Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
File: hH0b6-TCPEIXuE9_2BkqslVUFag.mft (raw, json)
Hash identifier: vr9y55LH5aKo0WumTiqIJ+hGJNzVeQQNIaf0m/WPlIg=
Subject key identifier: DB:52:12:E7:B9:93:58:1B:C7:5C:9B:5A:29:9E:DB:73:60:F3:92:ED
Authority key identifier: 84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8
Certificate issuer: /CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
Certificate serial: 019D2816970CE73D7F3E6116C14E97547AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
Manifest number: 171B
Signing time: Thu 26 Mar 2026 03:01:02 +0000
Manifest this update: Thu 26 Mar 2026 03:01:02 +0000
Manifest next update: Fri 27 Mar 2026 03:01:02 +0000
Files and hashes: 1: OGRlDFmxFDMmmAQ2PHIbdYfiSWM.roa (hash: Qgj5b6VYtZqA5g1js1nnLsLpvoekztlGnv5F0hfyC1k=)
2: hH0b6-TCPEIXuE9_2BkqslVUFag.crl (hash: cWkCKOlBLPQMZEJQywv+SIkOnoGQ1y6dVVB47FHnaoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:97:0c:e7:3d:7f:3e:61:16:c1:4e:97:54:7a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
Validity
Not Before: Mar 26 03:01:02 2026 GMT
Not After : Mar 27 03:01:02 2026 GMT
Subject: CN=db5212e7b993581bc75c9b5a299edb7360f392ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7a:88:c3:83:ee:2c:98:28:e6:56:d5:5b:b8:
9e:64:8f:80:95:a7:45:52:3f:a7:14:11:90:a8:ed:
77:94:ee:10:fe:89:66:c6:1d:ab:a1:bd:d0:01:fc:
d5:6b:12:e5:94:a3:b2:2b:eb:d2:a4:9a:91:5e:14:
e9:95:63:cb:89:b3:63:8f:70:57:f0:ef:57:5d:20:
ee:87:68:96:a5:7b:62:48:8d:3d:d0:dc:b5:1a:1b:
d4:dc:2b:b9:18:51:1e:a4:03:5f:ba:e0:60:d7:6d:
8a:61:67:dc:18:f2:6b:fd:25:1e:6f:1e:9d:bc:65:
73:8d:52:33:84:18:87:0b:db:43:ef:ea:0e:d1:f4:
a6:7f:ce:c8:2a:da:b3:02:3c:c1:84:9d:cb:06:fb:
0b:a7:a3:23:42:9e:77:3e:a4:34:be:77:99:ac:1b:
46:86:a9:00:87:11:72:2a:c2:84:3d:df:a5:66:a6:
fc:8c:77:43:b4:1f:98:d9:b7:0b:ae:3d:33:f4:b4:
48:14:90:b0:33:3f:bf:44:ac:5f:bd:d8:6d:01:7f:
60:c4:76:13:c8:41:49:80:fa:ae:c1:1a:73:04:61:
22:9d:4d:ca:8e:ba:d9:bc:ad:79:89:fc:58:4c:25:
d1:0f:c0:9b:8a:3e:3e:fc:1d:2b:29:46:01:0d:5b:
8a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:52:12:E7:B9:93:58:1B:C7:5C:9B:5A:29:9E:DB:73:60:F3:92:ED
X509v3 Authority Key Identifier:
keyid:84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e5:6d:b6:44:00:41:89:06:bc:49:ca:0c:77:75:22:38:bc:
62:bc:07:4d:0c:cd:c2:4b:64:91:bd:98:4a:9f:61:e5:1c:cc:
06:3a:a0:d0:35:ee:c2:4e:5e:f1:c9:23:1b:02:9f:1a:a8:4e:
47:df:4d:0e:6a:9b:b9:07:dd:d1:47:a4:54:e2:2b:db:b3:29:
06:30:b4:33:02:51:d1:d4:77:cc:8d:a8:13:58:77:47:31:fb:
e2:92:70:07:ac:11:a0:52:3e:59:61:de:ef:03:07:12:ca:5b:
f0:b3:73:57:44:b4:98:a0:34:f7:e4:aa:59:e9:56:59:c0:fa:
ac:de:79:bb:09:7a:af:38:5c:b1:c5:18:5c:1e:56:ee:69:c4:
44:6b:ce:08:84:a8:6f:da:31:6d:d8:be:21:06:8f:96:0d:7b:
be:9c:b7:bf:7b:72:a9:79:96:7b:70:2e:a5:1a:27:8c:4a:3d:
8d:e2:bf:b2:10:ac:67:27:4d:01:c6:a5:4c:56:12:ba:2a:85:
e7:c5:f4:cf:98:0c:43:51:20:64:6c:48:98:e6:7f:2b:c7:52:
33:b4:f7:36:65:9f:b5:8d:24:9e:d9:ee:10:6f:30:e2:66:b9:
13:a8:88:ae:da:33:70:76:6a:e4:78:d9:70:bf:b4:d4:f6:e3:
8b:82:77:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFpcM5z1/PmEWwU6XVHrjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0N2QxYmViZTRjMjNjNDIxN2I4NGY3ZmQ4MTkyYWIyNTU1
NDE1YTgwHhcNMjYwMzI2MDMwMTAyWhcNMjYwMzI3MDMwMTAyWjAzMTEwLwYDVQQD
EyhkYjUyMTJlN2I5OTM1ODFiYzc1YzliNWEyOTllZGI3MzYwZjM5MmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnqIw4PuLJgo5lbVW7ieZI+AladF
Uj+nFBGQqO13lO4Q/olmxh2rob3QAfzVaxLllKOyK+vSpJqRXhTplWPLibNjj3BX
8O9XXSDuh2iWpXtiSI090Ny1GhvU3Cu5GFEepANfuuBg122KYWfcGPJr/SUebx6d
vGVzjVIzhBiHC9tD7+oO0fSmf87IKtqzAjzBhJ3LBvsLp6MjQp53PqQ0vneZrBtG
hqkAhxFyKsKEPd+lZqb8jHdDtB+Y2bcLrj0z9LRIFJCwMz+/RKxfvdhtAX9gxHYT
yEFJgPquwRpzBGEinU3KjrrZvK15ifxYTCXRD8Cbij4+/B0rKUYBDVuKQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtSEue5k1gbx1ybWime23Ng85LtMB8GA1UdIwQY
MBaAFIR9G+vkwjxCF7hPf9gZKrJVVBWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEgwYjYtVENQRUlYdUU5XzJCa3FzbFZVRmFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9mODFlYWItYmMzNi00MmE2LTgyMmEt
Y2RiMWQzODU1NmJiLzEvaEgwYjYtVENQRUlYdUU5XzJCa3FzbFZVRmFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9mODFlYWItYmMzNi00MmE2LTgyMmEtY2RiMWQzODU1NmJi
LzEvaEgwYjYtVENQRUlYdUU5XzJCa3FzbFZVRmFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmOVttkQA
QYkGvEnKDHd1Iji8YrwHTQzNwktkkb2YSp9h5RzMBjqg0DXuwk5e8ckjGwKfGqhO
R99NDmqbuQfd0UekVOIr27MpBjC0MwJR0dR3zI2oE1h3RzH74pJwB6wRoFI+WWHe
7wMHEspb8LNzV0S0mKA09+SqWelWWcD6rN55uwl6rzhcscUYXB5W7mnERGvOCISo
b9oxbdi+IQaPlg17vpy3v3tyqXmWe3AupRonjEo9jeK/shCsZydNAcalTFYSuiqF
58X0z5gMQ1EgZGxImOZ/K8dSM7T3NmWftY0kntnuEG8w4ma5E6iIrtozcHZq5HjZ
cL+01Pbji4J3Kg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:40 2026 by rpki-client