Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
File: h-ll54gxqIuo-kGUMqnXusnbOKM.mft (raw, json)
Hash identifier: aytrTNvi8u1PY5wFWWzfFjrfyI7Ke9n/IP7wVdoLYLA=
Subject key identifier: 17:5F:13:7E:AB:75:1D:51:43:39:A0:7F:65:DF:52:58:7D:9D:CE:E5
Authority key identifier: 87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3
Certificate issuer: /CN=87e965e78831a88ba8fa419432a9d7bac9db38a3
Certificate serial: 019CAB6B9A9F8302023BC6D78DA93E319FAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
Manifest number: 08DB
Signing time: Sun 01 Mar 2026 22:01:21 +0000
Manifest this update: Sun 01 Mar 2026 22:01:21 +0000
Manifest next update: Mon 02 Mar 2026 22:01:21 +0000
Files and hashes: 1: 8gaFDPVm7425HwLUH8kmf-jVUCE.roa (hash: U1D2gfVixMPcnJRary8djiMaZdiJbp1bCUJ4yOL20hY=)
2: h-ll54gxqIuo-kGUMqnXusnbOKM.crl (hash: gJfxy29/ZYffHLF9r4tWvNvmKdxfkS50G/1AyFv+tic=)
3: ydGFE-vOjkRoY9XDm0d0hrrNVz0.roa (hash: ip0u+uChx3w8r1t9QF+aKgGRt/jAva0+561xQaWYRlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:9a:9f:83:02:02:3b:c6:d7:8d:a9:3e:31:9f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87e965e78831a88ba8fa419432a9d7bac9db38a3
Validity
Not Before: Mar 1 22:01:21 2026 GMT
Not After : Mar 2 22:01:21 2026 GMT
Subject: CN=175f137eab751d514339a07f65df52587d9dcee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f6:d3:3c:46:fc:31:e1:84:a2:f0:04:af:ec:
e8:ef:98:1f:a2:1a:a0:49:e6:5a:09:2d:16:6d:b6:
43:16:f2:3d:8e:9c:dd:9a:0c:07:89:f0:97:fd:fa:
7d:58:c8:40:a8:84:0c:e9:f6:a2:03:6d:a4:9b:97:
91:74:48:c8:12:56:ff:80:76:89:1b:49:a8:ff:d0:
10:db:65:3c:15:76:b8:3d:8b:60:79:3d:b5:2f:e7:
b9:a5:ed:0e:ea:97:2a:eb:b5:62:5b:8e:d7:6c:7b:
00:e9:d3:15:22:aa:b1:4b:88:f1:6e:3a:9a:42:f4:
f4:19:01:5b:d4:81:02:15:b2:33:4a:08:09:17:8d:
9e:f1:3b:64:04:f8:7c:95:ff:5f:1e:50:a5:8b:28:
b9:a6:6c:10:d6:1c:3d:29:c7:fb:bc:d5:ad:45:20:
35:5a:f2:3e:cc:5c:ee:0c:d3:25:6e:70:e3:87:d0:
70:e7:30:13:4b:52:74:f0:04:3c:4e:6f:7c:a1:77:
db:df:0d:f1:07:b1:87:c1:36:2f:ab:f2:ab:0c:52:
83:65:3c:a2:f4:24:2a:4e:71:7a:ce:40:1b:93:13:
07:c5:ee:07:b0:dd:2b:11:1b:4f:d3:69:ba:c9:8e:
81:2b:85:33:d2:e5:b7:56:06:18:dd:36:40:af:42:
25:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5F:13:7E:AB:75:1D:51:43:39:A0:7F:65:DF:52:58:7D:9D:CE:E5
X509v3 Authority Key Identifier:
keyid:87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:4d:a3:8c:db:16:ff:ab:ac:d6:21:21:a5:01:02:0b:b0:41:
