Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
File: HU6VkgCuqPuSkVi3PowOaaiNxek.mft (raw, json)
Hash identifier: s/gigJ3h4UglduHgKnBIzSBaMtOXKKjdUHudFjdQRKI=
Subject key identifier: 2B:A0:D8:F7:0D:C2:ED:20:60:33:40:03:85:E3:8F:82:3F:D9:2A:B5
Authority key identifier: 1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
Certificate issuer: /CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Certificate serial: 019CAB6AE9F522595A7CFECA9150726273C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
Manifest number: 17F6
Signing time: Sun 01 Mar 2026 22:00:36 +0000
Manifest this update: Sun 01 Mar 2026 22:00:36 +0000
Manifest next update: Mon 02 Mar 2026 22:00:36 +0000
Files and hashes: 1: HU6VkgCuqPuSkVi3PowOaaiNxek.crl (hash: 2qoQlGhDXyBiXD/YYIYXG/0BglnchgWUx6LEsVBlwgo=)
2: X7eK9U4PlRZQI-Mybd4-wYNS5Bc.roa (hash: vCZNrQKnlEPBX/vu4m7xI1KpR04Prr3wUQp8NNxZ4c8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:e9:f5:22:59:5a:7c:fe:ca:91:50:72:62:73:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Validity
Not Before: Mar 1 22:00:36 2026 GMT
Not After : Mar 2 22:00:36 2026 GMT
Subject: CN=2ba0d8f70dc2ed206033400385e38f823fd92ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:05:77:7a:93:1f:14:f4:c4:0e:91:2c:ed:9d:
e4:82:93:ec:eb:34:0b:4e:63:f6:8a:86:80:b2:29:
0b:13:57:9c:14:4c:d1:79:a2:b2:df:89:47:ba:f9:
56:65:9f:8d:db:64:03:5a:4e:1d:9c:6a:45:b2:c5:
5f:1a:5c:d6:c7:68:75:4a:30:e0:af:ef:a3:d1:15:
6d:ca:7b:09:2e:38:c9:52:cc:e8:dc:0c:86:84:e0:
11:26:62:67:96:76:36:f8:32:60:93:89:73:58:11:
1f:c9:bc:39:a3:7c:70:2f:61:2a:74:5d:ec:3a:ff:
98:e7:f0:16:1b:df:bd:aa:31:78:bc:04:4d:98:a1:
3f:2c:62:96:08:1e:70:39:e7:f0:34:d2:b4:9c:49:
38:68:f3:e7:27:c0:73:57:75:ac:33:e0:f0:99:32:
01:d8:28:2b:a2:26:43:83:f3:f2:4f:44:d0:49:34:
a1:12:6f:ce:74:cd:25:8c:60:41:91:d3:12:80:4a:
8e:2e:7b:ab:e2:b6:44:a7:6e:a1:d9:72:1d:f9:42:
9b:c7:6c:ff:4f:a9:51:07:fa:7a:28:bc:5a:61:2c:
15:08:1d:30:22:81:f8:48:34:83:0a:75:da:3c:19:
9d:aa:63:45:8b:8e:e6:90:19:34:9f:b2:5c:dd:8b:
01:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A0:D8:F7:0D:C2:ED:20:60:33:40:03:85:E3:8F:82:3F:D9:2A:B5
X509v3 Authority Key Identifier:
keyid:1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:20:a7:6c:56:f1:75:9d:86:40:89:e5:93:0c:77:35:79:ae:
21:20:5a:ac:87:97:7a:5d:8e:d4:42:3a:d2:fa:d6:40:8c:e7:
df:34:14:43:c6:0a:43:cf:ba:39:57:62:e6:81:3c:43:55:70:
2c:4e:8b:43:f0:07:a8:47:88:5b:ba:ed:df:53:d0:a9:01:74:
9c:17:cf:4d:fa:c9:ea:a9:0c:e7:bb:93:b5:0c:a0:c0:d2:cc:
35:dd:75:f2:8a:16:b6:80:f6:b0:67:d9:b5:01:71:55:ab:b0:
35:b3:39:4d:ee:6e:87:99:b7:e0:25:52:47:cd:80:83:00:e9:
46:16:81:c2:f8:de:fe:3b:f6:b6:42:a5:e6:d2:9f:ee:bf:6c:
9b:7a:c1:28:35:4b:60:34:1a:cf:ff:8b:51:52:59:d9:a3:77:
3e:dd:c1:20:50:bd:8a:e8:18:d8:7e:85:a5:98:c6:e0:1a:13:
bc:a1:49:7f:a5:f6:e9:7a:3e:d9:0e:d7:0d:2a:6f:a0:2e:32:
6b:9d:23:8a:72:0e:b7:18:bc:f1:c7:1b:64:c6:b4:81:09:b3:
53:20:70:e3:ad:a6:c9:dc:65:ca:1e:fe:7f:ff:5b:46:f2:cd:
d0:0d:a8:63:89:2e:ef:92:ff:08:43:15:08:ca:8d:17:15:44:
e3:c8:fa:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:35:47 2026 by rpki-client