Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
File: HE5qHTzB5PPcAauWyUGWucSdKRY.mft (raw, json)
Hash identifier: Yb34kFtsHEiTLjlGlZB8xxakQvPSazE3KHhi96kGPN8=
Subject key identifier: 75:9D:6E:60:4B:6A:1D:FF:75:5E:49:5D:40:A5:09:AE:F1:9E:60:F2
Authority key identifier: 1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
Certificate issuer: /CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Certificate serial: 019D352CFE819F732D141B62240BC6ED0C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
Manifest number: 026E
Signing time: Sat 28 Mar 2026 16:00:34 +0000
Manifest this update: Sat 28 Mar 2026 16:00:34 +0000
Manifest next update: Sun 29 Mar 2026 16:00:34 +0000
Files and hashes: 1: Fg5HAyCv6b7sSfLqSOcD2vtlGl8.roa (hash: Y5ctBSFcozZDys/LCzFhu11DBzWJnR4MW+cvCOiTB2A=)
2: HE5qHTzB5PPcAauWyUGWucSdKRY.crl (hash: Yg2jG6srl0ILwW0lAjCt7vfFTre/DSMNOgjP0y0M8co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:2c:fe:81:9f:73:2d:14:1b:62:24:0b:c6:ed:0c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Validity
Not Before: Mar 28 16:00:34 2026 GMT
Not After : Mar 29 16:00:34 2026 GMT
Subject: CN=759d6e604b6a1dff755e495d40a509aef19e60f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:d4:06:82:6d:6d:ca:c4:d0:5e:23:61:bd:00:
56:2a:e1:ca:bd:87:6e:0f:4f:3d:0c:08:14:3d:ab:
49:85:3f:9f:51:36:4a:69:9e:f8:97:b9:05:5c:b2:
d0:c9:bf:27:27:3f:20:22:7a:4f:f3:51:19:de:f1:
2c:ec:f6:fa:1c:8d:0b:c4:e8:bb:87:83:fe:3c:0b:
6d:2b:cc:4f:7d:b5:a6:43:59:ea:dd:2c:5a:04:20:
a9:d9:03:85:83:43:20:30:97:3a:2f:42:c8:23:c7:
dd:cd:0a:ae:8a:34:10:43:12:b3:c8:38:e5:db:2d:
ee:1c:0d:1d:41:0f:aa:ae:9c:d8:53:03:70:c9:99:
28:4b:c3:d7:ee:2b:6c:ab:7e:51:7b:28:8d:a3:15:
a4:d1:88:5e:0d:cb:00:9b:89:40:97:2c:fd:78:9f:
fb:f4:c9:62:b1:0b:d4:65:23:ae:b8:a9:ad:51:ac:
08:2f:c5:7d:95:0d:a4:52:9b:96:d2:5b:c9:dc:97:
20:d6:5d:17:ee:cd:d6:7c:26:b3:72:30:8f:de:af:
2d:95:c1:cc:a2:18:ac:05:6d:f6:ff:2c:bb:a0:90:
6f:32:df:2b:8b:ee:31:12:7c:b6:cf:0a:7d:47:52:
70:dd:cf:85:7c:8e:d2:85:b5:e5:d8:a6:01:3e:c1:
19:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9D:6E:60:4B:6A:1D:FF:75:5E:49:5D:40:A5:09:AE:F1:9E:60:F2
X509v3 Authority Key Identifier:
keyid:1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8b:60:b4:05:da:ce:45:38:1b:8a:2b:67:87:ee:57:31:7d:
8e:0e:57:6c:b0:2a:cf:3e:38:82:bf:a9:15:f9:59:ea:64:0e:
cd:02:98:58:d9:e6:8a:7d:b7:de:1c:3d:af:36:65:a8:e2:a6:
23:e7:51:0d:a6:01:27:da:93:68:f1:8a:7d:f7:87:5b:f0:a1:
14:d1:88:cb:e3:d2:6e:37:0f:63:6d:bd:13:a7:3c:dc:26:24:
3c:93:5a:d2:d8:d9:d3:48:5d:1d:b0:b7:02:6a:fa:2c:6d:05:
cd:07:cf:6f:cb:63:00:63:b2:33:95:2b:b6:4c:ee:95:d8:69:
be:2d:98:46:0c:5d:06:fa:68:f5:05:10:3a:9f:7e:31:c5:a1:
21:84:ac:95:fd:8a:2e:df:49:8a:fa:b0:4d:1e:29:05:35:d1:
94:8b:99:fe:88:5c:ac:ad:ee:02:66:53:33:aa:e0:e1:5c:5a:
96:bc:69:46:47:a2:06:95:90:5f:d9:d2:e1:f3:cf:19:e7:ab:
43:e0:0c:84:64:e8:87:f5:69:67:c2:87:d0:9c:ec:dd:00:f3:
8e:aa:ad:26:1f:09:fb:42:ce:b8:b6:a3:01:66:0f:3b:12:c6:
57:fa:4c:6c:a0:9f:f3:ec:4b:75:0a:4e:85:5e:b2:5c:7d:66:
5e:d7:4d:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ01LP6Bn3MtFBtiJAvG7QwhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNGU2YTFkM2NjMWU0ZjNkYzAxYWI5NmM5NDE5NmI5YzQ5
ZDI5MTYwHhcNMjYwMzI4MTYwMDM0WhcNMjYwMzI5MTYwMDM0WjAzMTEwLwYDVQQD
Eyg3NTlkNmU2MDRiNmExZGZmNzU1ZTQ5NWQ0MGE1MDlhZWYxOWU2MGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+NQGgm1tysTQXiNhvQBWKuHKvYdu
D089DAgUPatJhT+fUTZKaZ74l7kFXLLQyb8nJz8gInpP81EZ3vEs7Pb6HI0LxOi7
h4P+PAttK8xPfbWmQ1nq3SxaBCCp2QOFg0MgMJc6L0LII8fdzQquijQQQxKzyDjl
2y3uHA0dQQ+qrpzYUwNwyZkoS8PX7itsq35ReyiNoxWk0YheDcsAm4lAlyz9eJ/7
9MlisQvUZSOuuKmtUawIL8V9lQ2kUpuW0lvJ3Jcg1l0X7s3WfCazcjCP3q8tlcHM
ohisBW32/yy7oJBvMt8ri+4xEny2zwp9R1Jw3c+FfI7ShbXl2KYBPsEZ0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWdbmBLah3/dV5JXUClCa7xnmDyMB8GA1UdIwQY
MBaAFBxOah08weTz3AGrlslBlrnEnSkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEU1cUhUekI1UFBjQWF1V3lVR1d1Y1NkS1JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi85NmIxMTctZmQzYi00Zjc0LWIzYmYt
MWE0MmY2MzJjMzA3LzEvSEU1cUhUekI1UFBjQWF1V3lVR1d1Y1NkS1JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi85NmIxMTctZmQzYi00Zjc0LWIzYmYtMWE0MmY2MzJjMzA3
LzEvSEU1cUhUekI1UFBjQWF1V3lVR1d1Y1NkS1JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKItgtAXa
zkU4G4orZ4fuVzF9jg5XbLAqzz44gr+pFflZ6mQOzQKYWNnmin233hw9rzZlqOKm
I+dRDaYBJ9qTaPGKffeHW/ChFNGIy+PSbjcPY229E6c83CYkPJNa0tjZ00hdHbC3
Amr6LG0FzQfPb8tjAGOyM5Urtkzuldhpvi2YRgxdBvpo9QUQOp9+McWhIYSslf2K
Lt9JivqwTR4pBTXRlIuZ/ohcrK3uAmZTM6rg4VxalrxpRkeiBpWQX9nS4fPPGeer
Q+AMhGToh/VpZ8KH0Jzs3QDzjqqtJh8J+0LOuLajAWYPOxLGV/pMbKCf8+xLdQpO
hV6yXH1mXtdNSw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 19:49:02 2026 by rpki-client