Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
File: hRJy5OgYa5zz0etCZlxTznFPTUs.mft (raw, json)
Hash identifier: oCJiAR+bH0eMatYPAOp5/2qmBL9X5VVPCtwG2NLr3KU=
Subject key identifier: AE:B2:17:16:B2:40:09:16:14:86:5B:FB:82:D0:A1:C1:F6:E2:20:60
Authority key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
Certificate issuer: /CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Certificate serial: 019D2695BE5852699D6EC55D4092FA8B45F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
Manifest number: 151A
Signing time: Wed 25 Mar 2026 20:00:40 +0000
Manifest this update: Wed 25 Mar 2026 20:00:40 +0000
Manifest next update: Thu 26 Mar 2026 20:00:40 +0000
Files and hashes: 1: aBOBuL_H29H0y-_-QBP0Ehj1DT0.roa (hash: O7ZWbL6IufsmlkGlAPRYtWsGACsMquG9gC8M6gOxrwY=)
2: hRJy5OgYa5zz0etCZlxTznFPTUs.crl (hash: owZmQFn2nE5w+gUaeNsyzcnIX6V0T6u2OF+CIL7lgoU=)
3: y0DK2UjH_DKReYw5NUdmHs1btyA.roa (hash: VfLGmY9ACuSYXNETyrRKCoYE5Ubu9KeR/Haw0EJrQro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:be:58:52:69:9d:6e:c5:5d:40:92:fa:8b:45:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Validity
Not Before: Mar 25 20:00:40 2026 GMT
Not After : Mar 26 20:00:40 2026 GMT
Subject: CN=aeb21716b240091614865bfb82d0a1c1f6e22060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3c:c7:65:1c:c3:8e:8f:93:82:2c:b0:77:9f:
38:68:72:26:97:b1:9c:6f:2c:be:34:7a:98:37:1d:
01:08:92:21:aa:1a:66:a8:65:a0:cf:79:79:d8:76:
04:e9:34:27:c1:23:c7:b5:81:34:c5:98:51:7e:3b:
89:9c:ef:fc:e6:e0:16:20:7e:37:44:35:2c:7b:30:
70:23:86:f3:71:7e:0f:b5:3c:80:06:30:14:78:79:
f5:29:0d:8c:a9:ce:27:6e:d5:99:83:41:36:e1:6e:
37:65:bd:9f:5c:c8:5e:a6:58:e7:2b:b9:73:51:ab:
b0:aa:9f:8a:36:9d:ef:92:fb:61:16:0a:ad:5d:29:
03:96:ef:7b:f8:2c:d7:96:de:f6:a0:ba:16:b5:9c:
0f:56:d9:f6:33:35:c7:7c:83:49:ab:5a:ef:bd:79:
14:2c:b6:22:14:10:95:56:03:2e:a7:5d:e0:88:84:
bb:3a:2d:5f:6b:e2:9b:c3:37:d1:ba:9b:ab:f8:4e:
96:f3:28:26:cf:ed:07:06:4e:e4:f8:f8:1b:71:d0:
3f:bf:1b:55:ff:8c:3c:57:dd:29:17:29:e0:86:35:
a9:15:9f:e8:91:6f:c4:36:92:f6:75:75:18:99:38:
08:d7:db:23:4d:8a:c1:bb:45:87:95:23:28:38:f1:
b0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B2:17:16:B2:40:09:16:14:86:5B:FB:82:D0:A1:C1:F6:E2:20:60
X509v3 Authority Key Identifier:
keyid:85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e6:30:f0:ca:e5:9c:ec:dc:52:fa:33:d9:7f:d3:4d:90:62:36:
50:f8:37:15:b1:d1:22:97:44:de:73:ba:9a:ea:5a:3e:04:8d:
6d:f9:87:0a:aa:f9:30:f3:25:37:4c:15:c5:cc:a7:fa:3d:da:
59:af:08:ac:ef:fe:a7:f4:3b:a6:d2:4f:95:e5:98:16:2d:2b:
5c:6a:d8:ba:75:7b:d0:eb:11:21:6a:f9:63:2e:96:ed:77:38:
0a:b2:a2:31:b0:3f:68:18:6c:7d:d9:20:ab:59:1d:54:e3:2e:
15:08:1a:a0:a5:82:ac:de:5b:7f:85:be:bf:55:e1:9e:d3:10:
52:0c:bc:84:62:70:84:fd:c7:8a:b2:71:25:18:36:03:bb:e9:
00:5e:3d:21:4c:a5:10:1e:6c:cd:3f:3b:57:6f:8a:ef:19:2e:
4b:c7:fa:0d:54:45:06:0d:38:09:b7:1f:db:5e:cc:db:16:52:
78:32:99:19:03:09:99:ae:76:17:5a:c5:61:d1:d1:4a:cf:58:
5d:54:0b:a7:f5:c8:43:83:91:c7:80:b0:50:92:ef:b0:5e:b6:
6c:65:99:96:da:c9:d0:d1:22:cb:a2:73:e3:1f:18:d0:1e:4a:
2a:61:a6:f2:e1:41:93:a8:cc:98:98:2f:83:d7:11:01:72:a7:
6d:f7:d6:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlb5YUmmdbsVdQJL6i0XxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MTI3MmU0ZTgxODZiOWNmM2QxZWI0MjY2NWM1M2NlNzE0
ZjRkNGIwHhcNMjYwMzI1MjAwMDQwWhcNMjYwMzI2MjAwMDQwWjAzMTEwLwYDVQQD
EyhhZWIyMTcxNmIyNDAwOTE2MTQ4NjViZmI4MmQwYTFjMWY2ZTIyMDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jzHZRzDjo+Tgiywd584aHIml7Gc
byy+NHqYNx0BCJIhqhpmqGWgz3l52HYE6TQnwSPHtYE0xZhRfjuJnO/85uAWIH43
RDUsezBwI4bzcX4PtTyABjAUeHn1KQ2Mqc4nbtWZg0E24W43Zb2fXMhepljnK7lz
Uauwqp+KNp3vkvthFgqtXSkDlu97+CzXlt72oLoWtZwPVtn2MzXHfINJq1rvvXkU
LLYiFBCVVgMup13giIS7Oi1fa+KbwzfRupur+E6W8ygmz+0HBk7k+PgbcdA/vxtV
/4w8V90pFynghjWpFZ/okW/ENpL2dXUYmTgI19sjTYrBu0WHlSMoOPGwUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6yFxayQAkWFIZb+4LQocH24iBgMB8GA1UdIwQY
MBaAFIUScuToGGuc89HrQmZcU85xT01LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFJKeTVPZ1lhNXp6MGV0Q1pseFR6bkZQVFVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lZDk0YjEtYjU3My00NWU0LTllMjEt
M2Y0MmM3MTc4MGJjLzEvaFJKeTVPZ1lhNXp6MGV0Q1pseFR6bkZQVFVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lZDk0YjEtYjU3My00NWU0LTllMjEtM2Y0MmM3MTc4MGJj
LzEvaFJKeTVPZ1lhNXp6MGV0Q1pseFR6bkZQVFVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5jDwyuWc
7NxS+jPZf9NNkGI2UPg3FbHRIpdE3nO6mupaPgSNbfmHCqr5MPMlN0wVxcyn+j3a
Wa8IrO/+p/Q7ptJPleWYFi0rXGrYunV70OsRIWr5Yy6W7Xc4CrKiMbA/aBhsfdkg
q1kdVOMuFQgaoKWCrN5bf4W+v1XhntMQUgy8hGJwhP3HirJxJRg2A7vpAF49IUyl
EB5szT87V2+K7xkuS8f6DVRFBg04Cbcf217M2xZSeDKZGQMJma52F1rFYdHRSs9Y
XVQLp/XIQ4ORx4CwUJLvsF62bGWZltrJ0NEiy6Jz4x8Y0B5KKmGm8uFBk6jMmJgv
g9cRAXKnbffWjQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:52 2026 by rpki-client