f1:bb:58:bc:d3:09:c8:
87:8f:dc:86:0f:ad:7f:4b:9d:12:01:a9:54:2e:29:c1:7d:2f:
a6:6f:db:00:a5:65:1c:55:ed:ca:c6:58:b7:08:8a:3c:4b:7a:
a5:2e:af:bb:37:a5:a8:ba:28:1f:77:a5:f8:3b:68:4f:ff:a5:
dd:8b:fb:9d:c6:33:c2:f5:f2:57:b5:03:66:91:bd:60:d6:8e:
d9:4c:19:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nck8i9/LQF5w6hUkS+43BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NTEyMmMwZTU2MmU0MDc5NzY4MjNkOTRlMTllMmE3OTRm
OGNiNjIwHhcNMjYwMzI2MDAwMTM1WhcNMjYwMzI3MDAwMTM1WjAzMTEwLwYDVQQD
EyhmZTljMTc0ZGFlY2Y3OWJmNThmM2MwYzVlZjExMGFlNDA4YzE2YmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0+Bhe51vtNhW1PcP7NOeg0myCxy
djxn1yL9f24CqblkOo9eXjK6AVN8S4m7v/D9Y6k4bJITekNTrM5yh53bH6fChWMb
FDTelGFkd7DHaNY/WUl1EykgqmvVQlmn8UU5QW1CvJVItTaiNwVD5ECYdRTmHhpL
XFhoHcOq5amsP0STw3sLGuBLZty597aZaQ4VcyWJFwKfeEhzNz7BTAhwRM6MgmhF
lfUbZIXk+nVYtZQeUDWkaNZkuRfvirtjHSUPLrbytrWpvsLqeb8xBWzKzo1dqzDq
8nuLcdDg9BU9IW8MECmE1LCAkM9EO+gLFh8VXCCcmOw1/ljxyJl4mS6wKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6cF02uz3m/WPPAxe8RCuQIwWuqMB8GA1UdIwQY
MBaAFIZRIsDlYuQHl2gj2U4Z4qeU+MtiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGxFaXdPVmk1QWVYYUNQWlRobmlwNVQ0eTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wMjhiODItZmUwMy00MDI1LTk3NjUt
YjhkZDE4ZTQ4ZTg2LzEvaGxFaXdPVmk1QWVYYUNQWlRobmlwNVQ0eTJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8wMjhiODItZmUwMy00MDI1LTk3NjUtYjhkZDE4ZTQ4ZTg2
LzEvaGxFaXdPVmk1QWVYYUNQWlRobmlwNVQ0eTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMp2RkXE5
rc8eO2cyQEoKKIqdJQaiSvV0mt3EfiDbZcZ2gXrZyYfQR98hEOohDZ7wiOPXL3gQ
gaVQxxPbUuQS9yQCDfBvIye+yFhEpGo16k8JyWSDDGPi1ZUUX1cgZUyNxw9Cw//z
rVQCXrOsJ68ya+is6+GHODBQQx8zpnYggCmN4BkW+Rws1DVR8gN319zbsL0Yr/lP
f1dCmb/S6p7LVRFoJbnJf9HfyNTgdevxu1i80wnIh4/chg+tf0udEgGpVC4pwX0v
pm/bAKVlHFXtysZYtwiKPEt6pS6vuzelqLooH3el+DtoT/+l3Yv7ncYzwvXyV7UD
ZpG9YNaO2UwZ2A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:52 2026 by rpki-client