Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
File: hst0KgO8nIVQcheiUgTf_4L8zfk.mft (raw, json)
Hash identifier: nGcD5EYo5gKF3vUiVmx06h84cXrj0SbhWjwc8nYLXN8=
Subject key identifier: 5A:E4:DB:7C:EE:C7:B0:7F:F8:87:CB:A8:68:7C:6A:BC:79:4E:85:F0
Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
Certificate issuer: /CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Certificate serial: 019D277288D20BA57B717FE1054A758B6893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
Manifest number: 1193
Signing time: Thu 26 Mar 2026 00:01:50 +0000
Manifest this update: Thu 26 Mar 2026 00:01:50 +0000
Manifest next update: Fri 27 Mar 2026 00:01:50 +0000
Files and hashes: 1: FsEYUQUVL6IgAyC_3hTmIC05sYA.roa (hash: erfQp237zxf8AD8EH/ivbDYnw0vQY88Vf8ov2LTkk+Q=)
2: KhePy2KSChqSTO56xjFNB88Adhw.roa (hash: jSbx1Mp1yMnht16w7llcf9K2ZLPdIRkxkGJ6/eCHfII=)
3: Z-DKyWN4NlE9Oe6WxuczFCionOA.roa (hash: DCMKgnjrJbcUZjEDqwNnXXjpRG/93HbByWia9wwVNVM=)
4: hst0KgO8nIVQcheiUgTf_4L8zfk.crl (hash: jtn67gjZFpEH8kq3+9ABic0O3XHrdiLiIhlIhVb8uLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:88:d2:0b:a5:7b:71:7f:e1:05:4a:75:8b:68:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Validity
Not Before: Mar 26 00:01:50 2026 GMT
Not After : Mar 27 00:01:50 2026 GMT
Subject: CN=5ae4db7ceec7b07ff887cba8687c6abc794e85f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:42:5e:8d:2e:e6:e7:b9:4f:1b:84:d2:3d:c2:
de:19:f8:55:ba:e7:71:18:0e:79:42:15:7b:0b:df:
a9:48:03:0d:7f:01:3a:22:57:51:ec:c3:ab:5e:7a:
d0:2c:a6:d7:ab:70:38:20:51:66:68:19:b2:9d:92:
23:23:fa:38:33:19:c9:9c:7e:f5:0a:bb:50:c2:8a:
5d:e8:f2:9f:8b:f8:d5:a4:e1:ec:68:d9:05:ad:cf:
e9:3d:70:57:c6:94:70:17:d5:2a:e6:c8:dd:7b:ec:
97:e7:1f:46:79:fe:59:39:09:f8:5c:11:24:b7:28:
0f:d9:4c:c3:56:fd:66:15:3d:ed:a0:96:92:29:5f:
b5:59:a3:4f:c6:46:71:8f:13:50:45:7c:e4:06:b1:
13:68:b4:3c:7e:1d:c1:91:01:73:0a:2f:6f:7e:f5:
78:32:0a:46:af:4c:31:b1:12:a8:7e:6b:63:87:74:
1f:f2:f8:43:fd:be:5a:57:e6:d5:92:26:2f:0c:4b:
68:cf:73:d5:97:5c:aa:0f:ff:b4:cf:39:44:ed:a9:
fd:dc:6d:48:6e:fd:c2:10:28:08:70:05:fb:19:c8:
a6:59:20:f1:aa:a2:31:51:c9:fa:de:fe:fb:35:f9:
e1:85:27:94:94:cb:63:3f:0f:e0:24:c2:ed:8b:b9:
3e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E4:DB:7C:EE:C7:B0:7F:F8:87:CB:A8:68:7C:6A:BC:79:4E:85:F0
X509v3 Authority Key Identifier:
keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:58:2f:e5:b5:b8:09:75:1c:12:f8:4a:44:9c:6d:33:7e:7f:
3a:dd:93:94:38:e7:87:b3:2b:f3:ed:e2:07:6e:4e:44:c9:4a:
c1:77:30:69:db:24:57:36:e7:60:aa:13:6c:f7:28:69:50:4c:
49:2f:9a:5b:db:a5:38:7d:31:54:c2:5d:56:e4:f8:93:dc:e5:
55:13:f7:18:98:29:c0:08:a9:c0:dc:52:80:30:1e:ad:51:83:
c0:0b:a1:a2:05:f4:f4:47:a6:08:03:20:df:70:11:cb:f6:87:
27:85:91:d3:e5:69:88:76:bd:ef:01:28:21:21:95:83:1e:b3:
51:a8:95:e8:98:18:2a:4f:13:69:e1:9e:3f:55:2c:8f:c9:61:
13:b0:44:32:ed:f7:39:76:73:0c:6d:72:a2:a7:95:2e:82:6c:
00:9b:a2:4b:6a:f1:bb:e8:64:77:8d:07:a6:58:3f:29:98:38:
40:ec:75:e0:a2:e1:b8:a8:87:32:fa:1f:e6:44:29:92:b0:57:
1e:e3:6d:e9:35:71:1e:b9:87:aa:d8:89:bf:fa:c0:e7:ab:6e:
37:05:21:d2:49:ee:24:29:48:55:8d:1c:e9:72:c8:16:aa:40:
1f:98:c9:ad:36:6a:b0:6a:91:a2:db:56:0e:97:f8:00:83:35:
95:04:92:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncojSC6V7cX/hBUp1i2iTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Y2I3NDJhMDNiYzljODU1MDcyMTdhMjUyMDRkZmZmODJm
Y2NkZjkwHhcNMjYwMzI2MDAwMTUwWhcNMjYwMzI3MDAwMTUwWjAzMTEwLwYDVQQD
Eyg1YWU0ZGI3Y2VlYzdiMDdmZjg4N2NiYTg2ODdjNmFiYzc5NGU4NWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikJejS7m57lPG4TSPcLeGfhVuudx
GA55QhV7C9+pSAMNfwE6IldR7MOrXnrQLKbXq3A4IFFmaBmynZIjI/o4MxnJnH71
CrtQwopd6PKfi/jVpOHsaNkFrc/pPXBXxpRwF9Uq5sjde+yX5x9Gef5ZOQn4XBEk
tygP2UzDVv1mFT3toJaSKV+1WaNPxkZxjxNQRXzkBrETaLQ8fh3BkQFzCi9vfvV4
MgpGr0wxsRKofmtjh3Qf8vhD/b5aV+bVkiYvDEtoz3PVl1yqD/+0zzlE7an93G1I
bv3CECgIcAX7GcimWSDxqqIxUcn63v77NfnhhSeUlMtjPw/gJMLti7k+RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrk23zux7B/+IfLqGh8arx5ToXwMB8GA1UdIwQY
MBaAFIbLdCoDvJyFUHIXolIE3/+C/M35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS83NjdhZTUtYjlhMi00OTkzLTgxYTgt
MDVmMThmYzIxMmE3LzEvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS83NjdhZTUtYjlhMi00OTkzLTgxYTgtMDVmMThmYzIxMmE3
LzEvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgVgv5bW4
CXUcEvhKRJxtM35/Ot2TlDjnh7Mr8+3iB25ORMlKwXcwadskVzbnYKoTbPcoaVBM
SS+aW9ulOH0xVMJdVuT4k9zlVRP3GJgpwAipwNxSgDAerVGDwAuhogX09EemCAMg
33ARy/aHJ4WR0+VpiHa97wEoISGVgx6zUaiV6JgYKk8TaeGeP1Usj8lhE7BEMu33
OXZzDG1yoqeVLoJsAJuiS2rxu+hkd40Hplg/KZg4QOx14KLhuKiHMvof5kQpkrBX
HuNt6TVxHrmHqtiJv/rA56tuNwUh0knuJClIVY0c6XLIFqpAH5jJrTZqsGqRottW
Dpf4AIM1lQSSyA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:41 2026 by rpki-client