Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/H3fa0q1-uoFA3jNKr6_fDIQWvIo.mft
File: H3fa0q1-uoFA3jNKr6_fDIQWvIo.mft (raw, json)
Hash identifier: dKX1U+t//i953vzXA4PeaR8hPffCc7gflEzjQWOqFys=
Subject key identifier: D5:51:2D:E4:87:71:50:D6:44:25:C3:BB:55:3C:D7:9E:65:38:A4:E6
Authority key identifier: 1F:77:DA:D2:AD:7E:BA:81:40:DE:33:4A:AF:AF:DF:0C:84:16:BC:8A
Certificate issuer: /CN=1f77dad2ad7eba8140de334aafafdf0c8416bc8a
Certificate serial: 01A1E05F27C342A34513E5AB6A7878225A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3fa0q1-uoFA3jNKr6_fDIQWvIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/H3fa0q1-uoFA3jNKr6_fDIQWvIo.mft
Manifest number: 0172
Signing time: Sun 15 Nov 2026 18:01:34 +0000
Manifest this update: Sun 15 Nov 2026 18:01:34 +0000
Manifest next update: Mon 16 Nov 2026 18:01:34 +0000
Files and hashes: 1: H3fa0q1-uoFA3jNKr6_fDIQWvIo.crl (hash: s3WK/hBTKHy2l/im68qI2P4ay1ZonB9WG/HEHZIeD78=)
2: NF7wh5XtVzQFP8XtslPI32haJaQ.roa (hash: 5uh23E8ZYXbA1nwKA2QCUC1wPKEuO5kBSIdtC8OVFYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/H3fa0q1-uoFA3jNKr6_fDIQWvIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/H3fa0q1-uoFA3jNKr6_fDIQWvIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3fa0q1-uoFA3jNKr6_fDIQWvIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:5f:27:c3:42:a3:45:13:e5:ab:6a:78:78:22:5a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f77dad2ad7eba8140de334aafafdf0c8416bc8a
Validity
Not Before: Nov 15 18:01:34 2026 GMT
Not After : Nov 16 18:01:34 2026 GMT
Subject: CN=d5512de4877150d64425c3bb553cd79e6538a4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cc:d4:a8:e8:ae:da:6c:7a:e7:86:bc:49:ea:
cc:57:7e:10:a1:69:e7:df:b1:32:2e:86:ed:73:ce:
0d:40:a9:52:3c:e9:90:1d:b7:32:8c:e6:94:79:c5:
59:f7:b3:aa:43:14:d5:17:4e:20:d7:37:f0:4e:88:
e2:3e:19:8d:f2:dd:ea:be:bd:5b:be:bf:91:42:06:
92:08:e1:0d:a8:1d:f7:a0:2c:a4:6e:db:50:84:69:
4e:da:d1:5f:e9:34:a2:d4:01:34:5d:ed:eb:e9:a8:
0d:c6:bc:1a:51:a9:8a:7e:39:5d:c5:be:d1:6f:20:
bf:2f:de:76:e2:53:6c:e9:0b:d7:e1:a3:2c:70:ed:
10:7a:99:28:77:00:cf:30:a8:61:61:e6:e0:ec:7b:
2e:b6:17:be:d4:d5:47:e1:e9:2d:1e:66:f2:42:46:
00:cd:88:f2:f8:1c:0d:41:b0:c7:47:45:2a:aa:82:
54:11:34:a4:b7:a5:10:fa:99:c0:f5:6d:da:b3:9c:
8d:21:b4:4e:10:8e:87:cf:f1:26:91:d4:0c:14:b1:
33:cd:6c:28:2e:f3:c6:c2:41:25:6f:85:73:cf:42:
80:26:13:2e:c2:23:52:3c:cc:96:6b:0f:b6:e1:8d:
49:84:40:d1:8c:dc:2b:fc:09:a8:3d:e4:e3:e0:7f:
c1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:51:2D:E4:87:71:50:D6:44:25:C3:BB:55:3C:D7:9E:65:38:A4:E6
X509v3 Authority Key Identifier:
keyid:1F:77:DA:D2:AD:7E:BA:81:40:DE:33:4A:AF:AF:DF:0C:84:16:BC:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3fa0q1-uoFA3jNKr6_fDIQWvIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/H3fa0q1-uoFA3jNKr6_fDIQWvIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/H3fa0q1-uoFA3jNKr6_fDIQWvIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:35:14:59:ca:e2:ee:3b:06:34:ef:17:72:6d:d4:a4:bd:dd:
ce:7c:ed:31:ef:01:ce:b3:8d:b8:33:8f:4d:01:c8:cf:8f:64:
23:7f:7d:62:4e:7c:ab:f4:95:bc:4e:9f:4a:c2:3e:6c:a8:95:
c1:01:9e:29:f1:dc:55:47:53:33:98:30:d2:5c:ef:dd:ec:fd:
f8:a0:42:84:aa:18:40:ae:ba:28:17:61:e9:5f:81:fc:49:90:
1b:b4:58:c0:65:43:22:a4:ba:3f:8d:87:b8:64:b8:16:81:1e:
4f:9a:08:54:77:fb:ee:33:49:18:ca:58:80:a8:0b:0a:3c:ec:
0c:49:32:76:2c:23:8c:20:f5:e7:c0:83:ca:bb:69:82:91:10:
94:b7:ea:e9:7c:7a:2a:bb:74:a2:98:cf:52:0f:e3:b9:a1:ba:
4e:2a:04:1c:57:c6:d2:a5:8b:c2:39:60:01:aa:52:49:3c:a0:
e5:74:57:0b:34:57:2b:73:ca:7a:bc:22:db:f9:7d:28:d1:b8:
19:c2:66:ac:65:9b:df:0b:1a:28:f0:b0:e9:bc:d8:cd:9c:1c:
a5:a4:9d:c2:ef:39:35:0c:e3:8f:45:b2:b6:d7:7f:89:3c:bc:
5f:03:3e:de:80:bd:c7:35:94:f5:fb:df:f8:d2:04:16:fc:4d:
e9:ec:50:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHgXyfDQqNFE+Wranh4IloRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNzdkYWQyYWQ3ZWJhODE0MGRlMzM0YWFmYWZkZjBjODQx
NmJjOGEwHhcNMjYxMTE1MTgwMTM0WhcNMjYxMTE2MTgwMTM0WjAzMTEwLwYDVQQD
EyhkNTUxMmRlNDg3NzE1MGQ2NDQyNWMzYmI1NTNjZDc5ZTY1MzhhNGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMzUqOiu2mx654a8SerMV34QoWnn
37EyLobtc84NQKlSPOmQHbcyjOaUecVZ97OqQxTVF04g1zfwTojiPhmN8t3qvr1b
vr+RQgaSCOENqB33oCykbttQhGlO2tFf6TSi1AE0Xe3r6agNxrwaUamKfjldxb7R
byC/L9524lNs6QvX4aMscO0QepkodwDPMKhhYebg7Hsuthe+1NVH4ektHmbyQkYA
zYjy+BwNQbDHR0UqqoJUETSkt6UQ+pnA9W3as5yNIbROEI6Hz/EmkdQMFLEzzWwo
LvPGwkElb4Vzz0KAJhMuwiNSPMyWaw+24Y1JhEDRjNwr/AmoPeTj4H/BrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVRLeSHcVDWRCXDu1U8155lOKTmMB8GA1UdIwQY
MBaAFB932tKtfrqBQN4zSq+v3wyEFryKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDNmYTBxMS11b0ZBM2pOS3I2X2ZESVFXdklvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC85NmY2ZWUtODRkYi00NWEwLWFiZjAt
MzA3ZTViODFiYmNlLzEvSDNmYTBxMS11b0ZBM2pOS3I2X2ZESVFXdklvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC85NmY2ZWUtODRkYi00NWEwLWFiZjAtMzA3ZTViODFiYmNl
LzEvSDNmYTBxMS11b0ZBM2pOS3I2X2ZESVFXdklvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARTUUWcri
7jsGNO8Xcm3UpL3dznztMe8BzrONuDOPTQHIz49kI399Yk58q/SVvE6fSsI+bKiV
wQGeKfHcVUdTM5gw0lzv3ez9+KBChKoYQK66KBdh6V+B/EmQG7RYwGVDIqS6P42H
uGS4FoEeT5oIVHf77jNJGMpYgKgLCjzsDEkydiwjjCD158CDyrtpgpEQlLfq6Xx6
Krt0opjPUg/juaG6TioEHFfG0qWLwjlgAapSSTyg5XRXCzRXK3PKerwi2/l9KNG4
GcJmrGWb3wsaKPCw6bzYzZwcpaSdwu85NQzjj0Wyttd/iTy8XwM+3oC9xzWU9fvf
+NIEFvxN6exQSw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:15:03 2026 by rpki-client