Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
File: HJnOvgzwmQOQPRnBygrmJCF2SFk.mft (raw, json)
Hash identifier: +60LNyDsb4R3HWuZZRBLA5e7dVNlJnJ/aoIjrIxzKuo=
Subject key identifier: EC:E5:C3:30:88:F2:C5:A9:D9:A2:E6:0F:67:F3:23:5C:53:7E:9B:96
Authority key identifier: 1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
Certificate issuer: /CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Certificate serial: 019D25BA716BC6B57B7888F0A1CE26A490A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
Manifest number: 16BC
Signing time: Wed 25 Mar 2026 16:01:08 +0000
Manifest this update: Wed 25 Mar 2026 16:01:08 +0000
Manifest next update: Thu 26 Mar 2026 16:01:08 +0000
Files and hashes: 1: HJnOvgzwmQOQPRnBygrmJCF2SFk.crl (hash: 6tP0gFm+ZwvqFfMUkywXi3NJBUsMxZKcbCsNv3HP4ow=)
2: InHyWEjEiyh7nEE2TIiuq0-_-Cc.roa (hash: X+4z9Y0iJ1TRnqAnnq28KCv6J+YQ5AkdpPJ2iZvV3CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:71:6b:c6:b5:7b:78:88:f0:a1:ce:26:a4:90:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c99cebe0cf09903903d19c1ca0ae62421764859
Validity
Not Before: Mar 25 16:01:08 2026 GMT
Not After : Mar 26 16:01:08 2026 GMT
Subject: CN=ece5c33088f2c5a9d9a2e60f67f3235c537e9b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:db:a5:5d:34:1f:76:a4:cf:61:9f:11:91:d1:
e4:b5:d0:57:b2:32:35:e8:02:00:86:0e:30:8d:a4:
54:6f:59:0f:08:51:2f:0b:9e:61:58:f8:f5:d8:b2:
3b:5a:92:cc:e9:da:8c:ec:c1:e4:69:6a:73:54:2f:
60:1a:85:09:ff:5b:37:c1:19:aa:41:69:82:fd:3b:
ee:29:e9:9f:27:e0:9a:53:5a:6f:6b:ab:68:77:cc:
18:60:16:3b:b5:a4:63:9a:8d:f9:a3:fe:40:22:fa:
52:d7:94:03:20:7e:5d:64:82:62:5c:75:ba:7a:49:
be:ac:a9:48:13:16:e5:c6:a8:37:cd:92:eb:9d:73:
68:7f:35:7b:bc:e3:d2:7f:15:85:4b:32:1b:92:8d:
2f:79:d3:21:0f:df:26:49:98:0e:e6:67:74:0d:37:
7d:63:3f:28:00:e9:c8:f5:ed:f7:2c:ba:a4:03:ee:
7d:f8:30:77:ba:07:1a:35:63:77:56:25:c1:d5:46:
0f:2d:df:12:ab:ba:09:5f:c1:db:79:32:07:45:85:
fb:3a:81:98:f9:ac:1a:3a:3f:01:cc:00:38:69:68:
f2:0e:29:72:d9:90:af:f1:c5:5f:b5:86:cc:c6:ab:
a1:48:ea:d5:5f:2a:f1:ad:68:e2:ba:5b:c1:6e:14:
8d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E5:C3:30:88:F2:C5:A9:D9:A2:E6:0F:67:F3:23:5C:53:7E:9B:96
X509v3 Authority Key Identifier:
keyid:1C:99:CE:BE:0C:F0:99:03:90:3D:19:C1:CA:0A:E6:24:21:76:48:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJnOvgzwmQOQPRnBygrmJCF2SFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3fea1a-57bc-493a-9a3e-8c25b5fb276f/1/HJnOvgzwmQOQPRnBygrmJCF2SFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4d:40:42:80:cb:ee:70:f1:e7:1c:a7:d7:95:1f:d2:02:80:
e1:fc:58:9a:60:ad:c4:2e:ac:84:74:40:13:19:8b:a6:e7:53:
38:aa:7b:5c:64:20:14:bf:c0:2c:50:0b:dd:47:6a:cc:6c:25:
da:5a:b2:7b:99:36:8d:d7:c8:06:58:de:5f:12:37:24:10:1b:
df:2d:b5:b5:17:c2:92:4d:6f:9c:97:e6:f8:9b:cf:90:55:ee:
db:ba:20:29:fa:91:1c:66:d7:ff:7d:55:b4:b4:5a:6e:21:d6:
dc:a4:c4:fb:78:a3:25:5e:be:6b:13:4b:78:cc:75:1e:64:a9:
9d:e0:b1:78:1f:f7:94:94:b8:d8:39:15:8e:18:71:35:73:5f:
9a:f8:e9:c6:c6:47:70:28:29:bc:d7:59:09:1b:da:f4:21:83:
3b:5c:08:e2:da:0d:5c:e7:25:f4:29:6a:b6:bd:a1:fd:e3:33:
69:bd:6b:2b:04:48:b3:08:92:b3:be:df:1c:6c:28:84:88:21:
a8:0e:d1:3d:ee:98:0c:97:d1:1a:6d:fe:16:5d:89:f0:39:bd:
3e:5e:66:1a:a1:22:60:e6:a5:34:7f:43:0e:f8:65:e1:b1:f6:
2e:11:9e:a9:af:db:5c:67:f6:6e:a4:87:82:55:ae:ed:03:d1:
c8:f2:32:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lunFrxrV7eIjwoc4mpJCgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTljZWJlMGNmMDk5MDM5MDNkMTljMWNhMGFlNjI0MjE3
NjQ4NTkwHhcNMjYwMzI1MTYwMTA4WhcNMjYwMzI2MTYwMTA4WjAzMTEwLwYDVQQD
EyhlY2U1YzMzMDg4ZjJjNWE5ZDlhMmU2MGY2N2YzMjM1YzUzN2U5Yjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NulXTQfdqTPYZ8RkdHktdBXsjI1
6AIAhg4wjaRUb1kPCFEvC55hWPj12LI7WpLM6dqM7MHkaWpzVC9gGoUJ/1s3wRmq
QWmC/TvuKemfJ+CaU1pva6tod8wYYBY7taRjmo35o/5AIvpS15QDIH5dZIJiXHW6
ekm+rKlIExblxqg3zZLrnXNofzV7vOPSfxWFSzIbko0vedMhD98mSZgO5md0DTd9
Yz8oAOnI9e33LLqkA+59+DB3ugcaNWN3ViXB1UYPLd8Sq7oJX8HbeTIHRYX7OoGY
+awaOj8BzAA4aWjyDily2ZCv8cVftYbMxquhSOrVXyrxrWjiulvBbhSNMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzlwzCI8sWp2aLmD2fzI1xTfpuWMB8GA1UdIwQY
MBaAFByZzr4M8JkDkD0ZwcoK5iQhdkhZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpuT3ZnendtUU9RUFJuQnlncm1KQ0YyU0ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8zZmVhMWEtNTdiYy00OTNhLTlhM2Ut
OGMyNWI1ZmIyNzZmLzEvSEpuT3ZnendtUU9RUFJuQnlncm1KQ0YyU0ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8zZmVhMWEtNTdiYy00OTNhLTlhM2UtOGMyNWI1ZmIyNzZm
LzEvSEpuT3ZnendtUU9RUFJuQnlncm1KQ0YyU0ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS01AQoDL
7nDx5xyn15Uf0gKA4fxYmmCtxC6shHRAExmLpudTOKp7XGQgFL/ALFAL3UdqzGwl
2lqye5k2jdfIBljeXxI3JBAb3y21tRfCkk1vnJfm+JvPkFXu27ogKfqRHGbX/31V
tLRabiHW3KTE+3ijJV6+axNLeMx1HmSpneCxeB/3lJS42DkVjhhxNXNfmvjpxsZH
cCgpvNdZCRva9CGDO1wI4toNXOcl9Clqtr2h/eMzab1rKwRIswiSs77fHGwohIgh
qA7RPe6YDJfRGm3+Fl2J8Dm9Pl5mGqEiYOalNH9DDvhl4bH2LhGeqa/bXGf2bqSH
glWu7QPRyPIycw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:02 2026 by rpki-client