Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
File: HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft (raw, json)
Hash identifier: qBe5k+NxzzNw1vqqbClHzO0g64doy6LNfiC3bWJWIrc=
Subject key identifier: 2B:F0:35:56:B7:DD:5A:FA:15:52:5D:0B:FC:5A:B3:CF:D5:FA:51:AB
Authority key identifier: 1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
Certificate issuer: /CN=1dd7088d9da221f0565eb178443600171e7977aa
Certificate serial: 019D27A86455EEFF6CD269E5273892657450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
Manifest number: 038C
Signing time: Thu 26 Mar 2026 01:00:40 +0000
Manifest this update: Thu 26 Mar 2026 01:00:40 +0000
Manifest next update: Fri 27 Mar 2026 01:00:40 +0000
Files and hashes: 1: CjgS_b2r-3qplZ5KDVZa8VStIhQ.roa (hash: 243j3TvIuSB1M/hUhuu8ZLn+QAVeT40RY9rpOYK+p6Q=)
2: HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl (hash: CJLYTTerzv9JkGlH6hvO4qPADYDgCYAr2EYCowu6Lng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:64:55:ee:ff:6c:d2:69:e5:27:38:92:65:74:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd7088d9da221f0565eb178443600171e7977aa
Validity
Not Before: Mar 26 01:00:40 2026 GMT
Not After : Mar 27 01:00:40 2026 GMT
Subject: CN=2bf03556b7dd5afa15525d0bfc5ab3cfd5fa51ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:96:b3:84:67:f4:d0:ad:55:e7:48:e4:f8:76:
66:ec:bb:04:49:f3:b9:bb:a2:c1:1a:c8:98:33:32:
e9:eb:80:ef:51:b2:09:ff:ef:5f:d4:04:81:ee:8a:
12:29:26:b3:53:5e:d7:56:bf:e6:d0:fa:c9:4d:b4:
c2:d5:d2:f1:17:7b:d4:1b:34:c3:1a:76:6e:b9:6b:
3c:40:9e:3b:22:64:18:aa:67:6a:8b:01:cd:7c:3d:
ca:6b:47:c8:55:7b:3c:32:08:ee:3d:17:db:21:4e:
25:d0:28:21:bc:cd:84:ed:52:e1:e6:a2:83:6e:f9:
c9:6b:bd:ed:db:5e:8c:01:9c:77:fb:c1:2f:2c:fe:
0b:52:fc:73:63:89:fb:5f:b4:9b:69:38:43:67:2b:
cb:33:85:39:51:4f:57:c8:01:ac:5e:95:04:00:84:
09:93:fb:f3:8f:90:c0:90:05:48:75:21:56:79:60:
56:b9:3e:cc:80:8a:68:41:c2:12:57:c3:13:97:ec:
c5:5f:22:42:d6:db:28:d3:59:aa:64:bc:f0:91:92:
6b:bc:cb:7c:de:b4:d5:26:1b:e5:87:df:b8:b4:40:
de:6c:9a:26:e9:ba:9a:44:ab:35:0a:ac:1f:1f:f7:
5f:2a:f2:9d:22:df:9c:85:cc:e6:7b:04:b7:26:6e:
d1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F0:35:56:B7:DD:5A:FA:15:52:5D:0B:FC:5A:B3:CF:D5:FA:51:AB
X509v3 Authority Key Identifier:
keyid:1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d7:35:80:68:30:aa:22:c4:e8:3c:68:a0:15:cc:ab:f9:89:
e3:93:e3:21:8e:44:93:34:65:25:15:e1:f4:5f:d8:7c:18:37:
41:ba:9f:6c:d6:ad:be:77:a3:8d:72:51:52:1c:5d:2f:40:5a:
bd:c1:93:78:24:29:da:8e:b0:98:6f:3b:9f:19:8a:d9:b1:2b:
03:dd:5f:5f:8f:27:6a:89:09:60:6e:48:af:7e:21:ba:45:47:
f0:e8:d5:7a:b0:be:07:0e:db:28:0e:bd:72:72:35:20:c2:03:
4f:44:1d:e6:48:e9:ba:92:fe:5a:82:06:e5:4a:be:b6:04:75:
78:7a:ce:02:48:18:ab:51:93:ae:98:cd:e8:10:a2:84:ad:c7:
8d:19:88:9d:ec:07:da:13:3e:82:c9:df:87:d5:24:c3:e0:70:
44:e2:ca:c9:5f:54:6a:73:7f:44:d8:31:8e:f0:50:ae:2d:ac:
6a:ae:c6:ab:25:e7:e7:2e:a7:db:e1:14:51:23:d2:e1:f6:e0:
c0:75:ba:48:0f:5d:ca:80:99:6a:81:16:c9:4d:77:9a:97:9f:
f8:ea:5b:00:03:9b:50:b1:ce:03:a9:37:21:bb:a2:2d:72:3b:
ce:06:a0:9b:4d:f7:f7:c4:88:37:2f:be:82:fb:61:cc:5a:4e:
62:d7:1a:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqGRV7v9s0mnlJziSZXRQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZDcwODhkOWRhMjIxZjA1NjVlYjE3ODQ0MzYwMDE3MWU3
OTc3YWEwHhcNMjYwMzI2MDEwMDQwWhcNMjYwMzI3MDEwMDQwWjAzMTEwLwYDVQQD
EygyYmYwMzU1NmI3ZGQ1YWZhMTU1MjVkMGJmYzVhYjNjZmQ1ZmE1MWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpazhGf00K1V50jk+HZm7LsESfO5
u6LBGsiYMzLp64DvUbIJ/+9f1ASB7ooSKSazU17XVr/m0PrJTbTC1dLxF3vUGzTD
GnZuuWs8QJ47ImQYqmdqiwHNfD3Ka0fIVXs8MgjuPRfbIU4l0CghvM2E7VLh5qKD
bvnJa73t216MAZx3+8EvLP4LUvxzY4n7X7SbaThDZyvLM4U5UU9XyAGsXpUEAIQJ
k/vzj5DAkAVIdSFWeWBWuT7MgIpoQcISV8MTl+zFXyJC1tso01mqZLzwkZJrvMt8
3rTVJhvlh9+4tEDebJom6bqaRKs1CqwfH/dfKvKdIt+chczmewS3Jm7RCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvwNVa33Vr6FVJdC/xas8/V+lGrMB8GA1UdIwQY
MBaAFB3XCI2doiHwVl6xeEQ2ABceeXeqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGRjSWpaMmlJZkJXWHJGNFJEWUFGeDU1ZDZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS82Nzk5NjgtMTFlOS00OWE1LWIxZDEt
ZTBiZTE0OGM0MDk3LzEvSGRjSWpaMmlJZkJXWHJGNFJEWUFGeDU1ZDZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS82Nzk5NjgtMTFlOS00OWE1LWIxZDEtZTBiZTE0OGM0MDk3
LzEvSGRjSWpaMmlJZkJXWHJGNFJEWUFGeDU1ZDZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjtc1gGgw
qiLE6DxooBXMq/mJ45PjIY5EkzRlJRXh9F/YfBg3QbqfbNatvnejjXJRUhxdL0Ba
vcGTeCQp2o6wmG87nxmK2bErA91fX48naokJYG5Ir34hukVH8OjVerC+Bw7bKA69
cnI1IMIDT0Qd5kjpupL+WoIG5Uq+tgR1eHrOAkgYq1GTrpjN6BCihK3HjRmInewH
2hM+gsnfh9Ukw+BwROLKyV9UanN/RNgxjvBQri2saq7GqyXn5y6n2+EUUSPS4fbg
wHW6SA9dyoCZaoEWyU13mpef+OpbAAObULHOA6k3IbuiLXI7zgagm03398SINy++
gvthzFpOYtcaow==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:21 2026 by rpki-client