Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
File: 1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft (raw, json)
Hash identifier: o/v8tyn7CW/2U19RXh1b1JtBvHKRlOg7tC90zcWN534=
Subject key identifier: C9:C7:DD:C8:66:09:C1:14:68:B7:65:E6:4D:5B:69:00:85:DB:DB:06
Authority key identifier: F8:75:3E:2F:72:30:DD:B7:BC:0E:64:E3:58:AF:97:C3:18:D8:8B:6A
Certificate issuer: /CN=f8753e2f7230ddb7bc0e64e358af97c318d88b6a
Certificate serial: 019D258418B96F9844405F67A47F886DBF98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
Manifest number: 163B
Signing time: Wed 25 Mar 2026 15:01:47 +0000
Manifest this update: Wed 25 Mar 2026 15:01:47 +0000
Manifest next update: Thu 26 Mar 2026 15:01:47 +0000
Files and hashes: 1: 1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl (hash: TZZOQQT+aDoWUDTB8OgpJYMLYpyR0ZoMinDFmdDmGbQ=)
2: En5Rx9q0qO7unPONCeYGr0E8Ypo.roa (hash: m4mIVNNksRXGC54BCyZfvQgPVP3myy6JZj2rGnHsmaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:18:b9:6f:98:44:40:5f:67:a4:7f:88:6d:bf:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8753e2f7230ddb7bc0e64e358af97c318d88b6a
Validity
Not Before: Mar 25 15:01:47 2026 GMT
Not After : Mar 26 15:01:47 2026 GMT
Subject: CN=c9c7ddc86609c11468b765e64d5b690085dbdb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d2:f7:f1:93:c5:42:ec:f4:2b:68:50:75:c8:
c2:8e:f3:f7:b5:1b:2d:99:7e:53:49:8e:3e:59:1d:
5e:23:70:05:bb:59:aa:57:78:43:e5:5e:20:48:9d:
ad:50:6a:77:94:0d:ed:af:b6:f7:d1:3d:3f:27:85:
c9:cb:61:09:0b:ce:c8:96:d0:4a:9b:18:fc:8f:c5:
7a:be:d2:ae:71:d8:49:fc:5e:e7:46:eb:76:cd:f7:
09:35:6c:d1:eb:f4:97:6a:18:ba:40:c9:b7:93:51:
51:0c:1c:a4:aa:0a:e2:ee:df:47:1d:b7:37:c0:ec:
f0:cd:35:cc:4d:8d:20:f8:bb:c3:09:d8:db:22:1a:
6c:b2:21:d8:22:eb:c3:1c:72:97:8a:e2:df:0c:54:
f7:bd:f5:8e:28:41:49:ae:74:69:55:31:68:1a:17:
fc:30:95:86:36:10:23:a8:06:11:b9:0e:4c:c5:51:
e8:10:c1:e7:0a:7c:91:2c:d6:45:06:76:9e:1c:37:
92:ab:ab:05:69:02:2c:47:c5:8a:49:1b:76:45:9a:
68:de:56:d6:20:ef:69:c4:14:65:a0:9c:df:f7:2b:
ad:46:84:8c:15:61:ad:da:6d:f5:41:1c:62:f4:62:
de:92:ae:4f:ef:60:75:d3:bf:09:b0:0b:6d:95:83:
e5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C7:DD:C8:66:09:C1:14:68:B7:65:E6:4D:5B:69:00:85:DB:DB:06
X509v3 Authority Key Identifier:
keyid:F8:75:3E:2F:72:30:DD:B7:BC:0E:64:E3:58:AF:97:C3:18:D8:8B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6f9604-480c-4837-aff2-d5c1aa5ae398/1/1-HU-L3Iw3be8DmTjWK-XwxjYi2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:91:0c:5c:02:8d:4e:06:7a:ce:7a:9d:f2:3a:90:f1:78:ad:
