Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
File: HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft (raw, json)
Hash identifier: QNNYTrnIdZtI8rOtuiz4KN6URm5xnEXC1ZCTd0CZsgg=
Subject key identifier: EA:07:89:73:D0:75:96:68:20:9A:05:C0:B2:56:84:D6:B6:03:5E:57
Authority key identifier: 1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
Certificate issuer: /CN=1c6c48cccce321ec18702957b396381a1f1a0410
Certificate serial: 019D28BBE84DA201CA6952E58C1558A38512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
Manifest number: 13D3
Signing time: Thu 26 Mar 2026 06:01:36 +0000
Manifest this update: Thu 26 Mar 2026 06:01:36 +0000
Manifest next update: Fri 27 Mar 2026 06:01:36 +0000
Files and hashes: 1: BX-wklLdDD8XzxHJksQRCy4pE1o.roa (hash: uIUm6XT6o4/miIBu0V3ZQSH97iCpXkbo1bhxbJYRoCE=)
2: HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl (hash: TdzfqFhHnZE85Ohd7LCCtvxTOTJQICkcZiBVBewt4CA=)
3: il3y8Onxh5fLAIfmtOQN8b7m1WY.roa (hash: ZV1R7FC5O8+fdS5U8RdGxw7AX7F0UkiAYpEfs6LZIkI=)
4: p-OtpG7NAZq6sk3lKJLX_TdhJx0.roa (hash: 6ANbLODWbSBjq2JK8gNSvCXV+On0WKNrg0hi8XNLiSM=)
5: zqqNdPd2jN90nFzH_xKr7SBp6k0.roa (hash: 4bJ5x444099qNpfBFVyMLNFC0y78xdbHZoBQBCBD0uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:e8:4d:a2:01:ca:69:52:e5:8c:15:58:a3:85:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6c48cccce321ec18702957b396381a1f1a0410
Validity
Not Before: Mar 26 06:01:36 2026 GMT
Not After : Mar 27 06:01:36 2026 GMT
Subject: CN=ea078973d0759668209a05c0b25684d6b6035e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b5:ec:63:a4:aa:72:0b:fb:0c:ce:e9:51:23:
69:35:f2:12:17:4f:2f:8b:50:01:54:c0:8e:f3:e2:
00:e9:00:db:86:af:59:7a:30:0d:a9:2b:25:cf:ad:
c5:78:f1:be:97:1b:c6:0f:0e:91:6b:9a:13:1b:b0:
0a:bd:92:d7:82:36:05:70:86:b2:ce:df:8d:8b:74:
1e:6d:f7:0f:b4:16:dc:cc:0d:46:d5:ec:c9:6e:84:
1d:26:66:15:80:52:18:3d:6f:09:70:75:9b:e4:fd:
e0:b0:25:fa:46:da:80:c2:be:ee:3f:64:8b:d5:46:
2d:0e:e7:c9:11:74:36:b6:84:62:80:6c:9d:26:65:
3b:86:12:fd:35:d5:3d:e4:9e:2d:4e:e1:bb:24:21:
42:b6:b9:63:ff:7f:8a:c9:c4:3e:21:e8:a0:a0:57:
29:d5:5d:d6:75:c2:c5:c3:c6:3f:ff:ca:01:1a:52:
aa:55:1a:e2:c7:81:99:01:39:ad:be:2f:94:64:7d:
5c:91:f3:71:0e:4c:6e:bc:41:de:83:10:9d:7c:11:
ee:4a:57:77:4d:e2:4d:24:70:3f:59:c5:32:0a:71:
a4:eb:ca:d5:39:47:ea:a1:49:56:87:45:ca:ee:73:
e0:13:ba:c9:66:8d:0a:b7:cd:1a:15:bd:30:79:7e:
c3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:07:89:73:D0:75:96:68:20:9A:05:C0:B2:56:84:D6:B6:03:5E:57
X509v3 Authority Key Identifier:
keyid:1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:ac:35:5b:9e:04:e4:b2:42:2c:db:0e:f1:eb:2a:7f:c3:08:
cb:de:9c:fa:e4:91:56:3b:73:ce:a8:6f:e5:8c:8b:91:73:2e:
8b:2c:d3:5a:d0:d5:01:d9:c7:e7:05:1f:8a:70:a5:68:82:a4:
01:bb:61:43:1a:25:75:8a:17:c9:8f:30:79:1d:a8:c3:78:8f:
75:07:14:56:e2:1e:1e:51:5f:a1:97:7a:7e:0f:eb:6f:44:77:
83:bd:94:f5:59:ea:ec:ef:cf:0d:a6:ae:83:77:37:22:72:33:
61:83:75:4d:07:55:06:50:ca:2e:0b:95:82:b4:67:66:9d:de:
ca:93:1e:12:00:71:95:ae:1a:38:eb:c3:39:65:2b:ef:e9:93:
5f:e8:91:c9:71:0a:55:4e:c1:07:f0:51:06:0d:a3:aa:de:47:
26:c6:c6:e8:b9:e3:66:bd:ab:41:dc:f6:b7:65:2c:da:65:56:
54:c8:bd:76:55:0b:23:1a:5c:5a:6f:ec:c5:57:ca:00:de:05:
c5:30:7b:50:fe:da:4a:ca:30:b9:8f:df:ec:3f:46:8c:5c:be:
f7:ac:a1:e6:7d:ab:8a:6f:79:f8:12:57:7c:b8:a3:dd:c2:92:
97:32:a6:97:e4:a8:3c:d7:58:dd:29:1e:e1:85:53:1d:a4:e9:
d7:32:0a:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou+hNogHKaVLljBVYo4USMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNmM0OGNjY2NlMzIxZWMxODcwMjk1N2IzOTYzODFhMWYx
YTA0MTAwHhcNMjYwMzI2MDYwMTM2WhcNMjYwMzI3MDYwMTM2WjAzMTEwLwYDVQQD
EyhlYTA3ODk3M2QwNzU5NjY4MjA5YTA1YzBiMjU2ODRkNmI2MDM1ZTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrXsY6Sqcgv7DM7pUSNpNfISF08v
i1ABVMCO8+IA6QDbhq9ZejANqSslz63FePG+lxvGDw6Ra5oTG7AKvZLXgjYFcIay
zt+Ni3QebfcPtBbczA1G1ezJboQdJmYVgFIYPW8JcHWb5P3gsCX6RtqAwr7uP2SL
1UYtDufJEXQ2toRigGydJmU7hhL9NdU95J4tTuG7JCFCtrlj/3+KycQ+IeigoFcp
1V3WdcLFw8Y//8oBGlKqVRrix4GZATmtvi+UZH1ckfNxDkxuvEHegxCdfBHuSld3
TeJNJHA/WcUyCnGk68rVOUfqoUlWh0XK7nPgE7rJZo0Kt80aFb0weX7DTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOoHiXPQdZZoIJoFwLJWhNa2A15XMB8GA1UdIwQY
MBaAFBxsSMzM4yHsGHApV7OWOBofGgQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEd4SXpNempJZXdZY0NsWHM1WTRHaDhhQkJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS84ZTRlNjgtYmQyYS00ZGMyLWFhZTYt
YTA1NjBhYzgyYmE3LzEvSEd4SXpNempJZXdZY0NsWHM1WTRHaDhhQkJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS84ZTRlNjgtYmQyYS00ZGMyLWFhZTYtYTA1NjBhYzgyYmE3
LzEvSEd4SXpNempJZXdZY0NsWHM1WTRHaDhhQkJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvKw1W54E
5LJCLNsO8esqf8MIy96c+uSRVjtzzqhv5YyLkXMuiyzTWtDVAdnH5wUfinClaIKk
AbthQxoldYoXyY8weR2ow3iPdQcUVuIeHlFfoZd6fg/rb0R3g72U9Vnq7O/PDaau
g3c3InIzYYN1TQdVBlDKLguVgrRnZp3eypMeEgBxla4aOOvDOWUr7+mTX+iRyXEK
VU7BB/BRBg2jqt5HJsbG6LnjZr2rQdz2t2Us2mVWVMi9dlULIxpcWm/sxVfKAN4F
xTB7UP7aSsowuY/f7D9GjFy+96yh5n2rim95+BJXfLij3cKSlzKml+SoPNdY3Ske
4YVTHaTp1zIK6A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:48:28 2026 by rpki-client