e8:85:d8:1d:bf:25:7f:fc:06:b1:60:6d:86:91:c5:3c:cc:ad:
29:b2:e3:ed:ce:02:01:87:67:c7:be:a5:be:d4:60:7c:77:9c:
12:f0:94:0b:5a:f7:7d:fb:07:5e:21:a7:e5:ca:6a:ee:aa:82:
49:d1:98:20:e7:92:8d:ec:11:d3:3e:dd:ed:4b:d8:ec:9c:79:
6e:da:07:bb:3d:ad:56:32:0d:18:4f:59:58:50:d2:07:d7:64:
98:bc:f1:f7:36:68:6e:45:8b:3e:3c:64:c2:39:3e:b1:72:3f:
d5:c1:b5:2b:4d:91:8a:df:ed:dc:b9:b8:64:7f:08:d4:b0:68:
af:43:31:88:c9:ad:de:00:bc:5e:88:18:76:c6:ae:bb:a1:93:
a7:72:c3:a0:b5:41:b8:09:cc:3c:2a:e6:81:07:9c:c3:1f:13:
bb:dc:d8:58:4d:e5:64:b4:77:88:57:ab:bb:6f:14:c1:82:a9:
bf:d6:52:6f:4e:00:e8:99:68:66:36:e1:33:7d:be:eb:c9:18:
ee:a1:8f:31:23:9f:66:4a:38:2b:06:05:8d:1b:73:84:8b:47:
dd:4e:e1:c3:c1:08:88:ce:0a:14:16:ea:23:e1:2a:ad:bf:88:
3e:f5:5c:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra5qfgwICO8bXjak+MZ+tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZTk2NWU3ODgzMWE4OGJhOGZhNDE5NDMyYTlkN2JhYzlk
YjM4YTMwHhcNMjYwMzAxMjIwMTIxWhcNMjYwMzAyMjIwMTIxWjAzMTEwLwYDVQQD
EygxNzVmMTM3ZWFiNzUxZDUxNDMzOWEwN2Y2NWRmNTI1ODdkOWRjZWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvbTPEb8MeGEovAEr+zo75gfohqg
SeZaCS0WbbZDFvI9jpzdmgwHifCX/fp9WMhAqIQM6faiA22km5eRdEjIElb/gHaJ
G0mo/9AQ22U8FXa4PYtgeT21L+e5pe0O6pcq67ViW47XbHsA6dMVIqqxS4jxbjqa
QvT0GQFb1IECFbIzSggJF42e8TtkBPh8lf9fHlCliyi5pmwQ1hw9Kcf7vNWtRSA1
WvI+zFzuDNMlbnDjh9Bw5zATS1J08AQ8Tm98oXfb3w3xB7GHwTYvq/KrDFKDZTyi
9CQqTnF6zkAbkxMHxe4HsN0rERtP02m6yY6BK4Uz0uW3VgYY3TZAr0IlfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdfE36rdR1RQzmgf2XfUlh9nc7lMB8GA1UdIwQY
MBaAFIfpZeeIMaiLqPpBlDKp17rJ2zijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaC1sbDU0Z3hxSXVvLWtHVU1xblh1c25iT0tNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8wNTA1MzMtYTU3ZS00YThiLWJmMGQt
Y2VlM2I0OTI5MDJlLzEvaC1sbDU0Z3hxSXVvLWtHVU1xblh1c25iT0tNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8wNTA1MzMtYTU3ZS00YThiLWJmMGQtY2VlM2I0OTI5MDJl
LzEvaC1sbDU0Z3hxSXVvLWtHVU1xblh1c25iT0tNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk02jjNsW
/6us1iEhpQECC7BB6IXYHb8lf/wGsWBthpHFPMytKbLj7c4CAYdnx76lvtRgfHec
EvCUC1r3ffsHXiGn5cpq7qqCSdGYIOeSjewR0z7d7UvY7Jx5btoHuz2tVjINGE9Z
WFDSB9dkmLzx9zZobkWLPjxkwjk+sXI/1cG1K02Rit/t3Lm4ZH8I1LBor0MxiMmt
3gC8XogYdsauu6GTp3LDoLVBuAnMPCrmgQecwx8Tu9zYWE3lZLR3iFeru28UwYKp
v9ZSb04A6JloZjbhM32+68kY7qGPMSOfZko4KwYFjRtzhItH3U7hw8EIiM4KFBbq
I+Eqrb+IPvVcrQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:11:15 2026 by rpki-client