Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
File: HApvbzqa4dpeW-h1L6sY3rKLphQ.mft (raw, json)
Hash identifier: RrySpU2466U9YJdOt3i3Gy5ti4y9HAiWGWy2ec6eXeA=
Subject key identifier: B7:F0:E7:D5:78:3A:99:55:4C:A9:A6:D3:8D:C9:CC:55:DB:2F:74:24
Authority key identifier: 1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14
Certificate issuer: /CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
Certificate serial: 019D2704C27875A8E5FCF4C0A17D3DB15119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
Manifest number: 033C
Signing time: Wed 25 Mar 2026 22:01:56 +0000
Manifest this update: Wed 25 Mar 2026 22:01:56 +0000
Manifest next update: Thu 26 Mar 2026 22:01:56 +0000
Files and hashes: 1: HApvbzqa4dpeW-h1L6sY3rKLphQ.crl (hash: c0jiKa4Y7ieNX1+gmEcnKiYshiw57nlQWxgvTbxt+AQ=)
2: hVCMHbhbfZIv6_XEgHNxBb1iBTg.roa (hash: +BlQApbHjZb7f8RHAby22GvRQWprbhCIUcnRWldtZiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:c2:78:75:a8:e5:fc:f4:c0:a1:7d:3d:b1:51:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
Validity
Not Before: Mar 25 22:01:56 2026 GMT
Not After : Mar 26 22:01:56 2026 GMT
Subject: CN=b7f0e7d5783a99554ca9a6d38dc9cc55db2f7424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4e:8d:62:a1:5a:32:9b:37:db:83:f2:fc:e2:
0b:60:88:d4:d8:5b:18:25:58:3e:b1:df:04:7a:c9:
7b:09:fa:e3:eb:2a:db:00:55:25:37:71:cc:04:05:
2b:82:4c:3e:e4:71:40:a3:43:6d:15:88:53:c8:bf:
73:8b:41:a6:d2:a8:ce:cb:13:45:90:39:52:56:cc:
0a:13:ab:61:36:17:4c:00:8d:49:dc:90:fc:3d:79:
14:4b:d2:1d:b5:b9:8d:0a:1a:ac:82:6d:3c:15:bd:
b0:5a:18:1f:a6:11:27:54:86:c0:3f:5c:71:2c:ea:
48:53:be:14:2f:2b:85:3a:0b:8a:0f:5f:6c:d7:f3:
35:5d:4b:7e:24:eb:69:a7:8c:8b:ea:27:4d:e7:77:
b3:3a:65:f1:42:1f:af:03:88:0c:c6:3e:8d:dc:fd:
11:92:da:80:4e:29:84:7c:af:70:b4:ad:48:15:b6:
82:37:70:45:61:2d:bc:96:fa:c3:97:2b:84:91:88:
be:81:bc:b6:df:5c:f3:b2:80:bd:4f:24:2f:4f:48:
5b:35:7c:12:0e:5a:57:6e:24:bf:e1:12:b5:55:aa:
18:b5:85:d0:0f:20:c1:bb:c9:00:b4:e8:7a:5f:e3:
08:59:79:a7:e0:2d:01:9f:c1:28:8d:b3:70:8d:30:
1b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F0:E7:D5:78:3A:99:55:4C:A9:A6:D3:8D:C9:CC:55:DB:2F:74:24
X509v3 Authority Key Identifier:
keyid:1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9f:b9:78:f5:ec:9e:d5:9c:07:bb:f1:b1:e6:c5:2a:20:96:
c7:53:e2:87:3f:56:61:ad:c6:67:7e:56:bb:9e:7e:c3:7c:d5:
