
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft
File: a_HqpcMxvs8ydwGi69zxobtfBww.mft (raw, json)
Hash identifier: t7Vu1yeKiW8vO01FNR4hOtEYIx8eezwHolW6ZDmr4pg=
Subject key identifier: 99:31:54:62:C3:FB:78:0F:94:61:9E:C3:16:A3:E6:6A:EC:F6:70:76
Authority key identifier: 6B:F1:EA:A5:C3:31:BE:CF:32:77:01:A2:EB:DC:F1:A1:BB:5F:07:0C
Certificate issuer: /CN=6bf1eaa5c331becf327701a2ebdcf1a1bb5f070c
Certificate serial: 019D39AEAF0ABEA2474D35897D4F44AB3CF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_HqpcMxvs8ydwGi69zxobtfBww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft
Manifest number: 0F26
Signing time: Sun 29 Mar 2026 13:00:42 +0000
Manifest this update: Sun 29 Mar 2026 13:00:42 +0000
Manifest next update: Mon 30 Mar 2026 13:00:42 +0000
Files and hashes: 1: a_HqpcMxvs8ydwGi69zxobtfBww.crl (hash: 8mj87PqCXitAzEFKCSvBodOFg8iTbwp2drxzZpsVV08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_HqpcMxvs8ydwGi69zxobtfBww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:af:0a:be:a2:47:4d:35:89:7d:4f:44:ab:3c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf1eaa5c331becf327701a2ebdcf1a1bb5f070c
Validity
Not Before: Mar 29 13:00:42 2026 GMT
Not After : Mar 30 13:00:42 2026 GMT
Subject: CN=99315462c3fb780f94619ec316a3e66aecf67076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7b:47:f7:af:59:eb:70:4d:ac:c2:71:61:88:
82:e5:a5:8c:6c:44:5c:86:11:52:f5:1b:f5:f3:56:
ec:f4:64:12:ee:08:67:14:0f:8e:31:49:0d:3f:99:
73:94:37:bf:32:23:91:4d:67:fb:50:01:b7:1a:31:
9b:b9:06:e2:02:0c:51:4c:93:3b:72:4e:d2:c8:7a:
3e:7e:5f:46:43:b4:0c:c3:38:b2:f2:3a:20:f9:19:
bf:80:39:39:6a:97:2c:eb:43:9d:bb:c0:f1:43:cb:
bf:48:a4:69:8b:2d:1b:73:ed:11:91:2e:7a:ad:c7:
f3:5f:13:45:ce:24:7f:9a:05:eb:5b:90:7e:56:cc:
48:7e:e6:52:5b:9e:e2:f0:ab:4e:f3:35:3f:b9:1a:
da:33:17:b0:7d:6b:5c:1b:ca:c7:32:64:0b:66:20:
38:49:a1:c7:58:b3:4b:ce:c4:85:a1:ea:88:d5:82:
c0:79:e4:e2:45:e4:fc:c2:1f:d4:c1:43:e4:11:fb:
47:4d:2b:52:04:dc:d3:db:db:91:4d:45:23:20:d2:
3e:f4:69:53:df:7a:7f:d9:a9:ed:ed:27:5e:f9:00:
da:20:50:8f:4c:39:cd:e0:f9:d5:30:96:ed:c8:95:
c7:01:f5:6b:ac:09:4b:c2:9e:f1:8d:29:5e:41:1e:
c2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:31:54:62:C3:FB:78:0F:94:61:9E:C3:16:A3:E6:6A:EC:F6:70:76
X509v3 Authority Key Identifier:
keyid:6B:F1:EA:A5:C3:31:BE:CF:32:77:01:A2:EB:DC:F1:A1:BB:5F:07:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_HqpcMxvs8ydwGi69zxobtfBww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2e7418-f65d-4ffe-8bdd-961ecc3a6cd0/1/a_HqpcMxvs8ydwGi69zxobtfBww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1f:97:dc:e9:f9:ed:b1:be:30:62:1e:9e:77:46:2a:8a:6f:
