Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
File: HhH4prKDtSYE2TKiWJO4ZAQSHos.mft (raw, json)
Hash identifier: UepmInHeNrReU6if1aIYOQeENXGlhI4Vk/PXLNeVw7Y=
Subject key identifier: B6:DE:60:26:B7:45:2F:2A:3C:40:8E:51:F2:47:19:78:C9:A1:8E:A2
Authority key identifier: 1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
Certificate issuer: /CN=1e11f8a6b283b52604d932a25893b86404121e8b
Certificate serial: 019D2960F1D719A6A966E85367BA46091249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
Manifest number: 0E90
Signing time: Thu 26 Mar 2026 09:01:52 +0000
Manifest this update: Thu 26 Mar 2026 09:01:52 +0000
Manifest next update: Fri 27 Mar 2026 09:01:52 +0000
Files and hashes: 1: 4n7f8hSe_-4Wy2bDVW-WXjUIx0g.roa (hash: 5C3gCij/JOO8iJfKMKfHtP05aLMSh42RFLgeNEwUl6g=)
2: HhH4prKDtSYE2TKiWJO4ZAQSHos.crl (hash: 1zaH7SsBAXay438ARu2vqmExse+if/Iy7MAwobv376k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:f1:d7:19:a6:a9:66:e8:53:67:ba:46:09:12:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e11f8a6b283b52604d932a25893b86404121e8b
Validity
Not Before: Mar 26 09:01:52 2026 GMT
Not After : Mar 27 09:01:52 2026 GMT
Subject: CN=b6de6026b7452f2a3c408e51f2471978c9a18ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3b:60:54:ba:d7:fa:79:5c:99:41:36:d6:54:
d9:a8:3e:a1:21:1d:90:32:f4:f2:54:9e:5a:9b:4b:
6a:95:7f:54:ab:f2:56:a3:e5:c9:12:e8:bf:85:88:
45:17:42:0b:0f:c4:be:43:5c:66:10:da:d0:51:8f:
be:70:57:b3:71:db:3b:f9:ad:7c:0a:47:eb:61:b6:
f7:73:b5:16:c4:d0:92:53:3b:2f:e0:83:2d:34:32:
61:94:72:49:da:f6:06:2e:20:54:44:bb:9b:ca:ab:
21:26:9f:ca:b0:81:80:ac:6f:33:d6:53:31:4d:dd:
e9:44:02:d6:3b:d6:94:b1:5f:12:b2:bc:9b:80:bf:
17:bd:34:b8:6c:e3:a1:46:51:7e:eb:03:14:2c:4e:
90:f5:78:21:84:68:9c:f2:ed:39:9a:56:48:76:ac:
cb:47:79:48:40:87:7b:9e:20:cb:18:04:bd:5f:46:
c6:19:76:de:24:f9:66:31:81:3e:c2:17:bb:1a:4d:
ff:8b:5e:e2:e5:d5:b4:9c:b2:3f:49:9b:07:be:70:
00:a5:89:9f:04:5e:0d:6c:eb:45:ac:d0:75:dd:b8:
73:06:3d:bf:d2:b7:4f:f8:bf:d9:0e:c3:60:9b:66:
3d:a8:c9:ca:b4:b0:bc:5e:34:cd:0e:f2:0f:3c:2b:
5a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DE:60:26:B7:45:2F:2A:3C:40:8E:51:F2:47:19:78:C9:A1:8E:A2
X509v3 Authority Key Identifier:
keyid:1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:20:68:29:92:c9:19:9d:75:d2:a7:2f:43:69:e3:53:67:97:
7b:f4:28:10:bc:06:60:b4:66:7e:e7:5c:a1:79:25:1c:8f:e1:
d4:01:44:24:04:1f:9a:43:ec:4f:84:b0:db:48:98:68:1e:8f:
7f:70:3a:ee:69:36:f8:38:8e:08:40:26:fe:cf:2d:01:1d:d6:
06:07:f2:b4:06:21:cd:e5:af:a9:d1:6b:47:76:9b:d6:84:b4:
60:13:fe:e9:32:0e:26:5e:76:0b:ae:b7:d9:ae:fb:36:ba:f0:
73:21:cd:5e:4e:9b:80:e0:35:b3:06:55:20:18:b9:1a:ff:70:
33:7e:57:3e:9b:32:af:7f:7a:55:fe:e9:28:10:95:5a:60:ae:
bc:e6:bb:4a:4c:80:0b:fc:38:87:67:79:ee:35:c9:40:0d:ba:
4d:59:0e:93:ca:3e:dd:bf:92:88:17:86:36:df:bf:fc:98:96:
49:75:16:cd:bb:cd:e6:0a:4e:35:2f:ac:9f:b0:ed:c6:58:e5:
9d:b1:24:21:16:e3:7b:35:32:67:b9:82:25:78:6f:b6:67:52:
b3:b7:09:55:d1:29:5a:f5:c2:71:64:55:43:68:b7:84:6a:b1:
69:03:db:f6:46:75:ee:b0:81:3c:b5:76:44:47:be:9c:e1:3f:
46:f0:70:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYPHXGaapZuhTZ7pGCRJJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMTFmOGE2YjI4M2I1MjYwNGQ5MzJhMjU4OTNiODY0MDQx
MjFlOGIwHhcNMjYwMzI2MDkwMTUyWhcNMjYwMzI3MDkwMTUyWjAzMTEwLwYDVQQD
EyhiNmRlNjAyNmI3NDUyZjJhM2M0MDhlNTFmMjQ3MTk3OGM5YTE4ZWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDtgVLrX+nlcmUE21lTZqD6hIR2Q
MvTyVJ5am0tqlX9Uq/JWo+XJEui/hYhFF0ILD8S+Q1xmENrQUY++cFezcds7+a18
CkfrYbb3c7UWxNCSUzsv4IMtNDJhlHJJ2vYGLiBURLubyqshJp/KsIGArG8z1lMx
Td3pRALWO9aUsV8SsrybgL8XvTS4bOOhRlF+6wMULE6Q9XghhGic8u05mlZIdqzL
R3lIQId7niDLGAS9X0bGGXbeJPlmMYE+whe7Gk3/i17i5dW0nLI/SZsHvnAApYmf
BF4NbOtFrNB13bhzBj2/0rdP+L/ZDsNgm2Y9qMnKtLC8XjTNDvIPPCtaOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbeYCa3RS8qPECOUfJHGXjJoY6iMB8GA1UdIwQY
MBaAFB4R+Kayg7UmBNkyoliTuGQEEh6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGhINHByS0R0U1lFMlRLaVdKTzRaQVFTSG9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jOWViNTUtZTU5My00Y2Q3LTg3MTQt
MWE1OTMxOTRjNzk4LzEvSGhINHByS0R0U1lFMlRLaVdKTzRaQVFTSG9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9jOWViNTUtZTU5My00Y2Q3LTg3MTQtMWE1OTMxOTRjNzk4
LzEvSGhINHByS0R0U1lFMlRLaVdKTzRaQVFTSG9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIiBoKZLJ
GZ110qcvQ2njU2eXe/QoELwGYLRmfudcoXklHI/h1AFEJAQfmkPsT4Sw20iYaB6P
f3A67mk2+DiOCEAm/s8tAR3WBgfytAYhzeWvqdFrR3ab1oS0YBP+6TIOJl52C663
2a77NrrwcyHNXk6bgOA1swZVIBi5Gv9wM35XPpsyr396Vf7pKBCVWmCuvOa7SkyA
C/w4h2d57jXJQA26TVkOk8o+3b+SiBeGNt+//JiWSXUWzbvN5gpONS+sn7Dtxljl
nbEkIRbjezUyZ7mCJXhvtmdSs7cJVdEpWvXCcWRVQ2i3hGqxaQPb9kZ17rCBPLV2
REe+nOE/RvBwZg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:47:59 2026 by rpki-client