Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft
File: H6EtaHxiehgvgdTMyz8yIBhh9nc.mft (raw, json)
Hash identifier: MsMxixHU+NPGPSAQud2cqnbII0GJKzO5EEiXDrjifn8=
Subject key identifier: 96:07:A8:6F:A1:F5:9A:54:54:9C:92:D8:FA:90:22:06:F7:6E:B4:FF
Authority key identifier: 1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77
Certificate issuer: /CN=1fa12d687c627a182f81d4cccb3f32201861f677
Certificate serial: 019D25834E0DFD51437C5EFDE5D06BCCCC87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft
Manifest number: 188D
Signing time: Wed 25 Mar 2026 15:00:55 +0000
Manifest this update: Wed 25 Mar 2026 15:00:55 +0000
Manifest next update: Thu 26 Mar 2026 15:00:55 +0000
Files and hashes: 1: H6EtaHxiehgvgdTMyz8yIBhh9nc.crl (hash: y1z+YNp5wngSmCQdibCla5iuq6jVces7PidkkYfk564=)
2: ceYmE1oaPyKVZRonjYP1PTafzn8.roa (hash: 0/TxJlznPul/CoRcib1v0fGMrVkoJzg/UmlQz2/FZNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:4e:0d:fd:51:43:7c:5e:fd:e5:d0:6b:cc:cc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa12d687c627a182f81d4cccb3f32201861f677
Validity
Not Before: Mar 25 15:00:55 2026 GMT
Not After : Mar 26 15:00:55 2026 GMT
Subject: CN=9607a86fa1f59a54549c92d8fa902206f76eb4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:1b:33:2a:f7:7e:31:83:24:a9:e4:01:cb:4e:
da:d0:70:8d:1c:af:bf:42:5c:22:af:6d:8e:80:50:
97:bd:63:ad:23:13:76:ff:ec:03:1e:b1:c0:71:31:
fe:35:73:16:85:bb:0b:ce:13:c6:1f:f9:11:5f:4b:
c9:f4:9d:8d:12:5f:e3:48:06:ce:8a:b3:3f:02:05:
05:48:06:25:6c:37:96:f3:c9:ce:15:e3:16:89:3b:
5a:b2:ce:fe:fd:48:88:ad:d2:7b:5c:1c:cc:4c:79:
c8:63:8e:8b:04:8b:f6:33:da:25:3e:ee:d0:58:ca:
47:6b:24:78:c4:ab:de:6d:1c:e7:00:6c:43:4b:88:
27:da:fe:2b:67:e3:aa:da:7e:b7:0c:6a:14:30:55:
dc:b3:9c:d2:d8:26:ae:36:0b:a4:62:79:4a:07:70:
30:9e:87:43:ce:49:78:42:4c:23:b5:50:66:09:59:
63:33:31:45:b9:38:2f:32:6f:93:d1:93:f7:02:3f:
f1:10:fa:cd:c1:84:c3:79:ff:40:61:ca:af:ec:76:
bf:bb:51:76:73:c0:f0:35:a6:ed:09:09:65:16:d1:
6c:92:31:cd:b3:12:4e:08:bb:fa:64:fe:c6:e8:24:
f2:ea:56:87:47:f3:b2:54:03:da:8a:1e:a0:c3:87:
f0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:07:A8:6F:A1:F5:9A:54:54:9C:92:D8:FA:90:22:06:F7:6E:B4:FF
X509v3 Authority Key Identifier:
keyid:1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:1a:ba:be:32:95:09:2a:ca:68:12:01:45:28:7d:95:5f:3c:
2d:aa:c2:23:c1:09:a7:31:cf:20:7e:e2:3e:4e:5f:eb:02:78:
f0:77:56:d5:a7:68:fb:52:62:08:ca:dd:b9:48:76:2b:bb:ab:
d7:50:39:b0:2f:70:f5:0a:fc:2f:cf:4c:fc:4b:7c:4b:4d:29:
72:a3:61:5d:f8:ca:7d:66:ba:f6:f2:62:49:4f:ba:85:a0:17:
8c:18:b0:48:3a:13:8a:7b:80:73:96:1c:0f:4f:93:99:a3:83:
b7:19:96:29:c8:21:9d:43:c1:67:0c:8b:11:42:7c:ae:ff:ea:
f1:c9:27:36:b0:bc:c8:1f:52:b7:b5:eb:8a:e2:54:55:43:f8:
e2:9c:a6:cf:4d:3f:e8:c0:aa:e3:0f:6b:1f:21:8a:e0:c0:d9:
16:e9:00:c1:a3:41:4d:80:d4:ca:a3:7e:90:2e:3b:f6:e7:df:
98:07:c7:d2:50:1e:f3:9f:2a:df:30:03:06:16:bf:08:46:75:
ed:b8:2c:61:9e:ea:8b:b1:88:bb:2e:f8:09:f5:b8:c4:0a:41:
dc:c2:5d:4c:31:c6:e8:b7:9a:a5:1a:e9:ef:64:b6:ab:1c:20:
3a:81:78:67:be:8d:24:26:04:08:1d:4f:05:c0:d0:04:c2:b1:
95:e9:9e:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg04N/VFDfF795dBrzMyHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYTEyZDY4N2M2MjdhMTgyZjgxZDRjY2NiM2YzMjIwMTg2
MWY2NzcwHhcNMjYwMzI1MTUwMDU1WhcNMjYwMzI2MTUwMDU1WjAzMTEwLwYDVQQD
Eyg5NjA3YTg2ZmExZjU5YTU0NTQ5YzkyZDhmYTkwMjIwNmY3NmViNGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9RszKvd+MYMkqeQBy07a0HCNHK+/
Qlwir22OgFCXvWOtIxN2/+wDHrHAcTH+NXMWhbsLzhPGH/kRX0vJ9J2NEl/jSAbO
irM/AgUFSAYlbDeW88nOFeMWiTtass7+/UiIrdJ7XBzMTHnIY46LBIv2M9olPu7Q
WMpHayR4xKvebRznAGxDS4gn2v4rZ+Oq2n63DGoUMFXcs5zS2CauNgukYnlKB3Aw
nodDzkl4QkwjtVBmCVljMzFFuTgvMm+T0ZP3Aj/xEPrNwYTDef9AYcqv7Ha/u1F2
c8DwNabtCQllFtFskjHNsxJOCLv6ZP7G6CTy6laHR/OyVAPaih6gw4fw9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYHqG+h9ZpUVJyS2PqQIgb3brT/MB8GA1UdIwQY
MBaAFB+hLWh8YnoYL4HUzMs/MiAYYfZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDZFdGFIeGllaGd2Z2RUTXl6OHlJQmhoOW5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC80YzI5ZDAtNThlYS00OGU4LWJhYzct
ODljY2MyZDQ1NjNiLzEvSDZFdGFIeGllaGd2Z2RUTXl6OHlJQmhoOW5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC80YzI5ZDAtNThlYS00OGU4LWJhYzctODljY2MyZDQ1NjNi
LzEvSDZFdGFIeGllaGd2Z2RUTXl6OHlJQmhoOW5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnRq6vjKV
CSrKaBIBRSh9lV88LarCI8EJpzHPIH7iPk5f6wJ48HdW1ado+1JiCMrduUh2K7ur
11A5sC9w9Qr8L89M/Et8S00pcqNhXfjKfWa69vJiSU+6haAXjBiwSDoTinuAc5Yc
D0+TmaODtxmWKcghnUPBZwyLEUJ8rv/q8cknNrC8yB9St7XriuJUVUP44pymz00/
6MCq4w9rHyGK4MDZFukAwaNBTYDUyqN+kC479uffmAfH0lAe858q3zADBha/CEZ1
7bgsYZ7qi7GIuy74CfW4xApB3MJdTDHG6LeapRrp72S2qxwgOoF4Z76NJCYECB1P
BcDQBMKxlemeeQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:55 2026 by rpki-client