Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
File: hh3iAyQAiy0n65dJWszi67zch8c.mft (raw, json)
Hash identifier: N4+epJYVwzvi0r2wQR8U9/6z8qxgCjqaFbCoagSpCe4=
Subject key identifier: C4:6E:DB:52:F0:32:01:B6:BB:EE:7D:E6:40:20:A7:4D:46:54:E4:B2
Authority key identifier: 86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7
Certificate issuer: /CN=861de20324008b2d27eb97495acce2ebbcdc87c7
Certificate serial: 019D27DFCAF4E1C8A894687E92878ED7123A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 02:01:10 +0000
Manifest this update: Thu 26 Mar 2026 02:01:10 +0000
Manifest next update: Fri 27 Mar 2026 02:01:10 +0000
Files and hashes: 1: RFVKCx7jKwj7HKFsLFwChol4Lkk.roa (hash: mLVKAu+YBzfWtWJSV4oLSkpIAi/5IO93e0+wM/7mAaQ=)
2: hh3iAyQAiy0n65dJWszi67zch8c.crl (hash: lKUGBjxBlRAHcGqfsYGWDXMsagPWYIHJ8rtPzehVxl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:ca:f4:e1:c8:a8:94:68:7e:92:87:8e:d7:12:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861de20324008b2d27eb97495acce2ebbcdc87c7
Validity
Not Before: Mar 26 02:01:10 2026 GMT
Not After : Mar 27 02:01:10 2026 GMT
Subject: CN=c46edb52f03201b6bbee7de64020a74d4654e4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2b:a0:c5:aa:d9:d5:15:6a:a8:b3:a3:06:06:
96:8a:92:9b:bc:58:ac:fb:92:ce:d9:7e:8c:5b:0d:
c6:4d:5a:85:1e:d4:37:4c:ad:1a:b3:ce:be:fc:52:
d4:02:88:ae:c5:c4:78:2a:35:c3:29:9e:a5:0c:1e:
fe:4b:6b:b6:47:37:35:9f:6b:40:71:58:51:22:01:
10:7c:dd:d5:f6:31:1f:59:31:fe:ef:17:a2:a8:e3:
f0:b1:82:32:7a:ae:06:00:51:77:1a:7e:8f:bd:97:
16:9c:fe:99:85:4e:79:ed:b4:0a:4e:7a:22:9b:8e:
d9:37:0e:55:89:e4:0d:b0:72:3d:bd:2d:e2:44:5c:
cd:c5:0a:3b:06:14:6b:25:40:3f:c6:eb:2c:f9:11:
26:a4:5c:2e:c8:75:a2:d0:7d:a6:9f:ca:ad:86:ae:
83:28:bc:00:dd:94:36:d8:07:5e:d5:74:f8:f9:8f:
17:08:51:88:b4:62:b9:19:a1:ef:fe:68:49:f5:a3:
50:32:7e:6e:b5:1b:bf:a5:b4:8a:33:20:83:0d:2e:
f7:c2:07:22:74:8d:9e:df:18:ed:5a:01:72:99:a8:
01:6e:f1:9c:fb:ed:f6:7b:3e:e3:0a:19:a1:da:c9:
fa:3d:b8:9c:82:e6:ce:45:f4:41:aa:ab:ec:3d:2a:
b6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6E:DB:52:F0:32:01:B6:BB:EE:7D:E6:40:20:A7:4D:46:54:E4:B2
X509v3 Authority Key Identifier:
keyid:86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:bf:f7:09:5a:e9:c9:be:5b:ee:19:67:8d:ec:fc:98:05:ea:
2e:3c:43:34:2e:5f:76:b1:fb:25:0d:2e:e4:0c:c2:22:51:ee:
