Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
File: HH3TyBbYWWCARyBUNICV7SuFUeU.mft (raw, json)
Hash identifier: y5ltrH1G31LFAQmGk7ZJ7tAQS/xgjp1ciwyyYJ+XPkM=
Subject key identifier: 58:29:DB:75:7A:BD:84:35:A0:4B:00:5B:5F:81:D2:11:B3:79:93:D3
Authority key identifier: 1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5
Certificate issuer: /CN=1c7dd3c816d8596080472054348095ed2b8551e5
Certificate serial: 019F9391F69BA766F6AF9D04D4CDC5C82C56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
Manifest number: 173B
Signing time: Fri 24 Jul 2026 10:00:44 +0000
Manifest this update: Fri 24 Jul 2026 10:00:44 +0000
Manifest next update: Sat 25 Jul 2026 10:00:44 +0000
Files and hashes: 1: HH3TyBbYWWCARyBUNICV7SuFUeU.crl (hash: shZS27n8/iYCqNf+R42v7VMckj2PNTDWV2A2zEPsXZg=)
2: IMhrDeS7pt6POgdqkwhQn8NXjdQ.roa (hash: 8Co4GdnGTbaplfNAIs0VU0evrLpH3iNJkhwVpK6YVsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:f6:9b:a7:66:f6:af:9d:04:d4:cd:c5:c8:2c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7dd3c816d8596080472054348095ed2b8551e5
Validity
Not Before: Jul 24 10:00:44 2026 GMT
Not After : Jul 25 10:00:44 2026 GMT
Subject: CN=5829db757abd8435a04b005b5f81d211b37993d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7a:33:93:c5:56:19:1a:63:cf:b3:c5:70:d1:
5e:a7:6c:44:03:f3:a1:a0:a1:c7:58:d1:8b:ff:8c:
c7:26:a8:c9:f1:05:d6:bc:e8:d5:67:df:92:71:63:
fb:88:f5:9f:4d:e6:7c:6d:2f:1d:a8:11:97:67:02:
ab:5f:05:ff:77:bc:cf:ce:27:87:ee:48:2a:49:b4:
59:f7:f9:fc:c4:4e:05:bb:c2:ed:ac:95:95:48:ce:
a6:f3:63:f0:99:b9:77:5f:ba:c0:38:2e:ba:d2:d6:
3d:f9:a4:03:f3:c5:63:e1:ce:e2:01:a2:e9:1e:61:
b6:ee:c8:8a:98:79:54:a6:d0:29:5d:33:db:9a:5a:
4a:ae:09:89:6f:dc:ae:07:9f:ac:89:3a:63:a0:b3:
d0:80:3f:10:58:7b:ba:2f:5b:a6:4a:e0:ff:3e:dd:
2b:dc:d8:b8:53:1c:e8:12:78:fb:43:da:04:f9:a3:
7e:2f:c8:20:61:88:69:3a:2a:47:20:15:6c:4c:a5:
30:ca:a1:c4:68:cf:f7:ef:01:34:c9:de:9e:9a:84:
51:b4:f7:44:b3:35:0d:2f:cb:0d:ce:43:bc:bf:6c:
01:4e:9c:f3:45:4a:d3:49:e6:8d:aa:61:4b:0c:1d:
6c:42:f2:ba:5b:35:c2:37:26:8e:e2:86:86:f1:5d:
29:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:29:DB:75:7A:BD:84:35:A0:4B:00:5B:5F:81:D2:11:B3:79:93:D3
X509v3 Authority Key Identifier:
keyid:1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:dd:cc:af:b7:64:0a:68:4e:25:af:9d:38:66:a6:91:80:6f:
73:e6:68:41:4a:e6:b9:15:1a:75:01:71:99:8c:79:42:68:51:
46:21:ed:49:2f:e3:a1:0e:a6:28:43:d9:66:93:89:64:3d:8d:
0c:28:7d:b5:5d:08:1d:af:85:0f:68:71:89:5c:9c:06:96:4a:
5f:28:22:8a:b6:56:a3:59:f8:7a:aa:49:ca:6d:3f:03:0e:0b:
d8:2f:d8:2a:a8:d6:2b:bf:f7:84:4f:90:dc:ac:59:8d:fa:d3:
3f:78:2c:f0:6c:2e:43:2c:d7:f6:7e:6e:e7:8e:83:58:9c:db:
36:c8:ec:6d:d0:5b:a1:96:6e:dd:3f:3b:70:8b:d1:6c:87:0a:
b1:c8:02:32:70:a6:1d:57:d4:2b:cf:c8:97:17:21:7e:2a:d0:
50:9e:5f:f1:ed:0b:9f:82:b7:42:7c:d4:b2:43:ce:4c:b2:32:
bf:2d:1a:3f:81:b6:96:6c:b6:63:b5:34:fc:2f:17:a5:59:c7:
70:1a:fc:ed:a6:c0:70:ec:23:31:cf:6c:aa:a6:59:c2:b9:bf:
3d:ee:a4:1b:b3:a4:b5:d0:fd:5d:f5:5f:6b:6f:59:f8:fd:fe:
9a:2c:90:6c:09:39:fa:8a:3d:1a:72:6c:63:88:2b:e3:f9:6f:
7a:04:39:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Tkfabp2b2r50E1M3FyCxWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjN2RkM2M4MTZkODU5NjA4MDQ3MjA1NDM0ODA5NWVkMmI4
NTUxZTUwHhcNMjYwNzI0MTAwMDQ0WhcNMjYwNzI1MTAwMDQ0WjAzMTEwLwYDVQQD
Eyg1ODI5ZGI3NTdhYmQ4NDM1YTA0YjAwNWI1ZjgxZDIxMWIzNzk5M2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnozk8VWGRpjz7PFcNFep2xEA/Oh
oKHHWNGL/4zHJqjJ8QXWvOjVZ9+ScWP7iPWfTeZ8bS8dqBGXZwKrXwX/d7zPzieH
7kgqSbRZ9/n8xE4Fu8LtrJWVSM6m82Pwmbl3X7rAOC660tY9+aQD88Vj4c7iAaLp
HmG27siKmHlUptApXTPbmlpKrgmJb9yuB5+siTpjoLPQgD8QWHu6L1umSuD/Pt0r
3Ni4UxzoEnj7Q9oE+aN+L8ggYYhpOipHIBVsTKUwyqHEaM/37wE0yd6emoRRtPdE
szUNL8sNzkO8v2wBTpzzRUrTSeaNqmFLDB1sQvK6WzXCNyaO4oaG8V0pKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgp23V6vYQ1oEsAW1+B0hGzeZPTMB8GA1UdIwQY
MBaAFBx908gW2FlggEcgVDSAle0rhVHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEgzVHlCYllXV0NBUnlCVU5JQ1Y3U3VGVWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iYWFiMzYtODg4Ni00MjA2LTllNzkt
Y2MyY2Q3ZDMxYTI2LzEvSEgzVHlCYllXV0NBUnlCVU5JQ1Y3U3VGVWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9iYWFiMzYtODg4Ni00MjA2LTllNzktY2MyY2Q3ZDMxYTI2
LzEvSEgzVHlCYllXV0NBUnlCVU5JQ1Y3U3VGVWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdt3Mr7dk
CmhOJa+dOGamkYBvc+ZoQUrmuRUadQFxmYx5QmhRRiHtSS/joQ6mKEPZZpOJZD2N
DCh9tV0IHa+FD2hxiVycBpZKXygiirZWo1n4eqpJym0/Aw4L2C/YKqjWK7/3hE+Q
3KxZjfrTP3gs8GwuQyzX9n5u546DWJzbNsjsbdBboZZu3T87cIvRbIcKscgCMnCm
HVfUK8/IlxchfirQUJ5f8e0Ln4K3QnzUskPOTLIyvy0aP4G2lmy2Y7U0/C8XpVnH
cBr87abAcOwjMc9sqqZZwrm/Pe6kG7OktdD9XfVfa29Z+P3+miyQbAk5+oo9GnJs
Y4gr4/lvegQ5fQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:49:37 2026 by rpki-client