Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft
File: HXJHHgJd46gqjfWKrm4S4x1s0FA.mft (raw, json)
Hash identifier: BdkH6N2PtrPVuz8jA/5xI1bUS67LHf/wxuTe39n3Ew4=
Subject key identifier: 56:EE:AC:F2:47:1A:E0:9D:2F:44:E5:B6:76:74:BD:60:A5:CD:C4:01
Authority key identifier: 1D:72:47:1E:02:5D:E3:A8:2A:8D:F5:8A:AE:6E:12:E3:1D:6C:D0:50
Certificate issuer: /CN=1d72471e025de3a82a8df58aae6e12e31d6cd050
Certificate serial: 019D394090CE138DA0BE0931E5C5D26EB1C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HXJHHgJd46gqjfWKrm4S4x1s0FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft
Manifest number: 02C2
Signing time: Sun 29 Mar 2026 11:00:25 +0000
Manifest this update: Sun 29 Mar 2026 11:00:25 +0000
Manifest next update: Mon 30 Mar 2026 11:00:25 +0000
Files and hashes: 1: HXJHHgJd46gqjfWKrm4S4x1s0FA.crl (hash: hZ2sisWTgR5OOJtxNWUF2deZPfEQVMBvQz30qYblFdI=)
2: wgOrbEyyTMVtSYdFg1xc1vTbqbA.roa (hash: 3Lc51OHAGzzjJJFJIOMiaDX6wEIJm4jehUS0UTUJBEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HXJHHgJd46gqjfWKrm4S4x1s0FA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:90:ce:13:8d:a0:be:09:31:e5:c5:d2:6e:b1:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d72471e025de3a82a8df58aae6e12e31d6cd050
Validity
Not Before: Mar 29 11:00:25 2026 GMT
Not After : Mar 30 11:00:25 2026 GMT
Subject: CN=56eeacf2471ae09d2f44e5b67674bd60a5cdc401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:06:78:fb:04:a6:77:cc:31:a5:c4:fa:3b:27:
fd:d7:05:11:90:cb:6c:62:03:29:93:61:ae:11:d3:
16:0d:e5:d4:f6:5a:26:a0:6a:b1:c0:89:00:dc:83:
99:1e:4e:c7:9c:6d:d6:d4:28:c8:08:71:1e:9c:f7:
ad:3f:66:f9:66:b0:40:31:84:42:a9:f6:5b:9d:b7:
42:8e:8b:43:14:9b:be:ba:bc:2d:b8:ac:0b:18:ed:
0b:c4:d7:ad:c3:5a:77:d6:75:03:af:eb:e7:1b:6b:
b9:36:36:77:0c:91:8b:6f:83:e6:30:83:06:39:b1:
02:2b:bd:d8:6b:33:e5:49:e6:8c:59:29:8f:75:4d:
ad:86:ac:55:b2:b0:49:49:1e:bb:52:77:ee:a9:05:
ad:14:4b:98:00:5e:cb:c3:5c:55:15:58:80:53:de:
94:f1:c3:b4:92:b1:d7:80:09:44:b4:d3:53:b5:03:
1d:d3:0a:c1:f0:3e:1b:48:b7:d0:ff:0a:37:24:a4:
c4:12:84:59:f2:45:cb:62:18:bc:14:69:23:48:c3:
f3:5b:c6:a0:82:ab:c9:14:4f:72:91:9f:86:1f:fa:
3f:05:a6:e4:79:ec:de:04:68:62:d7:61:f3:7d:8e:
d5:d4:41:c9:8e:ca:49:73:50:16:85:48:c0:1d:ed:
ed:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EE:AC:F2:47:1A:E0:9D:2F:44:E5:B6:76:74:BD:60:A5:CD:C4:01
X509v3 Authority Key Identifier:
keyid:1D:72:47:1E:02:5D:E3:A8:2A:8D:F5:8A:AE:6E:12:E3:1D:6C:D0:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HXJHHgJd46gqjfWKrm4S4x1s0FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6ff7d7-1edd-43c2-86cf-be4b06c5c42f/1/HXJHHgJd46gqjfWKrm4S4x1s0FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:14:14:35:45:d0:d1:3d:b5:17:f5:09:0f:73:f4:75:23:8e:
4f:12:1a:55:73:e3:53:5a:18:39:fd:67:38:83:7f:35:f4:0c:
c4:dc:d5:4f:b3:dd:19:ee:ff:3c:e4:9b:fd:35:5c:30:f9:a6:
20:f6:15:fb:b1:4f:34:38:db:9f:00:64:0d:4b:40:bd:82:8e:
55:76:bc:b7:84:96:9b:64:0d:95:a4:cc:34:13:c0:14:f0:63:
5a:d9:ca:ca:02:27:35:5e:5b:81:01:94:5b:f3:30:84:b8:86:
c7:7d:8a:08:13:be:94:1f:5c:3c:5f:a3:5d:7f:68:77:24:15:
54:07:92:38:be:79:27:44:63:aa:cb:b5:42:88:69:78:a4:d2:
b5:12:95:6b:55:26:ae:3f:cc:26:fd:ae:4d:41:56:6a:b0:1a:
42:aa:d4:65:3d:6d:b3:39:05:d9:a0:fa:52:bb:70:b8:58:b7:
75:f1:fb:34:79:85:44:9c:ad:a9:c0:ff:77:42:ae:2e:4a:81:
a3:6d:8f:5c:c3:90:51:b4:5b:09:67:a4:39:0a:70:93:bb:91:
bd:bc:2a:f1:cb:76:19:13:53:ad:b5:98:bb:63:56:b9:d0:1b:
bf:20:99:ef:5c:b7:10:44:b1:b5:35:b7:98:95:a8:ef:9a:d4:
14:52:23:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QJDOE42gvgkx5cXSbrHBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNzI0NzFlMDI1ZGUzYTgyYThkZjU4YWFlNmUxMmUzMWQ2
Y2QwNTAwHhcNMjYwMzI5MTEwMDI1WhcNMjYwMzMwMTEwMDI1WjAzMTEwLwYDVQQD
Eyg1NmVlYWNmMjQ3MWFlMDlkMmY0NGU1YjY3Njc0YmQ2MGE1Y2RjNDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwZ4+wSmd8wxpcT6Oyf91wURkMts
YgMpk2GuEdMWDeXU9lomoGqxwIkA3IOZHk7HnG3W1CjICHEenPetP2b5ZrBAMYRC
qfZbnbdCjotDFJu+urwtuKwLGO0LxNetw1p31nUDr+vnG2u5NjZ3DJGLb4PmMIMG
ObECK73YazPlSeaMWSmPdU2thqxVsrBJSR67UnfuqQWtFEuYAF7Lw1xVFViAU96U
8cO0krHXgAlEtNNTtQMd0wrB8D4bSLfQ/wo3JKTEEoRZ8kXLYhi8FGkjSMPzW8ag
gqvJFE9ykZ+GH/o/BabkeezeBGhi12HzfY7V1EHJjspJc1AWhUjAHe3t8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFburPJHGuCdL0TltnZ0vWClzcQBMB8GA1UdIwQY
MBaAFB1yRx4CXeOoKo31iq5uEuMdbNBQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFhKSEhnSmQ0NmdxamZXS3JtNFM0eDFzMEZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82ZmY3ZDctMWVkZC00M2MyLTg2Y2Yt
YmU0YjA2YzVjNDJmLzEvSFhKSEhnSmQ0NmdxamZXS3JtNFM0eDFzMEZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy82ZmY3ZDctMWVkZC00M2MyLTg2Y2YtYmU0YjA2YzVjNDJm
LzEvSFhKSEhnSmQ0NmdxamZXS3JtNFM0eDFzMEZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkBQUNUXQ
0T21F/UJD3P0dSOOTxIaVXPjU1oYOf1nOIN/NfQMxNzVT7PdGe7/POSb/TVcMPmm
IPYV+7FPNDjbnwBkDUtAvYKOVXa8t4SWm2QNlaTMNBPAFPBjWtnKygInNV5bgQGU
W/MwhLiGx32KCBO+lB9cPF+jXX9odyQVVAeSOL55J0Rjqsu1QohpeKTStRKVa1Um
rj/MJv2uTUFWarAaQqrUZT1tszkF2aD6UrtwuFi3dfH7NHmFRJytqcD/d0KuLkqB
o22PXMOQUbRbCWekOQpwk7uRvbwq8ct2GRNTrbWYu2NWudAbvyCZ71y3EESxtTW3
mJWo75rUFFIjKQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:56:20 2026 by rpki-client