0e:70:7b:71:7e:32:29:dd:07:4f:a8:84:5a:af:6b:f7:cc:e7:
08:66:64:b4:f6:c7:ef:4b:98:4a:4c:22:5a:dd:26:98:61:0b:
54:a0:6b:f5:bc:f4:84:b7:1c:63:a0:ff:b5:9e:60:19:c1:48:
98:77:fb:be:62:19:7a:1d:90:4a:96:d3:9c:9a:1a:9e:61:06:
67:13:6d:1c:49:b4:70:13:c6:5e:1b:f3:74:89:1b:55:3a:e4:
87:e9:ab:60:e1:e1:e5:20:ed:9a:24:2f:68:f4:48:dd:62:80:
37:1a:8a:f4:98:fa:05:df:51:d9:4c:8e:9d:b6:2d:2c:e2:75:
ea:cb:f1:fe:5c:b2:33:a6:3c:5e:ff:18:89:96:16:22:00:c7:
86:c4:df:7d:b2:5f:bd:91:a4:eb:4a:50:a3:a9:cf:21:9e:02:
e1:65:d6:7b:7d:a5:c3:47:4c:05:c1:64:65:7c:34:a9:f2:68:
b3:60:72:c6:58:e9:86:4e:b0:af:f9:15:d8:0c:51:98:f3:e3:
18:62:02:1a:93:ab:64:8d:56:df:53:d0:15:60:6a:dd:d3:5c:
56:bb:f7:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n38r04ciolGh+koeO1xI6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MWRlMjAzMjQwMDhiMmQyN2ViOTc0OTVhY2NlMmViYmNk
Yzg3YzcwHhcNMjYwMzI2MDIwMTEwWhcNMjYwMzI3MDIwMTEwWjAzMTEwLwYDVQQD
EyhjNDZlZGI1MmYwMzIwMWI2YmJlZTdkZTY0MDIwYTc0ZDQ2NTRlNGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCugxarZ1RVqqLOjBgaWipKbvFis
+5LO2X6MWw3GTVqFHtQ3TK0as86+/FLUAoiuxcR4KjXDKZ6lDB7+S2u2Rzc1n2tA
cVhRIgEQfN3V9jEfWTH+7xeiqOPwsYIyeq4GAFF3Gn6PvZcWnP6ZhU557bQKTnoi
m47ZNw5VieQNsHI9vS3iRFzNxQo7BhRrJUA/xuss+REmpFwuyHWi0H2mn8qthq6D
KLwA3ZQ22Ade1XT4+Y8XCFGItGK5GaHv/mhJ9aNQMn5utRu/pbSKMyCDDS73wgci
dI2e3xjtWgFymagBbvGc++32ez7jChmh2sn6PbicgubORfRBqqvsPSq2xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRu21LwMgG2u+595kAgp01GVOSyMB8GA1UdIwQY
MBaAFIYd4gMkAIstJ+uXSVrM4uu83IfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGgzaUF5UUFpeTBuNjVkSldzemk2N3pjaDhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy85M2FjZWMtYjFlZS00ZjMxLWFmNmUt
MWU0NmFlODcyMWVmLzEvaGgzaUF5UUFpeTBuNjVkSldzemk2N3pjaDhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy85M2FjZWMtYjFlZS00ZjMxLWFmNmUtMWU0NmFlODcyMWVm
LzEvaGgzaUF5UUFpeTBuNjVkSldzemk2N3pjaDhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdb/3CVrp
yb5b7hlnjez8mAXqLjxDNC5fdrH7JQ0u5AzCIlHuDnB7cX4yKd0HT6iEWq9r98zn
CGZktPbH70uYSkwiWt0mmGELVKBr9bz0hLccY6D/tZ5gGcFImHf7vmIZeh2QSpbT
nJoanmEGZxNtHEm0cBPGXhvzdIkbVTrkh+mrYOHh5SDtmiQvaPRI3WKANxqK9Jj6
Bd9R2UyOnbYtLOJ16svx/lyyM6Y8Xv8YiZYWIgDHhsTffbJfvZGk60pQo6nPIZ4C
4WXWe32lw0dMBcFkZXw0qfJos2Byxljphk6wr/kV2AxRmPPjGGICGpOrZI1W31PQ
FWBq3dNcVrv3kg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:10 2026 by rpki-client