Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
File: H6rKuORWuykZeac1enAk8AvrqvU.mft (raw, json)
Hash identifier: 23TQOtxsN66xVGK6L8QVmU7R0HgUudkmMocd2AL3Low=
Subject key identifier: BA:23:EA:71:40:A0:A2:D1:08:BE:85:D9:84:AB:2B:1B:E5:71:04:09
Authority key identifier: 1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
Certificate issuer: /CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Certificate serial: 019D254CB04A04EA7BDC9B978059069DB7AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
Manifest number: 076F
Signing time: Wed 25 Mar 2026 14:01:15 +0000
Manifest this update: Wed 25 Mar 2026 14:01:15 +0000
Manifest next update: Thu 26 Mar 2026 14:01:15 +0000
Files and hashes: 1: H6rKuORWuykZeac1enAk8AvrqvU.crl (hash: GsWJ0WECxi8l4BAuMzbCKJ8HYWO82oc9VObnymJG5gc=)
2: YN0WF7H7M2n4t-XjARACyM9WR6o.asa (hash: eBj4EH+AV57EzbfzhlBRa9LcrLwEw5t3KkUj9eOh2sM=)
3: YZf1I4HDqm3z0PL6TqKmws28UHo.roa (hash: Iy79aoCujC05IKj4CdK/qSAtze1gZOoSXAO4h9l6iV0=)
4: Yo-fullWGeKl8XOqwwQWGl8ohSo.asa (hash: 0VBufQNMO7/4QkFPpkFZhTVHEaQ91TkdNNCouWLIjsE=)
5: iDGkEHzaPIBC_ltNyeNPjxHWcLQ.roa (hash: m+RgaOaS95hD5eR5RGnGQAMM12oNRJddtp+/tKr5w0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:b0:4a:04:ea:7b:dc:9b:97:80:59:06:9d:b7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Validity
Not Before: Mar 25 14:01:15 2026 GMT
Not After : Mar 26 14:01:15 2026 GMT
Subject: CN=ba23ea7140a0a2d108be85d984ab2b1be5710409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:ff:05:ec:f3:5c:e4:69:37:4e:14:20:60:
e6:7d:72:d0:1d:e0:c5:80:e4:0f:82:b5:5f:9f:30:
e5:ff:6a:61:6a:3b:9d:c1:b4:c5:93:02:9f:d2:a5:
f7:57:15:3e:c8:c9:07:8d:22:30:58:f7:c8:27:be:
80:9f:5f:21:bf:f6:a1:4f:b4:6e:f4:47:95:dc:42:
ec:65:95:45:e4:ee:73:72:04:17:23:32:b4:89:80:
8b:21:65:00:9b:35:05:df:50:99:8d:de:df:2c:29:
42:dc:ef:aa:65:9e:c5:ee:7f:f8:ec:d0:c4:28:c7:
cd:67:92:46:c8:b0:1f:c0:7b:73:3f:26:c6:76:43:
ea:8a:99:89:53:ad:eb:75:5c:50:cf:61:2a:55:57:
82:1f:2c:27:26:db:67:3e:5c:61:ab:4b:62:73:35:
0b:ee:f3:d6:39:c2:fc:03:42:ae:ac:06:9b:91:a6:
b3:c2:27:f1:2b:ae:bf:5b:e7:16:eb:8b:54:22:13:
3f:e7:d4:02:32:54:fa:cf:40:08:55:d7:af:d2:75:
4f:1c:58:c4:23:84:70:70:45:8e:30:fb:f6:28:82:
21:60:00:97:d3:79:b9:0f:04:1a:dd:79:8a:dd:1b:
80:6a:22:e4:4c:5a:f7:7f:ad:eb:7a:f2:e9:75:c1:
23:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:23:EA:71:40:A0:A2:D1:08:BE:85:D9:84:AB:2B:1B:E5:71:04:09
X509v3 Authority Key Identifier:
keyid:1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:15:12:a9:53:d2:8d:45:29:74:43:70:f1:91:dc:01:eb:66:
12:78:aa:50:2e:bb:22:f4:5f:67:7f:ef:b8:be:32:76:d0:91:
ff:be:5d:4b:c6:c1:e8:c8:a3:2f:d2:15:3e:08:d6:fe:51:c5:
35:b3:d8:cb:91:90:42:fb:84:aa:84:90:24:98:6f:84:6d:0b:
94:68:cc:d8:04:65:68:da:62:92:2c:f1:dd:92:18:b7:d2:6a:
5f:3b:ba:fc:03:4e:10:d3:63:90:03:54:94:ad:70:89:21:2b:
39:24:15:64:44:f1:41:49:98:39:a0:b5:aa:63:a0:90:78:6a:
b0:f7:16:1e:8f:6d:e5:fa:c0:85:63:16:90:ed:ac:4f:ff:7b:
b5:25:7a:36:f4:94:ca:07:b1:cc:a3:97:99:ec:ab:10:45:b4:
9c:a4:ee:2d:bd:70:1d:66:22:08:ce:96:89:94:8f:73:27:30:
89:35:08:f9:16:93:9e:b5:3a:d3:20:ac:b9:1e:ef:05:90:8c:
16:42:0a:aa:d7:4a:64:c8:46:fb:fb:30:43:c9:39:f1:24:21:
e6:a7:1a:89:2b:d3:6e:61:88:61:72:a4:12:d9:a3:15:29:af:
3f:82:25:e9:31:a8:04:a4:c4:22:6f:ea:ca:a3:ce:4e:63:1b:
1a:59:80:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lTLBKBOp73JuXgFkGnberMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYWFjYWI4ZTQ1NmJiMjkxOTc5YTczNTdhNzAyNGYwMGJl
YmFhZjUwHhcNMjYwMzI1MTQwMTE1WhcNMjYwMzI2MTQwMTE1WjAzMTEwLwYDVQQD
EyhiYTIzZWE3MTQwYTBhMmQxMDhiZTg1ZDk4NGFiMmIxYmU1NzEwNDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJj/BezzXORpN04UIGDmfXLQHeDF
gOQPgrVfnzDl/2phajudwbTFkwKf0qX3VxU+yMkHjSIwWPfIJ76An18hv/ahT7Ru
9EeV3ELsZZVF5O5zcgQXIzK0iYCLIWUAmzUF31CZjd7fLClC3O+qZZ7F7n/47NDE
KMfNZ5JGyLAfwHtzPybGdkPqipmJU63rdVxQz2EqVVeCHywnJttnPlxhq0ticzUL
7vPWOcL8A0KurAabkaazwifxK66/W+cW64tUIhM/59QCMlT6z0AIVdev0nVPHFjE
I4RwcEWOMPv2KIIhYACX03m5DwQa3XmK3RuAaiLkTFr3f63revLpdcEjCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoj6nFAoKLRCL6F2YSrKxvlcQQJMB8GA1UdIwQY
MBaAFB+qyrjkVrspGXmnNXpwJPAL66r1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDZyS3VPUld1eWtaZWFjMWVuQWs4QXZycXZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81MDFmZDMtYThjZC00ZTJkLTlkMzIt
MmZiNzJhMGFlZjZkLzEvSDZyS3VPUld1eWtaZWFjMWVuQWs4QXZycXZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My81MDFmZDMtYThjZC00ZTJkLTlkMzItMmZiNzJhMGFlZjZk
LzEvSDZyS3VPUld1eWtaZWFjMWVuQWs4QXZycXZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsBUSqVPS
jUUpdENw8ZHcAetmEniqUC67IvRfZ3/vuL4ydtCR/75dS8bB6MijL9IVPgjW/lHF
NbPYy5GQQvuEqoSQJJhvhG0LlGjM2ARlaNpikizx3ZIYt9JqXzu6/ANOENNjkANU
lK1wiSErOSQVZETxQUmYOaC1qmOgkHhqsPcWHo9t5frAhWMWkO2sT/97tSV6NvSU
ygexzKOXmeyrEEW0nKTuLb1wHWYiCM6WiZSPcycwiTUI+RaTnrU60yCsuR7vBZCM
FkIKqtdKZMhG+/swQ8k58SQh5qcaiSvTbmGIYXKkEtmjFSmvP4Il6TGoBKTEIm/q
yqPOTmMbGlmAEw==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:07:41 2026 by rpki-client