Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
File: HFSfxdaCmHhMakxbyZrn0wFqGKM.mft (raw, json)
Hash identifier: E5oIuy2XsTQ6SbBzbuctkD3mC8Yqknp6SvOx2FGbvuY=
Subject key identifier: 46:DE:7A:D0:CD:BF:08:7E:B6:82:07:DD:38:81:8A:C9:9C:57:37:E3
Authority key identifier: 1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
Certificate issuer: /CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Certificate serial: 019D265F40503EF8B48ED8E93DF0B66C5A50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
Manifest number: 1214
Signing time: Wed 25 Mar 2026 19:01:09 +0000
Manifest this update: Wed 25 Mar 2026 19:01:09 +0000
Manifest next update: Thu 26 Mar 2026 19:01:09 +0000
Files and hashes: 1: HFSfxdaCmHhMakxbyZrn0wFqGKM.crl (hash: TQPhOLV0o2wRxgtCO5NKSLSDRmftBlXcp3RD+Ih574Y=)
2: UHpyY7NbwprGP2Xux1Br7Qg2UA4.roa (hash: OnUFEX1JE94qw8lGszNtj2Di00Nt/AvUN+2g8yyjt/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:40:50:3e:f8:b4:8e:d8:e9:3d:f0:b6:6c:5a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3
Validity
Not Before: Mar 25 19:01:09 2026 GMT
Not After : Mar 26 19:01:09 2026 GMT
Subject: CN=46de7ad0cdbf087eb68207dd38818ac99c5737e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2a:9e:76:fd:4e:d2:27:a7:8b:0a:7c:5d:da:
76:f8:1f:32:4c:aa:cd:c9:a7:51:5e:6d:61:70:db:
bd:15:14:a2:98:ae:b1:d5:72:72:63:b6:21:63:e7:
38:cf:11:fb:14:21:e6:e1:c6:a5:3c:ad:fa:d0:ad:
20:f0:b1:c2:d4:7b:f7:1b:70:30:0c:b6:af:db:16:
da:a9:4d:e0:b6:56:7f:ab:38:ed:17:78:1d:dd:6a:
fd:83:2e:16:fb:ad:75:6e:d9:9b:fe:e8:2d:35:2b:
22:96:19:c2:59:c9:15:a0:e8:08:9e:46:54:c9:f7:
d3:31:2b:9f:81:a6:f5:c7:6a:60:b2:1c:42:2e:35:
31:51:c7:77:4f:ad:db:aa:f3:9a:5b:2a:25:39:1f:
08:d0:14:0e:80:83:b3:a1:f4:44:ce:f9:eb:ad:d6:
4a:8d:de:0b:71:4e:d1:6d:44:b1:d3:8d:b9:a6:e7:
db:1e:16:56:c3:01:37:37:e4:85:75:f6:62:b7:d1:
8c:65:46:1e:0f:a0:ec:aa:64:db:9c:70:04:b9:f4:
0c:4c:fb:0c:ae:f4:7d:09:fb:30:51:fd:3d:8f:47:
17:9e:8a:d3:db:63:40:43:fd:59:7a:c8:c9:41:7f:
83:6a:dc:37:01:b0:dc:d0:32:a0:b1:d9:be:ba:c2:
03:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DE:7A:D0:CD:BF:08:7E:B6:82:07:DD:38:81:8A:C9:9C:57:37:E3
X509v3 Authority Key Identifier:
keyid:1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ce:e0:ab:0d:23:4b:e1:61:bd:c6:ad:32:c0:87:74:55:e7:
8a:1e:3a:0f:00:18:88:2b:e1:de:92:44:ad:57:88:7c:20:8d:
40:06:c2:74:d2:8d:c2:55:54:bd:bb:cd:77:39:8f:99:ec:54:
98:dd:bb:aa:82:6c:bf:d1:d4:8e:b3:31:32:63:dd:f2:05:c6:
8d:0f:37:9f:5e:7f:d8:5f:55:b2:9c:3b:4d:40:11:d1:74:5d:
2a:62:fe:ee:a3:0c:d8:00:d9:42:85:0e:61:ef:a8:fe:df:31:
e9:ac:2f:8c:a6:ac:f0:2f:f7:5c:7e:2d:b7:7b:89:a7:89:53:
e5:cf:79:93:4d:62:f7:4c:dc:a2:b9:bb:d9:ed:5e:f5:d8:bb:
5e:5c:90:a0:c9:73:a8:fd:8f:0c:0a:df:d4:22:8b:b8:50:3d:
f5:e6:6b:c4:6e:f2:a7:b3:fc:30:a8:60:3f:46:e3:32:b8:7a:
fa:ee:ef:37:ca:6b:cf:a0:eb:3a:cc:c5:b0:c0:55:e8:f8:88:
40:a4:7d:12:11:78:90:ef:1e:79:b5:bd:2a:bf:4f:56:e0:32:
3a:2b:32:18:d9:e7:bf:80:60:33:9a:c5:58:9e:09:f8:99:c2:
3b:25:46:02:7e:91:b2:52:38:a6:10:68:87:16:69:e4:e3:e8:
f0:a6:53:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX0BQPvi0jtjpPfC2bFpQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNTQ5ZmM1ZDY4Mjk4Nzg0YzZhNGM1YmM5OWFlN2QzMDE2
YTE4YTMwHhcNMjYwMzI1MTkwMTA5WhcNMjYwMzI2MTkwMTA5WjAzMTEwLwYDVQQD
Eyg0NmRlN2FkMGNkYmYwODdlYjY4MjA3ZGQzODgxOGFjOTljNTczN2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Sqedv1O0ieniwp8Xdp2+B8yTKrN
yadRXm1hcNu9FRSimK6x1XJyY7YhY+c4zxH7FCHm4calPK360K0g8LHC1Hv3G3Aw
DLav2xbaqU3gtlZ/qzjtF3gd3Wr9gy4W+611btmb/ugtNSsilhnCWckVoOgInkZU
yffTMSufgab1x2pgshxCLjUxUcd3T63bqvOaWyolOR8I0BQOgIOzofREzvnrrdZK
jd4LcU7RbUSx0425pufbHhZWwwE3N+SFdfZit9GMZUYeD6DsqmTbnHAEufQMTPsM
rvR9CfswUf09j0cXnorT22NAQ/1ZesjJQX+Datw3AbDc0DKgsdm+usIDbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbeetDNvwh+toIH3TiBismcVzfjMB8GA1UdIwQY
MBaAFBxUn8XWgph4TGpMW8ma59MBahijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEZTZnhkYUNtSGhNYWt4Ynlacm4wd0ZxR0tNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84NTRiZDMtNTA5OC00OTY0LWJiMzUt
NTI0MWUzMWNkOGRhLzEvSEZTZnhkYUNtSGhNYWt4Ynlacm4wd0ZxR0tNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy84NTRiZDMtNTA5OC00OTY0LWJiMzUtNTI0MWUzMWNkOGRh
LzEvSEZTZnhkYUNtSGhNYWt4Ynlacm4wd0ZxR0tNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZM7gqw0j
S+FhvcatMsCHdFXnih46DwAYiCvh3pJErVeIfCCNQAbCdNKNwlVUvbvNdzmPmexU
mN27qoJsv9HUjrMxMmPd8gXGjQ83n15/2F9Vspw7TUAR0XRdKmL+7qMM2ADZQoUO
Ye+o/t8x6awvjKas8C/3XH4tt3uJp4lT5c95k01i90zcorm72e1e9di7XlyQoMlz
qP2PDArf1CKLuFA99eZrxG7yp7P8MKhgP0bjMrh6+u7vN8prz6DrOszFsMBV6PiI
QKR9EhF4kO8eebW9Kr9PVuAyOisyGNnnv4BgM5rFWJ4J+JnCOyVGAn6RslI4phBo
hxZp5OPo8KZTZg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:23 2026 by rpki-client