Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
File: hbT4demdNbFCBGk-7hHKm2qv5K4.mft (raw, json)
Hash identifier: Vrwi/W9qaJlAu2wMRQqjaOLkXLHiGQNNEvmApS1bBYw=
Subject key identifier: 47:CE:A1:5E:3F:74:02:94:CE:B4:5A:CB:61:87:53:8A:8E:11:10:D4
Authority key identifier: 85:B4:F8:75:E9:9D:35:B1:42:04:69:3E:EE:11:CA:9B:6A:AF:E4:AE
Certificate issuer: /CN=85b4f875e99d35b14204693eee11ca9b6aafe4ae
Certificate serial: 019D2996C79FBD538B8A4FB175F30613A706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbT4demdNbFCBGk-7hHKm2qv5K4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
Manifest number: 80
Signing time: Thu 26 Mar 2026 10:00:40 +0000
Manifest this update: Thu 26 Mar 2026 10:00:40 +0000
Manifest next update: Fri 27 Mar 2026 10:00:40 +0000
Files and hashes: 1: 42a5BDfavJB8-Fjb88ehzC_G2vI.roa (hash: 2elAAn7GbfRppYPOlapcCAAsvKzqxnlQwzBHL9tcDlY=)
2: CQEv-b3iodOi-uISHBHPc-tgjWM.roa (hash: JlM8b1SZjaRGm+HCIhtTTaWtpKsBolYmdJxakSZag0A=)
3: eXZdHpePUGkYaOH4ztUcIZuKWrs.roa (hash: HQWM35m3AuHcQ7qdoInnAm8EoKtgNopMBbkgqi3yHI4=)
4: hbT4demdNbFCBGk-7hHKm2qv5K4.crl (hash: JyqkmEwSJ9rn6hPXY8NHjQVeCcdWePBNomhDofj4fog=)
5: sK5WIVuOnIIbX3JCbO2fOFMpkQ4.roa (hash: EW7D7I1/z0g1aSst1nAVy1Ct07XmtQOb6qb/Gz8MdGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbT4demdNbFCBGk-7hHKm2qv5K4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:c7:9f:bd:53:8b:8a:4f:b1:75:f3:06:13:a7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b4f875e99d35b14204693eee11ca9b6aafe4ae
Validity
Not Before: Mar 26 10:00:40 2026 GMT
Not After : Mar 27 10:00:40 2026 GMT
Subject: CN=47cea15e3f740294ceb45acb6187538a8e1110d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:59:da:ef:e3:3e:08:6d:f7:5e:e2:f8:2f:0a:
d4:de:55:d9:a5:15:98:d4:10:fa:ec:8c:7c:86:16:
5d:7f:af:76:78:1a:ed:e8:2d:cf:23:bc:8e:f5:26:
00:85:0e:49:f6:f0:73:91:ec:15:12:5c:43:e7:e9:
f0:dc:31:95:f9:df:77:55:9f:97:1a:49:d8:c6:88:
94:d1:a7:e6:30:80:9d:ba:3c:d2:09:b9:78:09:4c:
f0:5d:f4:3e:94:34:f1:6f:f3:f0:02:a4:ae:93:c8:
1d:67:be:c3:28:c9:a2:40:dc:bd:a5:9a:ce:a3:51:
66:a7:4b:89:38:3f:63:f6:a3:dd:a0:a0:2a:c6:2a:
cc:6f:27:59:a3:99:2a:84:37:c0:96:b4:8c:98:ad:
90:da:04:83:b7:a9:1f:e3:b0:2a:72:8c:86:46:70:
83:ed:08:e8:78:0a:1d:62:5b:e8:06:8d:6f:19:3d:
92:88:ef:41:21:b8:8c:dc:84:f2:a3:ae:3a:dd:0e:
e4:84:57:d8:1b:d3:50:b9:4c:23:29:b4:98:49:63:
83:20:77:c1:c5:00:c7:03:34:e9:f7:ab:cc:3e:8d:
35:93:b5:63:28:2d:bb:cd:56:9e:17:25:bc:d7:e0:
13:61:d7:b7:c5:94:0a:b7:cd:5f:8d:97:d1:9b:9f:
5e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CE:A1:5E:3F:74:02:94:CE:B4:5A:CB:61:87:53:8A:8E:11:10:D4
X509v3 Authority Key Identifier:
keyid:85:B4:F8:75:E9:9D:35:B1:42:04:69:3E:EE:11:CA:9B:6A:AF:E4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbT4demdNbFCBGk-7hHKm2qv5K4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b8219e-346a-43b9-b823-938a73b6f7c2/1/hbT4demdNbFCBGk-7hHKm2qv5K4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:80:ed:74:14:61:d2:9e:8c:3c:5b:e2:58:ce:53:f3:20:c6:
12:5e:4d:ea:93:dc:9c:a0:f0:bf:db:02:a9:48:d7:2f:db:d0:
5e:b9:ad:8e:e7:37:c1:86:08:72:ed:a6:2f:2a:b6:93:84:2a:
4b:82:0a:df:41:92:1a:2e:88:e0:51:80:77:77:cd:c3:2c:10:
e4:9f:d8:14:a6:36:b6:5a:dc:c6:3a:ab:ac:a2:19:fb:a4:4d:
56:45:ea:58:5f:18:6b:2f:b1:46:1c:2e:63:71:89:dc:00:cd:
7e:d4:3b:22:cc:a0:42:a2:0a:9b:3c:08:dc:74:db:42:44:ae:
fe:3a:7b:eb:d0:79:d1:2a:a2:80:51:69:07:e3:e1:40:8d:83:
85:6e:26:54:4d:3e:95:4c:f9:a8:1d:1c:76:aa:43:d2:a3:3c:
e6:86:4c:5a:2d:8a:ff:46:e7:ee:15:fe:fd:94:95:89:77:38:
fe:54:36:9a:6b:2e:75:16:0b:11:b5:de:cc:88:f7:5b:b1:92:
05:5a:17:43:92:8e:e6:1c:f4:50:85:7f:0c:f2:0d:68:86:85:
08:6f:52:b7:b1:85:9c:7f:01:cb:55:84:eb:2f:c3:83:e2:eb:
e9:06:e8:09:a8:6d:a7:09:93:c0:8a:e7:8a:8b:2b:f8:00:60:
0d:6b:2f:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plsefvVOLik+xdfMGE6cGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1YjRmODc1ZTk5ZDM1YjE0MjA0NjkzZWVlMTFjYTliNmFh
ZmU0YWUwHhcNMjYwMzI2MTAwMDQwWhcNMjYwMzI3MTAwMDQwWjAzMTEwLwYDVQQD
Eyg0N2NlYTE1ZTNmNzQwMjk0Y2ViNDVhY2I2MTg3NTM4YThlMTExMGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVna7+M+CG33XuL4LwrU3lXZpRWY
1BD67Ix8hhZdf692eBrt6C3PI7yO9SYAhQ5J9vBzkewVElxD5+nw3DGV+d93VZ+X
GknYxoiU0afmMICdujzSCbl4CUzwXfQ+lDTxb/PwAqSuk8gdZ77DKMmiQNy9pZrO
o1Fmp0uJOD9j9qPdoKAqxirMbydZo5kqhDfAlrSMmK2Q2gSDt6kf47AqcoyGRnCD
7QjoeAodYlvoBo1vGT2SiO9BIbiM3ITyo6463Q7khFfYG9NQuUwjKbSYSWODIHfB
xQDHAzTp96vMPo01k7VjKC27zVaeFyW81+ATYde3xZQKt81fjZfRm59ewwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfOoV4/dAKUzrRay2GHU4qOERDUMB8GA1UdIwQY
MBaAFIW0+HXpnTWxQgRpPu4Ryptqr+SuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGJUNGRlbWROYkZDQkdrLTdoSEttMnF2NUs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9iODIxOWUtMzQ2YS00M2I5LWI4MjMt
OTM4YTczYjZmN2MyLzEvaGJUNGRlbWROYkZDQkdrLTdoSEttMnF2NUs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9iODIxOWUtMzQ2YS00M2I5LWI4MjMtOTM4YTczYjZmN2My
LzEvaGJUNGRlbWROYkZDQkdrLTdoSEttMnF2NUs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYIDtdBRh
0p6MPFviWM5T8yDGEl5N6pPcnKDwv9sCqUjXL9vQXrmtjuc3wYYIcu2mLyq2k4Qq
S4IK30GSGi6I4FGAd3fNwywQ5J/YFKY2tlrcxjqrrKIZ+6RNVkXqWF8Yay+xRhwu
Y3GJ3ADNftQ7IsygQqIKmzwI3HTbQkSu/jp769B50SqigFFpB+PhQI2DhW4mVE0+
lUz5qB0cdqpD0qM85oZMWi2K/0bn7hX+/ZSViXc4/lQ2mmsudRYLEbXezIj3W7GS
BVoXQ5KO5hz0UIV/DPINaIaFCG9St7GFnH8By1WE6y/Dg+Lr6QboCahtpwmTwIrn
iosr+ABgDWsvHA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:05:01 2026 by rpki-client