Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
File: D_HA6RHM5MRT_sKxaPbBPTbg34U.mft (raw, json)
Hash identifier: en4QVbu5+zNyww3OpUxG9k6A5wpDeux5RNy4tco2pDc=
Subject key identifier: 6A:8E:8E:93:85:B6:8E:F0:F3:F0:D6:10:90:0F:6F:9B:88:F2:47:60
Authority key identifier: 0F:F1:C0:E9:11:CC:E4:C4:53:FE:C2:B1:68:F6:C1:3D:36:E0:DF:85
Certificate issuer: /CN=0ff1c0e911cce4c453fec2b168f6c13d36e0df85
Certificate serial: 019D9B504A360AC9F0AB6EBDDB9E0789FF63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
Manifest number: DA
Signing time: Fri 17 Apr 2026 12:00:23 +0000
Manifest this update: Fri 17 Apr 2026 12:00:23 +0000
Manifest next update: Sat 18 Apr 2026 12:00:23 +0000
Files and hashes: 1: A2gg-MX124Lpmk4q6amGH364pI8.roa (hash: vW20LJAGKrZU5294D/w3GbyCDoxlRHd2AtS8gCcCOJ4=)
2: D_HA6RHM5MRT_sKxaPbBPTbg34U.crl (hash: YE7g1ZCysRhx4l+TSAZuj7ccl6HZGoPKLS92zgjwhiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:4a:36:0a:c9:f0:ab:6e:bd:db:9e:07:89:ff:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff1c0e911cce4c453fec2b168f6c13d36e0df85
Validity
Not Before: Apr 17 12:00:23 2026 GMT
Not After : Apr 18 12:00:23 2026 GMT
Subject: CN=6a8e8e9385b68ef0f3f0d610900f6f9b88f24760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ee:59:16:96:7b:92:02:f7:fe:47:3e:b4:db:
42:5e:7f:f8:a5:b2:9d:ac:97:1c:6f:07:7e:fc:d5:
85:54:51:0d:bb:8c:7e:67:83:b5:52:4d:cd:da:a5:
9d:ab:44:33:33:b2:19:ab:86:b5:da:33:7e:38:df:
3b:b3:e0:ed:83:e7:29:43:2f:ba:29:00:90:82:40:
0b:1f:c7:53:fb:70:34:bf:83:17:71:f0:91:2c:b5:
4a:b0:9e:e5:de:a4:84:b1:e8:18:ce:ba:3c:c3:c6:
d3:c9:24:e5:be:03:3c:3d:59:1b:c4:94:09:a1:93:
62:05:0f:0b:09:0f:d3:9f:b1:38:99:c2:a5:37:dc:
2d:c4:e5:68:9f:8e:8d:c0:8b:5f:5f:37:fb:1d:69:
44:33:44:fe:23:49:7b:e4:ee:16:c7:28:db:9e:35:
68:4c:c1:78:4b:4a:83:42:5a:da:eb:b7:3f:51:89:
8d:02:c2:33:34:2e:68:57:62:d8:f5:dd:61:d7:ab:
47:1f:d0:a2:6d:5f:66:06:b8:bf:d0:aa:97:11:92:
8e:f3:34:85:43:8d:55:73:9d:2e:14:7f:43:0b:a0:
57:88:d4:68:26:f3:73:1e:d4:f8:d0:8f:ba:72:da:
0c:fe:6d:74:83:a2:29:0b:4f:ea:bf:07:17:4f:a4:
39:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8E:8E:93:85:B6:8E:F0:F3:F0:D6:10:90:0F:6F:9B:88:F2:47:60
X509v3 Authority Key Identifier:
keyid:0F:F1:C0:E9:11:CC:E4:C4:53:FE:C2:B1:68:F6:C1:3D:36:E0:DF:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:d5:f7:ed:b2:db:3c:a6:22:46:cc:c8:3f:6a:c9:81:0a:b7:
59:2b:11:5b:d6:58:db:f7:92:03:3a:7b:07:d4:da:6d:13:03:
7a:dc:e4:95:c7:8c:ef:17:d4:20:5f:7c:23:63:bc:3e:3a:fe:
9c:da:ab:fd:eb:ac:43:02:dc:00:32:ea:15:e4:16:58:ad:47:
2d:1d:1f:0c:b6:c9:a2:fb:1c:4b:c6:de:53:55:0c:ab:48:2e:
c9:f1:98:81:8e:61:f7:89:24:c9:ce:57:34:42:42:3d:52:b9:
82:37:19:6e:5b:a6:f6:bc:8f:00:af:e0:5c:f7:07:7b:a7:13:
64:93:a5:fb:b0:23:d3:1f:f0:b4:35:58:a6:10:f4:ec:e8:d2:
a6:2c:06:86:48:cb:fa:e0:eb:57:ca:7d:0f:c4:0c:41:0e:22:
52:84:99:8c:99:71:e0:f4:a0:02:05:49:69:12:6f:f4:ba:8f:
9b:1f:90:8c:28:89:07:f1:1a:3c:9b:8b:23:51:5a:2f:44:3f:
ee:46:86:a6:44:36:80:cf:e4:c6:2e:39:c1:d1:6b:ce:5b:7f:
cf:91:18:2f:ea:c5:5e:23:d9:2a:31:d7:55:b2:53:db:80:ad:
80:4a:d7:36:2e:4f:28:d1:ac:ed:85:bc:49:3a:0a:00:39:89:
7a:34:de:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUEo2Csnwq269254Hif9jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZjFjMGU5MTFjY2U0YzQ1M2ZlYzJiMTY4ZjZjMTNkMzZl
MGRmODUwHhcNMjYwNDE3MTIwMDIzWhcNMjYwNDE4MTIwMDIzWjAzMTEwLwYDVQQD
Eyg2YThlOGU5Mzg1YjY4ZWYwZjNmMGQ2MTA5MDBmNmY5Yjg4ZjI0NzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhu5ZFpZ7kgL3/kc+tNtCXn/4pbKd
rJccbwd+/NWFVFENu4x+Z4O1Uk3N2qWdq0QzM7IZq4a12jN+ON87s+Dtg+cpQy+6
KQCQgkALH8dT+3A0v4MXcfCRLLVKsJ7l3qSEsegYzro8w8bTySTlvgM8PVkbxJQJ
oZNiBQ8LCQ/Tn7E4mcKlN9wtxOVon46NwItfXzf7HWlEM0T+I0l75O4WxyjbnjVo
TMF4S0qDQlra67c/UYmNAsIzNC5oV2LY9d1h16tHH9CibV9mBri/0KqXEZKO8zSF
Q41Vc50uFH9DC6BXiNRoJvNzHtT40I+6ctoM/m10g6IpC0/qvwcXT6Q5cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqOjpOFto7w8/DWEJAPb5uI8kdgMB8GA1UdIwQY
MBaAFA/xwOkRzOTEU/7CsWj2wT024N+FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF9IQTZSSE01TVJUX3NLeGFQYkJQVGJnMzRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi83ZDJlNTEtMjJkMi00NjFhLWFhMmUt
NzlkMTNmYWFiNjJjLzEvRF9IQTZSSE01TVJUX3NLeGFQYkJQVGJnMzRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi83ZDJlNTEtMjJkMi00NjFhLWFhMmUtNzlkMTNmYWFiNjJj
LzEvRF9IQTZSSE01TVJUX3NLeGFQYkJQVGJnMzRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu9X37bLb
PKYiRszIP2rJgQq3WSsRW9ZY2/eSAzp7B9TabRMDetzklceM7xfUIF98I2O8Pjr+
nNqr/eusQwLcADLqFeQWWK1HLR0fDLbJovscS8beU1UMq0guyfGYgY5h94kkyc5X
NEJCPVK5gjcZblum9ryPAK/gXPcHe6cTZJOl+7Aj0x/wtDVYphD07OjSpiwGhkjL
+uDrV8p9D8QMQQ4iUoSZjJlx4PSgAgVJaRJv9LqPmx+QjCiJB/EaPJuLI1FaL0Q/
7kaGpkQ2gM/kxi45wdFrzlt/z5EYL+rFXiPZKjHXVbJT24CtgErXNi5PKNGs7YW8
SToKADmJejTedw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:47:44 2026 by rpki-client