12:7c:f1:b8:ae:f8:ff:f4:57:33:2b:35:ba:99:5c:8c:a5:18:
11:a6:32:fe:4a:c1:76:49:c6:7e:a1:6e:81:6a:aa:18:f6:41:
a0:93:97:44:b8:9a:32:e5:59:89:e5:d0:bc:4f:00:0e:76:9e:
35:e9:20:e5:f2:36:d4:30:d0:78:e8:30:36:c9:03:79:16:37:
7c:53:c6:41:7e:c7:2e:50:19:66:22:87:48:fb:12:12:dd:53:
c6:4a:7e:af:4d:39:4b:95:78:54:99:11:70:2e:d9:0c:1d:b7:
65:e9:8f:fd:6d:fd:13:cb:30:40:35:af:9b:d1:cc:b0:af:d8:
d9:ef:c3:e1:a2:24:09:56:94:75:c6:9e:62:3b:0d:4f:eb:52:
d5:fe:32:b0:5f:73:47:cf:12:66:6b:fe:54:45:74:1b:24:e2:
62:85:be:4b:54:97:cd:91:3f:e4:7c:d9:13:e0:82:6a:5d:3a:
4e:26:0e:bd:41:b0:4f:ad:29:93:b0:20:d9:43:22:03:34:b4:
58:e6:f4:10:8d:24:dc:73:6b:40:75:ff:85:8d:3a:85:49:60:
75:69:87:41:04:26:fb:aa:3f:ff:3d:9e:2d:f4:3d:14:08:f1:
5e:cb:ca:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rq8KvqJHTTWJfU9EqzzyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZjFlYWE1YzMzMWJlY2YzMjc3MDFhMmViZGNmMWExYmI1
ZjA3MGMwHhcNMjYwMzI5MTMwMDQyWhcNMjYwMzMwMTMwMDQyWjAzMTEwLwYDVQQD
Eyg5OTMxNTQ2MmMzZmI3ODBmOTQ2MTllYzMxNmEzZTY2YWVjZjY3MDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8HtH969Z63BNrMJxYYiC5aWMbERc
hhFS9Rv181bs9GQS7ghnFA+OMUkNP5lzlDe/MiORTWf7UAG3GjGbuQbiAgxRTJM7
ck7SyHo+fl9GQ7QMwziy8jog+Rm/gDk5apcs60Odu8DxQ8u/SKRpiy0bc+0RkS56
rcfzXxNFziR/mgXrW5B+VsxIfuZSW57i8KtO8zU/uRraMxewfWtcG8rHMmQLZiA4
SaHHWLNLzsSFoeqI1YLAeeTiReT8wh/UwUPkEftHTStSBNzT29uRTUUjINI+9GlT
33p/2ant7Sde+QDaIFCPTDnN4PnVMJbtyJXHAfVrrAlLwp7xjSleQR7CNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkxVGLD+3gPlGGewxaj5mrs9nB2MB8GA1UdIwQY
MBaAFGvx6qXDMb7PMncBouvc8aG7XwcMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYV9IcXBjTXh2czh5ZHdHaTY5enhvYnRmQnd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yZTc0MTgtZjY1ZC00ZmZlLThiZGQt
OTYxZWNjM2E2Y2QwLzEvYV9IcXBjTXh2czh5ZHdHaTY5enhvYnRmQnd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yZTc0MTgtZjY1ZC00ZmZlLThiZGQtOTYxZWNjM2E2Y2Qw
LzEvYV9IcXBjTXh2czh5ZHdHaTY5enhvYnRmQnd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQh+X3On5
7bG+MGIenndGKopvEnzxuK74//RXMys1uplcjKUYEaYy/krBdknGfqFugWqqGPZB
oJOXRLiaMuVZieXQvE8ADnaeNekg5fI21DDQeOgwNskDeRY3fFPGQX7HLlAZZiKH
SPsSEt1Txkp+r005S5V4VJkRcC7ZDB23ZemP/W39E8swQDWvm9HMsK/Y2e/D4aIk
CVaUdcaeYjsNT+tS1f4ysF9zR88SZmv+VEV0GyTiYoW+S1SXzZE/5HzZE+CCal06
TiYOvUGwT60pk7Ag2UMiAzS0WOb0EI0k3HNrQHX/hY06hUlgdWmHQQQm+6o//z2e
LfQ9FAjxXsvKzQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:05 2026 by rpki-client