b5:b7:9d:a0:fa:15:60:17:5a:97:8a:8b:3b:a5:8e:0a:15:1e:
28:a4:76:ac:05:6e:ef:8d:77:84:26:4a:c7:da:5a:be:3b:21:
d9:9f:b0:16:ce:89:5f:89:5e:b8:e7:4c:ac:68:27:f5:a3:30:
1e:a3:41:43:dc:ef:04:dc:b3:d2:64:85:dd:01:6d:5a:90:a4:
b9:ee:d4:c5:4e:2b:44:ef:6c:7f:d4:97:72:ce:53:73:6f:f1:
71:92:41:a2:4a:25:e0:de:1e:e6:69:36:74:35:cb:aa:3d:20:
18:c3:4c:de:09:c1:36:64:f1:ce:75:61:d1:2b:f2:56:4f:62:
23:6d:7a:57:7c:08:24:4f:d6:a7:9a:d3:aa:87:30:31:4e:e4:
99:95:16:2c:99:96:7c:0e:98:0e:3c:d7:90:5b:7d:d1:20:75:
4b:6e:21:76:b2:e7:57:92:f3:6d:0d:62:91:38:0b:3a:04:2e:
0e:82:5b:2f:81:e3:09:90:9b:d0:5e:04:b0:ff:98:f5:93:52:
95:f4:1d:e1:1d:10:6c:9f:90:bb:c9:7f:f5:e3:f4:80:e9:5a:
de:bc:86:b1:5e:72:c5:60:cf:50:97:c7:af:39:15:fc:8b:1e:
e4:78:e1:ef
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0lhBi5b5hEQF9npH+Ibb+YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NzUzZTJmNzIzMGRkYjdiYzBlNjRlMzU4YWY5N2MzMThk
ODhiNmEwHhcNMjYwMzI1MTUwMTQ3WhcNMjYwMzI2MTUwMTQ3WjAzMTEwLwYDVQQD
EyhjOWM3ZGRjODY2MDljMTE0NjhiNzY1ZTY0ZDViNjkwMDg1ZGJkYjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dL38ZPFQuz0K2hQdcjCjvP3tRst
mX5TSY4+WR1eI3AFu1mqV3hD5V4gSJ2tUGp3lA3tr7b30T0/J4XJy2EJC87IltBK
mxj8j8V6vtKucdhJ/F7nRut2zfcJNWzR6/SXahi6QMm3k1FRDBykqgri7t9HHbc3
wOzwzTXMTY0g+LvDCdjbIhpssiHYIuvDHHKXiuLfDFT3vfWOKEFJrnRpVTFoGhf8
MJWGNhAjqAYRuQ5MxVHoEMHnCnyRLNZFBnaeHDeSq6sFaQIsR8WKSRt2RZpo3lbW
IO9pxBRloJzf9yutRoSMFWGt2m31QRxi9GLekq5P72B1078JsAttlYPlDwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMnH3chmCcEUaLdl5k1baQCF29sGMB8GA1UdIwQY
MBaAFPh1Pi9yMN23vA5k41ivl8MY2ItqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1IVS1MM0l3M2JlOERtVGpXSy1Yd3hqWWkyby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGMvNmY5NjA0LTQ4MGMtNDgzNy1hZmYy
LWQ1YzFhYTVhZTM5OC8xLzEtSFUtTDNJdzNiZThEbVRqV0stWHd4allpMm8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzhjLzZmOTYwNC00ODBjLTQ4MzctYWZmMi1kNWMxYWE1YWUz
OTgvMS8xLUhVLUwzSXczYmU4RG1UaldLLVh3eGpZaTJvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOJEM
XAKNTgZ6znqd8jqQ8XittbedoPoVYBdal4qLO6WOChUeKKR2rAVu7413hCZKx9pa
vjsh2Z+wFs6JX4leuOdMrGgn9aMwHqNBQ9zvBNyz0mSF3QFtWpCkue7UxU4rRO9s
f9SXcs5Tc2/xcZJBokol4N4e5mk2dDXLqj0gGMNM3gnBNmTxznVh0SvyVk9iI216
V3wIJE/Wp5rTqocwMU7kmZUWLJmWfA6YDjzXkFt90SB1S24hdrLnV5LzbQ1ikTgL
OgQuDoJbL4HjCZCb0F4EsP+Y9ZNSlfQd4R0QbJ+Qu8l/9eP0gOla3ryGsV5yxWDP
UJfHrzkV/Ise5Hjh7w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:14 2026 by rpki-client