Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
File: hmuOBdk45F1lrjFNxnUjfeyDEaE.mft (raw, json)
Hash identifier: +JJemHtg6A8NHbkhNA4ZOih1MSIRKN1hr7hrSVReBic=
Subject key identifier: 06:1C:77:D8:EF:D9:46:EE:AA:64:A3:31:02:74:55:0E:98:E4:B6:BB
Authority key identifier: 86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1
Certificate issuer: /CN=866b8e05d938e45d65ae314dc675237dec8311a1
Certificate serial: 019D28F3048DCED159079C39DDA954D0519E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
Manifest number: 14A2
Signing time: Thu 26 Mar 2026 07:01:48 +0000
Manifest this update: Thu 26 Mar 2026 07:01:48 +0000
Manifest next update: Fri 27 Mar 2026 07:01:48 +0000
Files and hashes: 1: AXw1fMN4QVwh_fCCHDmmZdyjQ0M.roa (hash: 2a2VYvYjD+SKO9HMwLyzgAvBrGoGV8DCs63xNBs37UA=)
2: hmuOBdk45F1lrjFNxnUjfeyDEaE.crl (hash: IjfxV2N41A6FSQyyBLIB2bqbYzz0Te/WZILMHVqlvck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:04:8d:ce:d1:59:07:9c:39:dd:a9:54:d0:51:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866b8e05d938e45d65ae314dc675237dec8311a1
Validity
Not Before: Mar 26 07:01:48 2026 GMT
Not After : Mar 27 07:01:48 2026 GMT
Subject: CN=061c77d8efd946eeaa64a3310274550e98e4b6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d4:f9:8e:12:40:18:1e:f1:b7:05:22:87:63:
d1:21:94:e1:72:4b:64:f6:a3:d5:3a:76:3c:3b:bc:
bb:84:0d:9b:a3:a7:f4:f2:a9:4c:c5:99:19:72:c5:
c1:26:b8:ca:e3:d0:d5:dd:0b:d4:af:b5:1e:87:5b:
73:5e:fb:8b:88:69:9e:71:5c:e6:b1:b5:9e:ca:38:
96:2a:61:68:3a:3b:cf:e2:ba:68:89:94:4e:8a:a1:
e2:9b:6d:d7:e3:84:8b:ac:5e:c7:02:f2:c1:9c:47:
d2:c8:4b:13:a8:10:4e:49:d0:97:31:8b:b2:e7:d4:
2e:08:03:81:e8:eb:f2:a4:1e:c5:0c:82:59:4e:0a:
4b:06:43:ec:a7:2b:ad:83:58:41:b1:e8:d5:ff:6c:
66:77:70:8c:ee:37:3c:87:97:47:94:c1:c1:04:57:
61:92:64:01:71:e6:fc:40:5a:0b:91:6b:df:1d:97:
03:b4:cc:e9:60:ce:bd:08:29:41:15:f0:6a:b1:e1:
2b:5d:61:07:91:e0:6c:8a:a4:37:e4:a1:e3:d9:1d:
38:b6:f3:ba:60:20:b8:12:6f:7f:c6:19:7b:6a:c1:
96:85:6f:60:e6:09:b2:33:78:10:0c:03:fe:47:12:
45:16:94:b2:f4:11:b2:2d:44:f9:f9:ad:88:36:52:
99:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1C:77:D8:EF:D9:46:EE:AA:64:A3:31:02:74:55:0E:98:E4:B6:BB
X509v3 Authority Key Identifier:
keyid:86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:4c:a5:64:b1:4d:b0:8f:c6:83:cc:1a:f3:86:a2:de:ce:78:
0d:51:71:82:2c:63:b9:12:f5:a5:c6:2b:f6:6b:c4:c2:55:fc:
2a:64:7c:8d:b1:10:0e:41:ae:22:15:c1:f3:78:c9:a6:88:f8:
c0:2e:67:31:58:72:2b:85:bb:8d:a1:0b:ec:11:74:5a:87:a8:
c6:f7:eb:89:f1:e4:37:09:d3:7f:b2:1f:6d:fb:aa:1a:4e:f0:
5e:d6:5f:c6:f6:ba:7b:9a:08:2a:a8:01:d7:b1:bf:28:37:ed:
57:7f:9b:2b:13:4b:b8:01:19:83:13:d6:58:2e:ab:6f:ae:39:
2d:4f:68:11:8c:ad:36:87:12:5e:55:e4:91:a6:b9:b0:b1:51:
82:ae:3a:52:53:28:e3:84:b0:be:7a:7b:92:98:8b:7c:87:bf:
7d:6d:3d:bb:16:d4:9a:1a:79:fd:43:ad:62:3a:cb:da:10:b0:
f0:cd:dd:01:10:a9:f7:7b:88:cb:e4:0b:83:82:e5:b8:dd:14:
5f:43:8c:40:84:2b:6f:3c:a8:26:36:83:47:81:4e:56:7a:d8:
5c:f9:02:bc:1e:3b:a4:fd:fb:ea:ec:03:93:05:26:7b:7d:f3:
a3:72:0a:c2:33:d9:1d:e0:86:8c:59:53:e0:56:e8:0e:9e:01:
1c:20:91:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8wSNztFZB5w53alU0FGeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NmI4ZTA1ZDkzOGU0NWQ2NWFlMzE0ZGM2NzUyMzdkZWM4
MzExYTEwHhcNMjYwMzI2MDcwMTQ4WhcNMjYwMzI3MDcwMTQ4WjAzMTEwLwYDVQQD
EygwNjFjNzdkOGVmZDk0NmVlYWE2NGEzMzEwMjc0NTUwZTk4ZTRiNmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dT5jhJAGB7xtwUih2PRIZThcktk
9qPVOnY8O7y7hA2bo6f08qlMxZkZcsXBJrjK49DV3QvUr7Ueh1tzXvuLiGmecVzm
sbWeyjiWKmFoOjvP4rpoiZROiqHim23X44SLrF7HAvLBnEfSyEsTqBBOSdCXMYuy
59QuCAOB6OvypB7FDIJZTgpLBkPspyutg1hBsejV/2xmd3CM7jc8h5dHlMHBBFdh
kmQBceb8QFoLkWvfHZcDtMzpYM69CClBFfBqseErXWEHkeBsiqQ35KHj2R04tvO6
YCC4Em9/xhl7asGWhW9g5gmyM3gQDAP+RxJFFpSy9BGyLUT5+a2INlKZPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYcd9jv2UbuqmSjMQJ0VQ6Y5La7MB8GA1UdIwQY
MBaAFIZrjgXZOORdZa4xTcZ1I33sgxGhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG11T0JkazQ1RjFscmpGTnhuVWpmZXlERWFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kNWJjZTItYTkyZi00NDJhLWEyMzUt
YWE4OGE0YmE1OGVmLzEvaG11T0JkazQ1RjFscmpGTnhuVWpmZXlERWFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9kNWJjZTItYTkyZi00NDJhLWEyMzUtYWE4OGE0YmE1OGVm
LzEvaG11T0JkazQ1RjFscmpGTnhuVWpmZXlERWFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUylZLFN
sI/Gg8wa84ai3s54DVFxgixjuRL1pcYr9mvEwlX8KmR8jbEQDkGuIhXB83jJpoj4
wC5nMVhyK4W7jaEL7BF0WoeoxvfrifHkNwnTf7IfbfuqGk7wXtZfxva6e5oIKqgB
17G/KDftV3+bKxNLuAEZgxPWWC6rb645LU9oEYytNocSXlXkkaa5sLFRgq46UlMo
44Swvnp7kpiLfIe/fW09uxbUmhp5/UOtYjrL2hCw8M3dARCp93uIy+QLg4LluN0U
X0OMQIQrbzyoJjaDR4FOVnrYXPkCvB47pP376uwDkwUme33zo3IKwjPZHeCGjFlT
4FboDp4BHCCRwg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:02 2026 by rpki-client