Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
File: HRUAB3Kzw_orvXcn09OJORoUYz4.mft (raw, json)
Hash identifier: hoDI4hqjL7WkY8A+R+ddM7qf9pUwt/QSfyaoLnaB6uk=
Subject key identifier: 30:ED:83:2A:CE:AE:5C:FD:C6:6C:DE:E5:CD:77:BA:59:C0:92:40:CB
Authority key identifier: 1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
Certificate issuer: /CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Certificate serial: 019D28BB42D9D765F2FA6A7F3BCB02365974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
Manifest number: 06A7
Signing time: Thu 26 Mar 2026 06:00:54 +0000
Manifest this update: Thu 26 Mar 2026 06:00:54 +0000
Manifest next update: Fri 27 Mar 2026 06:00:54 +0000
Files and hashes: 1: HRUAB3Kzw_orvXcn09OJORoUYz4.crl (hash: ANtkZNTSc8vcsKmeHXpNrHbgsgx0DDc4GXApJUj0BuU=)
2: h6CMS5oBPwqxsthnPIFhjc0V9K8.roa (hash: SyY/BmEPaPkpZh5+caF1REe1XeX5Sv+dw9c9C5Elg48=)
3: yiX6lLdpB5XmkAdPuvtnINRIVlY.roa (hash: mWoNnZ8RcTqfWnj2UmwqsuLMfxRCZHX81aZJ54qm8Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:42:d9:d7:65:f2:fa:6a:7f:3b:cb:02:36:59:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Validity
Not Before: Mar 26 06:00:54 2026 GMT
Not After : Mar 27 06:00:54 2026 GMT
Subject: CN=30ed832aceae5cfdc66cdee5cd77ba59c09240cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1b:5e:69:0b:19:e0:0a:b4:0a:15:7c:f7:60:
88:ed:37:f9:22:03:5a:02:93:e0:77:28:e1:6c:e0:
9a:97:9b:61:1e:60:18:3d:6f:68:4d:8a:08:ea:dc:
31:fa:2c:e6:de:3a:b2:ac:6a:4d:5c:4d:8f:6a:5a:
68:4b:7c:08:5b:c6:91:80:5a:cd:3f:8e:8f:35:e3:
18:95:d5:b8:22:67:26:6d:fe:b9:72:b4:54:57:02:
1b:8c:1c:3a:31:29:03:d7:88:e5:bb:fa:b2:04:f5:
bf:07:5a:b4:63:ce:95:97:d3:a1:6d:d4:e8:fb:b6:
ed:f8:34:87:c4:5e:dc:23:3d:a4:f8:d2:05:61:20:
28:77:57:07:dd:c3:2a:e2:49:3d:d0:f7:05:9a:f3:
b0:77:c3:28:fb:ed:ea:42:8f:19:1a:22:c6:17:5d:
7e:17:55:58:97:49:cc:42:2a:d1:6e:b5:bf:03:9b:
c1:c6:39:2e:c5:38:3e:d7:24:23:8a:29:92:97:21:
af:26:a3:e3:51:c0:b7:ef:fc:98:c8:f4:e3:fd:46:
dc:40:07:4b:23:8d:18:da:b0:8a:ec:96:fd:f7:2f:
8e:70:f5:5a:6d:10:1f:3d:79:20:9d:39:b0:2a:71:
8b:a3:75:1f:99:48:25:4b:b2:00:1a:c0:9f:96:e8:
5a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:ED:83:2A:CE:AE:5C:FD:C6:6C:DE:E5:CD:77:BA:59:C0:92:40:CB
X509v3 Authority Key Identifier:
keyid:1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a1:62:97:ed:82:98:fb:b2:45:c2:94:1a:cf:67:ad:61:ab:
88:cd:86:5b:bf:df:91:a0:94:43:1c:82:fb:db:9b:2f:3c:81:
d8:6c:c4:65:d2:50:8c:84:3c:b7:8d:7b:68:9d:f6:37:22:09:
d8:74:dd:b7:87:92:c9:02:37:42:7e:76:8e:2c:58:9e:a2:36:
53:b7:7a:bb:a3:cc:71:d6:6b:fe:f4:13:0c:d3:26:ba:48:26:
1f:d7:bc:04:1a:21:c8:5f:ad:62:27:73:aa:22:8a:44:97:fd:
18:30:f3:dd:a8:17:ba:10:a4:90:e4:bc:48:ae:0d:fb:dc:41:
3a:c1:f8:40:bb:99:f0:3c:09:a2:33:ff:8d:9c:44:55:80:cc:
9c:e7:1b:68:67:dd:9e:29:c4:02:c5:7a:48:d5:50:f6:92:6f:
21:e5:7d:9a:df:9c:aa:08:7d:2b:2a:ff:cb:a0:e6:a5:d1:95:
35:b0:fd:23:c3:e4:d3:3f:a9:a3:73:ae:6b:cc:27:54:12:05:
4a:14:61:96:6f:ec:e7:17:ab:3f:84:13:60:d8:07:5a:9a:d8:
21:39:e9:01:c7:a0:ff:fc:3b:5f:94:6b:23:38:22:fc:ff:14:
b5:67:25:66:34:60:ba:07:22:05:96:26:be:a2:07:86:07:91:
2c:07:06:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou0LZ12Xy+mp/O8sCNll0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMTUwMDA3NzJiM2MzZmEyYmJkNzcyN2QzZDM4OTM5MWEx
NDYzM2UwHhcNMjYwMzI2MDYwMDU0WhcNMjYwMzI3MDYwMDU0WjAzMTEwLwYDVQQD
EygzMGVkODMyYWNlYWU1Y2ZkYzY2Y2RlZTVjZDc3YmE1OWMwOTI0MGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xteaQsZ4Aq0ChV892CI7Tf5IgNa
ApPgdyjhbOCal5thHmAYPW9oTYoI6twx+izm3jqyrGpNXE2PalpoS3wIW8aRgFrN
P46PNeMYldW4Imcmbf65crRUVwIbjBw6MSkD14jlu/qyBPW/B1q0Y86Vl9OhbdTo
+7bt+DSHxF7cIz2k+NIFYSAod1cH3cMq4kk90PcFmvOwd8Mo++3qQo8ZGiLGF11+
F1VYl0nMQirRbrW/A5vBxjkuxTg+1yQjiimSlyGvJqPjUcC37/yYyPTj/UbcQAdL
I40Y2rCK7Jb99y+OcPVabRAfPXkgnTmwKnGLo3UfmUglS7IAGsCfluhaFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDDtgyrOrlz9xmze5c13ulnAkkDLMB8GA1UdIwQY
MBaAFB0VAAdys8P6K713J9PTiTkaFGM+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFJVQUIzS3p3X29ydlhjbjA5T0pPUm9VWXo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9jZDY0NzgtY2VmNi00YTcwLWI0ODgt
YjIxMjlmYjRjYTVhLzEvSFJVQUIzS3p3X29ydlhjbjA5T0pPUm9VWXo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9jZDY0NzgtY2VmNi00YTcwLWI0ODgtYjIxMjlmYjRjYTVh
LzEvSFJVQUIzS3p3X29ydlhjbjA5T0pPUm9VWXo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbaFil+2C
mPuyRcKUGs9nrWGriM2GW7/fkaCUQxyC+9ubLzyB2GzEZdJQjIQ8t417aJ32NyIJ
2HTdt4eSyQI3Qn52jixYnqI2U7d6u6PMcdZr/vQTDNMmukgmH9e8BBohyF+tYidz
qiKKRJf9GDDz3agXuhCkkOS8SK4N+9xBOsH4QLuZ8DwJojP/jZxEVYDMnOcbaGfd
ninEAsV6SNVQ9pJvIeV9mt+cqgh9Kyr/y6DmpdGVNbD9I8Pk0z+po3Oua8wnVBIF
ShRhlm/s5xerP4QTYNgHWprYITnpAceg//w7X5RrIzgi/P8UtWclZjRgugciBZYm
vqIHhgeRLAcGfw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:32:00 2026 by rpki-client