Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
File: hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft (raw, json)
Hash identifier: /wslLufcdq7GAwO17MZiQCnCt2v1B7NW+TrihTihq44=
Subject key identifier: 9F:FC:39:AC:12:6C:02:10:6A:B9:E5:2E:9A:3E:6E:64:19:0A:3B:92
Authority key identifier: 84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
Certificate issuer: /CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Certificate serial: 019D24DE980C494B1574D3FD21DE195444F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
Manifest number: 0562
Signing time: Wed 25 Mar 2026 12:01:00 +0000
Manifest this update: Wed 25 Mar 2026 12:01:00 +0000
Manifest next update: Thu 26 Mar 2026 12:01:00 +0000
Files and hashes: 1: hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl (hash: 3isPEFLd8Q8HWUbL9XcsiOPy0NZe2SWx1SdOvc2HlG4=)
2: oXRKH5b-T-CRxs2hxBp_XOCDBZY.roa (hash: CXD7uTJndYpsuBoJT2/svXnMWPhH6ma+JfEwHCQE7gU=)
3: tIddSJpZ8A8bsH1Q9vYKm2A610E.asa (hash: FxJTYjqaIVsvB66XTycCPAWGxY0433SU6Z6bkpRMAQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:de:98:0c:49:4b:15:74:d3:fd:21:de:19:54:44:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Validity
Not Before: Mar 25 12:01:00 2026 GMT
Not After : Mar 26 12:01:00 2026 GMT
Subject: CN=9ffc39ac126c02106ab9e52e9a3e6e64190a3b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:35:45:93:cc:f8:1c:6f:03:a1:7c:a9:a6:3a:
91:00:7e:6e:cf:88:c2:da:c6:64:62:c6:96:76:44:
ab:4b:08:33:53:d7:ff:68:e2:30:af:53:f5:d8:37:
6c:13:a2:fe:3a:24:82:e8:d0:89:49:ed:ac:0f:90:
bd:a6:cf:67:fc:5d:8e:fc:f3:3a:a6:17:eb:bb:41:
25:ff:c4:dd:ff:3c:70:c5:21:80:ba:ba:fc:bc:83:
be:c6:ea:55:99:98:e7:10:78:92:96:61:2e:aa:f8:
25:88:d6:06:ef:96:0e:58:c6:22:d6:4f:ea:32:e3:
72:3b:b3:2b:d9:df:69:03:c9:be:da:62:10:2e:ec:
65:b2:d5:f1:31:a4:24:6e:63:80:dc:f4:5d:51:ae:
bb:03:2b:cb:f6:0a:6e:34:11:fc:53:83:3f:d4:4e:
1a:ef:a4:49:ee:0a:a2:97:e8:8e:e7:90:98:74:b7:
48:c6:db:29:21:f6:e0:ab:6e:df:75:27:90:bc:49:
93:bc:d3:be:29:5d:0a:a9:73:cd:7b:0c:19:a9:89:
fb:c3:2c:57:5d:8e:d9:7a:f4:03:b4:6d:80:80:14:
a0:f2:98:23:e1:5e:ef:c8:b3:22:38:3e:53:fc:5c:
54:bb:fd:6a:61:23:98:fc:d6:2d:42:96:94:1e:4f:
b6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FC:39:AC:12:6C:02:10:6A:B9:E5:2E:9A:3E:6E:64:19:0A:3B:92
X509v3 Authority Key Identifier:
keyid:84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:56:23:cf:1b:b9:5b:c9:9d:47:e0:65:72:de:e3:e6:f4:ba:
ce:a6:72:94:8b:0c:b4:36:11:b3:c0:fd:ad:c4:79:12:18:28:
d1:4a:da:2b:7d:29:b2:2c:e4:c0:ca:8e:84:15:8c:12:03:7a:
72:4c:6d:b8:ee:4d:da:a1:63:fc:cb:d3:f9:be:1d:b3:27:e0:
de:1d:78:13:3a:fb:48:d5:59:43:29:fc:e8:29:46:ee:98:7c:
e6:84:e5:bf:52:12:1d:3b:31:7a:ba:dd:47:f1:35:42:1b:b7:
a9:45:5b:57:9e:87:98:8a:cd:25:90:1d:6d:a5:e7:11:01:ca:
7f:ac:20:c9:f8:3a:34:af:e4:77:98:9d:36:55:6b:a6:af:74:
ea:54:a8:c5:18:61:e6:1f:ff:e5:8b:f7:81:9d:a7:db:aa:e4:
37:06:7e:f3:3a:cf:d2:62:ba:1f:c4:97:23:99:1d:4e:ef:91:
db:b8:be:77:57:41:be:3a:46:2c:64:1c:9a:68:76:cb:4f:df:
53:33:28:00:37:7e:5d:b3:29:f0:ee:3e:b1:15:35:12:68:59:
53:7f:cf:16:16:9e:b8:0d:7a:f1:fd:37:fc:bd:6d:48:4f:3d:
ec:c5:66:6d:0b:e5:25:18:fd:5f:e4:df:39:f2:ed:73:f0:56:
ba:c7:1a:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0k3pgMSUsVdNP9Id4ZVET0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZDUwOTI1OWY3MDBjZGM0NDQ4ZjFmYmY1MzBjMTllNDA3
NTRlYzQwHhcNMjYwMzI1MTIwMTAwWhcNMjYwMzI2MTIwMTAwWjAzMTEwLwYDVQQD
Eyg5ZmZjMzlhYzEyNmMwMjEwNmFiOWU1MmU5YTNlNmU2NDE5MGEzYjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujVFk8z4HG8DoXyppjqRAH5uz4jC
2sZkYsaWdkSrSwgzU9f/aOIwr1P12DdsE6L+OiSC6NCJSe2sD5C9ps9n/F2O/PM6
phfru0El/8Td/zxwxSGAurr8vIO+xupVmZjnEHiSlmEuqvgliNYG75YOWMYi1k/q
MuNyO7Mr2d9pA8m+2mIQLuxlstXxMaQkbmOA3PRdUa67AyvL9gpuNBH8U4M/1E4a
76RJ7gqil+iO55CYdLdIxtspIfbgq27fdSeQvEmTvNO+KV0KqXPNewwZqYn7wyxX
XY7ZevQDtG2AgBSg8pgj4V7vyLMiOD5T/FxUu/1qYSOY/NYtQpaUHk+2RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/8OawSbAIQarnlLpo+bmQZCjuSMB8GA1UdIwQY
MBaAFITVCSWfcAzcREjx+/UwwZ5AdU7EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaE5VSkpaOXdETnhFU1BINzlUREJua0IxVHNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xMjg2ZjYtNjg4Yy00Y2ZhLWEwMmQt
MWE4OWFiN2I4Y2I1LzEvaE5VSkpaOXdETnhFU1BINzlUREJua0IxVHNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8xMjg2ZjYtNjg4Yy00Y2ZhLWEwMmQtMWE4OWFiN2I4Y2I1
LzEvaE5VSkpaOXdETnhFU1BINzlUREJua0IxVHNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkVYjzxu5
W8mdR+Blct7j5vS6zqZylIsMtDYRs8D9rcR5Ehgo0UraK30psizkwMqOhBWMEgN6
ckxtuO5N2qFj/MvT+b4dsyfg3h14Ezr7SNVZQyn86ClG7ph85oTlv1ISHTsxerrd
R/E1Qhu3qUVbV56HmIrNJZAdbaXnEQHKf6wgyfg6NK/kd5idNlVrpq906lSoxRhh
5h//5Yv3gZ2n26rkNwZ+8zrP0mK6H8SXI5kdTu+R27i+d1dBvjpGLGQcmmh2y0/f
UzMoADd+XbMp8O4+sRU1EmhZU3/PFhaeuA168f03/L1tSE897MVmbQvlJRj9X+Tf
OfLtc/BWuscaYQ==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:15:16 2026 by rpki-client