Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
File: hJ463_A6q2LV2yI6w7NeKpuqTqM.mft (raw, json)
Hash identifier: ahtmjlcED2kvqdMWI7YpTiYo+Hecnk84+kFe+dKEURg=
Subject key identifier: 9E:96:D6:45:EB:C7:C6:33:24:4A:82:82:5C:54:70:85:05:CE:A6:9E
Authority key identifier: 84:9E:3A:DF:F0:3A:AB:62:D5:DB:22:3A:C3:B3:5E:2A:9B:AA:4E:A3
Certificate issuer: /CN=849e3adff03aab62d5db223ac3b35e2a9baa4ea3
Certificate serial: 019D2A3B3FC87EFD681FF2FC3E7CCC89E8C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 13:00:18 +0000
Manifest this update: Thu 26 Mar 2026 13:00:18 +0000
Manifest next update: Fri 27 Mar 2026 13:00:18 +0000
Files and hashes: 1: hJ463_A6q2LV2yI6w7NeKpuqTqM.crl (hash: om4eX0KnHHGoqWqHe+BhylWXGpv+UeKLo1nAi9bNM7o=)
2: lGyQDQVBEMCDFsipbxjBTxxJg7Y.roa (hash: /B4wk8kwo/lxwB8Izsd2oZk4yH80dIbNot8H0bXk6bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:3f:c8:7e:fd:68:1f:f2:fc:3e:7c:cc:89:e8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849e3adff03aab62d5db223ac3b35e2a9baa4ea3
Validity
Not Before: Mar 26 13:00:18 2026 GMT
Not After : Mar 27 13:00:18 2026 GMT
Subject: CN=9e96d645ebc7c633244a82825c54708505cea69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:41:90:18:c6:6e:4f:80:4f:a0:e1:75:33:e2:
12:ad:a6:6c:25:24:bf:8a:1e:61:c9:ec:90:27:c2:
9a:06:72:94:1f:f3:d3:54:fd:a0:42:a5:91:2f:e7:
60:7c:ca:74:ee:b3:9d:ba:bb:0b:b7:72:2a:51:8a:
41:3b:1f:47:07:f0:b5:b0:c9:05:43:8a:87:bb:b9:
88:55:b3:e0:fd:6b:c8:da:ca:dd:e0:31:88:a4:4b:
5f:19:1d:27:a6:bb:f5:0f:d6:ac:e0:57:50:77:c9:
1a:b7:b9:c0:0d:fd:98:52:c5:8e:6c:49:e7:10:4b:
a9:5a:e2:18:ae:ca:7d:4f:97:7c:14:ce:b2:3f:0a:
21:93:b7:43:53:56:dd:29:45:0e:02:de:cf:2c:3b:
93:6f:fb:b0:58:24:83:1b:ce:d0:1f:e9:3e:ec:c9:
81:f8:cb:22:d2:80:c4:e9:a8:99:13:2e:81:48:82:
19:9f:7b:de:70:f3:d5:3b:0b:7f:89:8e:d5:79:dc:
59:81:71:83:1f:dc:a0:a0:16:f1:cc:bb:db:6f:62:
78:02:46:10:25:9e:84:c1:5d:82:d9:f9:59:64:1b:
58:56:5c:69:f5:96:c9:fc:08:99:a6:30:04:00:5a:
00:8d:2a:40:af:db:f1:7c:2e:b1:3a:9f:60:78:35:
23:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:96:D6:45:EB:C7:C6:33:24:4A:82:82:5C:54:70:85:05:CE:A6:9E
X509v3 Authority Key Identifier:
keyid:84:9E:3A:DF:F0:3A:AB:62:D5:DB:22:3A:C3:B3:5E:2A:9B:AA:4E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ463_A6q2LV2yI6w7NeKpuqTqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1c1a49-4285-48be-a10e-ed1600f872bb/1/hJ463_A6q2LV2yI6w7NeKpuqTqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1c:6f:77:7b:5c:5c:21:6a:28:14:6f:8d:63:6b:c7:0a:fa:
d0:4b:2e:b0:ea:c6:10:61:ed:15:ef:23:31:54:0d:18:7d:0b:
a0:93:9a:0d:c4:f0:91:7d:8c:aa:0e:d6:0e:c8:03:d6:fa:88:
6b:5b:7c:d1:46:e0:af:6f:98:f4:6b:a0:22:1b:2d:34:b3:13:
6e:7f:71:26:46:84:1a:6b:dd:7a:54:da:d3:e1:05:03:e6:e7:
89:c2:5e:da:2c:61:c7:c9:3a:df:99:e8:93:29:23:8b:8c:40:
a5:65:df:53:e9:90:3e:d1:9b:5b:a8:82:d0:af:35:ca:98:f8:
45:ba:c2:6d:42:26:42:84:51:71:97:92:2b:2d:f2:6b:43:f2:
1e:e1:b7:e7:01:7c:f9:04:12:d1:cb:c8:ea:ad:f9:fd:6c:4a:
c7:fd:68:aa:58:bc:d2:5f:15:6e:a2:c7:d0:b5:4b:0a:ca:6b:
08:59:bf:d9:d5:6b:36:48:92:fc:c1:9a:48:56:09:ac:64:ca:
df:58:88:71:c6:d9:9a:00:66:87:95:4c:23:a7:3a:b6:9a:7d:
dc:43:8d:04:7d:54:70:81:ff:b0:9d:e7:c3:0b:07:86:d3:e6:
a6:3c:4d:5e:2e:0e:13:7f:b3:27:c8:8e:06:7f:5f:dc:44:a3:
1a:fa:63:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qOz/Ifv1oH/L8PnzMiejEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0OWUzYWRmZjAzYWFiNjJkNWRiMjIzYWMzYjM1ZTJhOWJh
YTRlYTMwHhcNMjYwMzI2MTMwMDE4WhcNMjYwMzI3MTMwMDE4WjAzMTEwLwYDVQQD
Eyg5ZTk2ZDY0NWViYzdjNjMzMjQ0YTgyODI1YzU0NzA4NTA1Y2VhNjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEGQGMZuT4BPoOF1M+ISraZsJSS/
ih5hyeyQJ8KaBnKUH/PTVP2gQqWRL+dgfMp07rOdursLt3IqUYpBOx9HB/C1sMkF
Q4qHu7mIVbPg/WvI2srd4DGIpEtfGR0nprv1D9as4FdQd8kat7nADf2YUsWObEnn
EEupWuIYrsp9T5d8FM6yPwohk7dDU1bdKUUOAt7PLDuTb/uwWCSDG87QH+k+7MmB
+Msi0oDE6aiZEy6BSIIZn3vecPPVOwt/iY7VedxZgXGDH9ygoBbxzLvbb2J4AkYQ
JZ6EwV2C2flZZBtYVlxp9ZbJ/AiZpjAEAFoAjSpAr9vxfC6xOp9geDUjKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6W1kXrx8YzJEqCglxUcIUFzqaeMB8GA1UdIwQY
MBaAFISeOt/wOqti1dsiOsOzXiqbqk6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEo0NjNfQTZxMkxWMnlJNnc3TmVLcHVxVHFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8xYzFhNDktNDI4NS00OGJlLWExMGUt
ZWQxNjAwZjg3MmJiLzEvaEo0NjNfQTZxMkxWMnlJNnc3TmVLcHVxVHFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8xYzFhNDktNDI4NS00OGJlLWExMGUtZWQxNjAwZjg3MmJi
LzEvaEo0NjNfQTZxMkxWMnlJNnc3TmVLcHVxVHFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANRxvd3tc
XCFqKBRvjWNrxwr60EsusOrGEGHtFe8jMVQNGH0LoJOaDcTwkX2Mqg7WDsgD1vqI
a1t80Ubgr2+Y9GugIhstNLMTbn9xJkaEGmvdelTa0+EFA+bnicJe2ixhx8k635no
kykji4xApWXfU+mQPtGbW6iC0K81ypj4RbrCbUImQoRRcZeSKy3ya0PyHuG35wF8
+QQS0cvI6q35/WxKx/1oqli80l8VbqLH0LVLCsprCFm/2dVrNkiS/MGaSFYJrGTK
31iIccbZmgBmh5VMI6c6tpp93EONBH1UcIH/sJ3nwwsHhtPmpjxNXi4OE3+zJ8iO
Bn9f3ESjGvpjrQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:56:54 2026 by rpki-client