Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
File: HCz1cnHCuPBLqn5jqbgQPVID1_g.mft (raw, json)
Hash identifier: qPfXBa4jx5QMKOx8Ec1RhPnENJdKGPRrZgOlZ2YHiVw=
Subject key identifier: BD:1E:C7:59:17:AF:80:53:5C:F0:1D:D9:50:1F:13:E4:0A:53:4C:67
Authority key identifier: 1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8
Certificate issuer: /CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8
Certificate serial: 019D28F20FA026BCA269FA1A421BE0D80689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
Manifest number: 10E4
Signing time: Thu 26 Mar 2026 07:00:45 +0000
Manifest this update: Thu 26 Mar 2026 07:00:45 +0000
Manifest next update: Fri 27 Mar 2026 07:00:45 +0000
Files and hashes: 1: HCz1cnHCuPBLqn5jqbgQPVID1_g.crl (hash: Zav2uRQMs7SclDgkeCuwEWl4uPGrSxbOMWDsE1ko+bU=)
2: fhjiPT2anJIeG6_EcUfpiClL8vY.roa (hash: Q/zM0rv6/hH9pojseIfbtnQXW7H51tDnv9UAHPk6c9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:0f:a0:26:bc:a2:69:fa:1a:42:1b:e0:d8:06:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2cf57271c2b8f04baa7e63a9b8103d5203d7f8
Validity
Not Before: Mar 26 07:00:45 2026 GMT
Not After : Mar 27 07:00:45 2026 GMT
Subject: CN=bd1ec75917af80535cf01dd9501f13e40a534c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:40:4e:61:4a:be:83:b2:3d:2d:ea:4d:7d:d6:
f4:0f:02:71:63:13:4f:2f:32:6b:82:a9:30:56:6a:
ed:73:c0:23:a8:ef:34:1a:fd:a7:cb:76:81:30:23:
ad:12:b4:06:6a:92:77:0d:9e:42:35:8d:e2:54:ab:
31:23:c4:71:92:d7:a3:da:dc:d2:32:30:89:c0:a5:
51:74:4b:80:75:5d:91:a8:ab:44:f0:4e:30:47:90:
8f:80:f2:2c:30:a1:05:52:4f:7a:da:a5:40:fc:21:
74:be:82:2c:d7:cc:b8:93:81:a2:29:e7:a0:4d:ab:
75:86:4e:4c:20:52:b7:bf:c8:93:a1:8d:9f:d8:27:
7f:ae:de:83:68:1b:69:af:f1:80:41:53:de:12:cd:
de:6a:28:4f:fe:71:a8:ac:fd:2d:2b:23:66:f2:73:
cd:ac:93:1a:d8:9d:6c:16:d7:a8:b2:35:c3:f8:42:
a6:40:c3:5b:de:38:10:27:7c:2e:0d:c7:7a:44:10:
14:77:aa:72:88:ef:16:f3:ad:3a:31:b2:69:cc:e2:
cc:b4:1a:7f:80:1a:1c:9e:b6:1c:fa:6c:1b:23:cd:
fd:e0:dc:52:6d:31:90:d1:23:43:38:cd:b7:d2:56:
60:d8:3f:ad:92:9d:86:56:49:6b:f4:39:7c:89:e5:
34:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1E:C7:59:17:AF:80:53:5C:F0:1D:D9:50:1F:13:E4:0A:53:4C:67
X509v3 Authority Key Identifier:
keyid:1C:2C:F5:72:71:C2:B8:F0:4B:AA:7E:63:A9:B8:10:3D:52:03:D7:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCz1cnHCuPBLqn5jqbgQPVID1_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/5abc92-f55a-4548-9a00-5b4536a79e82/1/HCz1cnHCuPBLqn5jqbgQPVID1_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c7:65:8a:da:eb:a8:42:db:db:47:c0:59:9b:53:69:8f:6c:
aa:09:29:c4:d6:62:9f:1b:1e:04:fe:25:7a:cb:03:7b:f6:81:
80:5d:8d:9f:73:40:1b:e0:33:6c:a9:2a:6e:f1:be:71:89:b8:
9b:28:63:c4:f8:65:93:43:88:64:0b:4d:b4:61:90:55:56:6b:
89:71:8e:fe:55:d2:81:30:48:c8:f1:5e:b8:bd:62:79:06:38:
19:85:85:fd:07:36:9a:f2:44:c2:f1:c1:81:21:42:30:fa:86:
47:10:4f:7f:e4:8a:72:47:a5:5a:d1:ec:84:fc:df:89:c8:e4:
13:5a:11:72:4e:30:8a:59:8e:f0:88:3b:b5:71:82:79:a5:bd:
7d:44:06:6b:d6:f4:f3:95:a7:bd:1f:fe:b7:dc:0f:29:0a:c5:
c2:0a:4d:e7:90:d5:7d:67:eb:7b:99:76:26:4b:e9:d9:ec:da:
6b:2c:67:06:42:80:53:35:b1:af:b4:d0:73:9b:1b:73:17:9d:
64:10:e1:5d:31:9e:21:58:f1:21:ec:db:0f:7f:35:86:33:ee:
f4:7c:29:91:40:76:93:b1:eb:1b:9e:ac:76:de:ee:85:47:d4:
6c:b2:75:5f:5d:08:bb:dc:c2:09:a9:a5:82:3b:98:b0:36:dd:
c6:d8:1c:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8g+gJryiafoaQhvg2AaJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMmNmNTcyNzFjMmI4ZjA0YmFhN2U2M2E5YjgxMDNkNTIw
M2Q3ZjgwHhcNMjYwMzI2MDcwMDQ1WhcNMjYwMzI3MDcwMDQ1WjAzMTEwLwYDVQQD
EyhiZDFlYzc1OTE3YWY4MDUzNWNmMDFkZDk1MDFmMTNlNDBhNTM0YzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0BOYUq+g7I9LepNfdb0DwJxYxNP
LzJrgqkwVmrtc8AjqO80Gv2ny3aBMCOtErQGapJ3DZ5CNY3iVKsxI8Rxktej2tzS
MjCJwKVRdEuAdV2RqKtE8E4wR5CPgPIsMKEFUk962qVA/CF0voIs18y4k4GiKeeg
Tat1hk5MIFK3v8iToY2f2Cd/rt6DaBtpr/GAQVPeEs3eaihP/nGorP0tKyNm8nPN
rJMa2J1sFteosjXD+EKmQMNb3jgQJ3wuDcd6RBAUd6pyiO8W8606MbJpzOLMtBp/
gBocnrYc+mwbI8394NxSbTGQ0SNDOM230lZg2D+tkp2GVklr9Dl8ieU0IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0ex1kXr4BTXPAd2VAfE+QKU0xnMB8GA1UdIwQY
MBaAFBws9XJxwrjwS6p+Y6m4ED1SA9f4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEN6MWNuSEN1UEJMcW41anFiZ1FQVklEMV9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy81YWJjOTItZjU1YS00NTQ4LTlhMDAt
NWI0NTM2YTc5ZTgyLzEvSEN6MWNuSEN1UEJMcW41anFiZ1FQVklEMV9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy81YWJjOTItZjU1YS00NTQ4LTlhMDAtNWI0NTM2YTc5ZTgy
LzEvSEN6MWNuSEN1UEJMcW41anFiZ1FQVklEMV9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP8dlitrr
qELb20fAWZtTaY9sqgkpxNZinxseBP4lessDe/aBgF2Nn3NAG+AzbKkqbvG+cYm4
myhjxPhlk0OIZAtNtGGQVVZriXGO/lXSgTBIyPFeuL1ieQY4GYWF/Qc2mvJEwvHB
gSFCMPqGRxBPf+SKckelWtHshPzficjkE1oRck4wilmO8Ig7tXGCeaW9fUQGa9b0
85WnvR/+t9wPKQrFwgpN55DVfWfre5l2Jkvp2ezaayxnBkKAUzWxr7TQc5sbcxed
ZBDhXTGeIVjxIezbD381hjPu9HwpkUB2k7HrG56sdt7uhUfUbLJ1X10Iu9zCCaml
gjuYsDbdxtgcFg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:31:54 2026 by rpki-client