Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
File: hUu3qjkIyZjePEL34YSVOLBZJhc.mft (raw, json)
Hash identifier: +Qqz363kk9xfvZZuA68dmTfTTKfWPvR6/oLRoO8Nxh8=
Subject key identifier: 69:6E:BD:25:36:C5:EC:CC:30:4D:19:6B:07:39:85:27:02:5B:A9:FA
Authority key identifier: 85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17
Certificate issuer: /CN=854bb7aa3908c998de3c42f7e1849538b0592617
Certificate serial: 019D26286A091FE56B07B4BB205D28E5218D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
Manifest number: 1108
Signing time: Wed 25 Mar 2026 18:01:15 +0000
Manifest this update: Wed 25 Mar 2026 18:01:15 +0000
Manifest next update: Thu 26 Mar 2026 18:01:15 +0000
Files and hashes: 1: 7MqIqmbLOZCvYlEMG9u9KyE6Ytk.roa (hash: zRxcr077zFRaZAIgIWm+iYU3FdaVL/l6dLqFNAGhIKM=)
2: hUu3qjkIyZjePEL34YSVOLBZJhc.crl (hash: opJSwJcSwHW2RBYTT78sNriM+3fS0jok/RpG6YyML8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:6a:09:1f:e5:6b:07:b4:bb:20:5d:28:e5:21:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854bb7aa3908c998de3c42f7e1849538b0592617
Validity
Not Before: Mar 25 18:01:15 2026 GMT
Not After : Mar 26 18:01:15 2026 GMT
Subject: CN=696ebd2536c5eccc304d196b07398527025ba9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:16:2c:1e:7a:76:4d:df:e3:cd:78:8c:3a:c8:
46:3b:27:f6:22:bc:b1:75:b7:14:ad:1c:64:1d:79:
21:3e:d6:a2:f2:f7:f8:da:0f:90:26:5f:15:74:c3:
a6:d9:1e:aa:67:c0:60:72:97:67:c4:f7:03:7c:75:
51:26:dd:65:6a:14:f3:78:72:47:23:c9:11:b6:f0:
0e:6b:b9:ea:3d:90:bd:83:14:cb:2d:37:1d:a1:38:
76:22:6d:cc:5a:44:7e:6f:99:a0:70:b5:0f:a4:fb:
87:f1:03:0d:5a:b2:20:ed:42:fd:c3:ac:5a:0c:ed:
5e:d4:f4:35:58:08:ef:b6:a1:23:c8:07:9c:87:8f:
f8:c7:13:c8:55:f0:26:d2:c6:60:de:ff:ae:d7:d7:
0c:1a:2d:a1:02:79:58:89:99:ae:bf:35:d3:26:07:
95:75:2a:b4:6c:55:6b:e8:ee:b0:4a:22:14:f3:28:
30:77:7b:22:50:2d:53:52:df:65:68:7b:66:43:f2:
f9:d6:42:8d:de:97:d3:dd:0a:eb:b4:42:9d:c6:6a:
0f:99:5a:4f:77:6d:e6:da:fb:9f:70:ee:19:27:16:
68:0e:70:bd:67:23:a7:df:63:24:30:ef:08:07:87:
d6:09:ab:5b:e3:ad:4f:5d:db:1d:37:b4:d1:9b:65:
bc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6E:BD:25:36:C5:EC:CC:30:4D:19:6B:07:39:85:27:02:5B:A9:FA
X509v3 Authority Key Identifier:
keyid:85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:0c:b0:bf:fb:73:3c:9b:ad:d6:40:3e:5f:ed:67:b0:17:4d:
2d:5e:09:b2:24:dc:82:2e:98:5e:5b:19:cb:d5:c1:f5:e6:04:
ab:4a:ad:77:92:97:36:2f:4b:5e:03:bf:2d:d1:dd:37:fa:49:
c0:a7:0f:76:b7:f8:64:5d:a7:48:2d:83:ed:17:ec:6f:ab:e2:
af:31:e1:bc:a3:96:e5:e0:18:b8:e1:82:71:21:1f:db:55:9f:
08:f1:74:89:2f:ec:0b:6d:85:14:92:57:78:1b:65:57:05:b1:
95:49:4d:fd:f2:0f:63:f5:4d:48:d0:a7:1e:16:e3:97:6c:2d:
71:e0:bd:b2:10:1c:40:d0:9c:4a:2e:b9:55:e0:8e:49:1b:ce:
ce:3c:72:76:98:a9:49:2c:ab:20:04:cf:13:bf:f1:f0:c8:fa:
1e:80:d0:61:06:92:8b:51:12:c6:a1:80:cf:78:88:8a:be:11:
5d:72:30:3b:cb:4d:9a:99:a6:a6:17:9b:36:85:02:24:66:5c:
63:d5:03:70:f7:87:9d:1e:ea:4e:2a:68:ae:80:85:55:41:17:
3d:87:aa:fb:94:c7:da:7f:c6:bd:7a:b8:4e:7d:b0:32:33:80:
51:48:81:58:52:bc:b5:4b:bb:cd:8a:14:2d:84:1f:4b:81:a2:
ba:b2:20:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKGoJH+VrB7S7IF0o5SGNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NGJiN2FhMzkwOGM5OThkZTNjNDJmN2UxODQ5NTM4YjA1
OTI2MTcwHhcNMjYwMzI1MTgwMTE1WhcNMjYwMzI2MTgwMTE1WjAzMTEwLwYDVQQD
Eyg2OTZlYmQyNTM2YzVlY2NjMzA0ZDE5NmIwNzM5ODUyNzAyNWJhOWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxYsHnp2Td/jzXiMOshGOyf2Iryx
dbcUrRxkHXkhPtai8vf42g+QJl8VdMOm2R6qZ8BgcpdnxPcDfHVRJt1lahTzeHJH
I8kRtvAOa7nqPZC9gxTLLTcdoTh2Im3MWkR+b5mgcLUPpPuH8QMNWrIg7UL9w6xa
DO1e1PQ1WAjvtqEjyAech4/4xxPIVfAm0sZg3v+u19cMGi2hAnlYiZmuvzXTJgeV
dSq0bFVr6O6wSiIU8ygwd3siUC1TUt9laHtmQ/L51kKN3pfT3QrrtEKdxmoPmVpP
d23m2vufcO4ZJxZoDnC9ZyOn32MkMO8IB4fWCatb461PXdsdN7TRm2W8YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGluvSU2xezMME0Zawc5hScCW6n6MB8GA1UdIwQY
MBaAFIVLt6o5CMmY3jxC9+GElTiwWSYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFV1M3Fqa0l5WmplUEVMMzRZU1ZPTEJaSmhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NjU4MjYtZWI5My00NzBlLWI2N2Et
NjRlNTJiOWRkOGQxLzEvaFV1M3Fqa0l5WmplUEVMMzRZU1ZPTEJaSmhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85NjU4MjYtZWI5My00NzBlLWI2N2EtNjRlNTJiOWRkOGQx
LzEvaFV1M3Fqa0l5WmplUEVMMzRZU1ZPTEJaSmhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6gywv/tz
PJut1kA+X+1nsBdNLV4JsiTcgi6YXlsZy9XB9eYEq0qtd5KXNi9LXgO/LdHdN/pJ
wKcPdrf4ZF2nSC2D7Rfsb6virzHhvKOW5eAYuOGCcSEf21WfCPF0iS/sC22FFJJX
eBtlVwWxlUlN/fIPY/VNSNCnHhbjl2wtceC9shAcQNCcSi65VeCOSRvOzjxydpip
SSyrIATPE7/x8Mj6HoDQYQaSi1ESxqGAz3iIir4RXXIwO8tNmpmmphebNoUCJGZc
Y9UDcPeHnR7qTiporoCFVUEXPYeq+5TH2n/GvXq4Tn2wMjOAUUiBWFK8tUu7zYoU
LYQfS4GiurIgXw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:43:47 2026 by rpki-client