Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
File: 2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft (raw, json)
Hash identifier: GFlPvdMW38WAOkBFzZjAglGXbKEsTi7M33Dwe/xQ8vA=
Subject key identifier: BA:86:57:4E:6A:8E:CD:C5:2D:7A:CA:79:06:26:F2:DE:CA:28:D1:5C
Authority key identifier: D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6
Certificate issuer: /CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
Certificate serial: 019D9A07567C4E1FB7A3E8A0E8CCA1DEFCF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
Manifest number: 17B0
Signing time: Fri 17 Apr 2026 06:01:05 +0000
Manifest this update: Fri 17 Apr 2026 06:01:05 +0000
Manifest next update: Sat 18 Apr 2026 06:01:05 +0000
Files and hashes: 1: 2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl (hash: rmXATsx4sFD2iIxyugv56CUrjKe5YAi9ePWbLNQQFlo=)
2: NkvybtyieeqcXDjHG9gHl_XAsMQ.roa (hash: 00Ye2JJrLJ1zMVpdd8DivfPeXqrw+enAIn41E191EYk=)
3: WYvB7z2E3X738_d9cgopMgPJk5I.roa (hash: u5beh3Tb2byL/rGs3HaRRLRbrFXqSXUDof4rFMurirU=)
4: gLFfimILtrvNmLCqHHnLyf5HeDQ.roa (hash: Au61gdy9n9KoeOHWn+nWGKr6a14kosDrZi3ajbtwzn8=)
5: zNk-M0VG943BmxksL9suzBVm4vQ.roa (hash: UUWX1bpaoMZzwXQx5EXEi0bI53+v8tYUcjIfVRmZCYY=)
6: znK95_JFl0pNvLfj6OXmewYJypk.roa (hash: KuT2Fb0+p87DW0EC5Dzu5qZfHaXjG7VpnPReGDVhA8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:56:7c:4e:1f:b7:a3:e8:a0:e8:cc:a1:de:fc:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8772aac1b62b87d6b01d57a1a00a6a72b8a7da6
Validity
Not Before: Apr 17 06:01:05 2026 GMT
Not After : Apr 18 06:01:05 2026 GMT
Subject: CN=ba86574e6a8ecdc52d7aca790626f2deca28d15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:63:ba:57:b5:8b:20:52:89:be:ac:d6:61:7d:
c6:6a:85:aa:13:0f:3a:59:1a:c1:67:c0:7c:15:30:
21:fd:1a:0f:f1:4b:9a:6c:24:af:45:b3:66:ac:18:
96:e9:c0:cb:db:42:ef:59:fd:89:ae:90:9e:58:d9:
ef:f5:55:78:ad:08:a3:a8:00:75:b6:e0:87:c8:db:
da:0b:9d:b1:32:5c:38:c3:08:4d:4d:89:09:a6:dd:
93:2d:18:54:83:cf:77:1b:01:a6:11:9c:f1:6a:82:
4e:31:ca:b6:aa:5b:c5:03:e9:e5:70:98:f1:70:73:
3d:0a:2e:c3:26:d4:13:0c:ad:78:52:c4:bb:b6:0a:
fe:37:2c:93:3f:c2:fa:ca:67:f4:fc:56:90:65:6b:
7e:63:77:0e:3a:79:f1:98:50:1e:15:ab:5e:f1:24:
bd:bd:dd:d8:45:24:51:69:2a:c2:50:5b:0f:00:e9:
0c:0b:d7:d8:87:e4:7b:f0:99:c7:d5:7c:57:d4:6b:
11:94:a2:4d:1c:90:ad:bc:3a:da:1f:4d:25:cd:4c:
d2:a8:e1:a0:af:15:14:43:f8:cf:24:1c:e4:45:75:
c1:1c:4f:1b:0a:cc:92:e5:b4:20:4a:bb:75:f7:77:
26:20:a8:e5:4e:50:35:b2:98:6a:b7:3b:7f:ff:2d:
62:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:86:57:4E:6A:8E:CD:C5:2D:7A:CA:79:06:26:F2:DE:CA:28:D1:5C
X509v3 Authority Key Identifier:
keyid:D8:77:2A:AC:1B:62:B8:7D:6B:01:D5:7A:1A:00:A6:A7:2B:8A:7D:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2HcqrBtiuH1rAdV6GgCmpyuKfaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/616a58-5342-432c-a9c5-333beecff6f4/1/2HcqrBtiuH1rAdV6GgCmpyuKfaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:86:5a:23:fa:30:ae:4c:c7:3e:f2:f6:97:4d:10:9f:96:ba:
e8:78:d5:5b:8f:69:ea:21:9f:d4:42:4b:3a:7e:89:a0:57:a8:
7d:bc:98:7f:6d:ed:bb:44:47:46:c9:d0:4d:80:bc:9e:64:d2:
aa:18:8f:4f:3e:62:92:87:be:83:b5:43:b4:18:b9:db:fa:5b:
38:3f:4e:6a:ef:30:fe:83:ad:5a:b9:41:1f:d8:21:5c:2a:aa:
bd:f2:d8:5e:fd:3b:ce:c4:85:60:a3:97:26:f8:22:c6:af:40:
0d:81:9c:c2:e6:4b:63:70:83:5c:54:5c:89:a3:b1:13:c3:99:
48:6e:ac:e8:e2:fe:a5:8e:1d:6a:57:cc:32:1b:bf:06:4b:98:
22:92:65:77:76:2a:97:1a:71:3e:98:45:54:5d:b1:a0:23:7b:
fd:fa:c9:d0:ae:26:ed:14:68:71:eb:03:10:fc:21:b1:2d:cf:
cf:44:69:05:8b:c2:f3:ac:1c:79:db:de:39:17:79:93:7d:e2:
82:1d:f2:38:61:e5:3f:19:d8:01:4d:6a:b7:1d:07:9d:3e:af:
08:1e:0d:49:ec:9b:3f:fd:4d:4d:e2:0e:d3:f0:cc:a1:d1:c6:
d4:ce:b9:23:70:99:b2:03:06:a4:13:58:54:a4:bf:de:8d:2b:
3c:55:00:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aB1Z8Th+3o+ig6Myh3vz4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NzcyYWFjMWI2MmI4N2Q2YjAxZDU3YTFhMDBhNmE3MmI4
YTdkYTYwHhcNMjYwNDE3MDYwMTA1WhcNMjYwNDE4MDYwMTA1WjAzMTEwLwYDVQQD
EyhiYTg2NTc0ZTZhOGVjZGM1MmQ3YWNhNzkwNjI2ZjJkZWNhMjhkMTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGO6V7WLIFKJvqzWYX3GaoWqEw86
WRrBZ8B8FTAh/RoP8UuabCSvRbNmrBiW6cDL20LvWf2JrpCeWNnv9VV4rQijqAB1
tuCHyNvaC52xMlw4wwhNTYkJpt2TLRhUg893GwGmEZzxaoJOMcq2qlvFA+nlcJjx
cHM9Ci7DJtQTDK14UsS7tgr+NyyTP8L6ymf0/FaQZWt+Y3cOOnnxmFAeFate8SS9
vd3YRSRRaSrCUFsPAOkMC9fYh+R78JnH1XxX1GsRlKJNHJCtvDraH00lzUzSqOGg
rxUUQ/jPJBzkRXXBHE8bCsyS5bQgSrt193cmIKjlTlA1sphqtzt//y1i+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqGV05qjs3FLXrKeQYm8t7KKNFcMB8GA1UdIwQY
MBaAFNh3KqwbYrh9awHVehoApqcrin2mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkhjcXJCdGl1SDFyQWRWNkdnQ21weXVLZmFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82MTZhNTgtNTM0Mi00MzJjLWE5YzUt
MzMzYmVlY2ZmNmY0LzEvMkhjcXJCdGl1SDFyQWRWNkdnQ21weXVLZmFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My82MTZhNTgtNTM0Mi00MzJjLWE5YzUtMzMzYmVlY2ZmNmY0
LzEvMkhjcXJCdGl1SDFyQWRWNkdnQ21weXVLZmFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlIZaI/ow
rkzHPvL2l00Qn5a66HjVW49p6iGf1EJLOn6JoFeofbyYf23tu0RHRsnQTYC8nmTS
qhiPTz5ikoe+g7VDtBi52/pbOD9Oau8w/oOtWrlBH9ghXCqqvfLYXv07zsSFYKOX
Jvgixq9ADYGcwuZLY3CDXFRciaOxE8OZSG6s6OL+pY4dalfMMhu/BkuYIpJld3Yq
lxpxPphFVF2xoCN7/frJ0K4m7RRocesDEPwhsS3Pz0RpBYvC86wcedveORd5k33i
gh3yOGHlPxnYAU1qtx0HnT6vCB4NSeybP/1NTeIO0/DModHG1M65I3CZsgMGpBNY
VKS/3o0rPFUA0Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:06:58 2026 by rpki-client