f2:07:65:dd:9a:0d:05:bb:75:95:f2:2d:60:37:ff:c2:ff:53:
35:e3:ef:5a:78:43:f3:61:e8:6d:5f:a6:d6:98:1e:0a:80:6d:
bb:e2:bc:ad:bd:eb:49:83:a6:29:9a:fe:34:ca:f1:e6:48:c1:
cf:68:f1:13:8a:12:c7:01:2b:3f:6f:20:86:5d:cf:11:96:7b:
ee:f3:bf:0b:1b:d0:23:c9:59:54:f3:ff:29:67:3d:16:45:b6:
aa:1e:dd:85:1b:ee:ab:70:9a:c6:60:7c:6b:40:78:2e:07:ac:
ab:35:9c:fd:e5:0d:57:2b:59:ea:2b:2f:91:d4:18:71:56:b4:
36:5c:bf:5d:7a:b9:98:ba:81:00:03:7f:65:a6:3c:ca:df:f2:
31:ac:7c:30:20:43:7f:3f:7c:41:f4:41:68:e8:e6:ec:60:e8:
4a:68:44:1f:49:58:b3:f7:31:67:9a:dd:8f:48:f7:dc:e9:f0:
5f:a4:3f:24:4b:57:b9:d4:57:17:d9:5b:08:7b:34:b8:f7:0c:
8b:ed:2e:18:c7:89:f6:1e:60:de:f8:5b:c1:e0:f6:a1:ec:9c:
e4:39:33:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBMJ4dajl/PTAoX09sVEZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMGE2ZjZmM2E5YWUxZGE1ZTViZTg3NTJmYWIxOGRlYjI4
YmE2MTQwHhcNMjYwMzI1MjIwMTU2WhcNMjYwMzI2MjIwMTU2WjAzMTEwLwYDVQQD
EyhiN2YwZTdkNTc4M2E5OTU1NGNhOWE2ZDM4ZGM5Y2M1NWRiMmY3NDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU6NYqFaMps324Py/OILYIjU2FsY
JVg+sd8Eesl7Cfrj6yrbAFUlN3HMBAUrgkw+5HFAo0NtFYhTyL9zi0Gm0qjOyxNF
kDlSVswKE6thNhdMAI1J3JD8PXkUS9IdtbmNChqsgm08Fb2wWhgfphEnVIbAP1xx
LOpIU74ULyuFOguKD19s1/M1XUt+JOtpp4yL6idN53ezOmXxQh+vA4gMxj6N3P0R
ktqATimEfK9wtK1IFbaCN3BFYS28lvrDlyuEkYi+gby231zzsoC9TyQvT0hbNXwS
DlpXbiS/4RK1VaoYtYXQDyDBu8kAtOh6X+MIWXmn4C0Bn8EojbNwjTAb9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfw59V4OplVTKmm043JzFXbL3QkMB8GA1UdIwQY
MBaAFBwKb286muHaXlvodS+rGN6yi6YUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEFwdmJ6cWE0ZHBlVy1oMUw2c1kzcktMcGhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yYTlkZDQtMTdiOC00NzNjLTgzYmYt
OWFmMTA3NGMyMjdmLzEvSEFwdmJ6cWE0ZHBlVy1oMUw2c1kzcktMcGhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8yYTlkZDQtMTdiOC00NzNjLTgzYmYtOWFmMTA3NGMyMjdm
LzEvSEFwdmJ6cWE0ZHBlVy1oMUw2c1kzcktMcGhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJ+5ePXs
ntWcB7vxsebFKiCWx1Pihz9WYa3GZ35Wu55+w3zV8gdl3ZoNBbt1lfItYDf/wv9T
NePvWnhD82HobV+m1pgeCoBtu+K8rb3rSYOmKZr+NMrx5kjBz2jxE4oSxwErP28g
hl3PEZZ77vO/CxvQI8lZVPP/KWc9FkW2qh7dhRvuq3CaxmB8a0B4LgesqzWc/eUN
VytZ6isvkdQYcVa0Nly/XXq5mLqBAAN/ZaY8yt/yMax8MCBDfz98QfRBaOjm7GDo
SmhEH0lYs/cxZ5rdj0j33OnwX6Q/JEtXudRXF9lbCHs0uPcMi+0uGMeJ9h5g3vhb
weD2oeyc5DkzUA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:21:10 2026 by rpki-client