Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
File: HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft (raw, json)
Hash identifier: /FNnJWDHPSmQVup+APC7HHD5Q7b0Col7/KsS9BDsXzo=
Subject key identifier: 86:B7:1F:1B:00:C1:98:3F:D5:11:A5:E8:77:F9:FE:55:9C:FB:19:34
Authority key identifier: 1C:8F:BA:99:36:50:34:8A:13:51:52:EE:C3:48:A1:19:43:0E:63:40
Certificate issuer: /CN=1c8fba993650348a135152eec348a119430e6340
Certificate serial: 019D26281A1C63ED0E1C483F027C22DFED5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
Manifest number: 034B
Signing time: Wed 25 Mar 2026 18:00:55 +0000
Manifest this update: Wed 25 Mar 2026 18:00:55 +0000
Manifest next update: Thu 26 Mar 2026 18:00:55 +0000
Files and hashes: 1: HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl (hash: FEKopDqdCT6PnOCAM6mKLmyXnTZClD0f80JMlH8KNxg=)
2: dnhblZcylCcbRj12R5ofCpHt7LU.roa (hash: oRIsfhmT16Rl0vK9L5ENWVnifqieHto224vdnp4iUt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:1a:1c:63:ed:0e:1c:48:3f:02:7c:22:df:ed:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c8fba993650348a135152eec348a119430e6340
Validity
Not Before: Mar 25 18:00:55 2026 GMT
Not After : Mar 26 18:00:55 2026 GMT
Subject: CN=86b71f1b00c1983fd511a5e877f9fe559cfb1934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:91:06:a1:4e:9f:bc:55:95:b3:4e:e8:2f:89:
d3:60:1c:c2:3e:f7:f5:56:e5:e8:a7:79:73:9b:8a:
71:5e:88:b4:ec:af:db:e6:a3:42:36:f2:48:b6:04:
c2:bf:9f:d8:a6:e6:22:9a:6f:15:16:89:8c:03:e0:
39:bc:4a:43:9d:7b:cd:cd:f4:3f:a6:32:98:39:04:
ba:9c:a0:1c:43:2f:ce:61:3a:48:2e:28:ba:a7:14:
c8:d8:ea:af:fd:b1:56:a7:fb:3d:d9:6b:92:30:3b:
40:db:69:c3:34:3e:e4:01:51:cc:e5:91:1d:96:d8:
68:47:0e:13:e0:01:7c:b8:b6:2f:db:ab:b4:35:72:
d8:7b:0e:c5:a3:0b:97:9a:c2:42:d2:30:d2:ce:52:
57:f6:d0:31:39:0c:68:f1:0a:e6:72:48:20:50:12:
97:27:71:81:75:c2:3a:8b:1f:76:63:00:1d:a2:45:
e8:95:46:fd:a2:4b:7f:e5:05:fa:36:3d:e7:f9:af:
a2:7e:3f:84:4e:39:7e:0a:ad:20:f2:88:f2:0b:41:
0d:42:ef:12:0e:50:7f:97:e3:eb:44:f5:09:2d:fc:
f3:9e:ca:be:4a:09:9c:fa:00:4c:a1:ae:f2:f5:df:
b2:3a:53:e9:7f:ea:22:52:78:31:18:68:dc:48:e0:
42:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B7:1F:1B:00:C1:98:3F:D5:11:A5:E8:77:F9:FE:55:9C:FB:19:34
X509v3 Authority Key Identifier:
keyid:1C:8F:BA:99:36:50:34:8A:13:51:52:EE:C3:48:A1:19:43:0E:63:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:47:0f:94:d7:ab:73:8a:b2:a8:25:8d:e9:41:a2:64:3a:c7:
7f:ff:75:30:e5:1d:53:7a:f2:b4:11:e2:4b:1a:20:cc:2b:8f:
36:32:11:ef:c2:b8:43:a6:6d:c5:00:b5:60:01:6e:4d:68:24:
de:21:6f:b6:4c:62:69:44:67:f5:86:e9:30:4b:c2:48:a9:98:
a4:1a:22:71:85:f9:be:14:d5:c6:32:87:82:c1:70:fc:22:15:
39:99:68:61:38:f6:2e:db:ff:9d:bd:46:a7:57:35:cc:20:d6:
26:17:13:ff:77:c4:ce:ce:fe:0a:77:36:f2:21:9d:49:ff:47:
40:a9:be:75:bd:06:ea:6a:92:22:f4:da:42:71:d2:8b:ff:5e:
e8:f9:a3:77:81:60:5b:c4:eb:9d:ce:da:a8:ad:a6:66:c1:92:
b8:91:bc:6c:91:be:e8:f1:59:ab:73:15:f4:6e:a2:55:8b:50:
18:8a:91:ee:c7:67:95:8a:c4:5e:42:b0:d9:67:12:99:52:d6:
5b:c9:9e:d2:c5:3c:f4:56:84:96:08:a5:9b:4c:3d:9f:cd:fd:
65:d5:c1:bd:e0:15:49:92:3a:2b:da:3d:54:95:d9:08:1f:e0:
87:9d:63:80:3e:ef:f8:f7:5e:5c:e5:9f:a7:71:8f:c8:3f:17:
7e:91:89:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:28 2026 by rpki-client