Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
File: D_HA6RHM5MRT_sKxaPbBPTbg34U.mft (raw, json)
Hash identifier: lFUnBAH8jp6pDwFwwj7dwcI+A/AQ0u8F0Ot6m+K4kZ0=
Subject key identifier: FE:0D:CE:42:EE:CF:F2:D1:B4:39:7F:DA:0C:F8:2C:C7:20:A4:83:62
Authority key identifier: 0F:F1:C0:E9:11:CC:E4:C4:53:FE:C2:B1:68:F6:C1:3D:36:E0:DF:85
Certificate issuer: /CN=0ff1c0e911cce4c453fec2b168f6c13d36e0df85
Certificate serial: 019D2B4F060611CCDE9D98B24B2030D53174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
Manifest number: A0
Signing time: Thu 26 Mar 2026 18:01:32 +0000
Manifest this update: Thu 26 Mar 2026 18:01:32 +0000
Manifest next update: Fri 27 Mar 2026 18:01:32 +0000
Files and hashes: 1: A2gg-MX124Lpmk4q6amGH364pI8.roa (hash: vW20LJAGKrZU5294D/w3GbyCDoxlRHd2AtS8gCcCOJ4=)
2: D_HA6RHM5MRT_sKxaPbBPTbg34U.crl (hash: jiSBzO2zgVme1/XZJvJIQieu+UWAe5uuGtRjKznDE8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4f:06:06:11:cc:de:9d:98:b2:4b:20:30:d5:31:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff1c0e911cce4c453fec2b168f6c13d36e0df85
Validity
Not Before: Mar 26 18:01:32 2026 GMT
Not After : Mar 27 18:01:32 2026 GMT
Subject: CN=fe0dce42eecff2d1b4397fda0cf82cc720a48362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:85:1e:1e:0c:4e:82:d3:60:80:c0:f7:da:b5:
5c:79:04:d8:17:02:72:1e:92:8b:c6:e4:69:70:33:
23:dd:14:f2:04:e1:84:f9:be:a3:15:af:ae:30:af:
43:07:db:4b:0a:f2:a7:13:d0:52:a2:2f:89:2e:af:
78:a8:f9:59:c2:f3:c5:84:ea:ea:75:80:79:36:d1:
30:db:97:e1:f1:7c:c0:b0:43:01:46:62:13:d9:b4:
0a:88:87:96:d7:c5:1e:97:a4:83:f1:e6:14:36:fd:
c5:76:97:93:dd:fc:ff:d4:39:26:4c:6b:5b:ee:0c:
a1:4c:08:4e:de:bc:e0:8e:e4:83:3e:57:02:94:9a:
ad:f9:6e:71:37:b1:9c:34:f4:47:c3:d6:f2:9a:18:
cd:82:00:2d:69:9c:95:10:a0:a4:8d:b1:4e:53:10:
d0:74:a8:23:57:3b:fe:57:48:54:5d:1c:13:b3:b0:
e7:89:f3:e1:92:f2:69:e2:58:60:3c:86:e6:4d:78:
c6:31:3b:33:35:5b:be:bd:51:5d:2d:6e:ff:da:8a:
a9:39:bb:c0:88:63:02:64:b2:84:85:18:34:5c:79:
25:36:a0:23:91:2d:f4:e0:fa:8d:ab:90:d9:85:51:
52:40:6f:59:be:21:15:7f:92:b5:15:27:d8:ce:fc:
0a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0D:CE:42:EE:CF:F2:D1:B4:39:7F:DA:0C:F8:2C:C7:20:A4:83:62
X509v3 Authority Key Identifier:
keyid:0F:F1:C0:E9:11:CC:E4:C4:53:FE:C2:B1:68:F6:C1:3D:36:E0:DF:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:2d:ea:17:f8:1c:56:e3:2b:81:e7:c3:49:42:0b:bc:94:46:
f5:41:12:19:24:54:fd:78:50:b3:29:e0:d5:1b:14:d6:a5:3f:
6d:6d:d8:30:29:52:46:8f:30:6a:00:d5:7c:d0:d3:43:33:7a:
a5:06:d5:46:49:68:94:f7:59:8f:dc:29:5d:c4:49:71:02:44:
30:7c:e3:d6:f8:c2:4c:9c:49:82:4e:af:e3:2f:a3:83:8b:cf:
e7:fb:ac:8c:0f:57:22:53:87:cb:f3:16:8f:f8:b1:f3:38:57:
66:15:de:e9:0b:b8:3d:90:ee:d2:cf:19:e1:e3:40:3d:d4:4c:
2d:a9:bf:61:4d:c5:38:84:d9:83:45:27:41:b2:d5:47:3e:a9:
1d:71:ff:03:d4:67:fc:7b:2c:2a:83:13:ab:88:0b:cd:20:ff:
f1:2d:2f:90:f5:a0:cc:a8:fd:95:42:8c:45:91:4a:c2:42:29:
07:77:fc:74:93:e1:d6:55:92:9d:07:63:8d:6b:62:b2:b4:d6:
f0:bb:91:b4:34:a8:cb:f4:38:86:5d:8e:5d:53:c2:17:fa:37:
1f:22:97:47:8b:23:4b:3c:f6:66:e8:69:41:a0:09:ab:e8:e5:
fc:0c:d2:76:bc:22:3b:7d:be:04:d8:f9:b2:4b:86:5c:0e:62:
0e:7a:38:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rTwYGEczenZiySyAw1TF0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZjFjMGU5MTFjY2U0YzQ1M2ZlYzJiMTY4ZjZjMTNkMzZl
MGRmODUwHhcNMjYwMzI2MTgwMTMyWhcNMjYwMzI3MTgwMTMyWjAzMTEwLwYDVQQD
EyhmZTBkY2U0MmVlY2ZmMmQxYjQzOTdmZGEwY2Y4MmNjNzIwYTQ4MzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4UeHgxOgtNggMD32rVceQTYFwJy
HpKLxuRpcDMj3RTyBOGE+b6jFa+uMK9DB9tLCvKnE9BSoi+JLq94qPlZwvPFhOrq
dYB5NtEw25fh8XzAsEMBRmIT2bQKiIeW18Uel6SD8eYUNv3FdpeT3fz/1DkmTGtb
7gyhTAhO3rzgjuSDPlcClJqt+W5xN7GcNPRHw9bymhjNggAtaZyVEKCkjbFOUxDQ
dKgjVzv+V0hUXRwTs7DnifPhkvJp4lhgPIbmTXjGMTszNVu+vVFdLW7/2oqpObvA
iGMCZLKEhRg0XHklNqAjkS304PqNq5DZhVFSQG9ZviEVf5K1FSfYzvwKtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4NzkLuz/LRtDl/2gz4LMcgpINiMB8GA1UdIwQY
MBaAFA/xwOkRzOTEU/7CsWj2wT024N+FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF9IQTZSSE01TVJUX3NLeGFQYkJQVGJnMzRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi83ZDJlNTEtMjJkMi00NjFhLWFhMmUt
NzlkMTNmYWFiNjJjLzEvRF9IQTZSSE01TVJUX3NLeGFQYkJQVGJnMzRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi83ZDJlNTEtMjJkMi00NjFhLWFhMmUtNzlkMTNmYWFiNjJj
LzEvRF9IQTZSSE01TVJUX3NLeGFQYkJQVGJnMzRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWC3qF/gc
VuMrgefDSUILvJRG9UESGSRU/XhQsyng1RsU1qU/bW3YMClSRo8wagDVfNDTQzN6
pQbVRklolPdZj9wpXcRJcQJEMHzj1vjCTJxJgk6v4y+jg4vP5/usjA9XIlOHy/MW
j/ix8zhXZhXe6Qu4PZDu0s8Z4eNAPdRMLam/YU3FOITZg0UnQbLVRz6pHXH/A9Rn
/HssKoMTq4gLzSD/8S0vkPWgzKj9lUKMRZFKwkIpB3f8dJPh1lWSnQdjjWtisrTW
8LuRtDSoy/Q4hl2OXVPCF/o3HyKXR4sjSzz2ZuhpQaAJq+jl/AzSdrwiO32+BNj5
skuGXA5iDno4Ag==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:27:15 2026 by rpki-client