Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/hVvB1897acjrUdDG1U9_-t94DKc.mft
File: hVvB1897acjrUdDG1U9_-t94DKc.mft (raw, json)
Hash identifier: AnAQOMCqha8jhlQhMA3La1icYgEW2JU9czEQyddmce4=
Subject key identifier: 1B:F0:D2:FA:D5:68:15:7E:F6:E0:B3:0F:EA:9E:71:5D:78:5B:B3:00
Authority key identifier: 85:5B:C1:D7:CF:7B:69:C8:EB:51:D0:C6:D5:4F:7F:FA:DF:78:0C:A7
Certificate issuer: /CN=855bc1d7cf7b69c8eb51d0c6d54f7ffadf780ca7
Certificate serial: 019D273A91E113C0B4B02B3F3641C2E24467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVvB1897acjrUdDG1U9_-t94DKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/hVvB1897acjrUdDG1U9_-t94DKc.mft
Manifest number: 0168
Signing time: Wed 25 Mar 2026 23:00:43 +0000
Manifest this update: Wed 25 Mar 2026 23:00:43 +0000
Manifest next update: Thu 26 Mar 2026 23:00:43 +0000
Files and hashes: 1: Pz4IoeM603cAvuIqtI8K9Tn1BOE.roa (hash: 6HZMEqczbXuFmk1IxBNJVGD8h5NW47gUJ1UH+hRq8po=)
2: hVvB1897acjrUdDG1U9_-t94DKc.crl (hash: Mcwb880lU+jN1V0pgXAL5xxewwPk61wzhd3KATwcKHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/hVvB1897acjrUdDG1U9_-t94DKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/hVvB1897acjrUdDG1U9_-t94DKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVvB1897acjrUdDG1U9_-t94DKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:91:e1:13:c0:b4:b0:2b:3f:36:41:c2:e2:44:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855bc1d7cf7b69c8eb51d0c6d54f7ffadf780ca7
Validity
Not Before: Mar 25 23:00:43 2026 GMT
Not After : Mar 26 23:00:43 2026 GMT
Subject: CN=1bf0d2fad568157ef6e0b30fea9e715d785bb300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7b:c4:6b:02:f7:2e:16:36:f9:11:e9:46:ce:
8e:69:93:39:ec:4c:77:8d:de:d5:d8:db:99:f7:99:
24:a3:5c:d6:b3:09:02:46:3b:f1:48:0a:53:87:ea:
f6:36:de:04:b6:12:cd:d7:e6:4c:48:7c:2e:64:23:
a2:23:93:6f:9c:47:e4:23:47:02:95:00:b5:1b:4b:
8a:ae:41:65:d5:f1:8a:45:e1:95:ed:13:a8:8f:40:
b9:54:39:94:30:b3:34:29:19:7f:c4:9d:24:a2:a4:
d5:e4:09:5b:bd:45:8e:78:cc:0e:ad:f1:90:bb:49:
68:fb:20:d1:26:d4:d8:37:5f:e1:46:fd:ef:03:39:
da:98:d5:08:f7:e1:c7:f8:14:8c:cf:57:04:28:5d:
c5:bf:6a:86:04:f2:08:8e:1f:5f:55:f0:05:93:b6:
20:d9:f6:94:09:4e:8e:38:39:f5:7f:e1:78:a0:4b:
76:f2:e4:6e:da:5a:54:c6:53:a8:79:4d:a2:c0:13:
79:2c:06:e8:2b:28:6b:f6:18:a8:ef:86:7d:da:82:
95:13:d9:65:76:60:22:fe:dc:41:03:f0:d5:db:f4:
c8:91:3a:a5:f5:d0:5b:9f:58:f9:4c:f7:6c:c9:e8:
c7:e9:ae:bd:25:17:f9:ab:a5:8b:34:9e:ba:f0:b1:
96:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F0:D2:FA:D5:68:15:7E:F6:E0:B3:0F:EA:9E:71:5D:78:5B:B3:00
X509v3 Authority Key Identifier:
