Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
File: Hx4uqu8HAVlawnVNASEhfnuR1zk.mft (raw, json)
Hash identifier: PB0cW/iI+YtschKbBkYlDxxqWqwhoyoJhzTpQuSf0zs=
Subject key identifier: B6:3C:EE:59:DB:C2:50:44:E3:70:8A:FE:36:5F:77:91:9C:CF:15:2B
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Certificate issuer: /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial: 019D29CE6DCFA8DEC4D489C5185580DBB3E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
Manifest number: 0488
Signing time: Thu 26 Mar 2026 11:01:27 +0000
Manifest this update: Thu 26 Mar 2026 11:01:27 +0000
Manifest next update: Fri 27 Mar 2026 11:01:27 +0000
Files and hashes: 1: Hx4uqu8HAVlawnVNASEhfnuR1zk.crl (hash: l6GlIahrv5Ky6qvC5vA4HShpsLOeAMb9jb3uAOF8/64=)
2: Jx1BWFbTuF9FV-hQyd0tIt4ewU0.roa (hash: BNnlTPOOGSMbqGxtxHccPbvxqZSfaMHJ/endtfOYthQ=)
3: X5UiHYY55PMwPTyXsGspHuEoeOg.roa (hash: fIuqUPA3nhKBtyv99+9KTWnAb4PEF1c/hEupb4l2/JA=)
4: itvEUHoAaJl17faWlj6NT_FxL94.roa (hash: AjucNzluWbTiJYxrYlGErePUiK0Itei7jfiA2tx5Tk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:6d:cf:a8:de:c4:d4:89:c5:18:55:80:db:b3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Validity
Not Before: Mar 26 11:01:27 2026 GMT
Not After : Mar 27 11:01:27 2026 GMT
Subject: CN=b63cee59dbc25044e3708afe365f77919ccf152b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:90:6d:31:81:ec:5d:69:c7:23:a9:92:f6:39:
9e:0f:5c:d8:3c:3f:ec:28:44:05:46:f6:cd:ce:92:
ab:f2:38:9e:52:26:2f:9c:6d:80:2e:8d:bf:9a:01:
fd:04:f5:ae:fb:1c:37:05:2b:a3:77:b3:4b:ef:68:
38:c4:45:ec:e7:c3:8d:3e:66:e7:99:48:32:26:fd:
09:9b:e6:2a:d5:be:6a:ad:5e:fc:d3:bf:70:be:94:
f2:33:cf:5e:42:1a:2e:dc:65:20:b8:ea:62:03:4d:
72:54:f5:d3:0b:d5:6c:53:6c:3a:50:d4:2d:8f:44:
d6:bd:b9:85:30:d7:8b:06:b9:2e:72:38:44:7e:9b:
fb:c9:b4:bd:14:70:02:6d:3b:5d:f2:f9:ab:64:42:
4d:a9:37:2c:77:af:c6:19:07:4f:7d:b5:d5:c6:fd:
c1:d8:e6:f0:af:59:11:27:bb:c4:29:ab:5b:2d:bf:
09:f0:5f:72:81:58:e0:6d:9b:58:26:08:09:6f:be:
43:42:97:bf:c6:03:89:10:aa:46:13:f4:e7:bd:83:
c4:e8:9b:62:9d:8a:b9:15:c0:4a:80:b3:4c:69:fb:
5a:6a:f2:bd:ec:6b:b7:c3:da:5a:1c:69:8a:bd:26:
c6:33:0a:ee:42:4b:08:ae:cf:a9:16:2a:a6:41:24:
be:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3C:EE:59:DB:C2:50:44:E3:70:8A:FE:36:5F:77:91:9C:CF:15:2B
X509v3 Authority Key Identifier:
keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:cd:c4:79:2b:00:0a:b5:ae:48:60:96:4a:44:4c:c6:be:f3:
ad:41:1d:07:f2:ef:08:80:b7:e5:50:13:bd:9d:74:d8:b5:34:
f9:55:5a:44:66:09:59:4d:26:1c:d5:43:61:d3:95:c9:18:c4:
53:4f:f9:e9:32:07:b3:f9:52:b7:0b:f5:10:2a:94:0c:52:ba:
77:28:c4:11:b7:73:80:ad:2c:18:72:5c:54:ad:eb:f3:4e:69:
a7:e4:54:b5:45:a5:fa:8e:08:6a:ec:47:40:e1:e3:d8:64:54:
05:f0:1b:9f:ef:1e:58:dd:5e:1e:e6:6a:32:a7:71:c9:88:11:
1e:64:31:e8:5e:2d:07:c8:de:cd:cc:aa:2c:42:64:00:08:33:
4c:d1:dd:f4:9f:ac:6e:98:8d:e2:c6:8e:6f:1f:cf:89:28:0c:
d6:b8:9f:5d:b0:27:e4:a7:2d:62:a8:c2:e5:5a:f8:2e:d7:ee:
94:8f:83:4c:13:9b:0c:f1:20:04:61:e4:40:15:ac:6d:7e:6a:
b0:b0:91:3b:8b:df:b6:e7:d2:c0:fc:14:bf:ea:36:12:5a:14:
ae:2c:ea:24:06:1b:17:8c:d1:15:2c:49:c1:49:34:d9:b9:67:
35:7c:b4:53:fc:3d:02:15:b5:0d:87:f6:37:34:08:e8:75:98:
6b:65:bb:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzm3PqN7E1InFGFWA27PpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMWUyZWFhZWYwNzAxNTk1YWMyNzU0ZDAxMjEyMTdlN2I5
MWQ3MzkwHhcNMjYwMzI2MTEwMTI3WhcNMjYwMzI3MTEwMTI3WjAzMTEwLwYDVQQD
EyhiNjNjZWU1OWRiYzI1MDQ0ZTM3MDhhZmUzNjVmNzc5MTljY2YxNTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ZBtMYHsXWnHI6mS9jmeD1zYPD/s
KEQFRvbNzpKr8jieUiYvnG2ALo2/mgH9BPWu+xw3BSujd7NL72g4xEXs58ONPmbn
mUgyJv0Jm+Yq1b5qrV78079wvpTyM89eQhou3GUguOpiA01yVPXTC9VsU2w6UNQt
j0TWvbmFMNeLBrkucjhEfpv7ybS9FHACbTtd8vmrZEJNqTcsd6/GGQdPfbXVxv3B
2Obwr1kRJ7vEKatbLb8J8F9ygVjgbZtYJggJb75DQpe/xgOJEKpGE/TnvYPE6Jti
nYq5FcBKgLNMaftaavK97Gu3w9paHGmKvSbGMwruQksIrs+pFiqmQSS+fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLY87lnbwlBE43CK/jZfd5GczxUrMB8GA1UdIwQY
MBaAFB8eLqrvBwFZWsJ1TQEhIX57kdc5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHg0dXF1OEhBVmxhd25WTkFTRWhmbnVSMXprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS80ZDZmZmQtMWZhYy00OTdmLTgxMGMt
MmIzNGI4NDMzYmI1LzEvSHg0dXF1OEhBVmxhd25WTkFTRWhmbnVSMXprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS80ZDZmZmQtMWZhYy00OTdmLTgxMGMtMmIzNGI4NDMzYmI1
LzEvSHg0dXF1OEhBVmxhd25WTkFTRWhmbnVSMXprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnc3EeSsA
CrWuSGCWSkRMxr7zrUEdB/LvCIC35VATvZ102LU0+VVaRGYJWU0mHNVDYdOVyRjE
U0/56TIHs/lStwv1ECqUDFK6dyjEEbdzgK0sGHJcVK3r805pp+RUtUWl+o4IauxH
QOHj2GRUBfAbn+8eWN1eHuZqMqdxyYgRHmQx6F4tB8jezcyqLEJkAAgzTNHd9J+s
bpiN4saObx/PiSgM1rifXbAn5KctYqjC5Vr4LtfulI+DTBObDPEgBGHkQBWsbX5q
sLCRO4vftufSwPwUv+o2EloUrizqJAYbF4zRFSxJwUk02blnNXy0U/w9AhW1DYf2
NzQI6HWYa2W7+g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:47:50 2026 by rpki-client