Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
File: hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft (raw, json)
Hash identifier: HeXSfhX0b8aBdHJk1R4iAV2WcoUgSFYQ8ZiEUzNy/Xs=
Subject key identifier: 62:98:EA:E9:B3:2D:50:E5:AE:A4:1D:F4:BC:F8:11:FF:D0:BC:BD:3E
Authority key identifier: 86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A
Certificate issuer: /CN=8636a4e14a71ddd510164b8631ad99bbfc75953a
Certificate serial: 019D26CD68049236974D6EB082855DA89FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
Manifest number: 094E
Signing time: Wed 25 Mar 2026 21:01:28 +0000
Manifest this update: Wed 25 Mar 2026 21:01:28 +0000
Manifest next update: Thu 26 Mar 2026 21:01:28 +0000
Files and hashes: 1: WtgXE39DdCE223Yp5cqwRF2OpRc.roa (hash: WSh6Jbx8iIE9YysODbpQ1Bnbl7VrRIsF4AcffIwuVtI=)
2: hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl (hash: OfvTy2Tl1WCfE/JzSkLR2YXN9CabTxkj1IPH22eNvl4=)
3: uZC2Oolvh10fjGcoJmlzCJ379EA.roa (hash: UJyNhQ5Ff8oDI5Ix+vNwgvmwA/IA7Tv/YFbcLrBBXmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:68:04:92:36:97:4d:6e:b0:82:85:5d:a8:9f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8636a4e14a71ddd510164b8631ad99bbfc75953a
Validity
Not Before: Mar 25 21:01:28 2026 GMT
Not After : Mar 26 21:01:28 2026 GMT
Subject: CN=6298eae9b32d50e5aea41df4bcf811ffd0bcbd3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f1:1f:01:51:8c:83:db:f8:2b:6b:bd:70:df:
8c:13:b5:bf:ea:fc:90:ae:bb:a0:f8:22:4c:cb:c3:
80:91:ea:ae:2a:29:32:f9:e5:bb:73:31:9e:51:d9:
92:09:6a:41:1d:00:a4:ab:92:7c:4c:b3:a1:f5:33:
6d:3e:ea:aa:cb:17:04:22:d8:67:8f:eb:2a:4e:d0:
2a:01:20:ce:f7:40:6b:77:f6:8c:f1:7d:a0:6b:29:
f1:bc:c2:da:e9:c5:fa:d7:85:b4:f3:cb:16:a5:af:
66:26:c5:bd:f1:a4:dc:cb:5a:14:f0:2e:16:09:23:
47:a7:16:70:18:77:95:2b:52:df:cd:e3:89:30:ce:
8d:67:21:79:04:74:e1:17:02:aa:82:55:6a:7e:58:
ea:e7:bb:dc:05:6d:8d:11:c5:99:b4:50:82:9d:bf:
5e:ec:55:98:8b:49:8f:ae:a3:97:e8:e2:63:d3:de:
f9:ec:b7:76:5d:72:e4:98:2f:cf:78:26:5e:7e:71:
95:97:a4:02:23:ba:2c:4e:4a:c1:4e:4d:df:0f:90:
b9:2e:6c:21:d0:5b:03:a1:f2:7f:38:7f:db:d2:d1:
ef:ef:ca:3b:8f:26:ed:36:33:75:49:9f:36:d5:ca:
aa:2e:e7:3f:0c:3a:87:e0:aa:0a:da:05:8d:8c:80:
8c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:98:EA:E9:B3:2D:50:E5:AE:A4:1D:F4:BC:F8:11:FF:D0:BC:BD:3E
X509v3 Authority Key Identifier:
keyid:86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:cc:2f:b8:20:f6:f4:d8:7c:0c:69:77:12:ce:43:e2:5b:67:
df:33:c8:f7:c4:51:42:35:c4:c5:1c:d0:ed:7c:37:1a:ef:4c:
38:a1:b8:8a:c7:80:b0:f0:ae:dc:b6:17:31:29:d2:05:fa:1e:
72:ac:c8:9f:40:89:22:31:57:ae:df:d9:41:12:7f:19:67:9f:
36:4e:4d:49:ff:d6:f9:39:c9:88:8e:13:c1:a4:ed:9d:ab:6c:
49:23:43:2b:1d:e6:e8:16:e4:4c:cd:ae:55:1d:75:31:55:37:
09:c7:0a:bc:6c:06:88:4a:51:63:88:ae:d4:b9:41:f8:c5:f5:
f9:ca:65:59:cc:40:17:01:4e:da:62:a6:2b:f7:8d:18:b4:28:
44:c9:c3:f6:7c:de:03:d6:23:4d:65:5f:48:42:50:50:ad:ac:
50:81:4f:69:ec:56:a7:95:83:05:1d:e0:2e:50:88:01:75:17:
f3:82:e6:c7:00:f1:ae:45:af:90:f8:74:27:81:50:41:9e:d1:
24:59:30:4a:7d:25:b9:58:83:4d:81:08:35:86:e9:c8:77:f9:
b6:eb:71:91:d9:ba:e1:2b:b3:1e:4e:17:b7:1c:83:60:cf:b3:
f0:42:b8:2f:52:4b:01:e4:da:bb:35:67:f9:90:8e:bb:51:6a:
f4:6a:1a:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzWgEkjaXTW6wgoVdqJ/mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MzZhNGUxNGE3MWRkZDUxMDE2NGI4NjMxYWQ5OWJiZmM3
NTk1M2EwHhcNMjYwMzI1MjEwMTI4WhcNMjYwMzI2MjEwMTI4WjAzMTEwLwYDVQQD
Eyg2Mjk4ZWFlOWIzMmQ1MGU1YWVhNDFkZjRiY2Y4MTFmZmQwYmNiZDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPEfAVGMg9v4K2u9cN+ME7W/6vyQ
rrug+CJMy8OAkequKiky+eW7czGeUdmSCWpBHQCkq5J8TLOh9TNtPuqqyxcEIthn
j+sqTtAqASDO90Brd/aM8X2gaynxvMLa6cX614W088sWpa9mJsW98aTcy1oU8C4W
CSNHpxZwGHeVK1LfzeOJMM6NZyF5BHThFwKqglVqfljq57vcBW2NEcWZtFCCnb9e
7FWYi0mPrqOX6OJj09757Ld2XXLkmC/PeCZefnGVl6QCI7osTkrBTk3fD5C5Lmwh
0FsDofJ/OH/b0tHv78o7jybtNjN1SZ821cqqLuc/DDqH4KoK2gWNjICMxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKY6umzLVDlrqQd9Lz4Ef/QvL0+MB8GA1UdIwQY
MBaAFIY2pOFKcd3VEBZLhjGtmbv8dZU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGphazRVcHgzZFVRRmt1R01hMlp1X3gxbFRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jZGVjYTMtNGVmMS00NWFkLTg5MjIt
MmY3Y2Y4NDQ2YTMxLzEvaGphazRVcHgzZFVRRmt1R01hMlp1X3gxbFRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9jZGVjYTMtNGVmMS00NWFkLTg5MjItMmY3Y2Y4NDQ2YTMx
LzEvaGphazRVcHgzZFVRRmt1R01hMlp1X3gxbFRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdcwvuCD2
9Nh8DGl3Es5D4ltn3zPI98RRQjXExRzQ7Xw3Gu9MOKG4iseAsPCu3LYXMSnSBfoe
cqzIn0CJIjFXrt/ZQRJ/GWefNk5NSf/W+TnJiI4TwaTtnatsSSNDKx3m6BbkTM2u
VR11MVU3CccKvGwGiEpRY4iu1LlB+MX1+cplWcxAFwFO2mKmK/eNGLQoRMnD9nze
A9YjTWVfSEJQUK2sUIFPaexWp5WDBR3gLlCIAXUX84LmxwDxrkWvkPh0J4FQQZ7R
JFkwSn0luViDTYEINYbpyHf5tutxkdm64SuzHk4XtxyDYM+z8EK4L1JLAeTauzVn
+ZCOu1Fq9Goa+g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:43:07 2026 by rpki-client