Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
File: Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft (raw, json)
Hash identifier: TMA7xC4ML2BKFI46FOYgTbEEdzLJgU4Pq9CHxn1cWXI=
Subject key identifier: CE:A5:83:49:FD:A3:90:44:42:BB:EE:4D:D8:94:AC:69:F6:58:B1:04
Authority key identifier: 1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B
Certificate issuer: /CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b
Certificate serial: 019D2AE136DAB33EB177C634ADFCFD07E6B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
Manifest number: 07D7
Signing time: Thu 26 Mar 2026 16:01:35 +0000
Manifest this update: Thu 26 Mar 2026 16:01:35 +0000
Manifest next update: Fri 27 Mar 2026 16:01:35 +0000
Files and hashes: 1: Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl (hash: /5PgWeMIfzausgiX8/uhmPMXPqqT9YQehZjqZoVFtAA=)
2: lx2J9WOsX2M54t8-J-Ipl4_XUM4.roa (hash: jlAohhibW/lQaiHQMqOapsCsgW9kpTO6lOTRSlTXr4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:36:da:b3:3e:b1:77:c6:34:ad:fc:fd:07:e6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b
Validity
Not Before: Mar 26 16:01:35 2026 GMT
Not After : Mar 27 16:01:35 2026 GMT
Subject: CN=cea58349fda3904442bbee4dd894ac69f658b104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:46:d7:4d:f2:82:96:f5:4b:cc:04:f5:1f:99:
ad:08:45:64:09:fd:98:e4:94:b0:13:bf:55:54:30:
f9:47:2e:f0:72:91:8b:43:8c:17:b6:5a:7a:c5:be:
80:b9:7b:8c:5b:f3:32:9d:29:08:71:54:33:95:35:
6a:5a:44:d2:ff:db:e8:3a:e6:e7:31:c0:18:dc:f7:
7b:0c:c5:f0:e7:39:21:ad:37:57:bf:11:69:6b:f1:
2a:71:cb:97:c9:50:bf:91:fc:66:be:ed:c9:f1:dc:
2c:b6:93:d6:98:b2:4e:47:26:f9:ad:d3:01:0d:ca:
0d:cc:cb:92:ef:68:0a:00:3c:d8:f7:8d:70:63:63:
0a:f7:a7:81:dc:46:1b:91:0f:4f:59:21:7a:34:88:
73:28:2f:b4:2b:c8:0d:e0:42:1e:74:86:b8:79:6b:
65:be:0f:fc:fb:7f:0f:85:27:53:e9:dc:bc:d7:47:
93:20:a4:9a:83:39:aa:ec:59:a3:ef:be:37:89:81:
c1:b1:de:96:a9:35:83:69:e7:43:ca:94:27:65:0e:
20:85:54:70:ef:f7:bf:e5:5f:ff:bf:ef:68:5e:81:
ba:0a:3e:30:4f:f4:c9:97:0a:b0:31:34:06:48:62:
18:39:85:f6:ca:24:71:d6:4b:4f:1b:44:23:8a:11:
9d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A5:83:49:FD:A3:90:44:42:BB:EE:4D:D8:94:AC:69:F6:58:B1:04
X509v3 Authority Key Identifier:
keyid:1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:53:c5:14:47:ee:d5:c3:ab:d6:35:2a:9b:db:74:90:f4:b8:
e9:65:f1:bd:d7:9b:34:7c:eb:2c:cc:5c:f4:e1:71:c8:f6:e6:
b2:29:ca:70:d9:05:ed:b9:e1:ed:01:5a:63:c5:01:5b:17:58:
2f:82:c0:5b:b8:48:79:b1:05:28:be:40:c8:0a:74:c3:c1:13:
79:76:cf:af:de:ab:95:12:fc:bb:87:6a:68:23:e6:dc:6e:a9:
3e:4e:c2:05:16:d0:2d:01:12:65:29:1b:da:e1:4b:ef:1b:a8:
dc:67:1f:be:ec:e2:57:ff:34:3f:d9:08:75:c9:d9:dd:2b:8d:
f3:e6:5a:31:12:cd:2f:11:1d:d8:92:48:6b:f7:e6:6a:f6:9a:
5b:20:10:b9:4d:d2:77:2e:cf:e0:f1:5d:70:be:62:dd:93:6b:
4f:54:59:ec:b6:4f:70:48:05:89:64:d1:51:13:ca:62:0c:8a:
31:48:ba:05:c1:4c:70:cd:03:5f:55:ec:5d:ae:42:f5:e5:84:
6b:0f:04:f6:6f:2b:2d:2d:3d:75:c1:c8:7d:6c:e7:03:68:40:
37:28:f1:31:9c:d6:18:5e:d5:44:3c:a3:e9:76:67:f2:70:52:
42:43:5d:d0:98:dc:81:e9:2c:42:c0:6b:84:7f:42:20:5f:50:
9e:90:39:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4Tbasz6xd8Y0rfz9B+a4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZWIzZmFhODM4ODU0OWI1NWNiM2YzYWJkNGM2YzE1MTA2
Y2Y1M2IwHhcNMjYwMzI2MTYwMTM1WhcNMjYwMzI3MTYwMTM1WjAzMTEwLwYDVQQD
EyhjZWE1ODM0OWZkYTM5MDQ0NDJiYmVlNGRkODk0YWM2OWY2NThiMTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUbXTfKClvVLzAT1H5mtCEVkCf2Y
5JSwE79VVDD5Ry7wcpGLQ4wXtlp6xb6AuXuMW/MynSkIcVQzlTVqWkTS/9voOubn
McAY3Pd7DMXw5zkhrTdXvxFpa/EqccuXyVC/kfxmvu3J8dwstpPWmLJORyb5rdMB
DcoNzMuS72gKADzY941wY2MK96eB3EYbkQ9PWSF6NIhzKC+0K8gN4EIedIa4eWtl
vg/8+38PhSdT6dy810eTIKSagzmq7Fmj7743iYHBsd6WqTWDaedDypQnZQ4ghVRw
7/e/5V//v+9oXoG6Cj4wT/TJlwqwMTQGSGIYOYX2yiRx1ktPG0QjihGdowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6lg0n9o5BEQrvuTdiUrGn2WLEEMB8GA1UdIwQY
MBaAFB3rP6qDiFSbVcs/Or1MbBUQbPU7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGVzX3FvT0lWSnRWeXo4NnZVeHNGUkJzOVRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82YzQxMzEtMzY1Yy00YzE0LTllMGIt
NTAyYTk1N2ZkYWY4LzEvSGVzX3FvT0lWSnRWeXo4NnZVeHNGUkJzOVRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS82YzQxMzEtMzY1Yy00YzE0LTllMGItNTAyYTk1N2ZkYWY4
LzEvSGVzX3FvT0lWSnRWeXo4NnZVeHNGUkJzOVRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1PFFEfu
1cOr1jUqm9t0kPS46WXxvdebNHzrLMxc9OFxyPbmsinKcNkF7bnh7QFaY8UBWxdY
L4LAW7hIebEFKL5AyAp0w8ETeXbPr96rlRL8u4dqaCPm3G6pPk7CBRbQLQESZSkb
2uFL7xuo3GcfvuziV/80P9kIdcnZ3SuN8+ZaMRLNLxEd2JJIa/fmavaaWyAQuU3S
dy7P4PFdcL5i3ZNrT1RZ7LZPcEgFiWTRURPKYgyKMUi6BcFMcM0DX1XsXa5C9eWE
aw8E9m8rLS09dcHIfWznA2hANyjxMZzWGF7VRDyj6XZn8nBSQkNd0JjcgeksQsBr
hH9CIF9QnpA57g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:50:19 2026 by rpki-client