Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
File: HJe0gj08nhIexkmCHgDwp5rrm40.mft (raw, json)
Hash identifier: cw30ujovMN1x1SYudOHYlD8ZqY6YPqfzSEAeG3gTyCQ=
Subject key identifier: 4C:ED:B2:96:D7:A7:A1:D6:03:BC:75:E6:9D:8D:E1:5C:05:1F:1B:0A
Authority key identifier: 1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
Certificate issuer: /CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Certificate serial: 019D27A92FB5906D32BD7E2293FCB230961B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 01:01:32 +0000
Manifest this update: Thu 26 Mar 2026 01:01:32 +0000
Manifest next update: Fri 27 Mar 2026 01:01:32 +0000
Files and hashes: 1: 0hxpuIK8Xk-q0BTmptbEA31tBQM.roa (hash: F/+sSqgxCKBUwr4EismpQjVJRCU5s8RFO6y5G1id7CM=)
2: HJe0gj08nhIexkmCHgDwp5rrm40.crl (hash: 5raGtwgZlfI+yGV1xJyrMDM2vXO5+/wOx8y+20ls1PI=)
3: mJI9sTFN4UGhJtiQDPusSm1Vr68.roa (hash: wLOIgdPRaxsc7dyazG8dcE1RzCgvcxysuqvRPBkd3XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:2f:b5:90:6d:32:bd:7e:22:93:fc:b2:30:96:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Validity
Not Before: Mar 26 01:01:32 2026 GMT
Not After : Mar 27 01:01:32 2026 GMT
Subject: CN=4cedb296d7a7a1d603bc75e69d8de15c051f1b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:33:5f:ec:c3:b6:31:e5:3d:98:9e:8a:e3:98:
32:18:10:cf:f0:98:6f:b0:2a:4b:7f:9b:08:48:2f:
50:1c:90:b0:c1:ed:68:c1:99:59:ae:9d:db:dd:ea:
22:7f:db:63:28:97:fe:34:de:da:f7:94:0e:e2:c4:
75:23:b6:23:c3:bf:2b:62:09:07:6c:e9:3f:7c:33:
56:5c:c6:dc:54:e5:ee:d0:28:37:02:27:42:04:8d:
3b:e5:02:35:0b:6a:90:36:4f:51:55:46:ef:4b:91:
e4:f3:f1:fd:b5:7e:df:5e:e5:19:4b:af:30:ad:26:
72:c2:32:8a:91:c0:65:50:f2:27:ea:ba:c8:9f:dd:
4e:a2:bc:52:c2:54:5d:31:3e:34:25:ad:58:41:0c:
32:b3:43:ca:f6:c1:c3:50:66:b3:fe:f4:26:aa:51:
89:e7:b7:cc:e9:cc:e6:ad:e3:9d:f4:03:d6:9e:c4:
8e:44:3d:3d:4a:0a:aa:78:7b:90:2e:3c:17:0c:87:
70:28:94:13:b2:7a:c9:59:2d:36:bc:70:9d:99:c4:
37:0a:7f:05:ed:b3:28:a9:26:17:95:1a:b7:0b:bb:
6f:12:5c:13:6f:27:f7:4a:92:9b:61:ef:87:bf:db:
be:77:e9:82:30:ae:01:c9:44:fe:e2:55:8e:07:4d:
6f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:ED:B2:96:D7:A7:A1:D6:03:BC:75:E6:9D:8D:E1:5C:05:1F:1B:0A
X509v3 Authority Key Identifier:
keyid:1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:cf:44:df:64:c4:0f:b9:a5:8c:13:b1:64:14:0b:7a:10:f9:
49:94:af:10:3b:6c:6b:4f:6f:b9:12:3c:61:02:0d:a1:ec:ad:
c6:e3:75:b5:8b:63:3f:0e:71:e0:5c:86:25:b2:fb:a7:99:a9:
21:59:66:cc:22:c9:70:d1:5a:82:c9:f4:6a:36:c3:46:b3:9a:
2b:b3:be:bb:cd:4e:c5:5c:ef:78:51:a5:ef:51:1b:55:4e:aa:
5a:1a:0a:a1:33:7c:30:cf:9e:4b:85:a9:30:1f:4f:89:b7:a6:
9c:ed:fd:b1:2b:d8:6e:84:bb:01:02:94:91:a0:bf:9e:4a:42:
61:d7:b9:5d:de:1a:7c:88:c2:62:f7:22:7a:0c:f6:54:a2:dc:
1e:d1:ab:25:f1:07:97:49:80:8b:20:e5:0e:4f:1d:4a:eb:47:
40:e8:4e:18:f1:c3:6a:18:81:a8:9b:e1:fd:b3:49:4d:dc:42:
fd:4c:2d:43:c6:7d:c5:7b:3a:9e:92:11:17:c2:32:b7:51:d9:
2d:d3:c7:c6:7e:db:6b:d9:7b:60:cb:4c:a3:de:13:62:75:c5:
b2:16:d8:d1:6c:c0:24:87:40:48:b3:ba:b1:8c:fc:e4:f8:74:
86:85:8f:30:9d:e2:57:a1:bc:bd:45:f9:2e:ac:e8:f8:4d:88:
20:31:a6:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqS+1kG0yvX4ik/yyMJYbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTdiNDgyM2QzYzllMTIxZWM2NDk4MjFlMDBmMGE3OWFl
YjliOGQwHhcNMjYwMzI2MDEwMTMyWhcNMjYwMzI3MDEwMTMyWjAzMTEwLwYDVQQD
Eyg0Y2VkYjI5NmQ3YTdhMWQ2MDNiYzc1ZTY5ZDhkZTE1YzA1MWYxYjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DNf7MO2MeU9mJ6K45gyGBDP8Jhv
sCpLf5sISC9QHJCwwe1owZlZrp3b3eoif9tjKJf+NN7a95QO4sR1I7Yjw78rYgkH
bOk/fDNWXMbcVOXu0Cg3AidCBI075QI1C2qQNk9RVUbvS5Hk8/H9tX7fXuUZS68w
rSZywjKKkcBlUPIn6rrIn91OorxSwlRdMT40Ja1YQQwys0PK9sHDUGaz/vQmqlGJ
57fM6czmreOd9APWnsSORD09SgqqeHuQLjwXDIdwKJQTsnrJWS02vHCdmcQ3Cn8F
7bMoqSYXlRq3C7tvElwTbyf3SpKbYe+Hv9u+d+mCMK4ByUT+4lWOB01vvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEztspbXp6HWA7x15p2N4VwFHxsKMB8GA1UdIwQY
MBaAFByXtII9PJ4SHsZJgh4A8Kea65uNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEplMGdqMDhuaElleGttQ0hnRHdwNXJybTQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xNTY0MWEtNjYxNC00NWU0LWEyYTkt
OWI5Y2Q4OTY1OWUwLzEvSEplMGdqMDhuaElleGttQ0hnRHdwNXJybTQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8xNTY0MWEtNjYxNC00NWU0LWEyYTktOWI5Y2Q4OTY1OWUw
LzEvSEplMGdqMDhuaElleGttQ0hnRHdwNXJybTQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXs9E32TE
D7mljBOxZBQLehD5SZSvEDtsa09vuRI8YQINoeytxuN1tYtjPw5x4FyGJbL7p5mp
IVlmzCLJcNFagsn0ajbDRrOaK7O+u81OxVzveFGl71EbVU6qWhoKoTN8MM+eS4Wp
MB9PibemnO39sSvYboS7AQKUkaC/nkpCYde5Xd4afIjCYvciegz2VKLcHtGrJfEH
l0mAiyDlDk8dSutHQOhOGPHDahiBqJvh/bNJTdxC/UwtQ8Z9xXs6npIRF8Iyt1HZ
LdPHxn7ba9l7YMtMo94TYnXFshbY0WzAJIdASLO6sYz85Ph0hoWPMJ3iV6G8vUX5
Lqzo+E2IIDGm+Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:06 2026 by rpki-client