Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft
File: mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft (raw, json)
Hash identifier: r9QDWOzGUfm0zCUKe+NjTmPKeB/x9PnYI+vX1f/x2Lk=
Subject key identifier: B7:22:12:C3:16:38:17:E9:DD:F7:02:EA:03:D5:AC:F9:61:60:F2:2A
Authority key identifier: 98:7A:BA:6F:74:45:5C:4F:A3:AB:E2:3A:A8:23:06:7E:CF:C3:3C:48
Certificate issuer: /CN=987aba6f74455c4fa3abe23aa823067ecfc33c48
Certificate serial: 019D333E9677E3046100CD682BD16C920186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHq6b3RFXE-jq-I6qCMGfs_DPEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft
Manifest number: 043D
Signing time: Sat 28 Mar 2026 07:00:32 +0000
Manifest this update: Sat 28 Mar 2026 07:00:32 +0000
Manifest next update: Sun 29 Mar 2026 07:00:32 +0000
Files and hashes: 1: mHq6b3RFXE-jq-I6qCMGfs_DPEg.crl (hash: EhpHErV+nxDQhlhWYTI75dZtqEIJGWytZ7HBiDab4XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHq6b3RFXE-jq-I6qCMGfs_DPEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:96:77:e3:04:61:00:cd:68:2b:d1:6c:92:01:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987aba6f74455c4fa3abe23aa823067ecfc33c48
Validity
Not Before: Mar 28 07:00:32 2026 GMT
Not After : Mar 29 07:00:32 2026 GMT
Subject: CN=b72212c3163817e9ddf702ea03d5acf96160f22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e2:41:57:4e:ac:7f:96:9b:74:47:d6:3a:c7:
62:f9:5b:f8:19:42:0c:89:84:97:22:71:ad:2b:8f:
5b:ca:7b:94:bf:45:c4:4b:57:a8:24:99:49:90:79:
75:d5:7d:6a:40:72:0b:62:57:d1:d1:0d:9b:a5:6a:
86:5e:80:84:ef:50:fd:be:79:3d:43:0d:93:2f:4a:
c2:10:3c:fb:b4:ba:2c:2f:40:67:0a:45:f3:0d:cf:
c7:7f:62:0d:b7:2e:cb:86:71:ef:6a:ce:43:02:c6:
8c:2d:02:e1:94:73:a9:99:f6:86:3b:b1:df:0e:f2:
98:1e:38:01:75:c0:60:46:5c:f1:0e:7a:43:af:52:
f0:f2:c2:b5:f1:dd:a6:07:36:96:c9:eb:ed:ad:78:
a1:78:23:91:d6:ad:21:ec:d9:c9:bd:77:f1:ec:14:
7b:66:05:72:d2:4f:d8:e5:17:3e:ef:3c:fa:e5:98:
71:c5:73:42:82:c7:ee:1e:6e:73:87:28:62:a1:ef:
3f:e9:59:59:16:7b:c0:da:f2:0b:ef:6c:53:f9:22:
24:df:d4:de:a8:73:89:67:53:60:a4:15:f1:01:8b:
d5:10:c1:6e:2b:b2:74:2b:ce:19:48:cc:fe:1e:e9:
b4:2f:84:4c:74:f8:f7:53:4a:5c:8b:4a:18:c4:c3:
42:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:22:12:C3:16:38:17:E9:DD:F7:02:EA:03:D5:AC:F9:61:60:F2:2A
X509v3 Authority Key Identifier:
keyid:98:7A:BA:6F:74:45:5C:4F:A3:AB:E2:3A:A8:23:06:7E:CF:C3:3C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHq6b3RFXE-jq-I6qCMGfs_DPEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:4a:4e:c5:dd:42:bb:63:7d:30:fe:f6:aa:b8:d4:7f:87:90:
28:80:bf:fe:16:99:6d:cb:af:ae:c3:a2:71:35:c9:ef:e1:83:
e3:17:7e:c0:9e:65:01:a4:87:13:19:93:44:a2:a1:9f:33:3f:
ff:ce:40:3b:46:d0:40:24:c8:c7:99:2b:37:8b:19:f2:9b:c7:
c8:40:2b:d3:fc:6a:a3:00:93:86:69:73:c4:de:56:15:3f:95:
0a:7b:2e:88:37:61:a5:03:67:12:ab:ce:40:5c:d0:45:21:77:
48:aa:6c:c0:78:3e:8e:06:14:f4:ea:c6:b1:ad:80:e6:19:0e:
6a:f0:a4:f2:7e:aa:3d:8f:51:34:a5:f7:91:0b:92:22:68:82:
19:4f:61:f4:70:74:ff:19:be:9c:3b:05:1c:9f:1e:a0:83:26:
c4:2f:46:c6:15:94:9e:de:39:f3:4b:7e:40:57:73:41:60:9f:
e8:02:08:5c:98:3b:12:c8:e0:fa:06:a9:2a:95:46:20:0c:46:
00:47:49:27:37:05:c6:ea:59:5d:5b:51:7d:61:32:c2:83:bc:
37:85:1d:9e:e6:9a:dd:2c:4f:cc:8e:04:18:4d:27:af:7f:01:
2b:80:1c:13:12:66:22:ce:92:fe:59:ca:20:8b:9e:58:48:69:
42:2d:ce:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zPpZ34wRhAM1oK9FskgGGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4N2FiYTZmNzQ0NTVjNGZhM2FiZTIzYWE4MjMwNjdlY2Zj
MzNjNDgwHhcNMjYwMzI4MDcwMDMyWhcNMjYwMzI5MDcwMDMyWjAzMTEwLwYDVQQD
EyhiNzIyMTJjMzE2MzgxN2U5ZGRmNzAyZWEwM2Q1YWNmOTYxNjBmMjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+JBV06sf5abdEfWOsdi+Vv4GUIM
iYSXInGtK49bynuUv0XES1eoJJlJkHl11X1qQHILYlfR0Q2bpWqGXoCE71D9vnk9
Qw2TL0rCEDz7tLosL0BnCkXzDc/Hf2INty7LhnHvas5DAsaMLQLhlHOpmfaGO7Hf
DvKYHjgBdcBgRlzxDnpDr1Lw8sK18d2mBzaWyevtrXiheCOR1q0h7NnJvXfx7BR7
ZgVy0k/Y5Rc+7zz65ZhxxXNCgsfuHm5zhyhioe8/6VlZFnvA2vIL72xT+SIk39Te
qHOJZ1NgpBXxAYvVEMFuK7J0K84ZSMz+Hum0L4RMdPj3U0pci0oYxMNCFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLciEsMWOBfp3fcC6gPVrPlhYPIqMB8GA1UdIwQY
MBaAFJh6um90RVxPo6viOqgjBn7PwzxIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUhxNmIzUkZYRS1qcS1JNnFDTUdmc19EUEVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9lYTU5ZWMtM2U1OC00NDM3LWFkZjIt
NmYwMjJhMGU1YWQ5LzEvbUhxNmIzUkZYRS1qcS1JNnFDTUdmc19EUEVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9lYTU5ZWMtM2U1OC00NDM3LWFkZjItNmYwMjJhMGU1YWQ5
LzEvbUhxNmIzUkZYRS1qcS1JNnFDTUdmc19EUEVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkpOxd1C
u2N9MP72qrjUf4eQKIC//haZbcuvrsOicTXJ7+GD4xd+wJ5lAaSHExmTRKKhnzM/
/85AO0bQQCTIx5krN4sZ8pvHyEAr0/xqowCThmlzxN5WFT+VCnsuiDdhpQNnEqvO
QFzQRSF3SKpswHg+jgYU9OrGsa2A5hkOavCk8n6qPY9RNKX3kQuSImiCGU9h9HB0
/xm+nDsFHJ8eoIMmxC9GxhWUnt4580t+QFdzQWCf6AIIXJg7Esjg+gapKpVGIAxG
AEdJJzcFxupZXVtRfWEywoO8N4Udnuaa3SxPzI4EGE0nr38BK4AcExJmIs6S/lnK
IIueWEhpQi3OlA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:46:33 2026 by rpki-client