Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
File: hto1bCqGENEdNM24pH0rkFGfvTU.mft (raw, json)
Hash identifier: ci4G76gJFzwzDVNGBfcWws9Xu7te2Im94jbumTQ79k4=
Subject key identifier: CF:AE:E8:21:64:43:69:45:7B:3C:37:3D:A9:11:9C:B2:DD:4B:87:FF
Authority key identifier: 86:DA:35:6C:2A:86:10:D1:1D:34:CD:B8:A4:7D:2B:90:51:9F:BD:35
Certificate issuer: /CN=86da356c2a8610d11d34cdb8a47d2b90519fbd35
Certificate serial: 019D26CD0BEA5C0B551292978CC81131CCB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
Manifest number: 158D
Signing time: Wed 25 Mar 2026 21:01:05 +0000
Manifest this update: Wed 25 Mar 2026 21:01:05 +0000
Manifest next update: Thu 26 Mar 2026 21:01:05 +0000
Files and hashes: 1: IDPY6eTDdLBQuL9VGAcEC-fDNk4.roa (hash: /GSM9iyQcMrc7fSWc8netDxH1YSxmTdh4UOLgqibrf0=)
2: hto1bCqGENEdNM24pH0rkFGfvTU.crl (hash: TrXvYqwGhhGjyfoZPS2yeFST6OcZVh9b/5CwmFxf+3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:0b:ea:5c:0b:55:12:92:97:8c:c8:11:31:cc:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86da356c2a8610d11d34cdb8a47d2b90519fbd35
Validity
Not Before: Mar 25 21:01:05 2026 GMT
Not After : Mar 26 21:01:05 2026 GMT
Subject: CN=cfaee821644369457b3c373da9119cb2dd4b87ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e5:4f:e3:d6:03:6f:f6:c7:a1:28:5e:81:93:
11:4c:81:3c:26:43:bb:32:7e:12:0c:66:9c:58:df:
08:08:e9:80:88:85:24:1e:df:ab:e9:81:31:49:51:
a4:62:f6:ae:c1:4b:d1:c3:db:7a:a7:04:3e:fa:9b:
9e:da:db:9a:c7:a8:bd:a8:ae:10:d2:97:fd:cc:15:
b6:ac:10:44:dd:a7:a5:52:59:25:c2:da:ea:8a:60:
26:57:31:9c:c4:e0:a4:b2:ee:ba:0b:99:20:09:30:
de:5b:04:62:c1:61:83:25:95:6f:e0:a9:42:af:e9:
55:fc:f5:42:1e:b8:8b:02:8c:a0:8a:2c:6d:e4:c8:
3c:ca:05:6f:82:e0:b8:c9:5a:6c:7b:78:e1:c1:f4:
4a:4f:99:f5:84:b2:45:30:90:3d:79:9e:ee:55:ff:
3e:d3:60:bd:49:9d:63:1d:05:34:dc:c4:2d:16:e9:
79:2f:eb:2f:0e:ec:3c:7b:d6:50:e5:5f:44:8a:27:
07:dc:c1:86:78:5a:9c:35:8c:55:99:9f:16:46:07:
ca:d7:84:c0:45:27:43:ff:d2:d5:8e:21:7f:12:3e:
7c:05:01:6b:c7:4d:9a:f0:7a:c3:10:34:81:f2:32:
e3:22:21:bc:5f:d6:a5:85:37:a2:21:c5:e1:20:e5:
07:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AE:E8:21:64:43:69:45:7B:3C:37:3D:A9:11:9C:B2:DD:4B:87:FF
X509v3 Authority Key Identifier:
keyid:86:DA:35:6C:2A:86:10:D1:1D:34:CD:B8:A4:7D:2B:90:51:9F:BD:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5c:7a:12:3e:a9:7a:7e:9a:90:09:08:85:c9:ce:05:da:af:
f8:98:a2:c9:8b:6a:7d:9b:40:7b:4d:21:43:cb:a9:49:5b:15:
74:e7:6b:09:d6:3c:d3:26:92:5c:8d:4c:7a:bc:55:fe:07:c6:
6f:d8:d8:6d:22:99:2b:57:4b:50:44:08:7d:e6:b9:10:40:4a:
d7:40:46:b8:9e:46:57:fe:15:7d:83:6d:95:34:51:08:64:79:
30:dd:be:37:02:36:16:f0:8c:a1:d0:74:32:f7:d9:15:b6:37:
79:7b:f6:46:42:8f:ec:46:78:45:fb:54:0c:06:67:07:82:70:
b1:06:b7:fb:a7:51:13:bb:5f:8c:9b:64:14:fc:8f:ae:3a:2b:
5d:89:ce:ec:fb:c5:8e:34:83:88:1f:5e:d0:19:57:5c:6b:16:
34:eb:31:d8:cb:bb:eb:17:ce:b0:e5:c8:8d:03:2f:56:83:9b:
ec:00:5f:2b:08:65:32:c2:29:3c:42:43:b5:c9:49:29:36:9b:
f6:94:07:d7:f3:d0:d4:87:f1:df:01:c8:3c:99:4d:ee:6e:e9:
88:ca:86:9f:a9:d7:13:e7:e2:ee:56:dc:58:f2:b0:03:81:0a:
b7:56:a1:39:65:f3:68:5a:7f:78:74:e8:13:4a:f2:db:54:7f:
ec:df:2c:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzQvqXAtVEpKXjMgRMcy0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZGEzNTZjMmE4NjEwZDExZDM0Y2RiOGE0N2QyYjkwNTE5
ZmJkMzUwHhcNMjYwMzI1MjEwMTA1WhcNMjYwMzI2MjEwMTA1WjAzMTEwLwYDVQQD
EyhjZmFlZTgyMTY0NDM2OTQ1N2IzYzM3M2RhOTExOWNiMmRkNGI4N2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OVP49YDb/bHoShegZMRTIE8JkO7
Mn4SDGacWN8ICOmAiIUkHt+r6YExSVGkYvauwUvRw9t6pwQ++pue2tuax6i9qK4Q
0pf9zBW2rBBE3aelUlklwtrqimAmVzGcxOCksu66C5kgCTDeWwRiwWGDJZVv4KlC
r+lV/PVCHriLAoygiixt5Mg8ygVvguC4yVpse3jhwfRKT5n1hLJFMJA9eZ7uVf8+
02C9SZ1jHQU03MQtFul5L+svDuw8e9ZQ5V9EiicH3MGGeFqcNYxVmZ8WRgfK14TA
RSdD/9LVjiF/Ej58BQFrx02a8HrDEDSB8jLjIiG8X9alhTeiIcXhIOUHPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+u6CFkQ2lFezw3PakRnLLdS4f/MB8GA1UdIwQY
MBaAFIbaNWwqhhDRHTTNuKR9K5BRn701MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRvMWJDcUdFTkVkTk0yNHBIMHJrRkdmdlRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jZmZkYjItZGU4Yy00Yzc4LTgxMzIt
OGE5NjYwNGM4MjZkLzEvaHRvMWJDcUdFTkVkTk0yNHBIMHJrRkdmdlRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9jZmZkYjItZGU4Yy00Yzc4LTgxMzItOGE5NjYwNGM4MjZk
LzEvaHRvMWJDcUdFTkVkTk0yNHBIMHJrRkdmdlRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgFx6Ej6p
en6akAkIhcnOBdqv+JiiyYtqfZtAe00hQ8upSVsVdOdrCdY80yaSXI1MerxV/gfG
b9jYbSKZK1dLUEQIfea5EEBK10BGuJ5GV/4VfYNtlTRRCGR5MN2+NwI2FvCModB0
MvfZFbY3eXv2RkKP7EZ4RftUDAZnB4JwsQa3+6dRE7tfjJtkFPyPrjorXYnO7PvF
jjSDiB9e0BlXXGsWNOsx2Mu76xfOsOXIjQMvVoOb7ABfKwhlMsIpPEJDtclJKTab
9pQH1/PQ1Ifx3wHIPJlN7m7piMqGn6nXE+fi7lbcWPKwA4EKt1ahOWXzaFp/eHTo
E0ry21R/7N8sHg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:22 2026 by rpki-client