Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft
File: h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft (raw, json)
Hash identifier: To77/1b7wdloRPLa8FuC6+hq+RzzLBV5dCmJh9LXv8E=
Subject key identifier: 44:99:F7:C3:C1:66:9E:EA:66:1C:6E:09:7B:6A:F5:5B:22:54:E7:E6
Authority key identifier: 87:F1:CA:C0:DE:8F:66:A7:07:6F:28:10:F3:F3:51:8A:A7:06:43:BA
Certificate issuer: /CN=87f1cac0de8f66a7076f2810f3f3518aa70643ba
Certificate serial: 019A725C801C229B327CA05412626713B2A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft
Manifest number: 1105
Signing time: Tue 11 Nov 2025 10:00:55 +0000
Manifest this update: Tue 11 Nov 2025 10:00:55 +0000
Manifest next update: Wed 12 Nov 2025 10:00:55 +0000
Files and hashes: 1: 86_3LCbOcCp3yM191EWRi4FTvKM.roa (hash: T6YVBcckx9oAAL2sgQLtUYTYtIf9ZyYKJMrHcxK/x/E=)
2: h_HKwN6PZqcHbygQ8_NRiqcGQ7o.crl (hash: TYpRMbaNlztirh4Ne8tcvw1sv1ZzlsY5g+YVfKFUrGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:80:1c:22:9b:32:7c:a0:54:12:62:67:13:b2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f1cac0de8f66a7076f2810f3f3518aa70643ba
Validity
Not Before: Nov 11 10:00:55 2025 GMT
Not After : Nov 12 10:00:55 2025 GMT
Subject: CN=4499f7c3c1669eea661c6e097b6af55b2254e7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3e:74:fb:40:d9:ca:16:ec:87:1b:8d:18:65:
4d:db:4a:4c:9f:c0:0b:eb:ca:d3:5b:7b:c5:58:48:
e9:71:09:04:ba:46:3e:31:ba:8e:f4:74:73:0b:be:
8c:e9:a3:3f:9a:a0:3b:1f:e7:3e:44:2b:9d:1e:12:
50:de:a0:a0:2d:70:33:5a:20:f7:68:5b:65:84:d1:
ff:b4:bb:2a:b0:a9:01:2c:91:da:6a:da:b6:8a:52:
85:31:79:58:5e:4d:0a:a0:33:00:8d:ce:04:8d:e7:
63:97:aa:99:8a:62:33:85:1a:10:d9:d8:c3:0f:4f:
73:2c:ee:dd:0f:9f:2a:f7:a2:c1:3b:98:50:3b:ce:
68:e7:e9:b8:54:c9:bc:64:ac:dc:d2:05:a1:ea:fb:
82:0f:df:5e:5c:19:77:e1:04:7f:ce:39:94:47:03:
a5:10:59:a9:21:06:56:74:f9:33:f8:13:03:b0:d2:
4c:a9:bd:19:65:6f:bc:e9:7a:7a:7d:3a:0e:e9:7f:
fd:37:78:83:74:e5:b9:71:f2:47:58:c2:e4:1f:aa:
30:f5:5f:b3:ec:41:c1:31:10:ac:4a:51:2e:6d:93:
2a:c8:01:94:9f:c5:26:ff:a6:53:01:c9:6f:41:af:
41:15:ef:90:9f:5d:da:8b:5f:37:19:bf:15:e9:67:
0a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:99:F7:C3:C1:66:9E:EA:66:1C:6E:09:7B:6A:F5:5B:22:54:E7:E6
X509v3 Authority Key Identifier:
keyid:87:F1:CA:C0:DE:8F:66:A7:07:6F:28:10:F3:F3:51:8A:A7:06:43:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:80:0c:ab:5b:75:b3:d7:af:09:8b:2a:f3:b8:52:fa:43:a2:
81:cb:38:0d:1b:3b:18:67:05:b8:80:da:94:26:b8:de:b2:34:
e5:bb:16:23:23:16:77:5c:c9:9f:2c:e1:ec:89:18:82:e0:38:
40:40:65:51:6b:7b:b6:34:bc:71:58:12:7f:33:c5:f2:24:58:
52:87:4e:f4:ae:9a:30:34:39:fb:54:77:4b:33:c3:d8:e4:00:
65:b0:fb:b4:77:fd:01:7b:ac:d0:ac:81:70:46:01:c8:ea:8b:
52:d5:b6:5b:e0:7c:e2:11:d9:c3:70:f9:15:db:53:21:bc:2e:
4e:b3:fb:0f:25:fe:8f:11:b8:56:b8:ef:a3:78:e5:74:ed:97:
8b:a3:03:2b:00:9f:68:ce:dc:16:9f:83:38:03:84:85:41:29:
a1:a3:0f:ac:81:08:89:5b:36:32:e5:a3:c3:46:b4:0a:5f:67:
e7:56:bc:9b:4f:3f:a9:fb:b8:a9:8f:24:b6:d9:7b:3e:1b:12:
b5:ec:04:0e:c0:66:36:bb:04:7c:7a:10:10:57:45:5c:19:84:
9c:2d:ac:f0:d7:ed:88:ae:0e:84:a6:98:6c:db:06:81:df:60:
d9:04:c3:2a:6f:21:2f:19:25:d0:80:b9:d4:20:e9:5b:d7:00:
55:61:6f:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXIAcIpsyfKBUEmJnE7KgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZjFjYWMwZGU4ZjY2YTcwNzZmMjgxMGYzZjM1MThhYTcw
NjQzYmEwHhcNMjUxMTExMTAwMDU1WhcNMjUxMTEyMTAwMDU1WjAzMTEwLwYDVQQD
Eyg0NDk5ZjdjM2MxNjY5ZWVhNjYxYzZlMDk3YjZhZjU1YjIyNTRlN2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj50+0DZyhbshxuNGGVN20pMn8AL
68rTW3vFWEjpcQkEukY+MbqO9HRzC76M6aM/mqA7H+c+RCudHhJQ3qCgLXAzWiD3
aFtlhNH/tLsqsKkBLJHaatq2ilKFMXlYXk0KoDMAjc4Ejedjl6qZimIzhRoQ2djD
D09zLO7dD58q96LBO5hQO85o5+m4VMm8ZKzc0gWh6vuCD99eXBl34QR/zjmURwOl
EFmpIQZWdPkz+BMDsNJMqb0ZZW+86Xp6fToO6X/9N3iDdOW5cfJHWMLkH6ow9V+z
7EHBMRCsSlEubZMqyAGUn8Um/6ZTAclvQa9BFe+Qn13ai183Gb8V6WcK+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESZ98PBZp7qZhxuCXtq9VsiVOfmMB8GA1UdIwQY
MBaAFIfxysDej2anB28oEPPzUYqnBkO6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaF9IS3dONlBacWNIYnlnUThfTlJpcWNHUTdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mNmIxYjktOWVkNi00YWYyLWE3M2It
Zjg4NzRhNmJhZDM4LzEvaF9IS3dONlBacWNIYnlnUThfTlJpcWNHUTdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9mNmIxYjktOWVkNi00YWYyLWE3M2ItZjg4NzRhNmJhZDM4
LzEvaF9IS3dONlBacWNIYnlnUThfTlJpcWNHUTdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkIAMq1t1
s9evCYsq87hS+kOigcs4DRs7GGcFuIDalCa43rI05bsWIyMWd1zJnyzh7IkYguA4
QEBlUWt7tjS8cVgSfzPF8iRYUodO9K6aMDQ5+1R3SzPD2OQAZbD7tHf9AXus0KyB
cEYByOqLUtW2W+B84hHZw3D5FdtTIbwuTrP7DyX+jxG4Vrjvo3jldO2Xi6MDKwCf
aM7cFp+DOAOEhUEpoaMPrIEIiVs2MuWjw0a0Cl9n51a8m08/qfu4qY8kttl7PhsS
tewEDsBmNrsEfHoQEFdFXBmEnC2s8NftiK4OhKaYbNsGgd9g2QTDKm8hLxkl0IC5
1CDpW9cAVWFv5Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:08 2025 by rpki-client