keyid:85:5B:C1:D7:CF:7B:69:C8:EB:51:D0:C6:D5:4F:7F:FA:DF:78:0C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVvB1897acjrUdDG1U9_-t94DKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/hVvB1897acjrUdDG1U9_-t94DKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/hVvB1897acjrUdDG1U9_-t94DKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:98:f8:1d:b9:8e:fa:18:e0:b2:c0:db:12:bc:fd:17:94:05:
d0:97:f7:dd:ed:1e:22:06:02:50:dd:64:6f:d5:36:95:9b:a3:
b5:c5:36:d3:65:93:c4:58:f0:5b:e2:36:78:aa:8f:ed:76:d1:
67:3d:30:73:d9:ff:36:cd:cc:8e:68:eb:b1:a8:57:92:5e:52:
d4:4d:94:95:00:e3:8d:b6:e2:05:6b:f0:9a:b5:c9:f6:02:d4:
29:71:67:e5:3d:8b:c3:b3:43:0c:b8:d9:cd:4c:a2:25:3e:e5:
5f:dc:b6:df:3b:c1:a8:b7:4e:ee:6b:82:13:4b:11:64:ba:00:
98:30:62:a4:de:05:57:73:81:4b:1e:c2:15:8b:4a:3e:50:a6:
36:37:3d:a2:5f:64:cf:b7:ae:53:02:a7:9b:29:00:73:4f:bf:
39:1c:1e:d8:4f:c3:94:a6:11:1b:33:12:41:fa:4c:c9:7b:77:
e7:b5:00:3d:c0:bb:71:91:a4:64:67:11:79:cd:34:be:b0:84:
e9:ef:fa:f2:de:48:9c:05:a8:30:fc:b2:db:c3:f4:57:e6:08:
7a:d8:4d:43:99:40:27:4e:36:be:83:5d:a9:5c:97:59:3b:08:
2d:b3:c7:1d:09:99:c9:a7:fd:ff:c3:e0:22:55:0e:00:19:cf:
e0:b8:1d:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOpHhE8C0sCs/NkHC4kRnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NWJjMWQ3Y2Y3YjY5YzhlYjUxZDBjNmQ1NGY3ZmZhZGY3
ODBjYTcwHhcNMjYwMzI1MjMwMDQzWhcNMjYwMzI2MjMwMDQzWjAzMTEwLwYDVQQD
EygxYmYwZDJmYWQ1NjgxNTdlZjZlMGIzMGZlYTllNzE1ZDc4NWJiMzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHvEawL3LhY2+RHpRs6OaZM57Ex3
jd7V2NuZ95kko1zWswkCRjvxSApTh+r2Nt4EthLN1+ZMSHwuZCOiI5NvnEfkI0cC
lQC1G0uKrkFl1fGKReGV7ROoj0C5VDmUMLM0KRl/xJ0koqTV5AlbvUWOeMwOrfGQ
u0lo+yDRJtTYN1/hRv3vAznamNUI9+HH+BSMz1cEKF3Fv2qGBPIIjh9fVfAFk7Yg
2faUCU6OODn1f+F4oEt28uRu2lpUxlOoeU2iwBN5LAboKyhr9hio74Z92oKVE9ll
dmAi/txBA/DV2/TIkTql9dBbn1j5TPdsyejH6a69JRf5q6WLNJ668LGW9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBvw0vrVaBV+9uCzD+qecV14W7MAMB8GA1UdIwQY
MBaAFIVbwdfPe2nI61HQxtVPf/rfeAynMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFZ2QjE4OTdhY2pyVWRERzFVOV8tdDk0REtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lM2Q2ZmYtOGZmYi00NzQxLThmYTQt
MGNjNGQyZDI2ZjA2LzEvaFZ2QjE4OTdhY2pyVWRERzFVOV8tdDk0REtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9lM2Q2ZmYtOGZmYi00NzQxLThmYTQtMGNjNGQyZDI2ZjA2
LzEvaFZ2QjE4OTdhY2pyVWRERzFVOV8tdDk0REtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACpj4HbmO
+hjgssDbErz9F5QF0Jf33e0eIgYCUN1kb9U2lZujtcU202WTxFjwW+I2eKqP7XbR
Zz0wc9n/Ns3MjmjrsahXkl5S1E2UlQDjjbbiBWvwmrXJ9gLUKXFn5T2Lw7NDDLjZ
zUyiJT7lX9y23zvBqLdO7muCE0sRZLoAmDBipN4FV3OBSx7CFYtKPlCmNjc9ol9k
z7euUwKnmykAc0+/ORwe2E/DlKYRGzMSQfpMyXt357UAPcC7cZGkZGcRec00vrCE
6e/68t5InAWoMPyy28P0V+YIethNQ5lAJ042voNdqVyXWTsILbPHHQmZyaf9/8Pg
IlUOABnP4LgdGw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:43 2026 by rpki-client