Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
File: HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft (raw, json)
Hash identifier: D7/4KFywevK+a+mjypMByFQ+mCOnAgS+QEQ5wJ8TACg=
Subject key identifier: 52:54:68:AE:35:94:C7:6F:D0:3F:13:8D:BD:D1:EB:9D:2F:A3:24:86
Authority key identifier: 1C:8F:BA:99:36:50:34:8A:13:51:52:EE:C3:48:A1:19:43:0E:63:40
Certificate issuer: /CN=1c8fba993650348a135152eec348a119430e6340
Certificate serial: 019CAE6C342C7231C60B7C391AB2D1628F98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
Manifest number: 030D
Signing time: Mon 02 Mar 2026 12:00:52 +0000
Manifest this update: Mon 02 Mar 2026 12:00:52 +0000
Manifest next update: Tue 03 Mar 2026 12:00:52 +0000
Files and hashes: 1: HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl (hash: mBxzosdaznFT7ROm9FUaMls6ZuhqD5p+H9WRhCStfyA=)
2: dnhblZcylCcbRj12R5ofCpHt7LU.roa (hash: oRIsfhmT16Rl0vK9L5ENWVnifqieHto224vdnp4iUt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:34:2c:72:31:c6:0b:7c:39:1a:b2:d1:62:8f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c8fba993650348a135152eec348a119430e6340
Validity
Not Before: Mar 2 12:00:52 2026 GMT
Not After : Mar 3 12:00:52 2026 GMT
Subject: CN=525468ae3594c76fd03f138dbdd1eb9d2fa32486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fc:3f:04:a7:c6:81:5f:f9:34:7b:04:88:0e:
65:e6:25:26:63:4f:ce:71:03:b1:77:c2:ff:23:7b:
e6:e6:0e:e3:18:4c:e0:63:db:3a:d7:8b:f9:a4:df:
a8:37:74:8a:fd:f6:dc:5e:91:a9:99:60:4d:64:9a:
2d:f0:0d:e3:a2:08:ba:a1:1b:08:85:17:2b:d8:f5:
b9:4c:e7:cb:eb:b2:dd:37:d1:17:f4:4e:0a:0a:6f:
ff:82:96:91:a6:bc:5b:a2:83:fc:6f:7f:10:dd:7b:
54:70:42:8c:b0:03:37:24:bb:ab:3e:c8:6a:ed:8a:
fe:a4:48:22:76:55:24:50:c1:f6:69:a0:d0:11:5d:
c1:a0:00:2e:09:ba:36:63:bf:5c:a2:87:9e:91:55:
35:cd:ce:37:0b:a8:e3:ba:68:99:ec:8b:31:30:0d:
15:54:79:d3:32:1b:bc:22:de:5d:43:4d:43:90:5e:
ea:43:c3:5c:6f:33:71:61:02:f9:f4:87:ab:e1:e6:
d3:fd:76:3e:05:f5:c4:be:22:fa:00:b6:60:1d:e5:
fd:44:ec:50:93:ac:c6:93:d4:4f:a8:92:d8:52:64:
a9:ed:04:5d:d3:93:04:63:1a:4b:65:d9:04:c7:bf:
e3:cd:9a:8f:f7:22:38:5d:13:ba:12:3a:60:47:b9:
26:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:54:68:AE:35:94:C7:6F:D0:3F:13:8D:BD:D1:EB:9D:2F:A3:24:86
X509v3 Authority Key Identifier:
keyid:1C:8F:BA:99:36:50:34:8A:13:51:52:EE:C3:48:A1:19:43:0E:63:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI-6mTZQNIoTUVLuw0ihGUMOY0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f0b84b-1145-4063-86b7-d5d8b44fce34/1/HI-6mTZQNIoTUVLuw0ihGUMOY0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:55:2f:ca:f4:b5:17:5c:56:f1:b3:a4:9e:79:6c:aa:13:12:
7c:86:d4:01:b9:69:ad:57:5a:a6:7f:6d:1e:56:b2:6e:60:1b:
21:d6:30:84:ad:f5:8a:7a:51:8c:c3:96:8c:7f:1f:5d:2e:3e:
88:aa:92:71:1d:d9:2a:5a:8f:c1:ef:e1:be:e7:82:fd:ff:fb:
eb:45:a3:f3:c4:6a:cb:8b:37:1d:49:0d:c2:eb:49:90:5a:88:
c5:8d:81:50:65:9a:81:fe:7b:ce:e1:23:2e:0c:df:06:a3:d5:
63:ac:c6:40:dd:3e:89:41:23:af:41:b8:23:8e:b2:5a:96:d6:
90:24:80:b6:de:17:87:2d:93:8e:49:a8:c4:f7:1d:3a:93:71:
e5:29:40:52:75:8e:ca:d4:fa:1e:e7:e4:05:43:42:21:c6:cb:
c3:1c:74:fd:12:97:02:30:9b:2e:b8:d5:36:f5:bb:da:69:3b:
20:41:32:46:ad:05:8b:af:53:5e:d0:9f:d9:a8:44:5f:fd:7e:
45:4f:3a:1e:5c:c0:35:c2:10:cc:5a:b0:7e:85:1f:37:25:5a:
83:d6:2c:37:08:ad:62:7b:42:61:d1:44:0b:13:5f:1a:ea:fb:
38:05:59:20:44:e7:2e:72:08:d0:b5:78:ad:ea:5b:89:f0:af:
30:8f:85:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:50:09 2026 by rpki-client