
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
File: h6WU4wS2ghg6ojWeQOHc75P-BXA.mft (raw, json)
Hash identifier: uT9qGK45qKFFv/8MzPPKmCJVSMks9qibm2DpW52acr8=
Subject key identifier: 31:77:A1:B1:61:B0:BF:29:90:5E:FC:DE:59:93:DD:B7:17:53:4F:C0
Authority key identifier: 87:A5:94:E3:04:B6:82:18:3A:A2:35:9E:40:E1:DC:EF:93:FE:05:70
Certificate issuer: /CN=87a594e304b682183aa2359e40e1dcef93fe0570
Certificate serial: 019D27722110E24B7E05DAB6B79C58C58BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
Manifest number: 079B
Signing time: Thu 26 Mar 2026 00:01:24 +0000
Manifest this update: Thu 26 Mar 2026 00:01:24 +0000
Manifest next update: Fri 27 Mar 2026 00:01:24 +0000
Files and hashes: 1: WxnDI9dSFugc7Iy0b5YqreC9wbU.roa (hash: z//4HqyEyKzOrY+CM2iIO8ckIeunZSzbquuEiF28tBw=)
2: h6WU4wS2ghg6ojWeQOHc75P-BXA.crl (hash: sVlLxb2bWqEnjc0piisV4rJK9Hv7mzlI4zc1z7av/Co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:21:10:e2:4b:7e:05:da:b6:b7:9c:58:c5:8b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87a594e304b682183aa2359e40e1dcef93fe0570
Validity
Not Before: Mar 26 00:01:24 2026 GMT
Not After : Mar 27 00:01:24 2026 GMT
Subject: CN=3177a1b161b0bf29905efcde5993ddb717534fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cc:ec:f8:c1:f3:19:21:96:2e:e9:43:c9:20:
a4:08:c1:f4:d2:f9:48:9e:9d:c1:6a:46:dc:a3:1a:
97:50:6d:57:cb:bb:ca:f8:62:a4:90:b4:13:0a:d7:
20:b4:85:a6:48:e9:79:78:d0:2d:cd:d4:25:83:2a:
ec:05:7e:af:f5:bf:53:bd:bd:54:57:98:de:22:b3:
b5:8b:75:5a:cd:68:a5:96:97:39:79:fe:4c:0c:20:
cf:b8:32:80:3b:60:3d:7e:bc:cb:e4:45:bf:ff:c0:
48:b4:ea:0e:29:fa:5d:17:b2:37:fa:7b:71:5d:08:
ea:c0:57:9c:cc:86:0e:b6:47:17:d2:33:0c:63:10:
ab:5b:1b:36:06:51:1a:4a:7e:bb:d3:4d:7f:dd:1d:
6b:93:b8:d2:35:0e:7b:81:46:c2:41:78:29:1b:4e:
80:13:61:91:3c:a4:e6:5d:df:2d:a3:3e:8b:66:25:
f4:bb:79:8d:d3:74:79:08:7e:5e:f7:0f:db:da:86:
0a:55:26:47:58:2d:ab:92:9f:74:72:88:47:c3:c1:
6f:be:5e:7f:e1:ca:71:ea:fd:63:e9:d3:bf:2b:98:
44:fd:62:ba:a8:78:e8:b7:e4:5c:a2:00:be:48:d7:
e8:a0:c8:df:e7:b1:47:3b:c2:c8:97:64:af:75:2a:
69:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:77:A1:B1:61:B0:BF:29:90:5E:FC:DE:59:93:DD:B7:17:53:4F:C0
X509v3 Authority Key Identifier:
keyid:87:A5:94:E3:04:B6:82:18:3A:A2:35:9E:40:E1:DC:EF:93:FE:05:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:5f:9d:df:18:c2:18:d9:76:e8:23:1c:fb:20:0a:85:5d:1b:
c5:62:12:e0:e5:19:9b:ef:4a:cb:bc:3b:cc:22:6d:f1:39:6c:
b7:d8:72:27:29:a4:be:8b:1c:94:55:ed:4b:ea:45:21:c6:02:
aa:04:5f:4b:13:27:51:a3:f7:f6:27:ff:17:47:f7:f2:b2:85:
25:ba:69:19:df:41:fb:98:36:53:00:4d:79:b7:f4:0b:61:88:
ae:56:fc:a8:c9:f5:42:fb:a5:f1:37:6a:e3:db:a0:98:0c:fb:
49:4a:c4:a8:90:3a:9c:91:22:8e:d3:dc:be:5f:c7:a4:35:ec:
e9:13:d2:f7:0e:fd:f3:c9:4b:2e:23:aa:53:71:e4:74:2d:46:
00:87:d4:f3:7c:aa:58:fa:fc:f7:a4:f1:7d:c0:db:33:5b:cf:
41:a2:af:aa:70:d6:d0:74:b6:8d:c8:36:7f:9c:a5:78:3f:f3:
25:a2:5a:90:02:0b:e3:1b:fc:1e:07:7e:77:f9:cd:3e:c0:31:
f7:39:0d:88:0b:eb:7f:29:29:76:05:e4:14:a0:ab:f5:8d:fe:
f1:d3:d1:1b:01:aa:d9:41:5f:69:51:8d:1b:78:8a:84:6c:f7:
0a:97:ba:24:17:ca:85:b4:47:a5:dd:80:03:c3:93:ee:6f:ea:
fe:7c:73:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nciEQ4kt+Bdq2t5xYxYulMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YTU5NGUzMDRiNjgyMTgzYWEyMzU5ZTQwZTFkY2VmOTNm
ZTA1NzAwHhcNMjYwMzI2MDAwMTI0WhcNMjYwMzI3MDAwMTI0WjAzMTEwLwYDVQQD
EygzMTc3YTFiMTYxYjBiZjI5OTA1ZWZjZGU1OTkzZGRiNzE3NTM0ZmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0szs+MHzGSGWLulDySCkCMH00vlI
np3BakbcoxqXUG1Xy7vK+GKkkLQTCtcgtIWmSOl5eNAtzdQlgyrsBX6v9b9Tvb1U
V5jeIrO1i3VazWillpc5ef5MDCDPuDKAO2A9frzL5EW//8BItOoOKfpdF7I3+ntx
XQjqwFeczIYOtkcX0jMMYxCrWxs2BlEaSn67001/3R1rk7jSNQ57gUbCQXgpG06A
E2GRPKTmXd8toz6LZiX0u3mN03R5CH5e9w/b2oYKVSZHWC2rkp90cohHw8Fvvl5/
4cpx6v1j6dO/K5hE/WK6qHjot+RcogC+SNfooMjf57FHO8LIl2SvdSppgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDF3obFhsL8pkF783lmT3bcXU0/AMB8GA1UdIwQY
MBaAFIellOMEtoIYOqI1nkDh3O+T/gVwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDZXVTR3UzJnaGc2b2pXZVFPSGM3NVAtQlhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80Zjg2OTktN2I1Mi00MDZlLTgyYzAt
YjllMzRhMzhmM2E5LzEvaDZXVTR3UzJnaGc2b2pXZVFPSGM3NVAtQlhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC80Zjg2OTktN2I1Mi00MDZlLTgyYzAtYjllMzRhMzhmM2E5
LzEvaDZXVTR3UzJnaGc2b2pXZVFPSGM3NVAtQlhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGF+d3xjC
GNl26CMc+yAKhV0bxWIS4OUZm+9Ky7w7zCJt8Tlst9hyJymkvosclFXtS+pFIcYC
qgRfSxMnUaP39if/F0f38rKFJbppGd9B+5g2UwBNebf0C2GIrlb8qMn1Qvul8Tdq
49ugmAz7SUrEqJA6nJEijtPcvl/HpDXs6RPS9w7988lLLiOqU3HkdC1GAIfU83yq
WPr896TxfcDbM1vPQaKvqnDW0HS2jcg2f5yleD/zJaJakAIL4xv8Hgd+d/nNPsAx
9zkNiAvrfykpdgXkFKCr9Y3+8dPRGwGq2UFfaVGNG3iKhGz3Cpe6JBfKhbRHpd2A
A8OT7m/q/nxzZw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:01:59 2026 by rpki-client