Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
File: HH3TyBbYWWCARyBUNICV7SuFUeU.mft (raw, json)
Hash identifier: ElmdqAY7TTmvb4HP3JoVK0+fi4+FpKuOciRXMF/1xBw=
Subject key identifier: 85:B5:B1:63:99:B3:8C:4E:58:8F:9F:91:7A:E3:4F:72:16:8A:7A:C1
Authority key identifier: 1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5
Certificate issuer: /CN=1c7dd3c816d8596080472054348095ed2b8551e5
Certificate serial: 019CADFEA8DA7D0513E5C990458BEAEAF30E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
Manifest number: 15BB
Signing time: Mon 02 Mar 2026 10:01:13 +0000
Manifest this update: Mon 02 Mar 2026 10:01:13 +0000
Manifest next update: Tue 03 Mar 2026 10:01:13 +0000
Files and hashes: 1: HH3TyBbYWWCARyBUNICV7SuFUeU.crl (hash: XSrlrVLOJHhX9+B4H/4/JmF6tPmOnZ2ZImgYTfWxIpw=)
2: IMhrDeS7pt6POgdqkwhQn8NXjdQ.roa (hash: 8Co4GdnGTbaplfNAIs0VU0evrLpH3iNJkhwVpK6YVsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:a8:da:7d:05:13:e5:c9:90:45:8b:ea:ea:f3:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7dd3c816d8596080472054348095ed2b8551e5
Validity
Not Before: Mar 2 10:01:13 2026 GMT
Not After : Mar 3 10:01:13 2026 GMT
Subject: CN=85b5b16399b38c4e588f9f917ae34f72168a7ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6d:30:a7:2a:a0:e0:c1:bb:d7:b5:5c:cd:f0:
2f:54:45:a1:10:73:df:72:80:cf:f2:ba:2a:7f:02:
22:3b:9f:01:cb:4a:f3:68:62:b5:4d:2e:f7:3a:f3:
f8:b8:56:a5:95:ed:05:61:40:ad:38:0b:0b:e4:db:
e1:10:f2:ad:f9:7c:3a:00:fb:3f:70:6d:da:bb:3a:
2f:39:89:98:b5:1a:62:88:5a:f9:52:44:5e:e8:f7:
15:38:51:ba:54:ba:53:64:ae:8f:a7:33:f0:3c:02:
11:cb:60:f1:42:12:e1:70:41:4f:e5:71:c2:a9:c6:
db:96:06:19:d2:d1:f1:22:53:55:0a:93:c0:f5:ac:
14:3e:c4:c2:82:7f:0f:21:09:01:8a:24:e1:58:70:
63:3f:26:0e:28:44:4c:f0:42:f8:7d:c1:6d:be:b1:
10:91:b7:a0:24:7a:62:d6:aa:05:b0:01:43:5d:fe:
61:aa:5b:fe:2d:39:23:e9:3b:55:06:ad:68:d7:bb:
ea:fe:46:98:39:0c:07:1c:02:4b:b4:f9:65:38:9a:
8c:46:4e:ed:74:22:cc:80:82:8c:d4:ba:d0:1c:63:
1a:f4:a0:90:9d:da:07:37:2b:57:36:f2:76:de:3c:
f5:6d:4a:c0:f9:9c:42:9a:ef:76:2e:e9:78:97:b6:
ff:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B5:B1:63:99:B3:8C:4E:58:8F:9F:91:7A:E3:4F:72:16:8A:7A:C1
X509v3 Authority Key Identifier:
keyid:1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7d:1c:81:69:c0:32:df:b0:ba:0e:27:11:d0:84:08:6a:46:
a8:91:6a:73:d4:15:01:11:3d:c8:21:e0:a7:15:de:75:6b:83:
b8:3e:9f:b5:a7:89:2a:de:e9:91:40:5d:1b:84:b0:b4:00:6f:
41:27:48:c4:20:5d:1a:95:fc:5e:12:9f:a2:37:e9:64:16:be:
31:28:85:9e:eb:96:a5:77:46:00:73:d8:53:a3:cf:ab:77:70:
86:8c:34:0f:82:05:d2:e0:be:73:ce:0c:1a:ed:c4:5a:49:58:
9e:a8:1b:bf:f3:76:42:6a:be:56:8d:f4:d7:1c:70:5c:6f:79:
12:7d:dd:be:e3:f3:d6:7f:39:75:63:2b:f1:36:5c:0d:80:81:
4e:1c:64:3d:ee:bf:92:13:2b:83:bf:9f:93:b8:ac:4a:f2:48:
a3:0c:c8:2a:e5:6f:f5:a7:ba:96:48:e1:0f:bb:21:36:50:32:
25:cc:d5:3c:9e:93:9d:eb:88:04:82:0e:31:30:fb:d3:20:b6:
46:eb:38:43:a5:ec:0b:b2:c0:98:6a:f6:36:8b:b7:9e:e9:34:
02:fb:63:fd:cb:41:27:58:0d:2c:2c:3c:8e:59:3b:48:29:bb:
88:eb:b0:36:47:f4:3c:6d:b9:e4:a8:4d:1c:0a:9f:0e:cd:b4:
70:b1:d7:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/qjafQUT5cmQRYvq6vMOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjN2RkM2M4MTZkODU5NjA4MDQ3MjA1NDM0ODA5NWVkMmI4
NTUxZTUwHhcNMjYwMzAyMTAwMTEzWhcNMjYwMzAzMTAwMTEzWjAzMTEwLwYDVQQD
Eyg4NWI1YjE2Mzk5YjM4YzRlNTg4ZjlmOTE3YWUzNGY3MjE2OGE3YWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW0wpyqg4MG717VczfAvVEWhEHPf
coDP8roqfwIiO58By0rzaGK1TS73OvP4uFalle0FYUCtOAsL5NvhEPKt+Xw6APs/
cG3auzovOYmYtRpiiFr5UkRe6PcVOFG6VLpTZK6PpzPwPAIRy2DxQhLhcEFP5XHC
qcbblgYZ0tHxIlNVCpPA9awUPsTCgn8PIQkBiiThWHBjPyYOKERM8EL4fcFtvrEQ
kbegJHpi1qoFsAFDXf5hqlv+LTkj6TtVBq1o17vq/kaYOQwHHAJLtPllOJqMRk7t
dCLMgIKM1LrQHGMa9KCQndoHNytXNvJ23jz1bUrA+ZxCmu92Lul4l7b/EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIW1sWOZs4xOWI+fkXrjT3IWinrBMB8GA1UdIwQY
MBaAFBx908gW2FlggEcgVDSAle0rhVHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEgzVHlCYllXV0NBUnlCVU5JQ1Y3U3VGVWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iYWFiMzYtODg4Ni00MjA2LTllNzkt
Y2MyY2Q3ZDMxYTI2LzEvSEgzVHlCYllXV0NBUnlCVU5JQ1Y3U3VGVWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9iYWFiMzYtODg4Ni00MjA2LTllNzktY2MyY2Q3ZDMxYTI2
LzEvSEgzVHlCYllXV0NBUnlCVU5JQ1Y3U3VGVWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVH0cgWnA
Mt+wug4nEdCECGpGqJFqc9QVARE9yCHgpxXedWuDuD6ftaeJKt7pkUBdG4SwtABv
QSdIxCBdGpX8XhKfojfpZBa+MSiFnuuWpXdGAHPYU6PPq3dwhow0D4IF0uC+c84M
Gu3EWklYnqgbv/N2Qmq+Vo301xxwXG95En3dvuPz1n85dWMr8TZcDYCBThxkPe6/
khMrg7+fk7isSvJIowzIKuVv9ae6lkjhD7shNlAyJczVPJ6TneuIBIIOMTD70yC2
Rus4Q6XsC7LAmGr2Nou3nuk0Avtj/ctBJ1gNLCw8jlk7SCm7iOuwNkf0PG255KhN
HAqfDs20cLHXDA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:25:28 2026 by rpki-client