Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
File: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft (raw, json)
Hash identifier: 5IXaE1A9+fJz3BhOmwiKkQG7RU140NUT0WQ/75DM/Ko=
Subject key identifier: F1:0F:89:B3:34:48:A1:09:2B:B0:E5:8F:FC:D7:4B:3D:9B:66:AF:9A
Authority key identifier: 85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
Certificate issuer: /CN=854e8383e8208936802362a09f36085a50fcd85a
Certificate serial: 019D0A4359E5CC4D03977149FE9B73BEC42E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
Manifest number: 180D
Signing time: Fri 20 Mar 2026 08:01:19 +0000
Manifest this update: Fri 20 Mar 2026 08:01:19 +0000
Manifest next update: Sat 21 Mar 2026 08:01:19 +0000
Files and hashes: 1: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl (hash: lY0EjN6gPdgK7oGFPHrb1A6Jbioecz7qGu0S/YZWhJY=)
2: tlPMQw1c3qKVnL4XtiEzRpXRVfk.roa (hash: 2OUcGgPvEsXk+44Fs3qPgVHHqN26oV6vSG6RCh8q2/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 08:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:43:59:e5:cc:4d:03:97:71:49:fe:9b:73:be:c4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854e8383e8208936802362a09f36085a50fcd85a
Validity
Not Before: Mar 20 08:01:19 2026 GMT
Not After : Mar 21 08:01:19 2026 GMT
Subject: CN=f10f89b33448a1092bb0e58ffcd74b3d9b66af9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:7f:46:8f:bf:9a:76:5b:5b:dc:89:6f:fd:
98:54:6a:c8:24:59:67:db:49:89:e5:bd:83:70:c5:
57:73:d6:79:e9:9e:51:e3:f3:42:b6:a2:4c:39:6e:
e8:2b:da:80:c2:8c:9f:84:a4:8a:0d:a9:fc:76:ab:
2b:4f:e3:8a:b3:17:dc:36:18:0c:4b:5f:c8:7c:27:
b9:69:87:e0:2a:61:65:a5:37:a7:49:39:a3:7f:e4:
14:3b:a0:2c:03:ff:6a:e8:2a:23:69:b3:fa:39:e1:
4b:32:45:01:fb:0c:44:1b:9f:6a:9c:dc:96:a0:2c:
cd:fe:70:ba:b1:a2:83:dd:87:f3:73:20:44:77:f4:
a2:45:96:ad:bb:7e:a4:b7:b5:a1:cb:da:6a:bb:f1:
46:57:ff:3d:a4:b3:bb:01:7b:db:b1:ac:3a:c1:ab:
ec:e9:00:c0:c3:61:7f:32:60:88:ac:ba:e5:d5:31:
e2:1a:a3:18:c3:fd:3c:bf:5d:b6:9f:4a:7c:6f:d8:
c5:00:ef:64:57:5e:2c:2b:58:09:83:2b:48:94:1a:
87:24:15:e3:63:1b:fb:10:73:d4:0c:fa:8c:c0:9c:
e5:fc:62:49:54:8d:a2:82:c5:e9:09:c3:79:e5:81:
8d:79:c5:29:82:40:0b:a9:e2:10:4e:68:0b:61:b0:
bb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0F:89:B3:34:48:A1:09:2B:B0:E5:8F:FC:D7:4B:3D:9B:66:AF:9A
X509v3 Authority Key Identifier:
keyid:85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:15:17:d5:23:7c:f7:b7:e8:5f:d3:a1:19:5d:f6:45:eb:a2:
d2:b0:11:1a:84:e0:7d:ba:ea:fc:8a:61:cc:dd:ca:c7:29:e3:
9a:72:10:59:0a:61:c1:e5:68:29:99:cb:cb:2d:0d:97:1f:3c:
c3:9c:ae:ad:74:4f:ea:b6:ae:3f:ce:8b:13:96:48:fa:d9:8e:
1c:89:26:02:d3:c3:20:49:a0:04:2a:ab:2e:6c:76:90:d4:5b:
a4:76:89:a8:c0:34:23:0c:f2:0a:05:09:96:cf:4b:9d:2b:8d:
85:18:8a:c2:11:ab:41:c7:b9:75:6d:0f:d3:cb:cc:0b:e6:95:
d8:71:9a:26:da:60:f1:30:d4:dc:ef:00:fa:95:f0:70:47:fc:
bd:8e:6b:33:c0:6a:d1:23:d5:a2:d2:d3:10:9f:b1:cd:dd:69:
52:77:59:e8:de:62:8f:02:10:e1:49:6a:fc:fc:67:9c:21:b9:
a9:5c:b3:b6:79:a4:7c:49:b2:b0:48:43:0f:d6:51:c3:f4:26:
b1:a0:89:c8:85:4d:e2:61:86:74:ee:75:53:96:b1:b8:26:5c:
fb:35:31:3d:28:53:da:c9:a3:ee:47:2d:78:a3:ec:0e:04:a9:
4c:d4:5f:e9:8b:d1:72:5b:08:43:e8:31:20:e9:00:4f:04:8e:
28:87:c6:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0KQ1nlzE0Dl3FJ/ptzvsQuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NGU4MzgzZTgyMDg5MzY4MDIzNjJhMDlmMzYwODVhNTBm
Y2Q4NWEwHhcNMjYwMzIwMDgwMTE5WhcNMjYwMzIxMDgwMTE5WjAzMTEwLwYDVQQD
EyhmMTBmODliMzM0NDhhMTA5MmJiMGU1OGZmY2Q3NGIzZDliNjZhZjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubN/Ro+/mnZbW9yJb/2YVGrIJFln
20mJ5b2DcMVXc9Z56Z5R4/NCtqJMOW7oK9qAwoyfhKSKDan8dqsrT+OKsxfcNhgM
S1/IfCe5aYfgKmFlpTenSTmjf+QUO6AsA/9q6CojabP6OeFLMkUB+wxEG59qnNyW
oCzN/nC6saKD3YfzcyBEd/SiRZatu36kt7Why9pqu/FGV/89pLO7AXvbsaw6wavs
6QDAw2F/MmCIrLrl1THiGqMYw/08v122n0p8b9jFAO9kV14sK1gJgytIlBqHJBXj
Yxv7EHPUDPqMwJzl/GJJVI2igsXpCcN55YGNecUpgkALqeIQTmgLYbC7JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEPibM0SKEJK7Dlj/zXSz2bZq+aMB8GA1UdIwQY
MBaAFIVOg4PoIIk2gCNioJ82CFpQ/NhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFU2RGctZ2dpVGFBSTJLZ256WUlXbEQ4MkZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lMWVkYWItMjQzOS00YTdjLTk4NGMt
ZTZmZjdjYTNlY2VmLzEvaFU2RGctZ2dpVGFBSTJLZ256WUlXbEQ4MkZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lMWVkYWItMjQzOS00YTdjLTk4NGMtZTZmZjdjYTNlY2Vm
LzEvaFU2RGctZ2dpVGFBSTJLZ256WUlXbEQ4MkZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBUX1SN8
97foX9OhGV32Reui0rARGoTgfbrq/IphzN3KxynjmnIQWQphweVoKZnLyy0Nlx88
w5yurXRP6rauP86LE5ZI+tmOHIkmAtPDIEmgBCqrLmx2kNRbpHaJqMA0IwzyCgUJ
ls9LnSuNhRiKwhGrQce5dW0P08vMC+aV2HGaJtpg8TDU3O8A+pXwcEf8vY5rM8Bq
0SPVotLTEJ+xzd1pUndZ6N5ijwIQ4Ulq/PxnnCG5qVyztnmkfEmysEhDD9ZRw/Qm
saCJyIVN4mGGdO51U5axuCZc+zUxPShT2smj7kcteKPsDgSpTNRf6YvRclsIQ+gx
IOkATwSOKIfGRg==
-----END CERTIFICATE-----
Generated at Fri Mar 20 13:54:44 2026 by rpki-client