Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
File: hIJ9422jg4AexCqAQ8eHJTd2A34.mft (raw, json)
Hash identifier: SaplYHKPZf5cOD9ghAeTj0o3dNcKFsPA3PTWxnzIrlo=
Subject key identifier: 57:DF:66:86:98:94:6E:55:41:9E:CA:EF:AB:75:9D:40:9A:73:53:FE
Authority key identifier: 84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
Certificate issuer: /CN=84827de36da383801ec42a8043c787253776037e
Certificate serial: 019D26965C3AA5069AC60342DC56DE864421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
Manifest number: 0CC8
Signing time: Wed 25 Mar 2026 20:01:21 +0000
Manifest this update: Wed 25 Mar 2026 20:01:21 +0000
Manifest next update: Thu 26 Mar 2026 20:01:21 +0000
Files and hashes: 1: hIJ9422jg4AexCqAQ8eHJTd2A34.crl (hash: iIPmsstrJYvx20vaAleUIG3oMngWTSNB/iOR07RTX9k=)
2: osHVQH8VsNLb4CfrwBHFrXKWzUM.roa (hash: VoKNeQ3l9XKj9V37+GVfXeQ4vJfOENAKEnCMkVGQkdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:5c:3a:a5:06:9a:c6:03:42:dc:56:de:86:44:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84827de36da383801ec42a8043c787253776037e
Validity
Not Before: Mar 25 20:01:21 2026 GMT
Not After : Mar 26 20:01:21 2026 GMT
Subject: CN=57df668698946e55419ecaefab759d409a7353fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:42:00:68:9d:91:8f:83:54:df:2c:53:c2:de:
3e:0b:36:cc:fe:c5:9c:55:c6:8d:f7:a7:b7:eb:93:
72:ee:d0:11:c0:0b:6d:02:c3:cf:3e:e0:71:86:30:
90:2f:ec:6f:2e:a6:97:23:03:f6:36:4a:89:1b:43:
a1:ae:5b:f1:5c:24:d9:b2:a2:db:37:1d:96:81:e8:
cc:27:91:38:87:82:5f:33:17:05:1c:85:99:16:b8:
c0:b4:22:12:13:2f:35:15:fc:cd:23:10:9e:00:c3:
42:e9:42:7e:3d:93:52:18:63:a0:a7:7b:16:93:dc:
54:2f:52:0a:b0:7e:38:48:fc:95:27:ed:4f:2c:93:
ab:fe:2b:97:24:aa:1b:d6:03:43:4e:1b:e7:37:77:
6d:91:9b:d2:7b:2f:d1:e2:0e:84:b2:83:4b:d0:41:
d5:13:2b:96:77:1e:00:14:1b:d2:20:d5:05:48:94:
a8:f6:bc:8c:ac:e9:af:71:92:1d:5c:f6:1a:49:06:
f5:49:6e:cf:de:7c:8f:a3:c7:90:39:df:6c:77:11:
0f:66:79:eb:e2:2f:37:68:68:2a:b7:9d:9a:ab:94:
2d:1a:aa:1f:62:eb:03:be:36:0d:d4:ad:26:92:c0:
06:81:25:26:60:3e:1e:f6:98:3f:6d:e0:5b:b8:e0:
c0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DF:66:86:98:94:6E:55:41:9E:CA:EF:AB:75:9D:40:9A:73:53:FE
X509v3 Authority Key Identifier:
keyid:84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:3b:54:d6:1d:f4:be:a6:2a:66:92:02:43:df:39:59:93:33:
52:62:82:84:13:01:33:b6:ce:34:e1:6f:b0:1d:eb:43:ee:49:
2f:21:7c:57:5d:ac:af:4d:8a:da:0a:09:19:8b:fc:19:57:ab:
eb:c5:70:9e:d7:13:e3:b6:0f:e6:57:b0:8a:c9:28:13:fe:76:
85:23:e2:b4:33:81:7a:7b:b6:67:2b:6a:bf:07:ff:58:bf:49:
c9:78:b8:3f:96:3b:d9:22:e8:52:45:72:fe:d1:34:e1:0b:1c:
c8:c3:78:67:47:4f:8f:d4:4a:7f:0c:5b:ce:e8:7d:bd:6f:ef:
61:e8:32:02:2f:89:2e:3e:2d:de:29:b6:7f:d1:0b:9e:18:73:
0d:57:cb:99:c9:b3:40:15:2a:d2:ff:74:03:ac:93:ba:fe:1f:
0b:47:bb:59:27:9d:bb:f3:69:5e:b2:3d:66:bb:9f:6b:90:04:
ed:69:39:a2:ed:bf:fb:54:83:4a:cd:31:af:ff:a8:c0:7a:e6:
69:62:92:ec:4d:73:83:04:6a:10:80:d8:6d:a8:fd:cb:28:91:
aa:90:41:52:1c:f4:19:d0:6f:98:fc:19:9b:d8:29:44:98:55:
b4:a9:a2:f8:33:43:fc:76:f9:0b:fc:42:bb:cd:8b:f2:64:a9:
df:5c:5e:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mllw6pQaaxgNC3FbehkQhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ODI3ZGUzNmRhMzgzODAxZWM0MmE4MDQzYzc4NzI1Mzc3
NjAzN2UwHhcNMjYwMzI1MjAwMTIxWhcNMjYwMzI2MjAwMTIxWjAzMTEwLwYDVQQD
Eyg1N2RmNjY4Njk4OTQ2ZTU1NDE5ZWNhZWZhYjc1OWQ0MDlhNzM1M2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0IAaJ2Rj4NU3yxTwt4+CzbM/sWc
VcaN96e365Ny7tARwAttAsPPPuBxhjCQL+xvLqaXIwP2NkqJG0OhrlvxXCTZsqLb
Nx2WgejMJ5E4h4JfMxcFHIWZFrjAtCISEy81FfzNIxCeAMNC6UJ+PZNSGGOgp3sW
k9xUL1IKsH44SPyVJ+1PLJOr/iuXJKob1gNDThvnN3dtkZvSey/R4g6EsoNL0EHV
EyuWdx4AFBvSINUFSJSo9ryMrOmvcZIdXPYaSQb1SW7P3nyPo8eQOd9sdxEPZnnr
4i83aGgqt52aq5QtGqofYusDvjYN1K0mksAGgSUmYD4e9pg/beBbuODAdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFffZoaYlG5VQZ7K76t1nUCac1P+MB8GA1UdIwQY
MBaAFISCfeNto4OAHsQqgEPHhyU3dgN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaElKOTQyMmpnNEFleENxQVE4ZUhKVGQyQTM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lYzg0ZDctZWQzZS00YWRhLWJlYjkt
MThlNjVlNjRkZjcxLzEvaElKOTQyMmpnNEFleENxQVE4ZUhKVGQyQTM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9lYzg0ZDctZWQzZS00YWRhLWJlYjktMThlNjVlNjRkZjcx
LzEvaElKOTQyMmpnNEFleENxQVE4ZUhKVGQyQTM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmztU1h30
vqYqZpICQ985WZMzUmKChBMBM7bONOFvsB3rQ+5JLyF8V12sr02K2goJGYv8GVer
68VwntcT47YP5lewiskoE/52hSPitDOBenu2Zytqvwf/WL9JyXi4P5Y72SLoUkVy
/tE04QscyMN4Z0dPj9RKfwxbzuh9vW/vYegyAi+JLj4t3im2f9ELnhhzDVfLmcmz
QBUq0v90A6yTuv4fC0e7WSedu/NpXrI9Zrufa5AE7Wk5ou2/+1SDSs0xr/+owHrm
aWKS7E1zgwRqEIDYbaj9yyiRqpBBUhz0GdBvmPwZm9gpRJhVtKmi+DND/Hb5C/xC
u82L8mSp31xeSw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:50:32 2026 by rpki-client