Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
File: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft (raw, json)
Hash identifier: o6Rro9b4tCxquyxzIo+z5SI4ZI3hlWeNFcaMYZNm0Rs=
Subject key identifier: 12:59:0F:F1:83:00:EC:E2:96:8F:D3:5B:2C:CC:DF:F3:7D:9E:1E:47
Authority key identifier: 84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
Certificate issuer: /CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Certificate serial: 019D27A9384D926222A9D7D62B12595A496B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
Manifest number: 188E
Signing time: Thu 26 Mar 2026 01:01:34 +0000
Manifest this update: Thu 26 Mar 2026 01:01:34 +0000
Manifest next update: Fri 27 Mar 2026 01:01:34 +0000
Files and hashes: 1: 867F4OQuQLWhRY4aKxKeoxD01B4.asa (hash: +fRCR0HY7fbE+pyBbt7W5yHcfIjIo6aJjDfzPZQv280=)
2: cj-L2rGXvYKYk6a-AdfFlFFwb-s.roa (hash: d08NWXtlSQGeDRPYfCwBaxm1c8qg8kNQWXxjIs+wmGU=)
3: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl (hash: gPvDJKpSODuVrbHuglLfVy8I2g3nP5cZibrfGMCppWM=)
4: iqLo87tMFOB-XBrWIzdU46MRBuE.roa (hash: IzYBLEWXA56LUWCfb8F/l/nPeES5nSXV/ENxm4IRlhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:38:4d:92:62:22:a9:d7:d6:2b:12:59:5a:49:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Validity
Not Before: Mar 26 01:01:34 2026 GMT
Not After : Mar 27 01:01:34 2026 GMT
Subject: CN=12590ff18300ece2968fd35b2cccdff37d9e1e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:69:ba:ab:50:52:bc:c1:76:fa:a3:f1:f3:2f:
4d:cb:d9:63:06:62:3f:cd:5a:7c:66:fa:89:4d:e4:
a6:83:d8:2d:c4:e3:a3:87:3e:4c:67:b9:78:70:48:
b7:5d:3e:67:59:bb:9d:cf:d8:59:02:79:e0:10:42:
02:67:b8:25:fd:2a:06:b3:e7:6d:08:ca:09:85:b3:
aa:20:98:1f:95:96:02:21:e1:fc:81:8c:7b:d2:2a:
25:ab:9a:b8:d6:df:18:6b:16:ff:dc:df:f2:51:37:
f1:4b:c3:e9:ef:6d:50:99:cb:9b:44:2b:74:87:e7:
2d:6c:74:28:8a:ff:06:7f:62:bd:f8:df:90:c3:36:
64:6a:bb:34:41:c7:24:a9:71:76:61:a3:ca:f3:36:
f6:67:6d:b0:15:9c:40:f4:bb:40:36:4d:35:f4:8f:
d0:9e:93:34:23:e6:51:77:b0:bb:94:e9:d8:4c:d0:
7a:6c:8b:46:c3:76:60:c8:69:40:32:da:41:5a:26:
22:98:1f:39:c7:98:84:01:fe:87:a4:f0:34:21:ec:
2f:38:19:85:25:01:52:28:bc:90:2a:11:6e:12:0f:
d2:ef:be:d6:4a:98:26:bc:b2:52:eb:33:ce:7f:a2:
8b:98:2c:2b:f5:50:b9:da:0f:7f:c7:6b:5e:43:b9:
af:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:59:0F:F1:83:00:EC:E2:96:8F:D3:5B:2C:CC:DF:F3:7D:9E:1E:47
X509v3 Authority Key Identifier:
keyid:84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:aa:e0:68:c4:df:ca:74:00:be:05:14:da:b7:a1:36:1b:8e:
80:57:08:ea:18:42:10:9d:ff:56:23:10:9b:a7:ca:13:bd:9b:
82:10:55:45:4f:a8:5e:e7:3e:aa:db:92:cd:e5:b9:66:3e:66:
1b:fa:0c:51:0b:c8:46:e0:45:e2:6b:e6:6c:89:64:fa:16:c6:
de:4b:8d:b4:9f:6a:e2:d7:d1:50:06:6d:7e:b9:e7:28:f2:1d:
ed:7c:8f:8e:08:99:b3:1a:65:a3:85:fe:51:e6:1b:c8:2e:10:
56:8d:7f:ac:77:ec:df:0c:69:1b:36:f6:74:48:11:5e:39:65:
58:86:a0:d9:3a:06:8c:6e:29:ce:a9:d4:06:37:d7:08:6c:95:
d3:e1:08:a6:07:93:9d:20:4e:63:85:56:0c:1d:5f:18:5d:de:
41:e6:ec:1f:8f:64:50:61:b8:05:e4:26:b4:64:a6:5d:cd:92:
af:1d:d5:55:a9:25:7c:a1:20:a1:d0:ec:97:15:7e:6a:3b:58:
6a:32:c9:7a:b8:6d:c1:4f:5b:1c:92:81:e5:2a:65:a8:28:ef:
8f:b4:f0:d2:1f:30:8c:88:d4:ee:8c:f4:77:cb:ca:05:c4:71:
5b:f4:81:aa:b7:9a:fe:ad:b5:fe:0d:fb:73:85:ea:69:7f:98:
56:d8:7b:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqThNkmIiqdfWKxJZWklrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZTE0MjlhNTNlNjQ2M2IzYzc0ZjVhM2YxN2M1ZDRhNTFl
YmQwYjgwHhcNMjYwMzI2MDEwMTM0WhcNMjYwMzI3MDEwMTM0WjAzMTEwLwYDVQQD
EygxMjU5MGZmMTgzMDBlY2UyOTY4ZmQzNWIyY2NjZGZmMzdkOWUxZTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWm6q1BSvMF2+qPx8y9Ny9ljBmI/
zVp8ZvqJTeSmg9gtxOOjhz5MZ7l4cEi3XT5nWbudz9hZAnngEEICZ7gl/SoGs+dt
CMoJhbOqIJgflZYCIeH8gYx70iolq5q41t8Yaxb/3N/yUTfxS8Pp721QmcubRCt0
h+ctbHQoiv8Gf2K9+N+QwzZkars0QcckqXF2YaPK8zb2Z22wFZxA9LtANk019I/Q
npM0I+ZRd7C7lOnYTNB6bItGw3ZgyGlAMtpBWiYimB85x5iEAf6HpPA0IewvOBmF
JQFSKLyQKhFuEg/S777WSpgmvLJS6zPOf6KLmCwr9VC52g9/x2teQ7mvbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJZD/GDAOzilo/TWyzM3/N9nh5HMB8GA1UdIwQY
MBaAFIThQppT5kY7PHT1o/F8XUpR69C4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaE9GQ21sUG1SanM4ZFBXajhYeGRTbEhyMExnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83MmRiZGYtYzcxZC00ZTU5LTgwNzYt
YzQxZGNjYThiNzc1LzEvaE9GQ21sUG1SanM4ZFBXajhYeGRTbEhyMExnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83MmRiZGYtYzcxZC00ZTU5LTgwNzYtYzQxZGNjYThiNzc1
LzEvaE9GQ21sUG1SanM4ZFBXajhYeGRTbEhyMExnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl6rgaMTf
ynQAvgUU2rehNhuOgFcI6hhCEJ3/ViMQm6fKE72bghBVRU+oXuc+qtuSzeW5Zj5m
G/oMUQvIRuBF4mvmbIlk+hbG3kuNtJ9q4tfRUAZtfrnnKPId7XyPjgiZsxplo4X+
UeYbyC4QVo1/rHfs3wxpGzb2dEgRXjllWIag2ToGjG4pzqnUBjfXCGyV0+EIpgeT
nSBOY4VWDB1fGF3eQebsH49kUGG4BeQmtGSmXc2Srx3VVaklfKEgodDslxV+ajtY
ajLJerhtwU9bHJKB5SplqCjvj7Tw0h8wjIjU7oz0d8vKBcRxW/SBqrea/q21/g37
c4XqaX+YVth7YQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:08:10 2026 by rpki-client