Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
File: HCtQ2u86DL23KyPKPbvvwVc1g_k.mft (raw, json)
Hash identifier: YvE/chHiFJS5w2iFWZ8m6Azmyed19GPnokOkk4RK5mo=
Subject key identifier: 21:FE:3D:B3:D0:E7:D9:FC:BE:4A:F5:47:28:78:99:9B:34:A5:4F:05
Authority key identifier: 1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9
Certificate issuer: /CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9
Certificate serial: 019CAD598CECF3A1142C4D4CD0D7B5A8369B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
Manifest number: 0D6D
Signing time: Mon 02 Mar 2026 07:00:52 +0000
Manifest this update: Mon 02 Mar 2026 07:00:52 +0000
Manifest next update: Tue 03 Mar 2026 07:00:52 +0000
Files and hashes: 1: HCtQ2u86DL23KyPKPbvvwVc1g_k.crl (hash: 2c5LqbN6XaLYiwavWwAzyYOwzYY46EvTUkl2yKSpvOg=)
2: Mk8DlpfeRRa1qg1nk0Mvu-YumPw.roa (hash: mUVvW47r5i0R+fZsLAsCtRCsk0x6xVLyquq+qyROV1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:8c:ec:f3:a1:14:2c:4d:4c:d0:d7:b5:a8:36:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2b50daef3a0cbdb72b23ca3dbbefc1573583f9
Validity
Not Before: Mar 2 07:00:52 2026 GMT
Not After : Mar 3 07:00:52 2026 GMT
Subject: CN=21fe3db3d0e7d9fcbe4af5472878999b34a54f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1e:ea:34:5e:41:22:d1:96:79:3b:8e:70:f9:
13:c1:1e:e9:44:a7:86:bc:67:2e:d4:8d:33:4a:32:
62:4b:97:77:1b:38:5c:d0:74:4b:dc:bd:be:78:f5:
01:4f:9e:59:2e:c5:a2:da:14:7b:7a:e9:8d:e8:bf:
05:72:bd:f3:a7:c0:03:69:1b:ec:ba:37:96:e8:65:
21:18:9f:41:10:2c:c2:f1:a7:27:57:14:1b:cc:52:
ed:8b:fa:16:6c:51:83:63:67:7f:47:d3:fb:5d:30:
8f:80:fb:b0:35:e1:4f:b4:8e:63:c0:71:72:50:4b:
f2:95:43:68:a1:dd:09:d4:8f:22:98:e2:0d:6f:8a:
2e:67:f6:3c:37:67:6b:23:de:6b:2f:3f:3f:5d:3e:
67:d5:2b:6a:50:a4:82:2b:e8:16:a7:ef:f8:a4:84:
bf:7f:97:7f:4b:06:52:b2:0a:a5:3f:15:f7:84:7a:
5a:ec:fa:c1:76:a4:21:d1:b1:c4:e5:a1:0f:96:a5:
5f:fd:31:e2:fd:e9:0c:da:e1:11:02:27:0c:d2:58:
4c:5a:27:d3:18:e3:5b:0b:0b:58:6c:b8:d4:4a:29:
ad:56:05:95:60:ad:6b:72:20:80:29:98:f3:4d:36:
06:9c:31:d1:33:0d:58:d1:f8:88:a9:10:bf:7a:a7:
4e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FE:3D:B3:D0:E7:D9:FC:BE:4A:F5:47:28:78:99:9B:34:A5:4F:05
X509v3 Authority Key Identifier:
keyid:1C:2B:50:DA:EF:3A:0C:BD:B7:2B:23:CA:3D:BB:EF:C1:57:35:83:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCtQ2u86DL23KyPKPbvvwVc1g_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6f2b37-0d17-45ab-8282-ab4263ed40de/1/HCtQ2u86DL23KyPKPbvvwVc1g_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:fb:5c:d3:9b:63:55:05:d5:ab:00:51:d3:7b:97:47:eb:5a:
ff:d9:13:36:9d:10:90:4f:99:f0:b3:c9:95:70:45:49:92:0c:
fb:0e:37:9d:85:28:85:79:4d:82:d8:c9:e8:64:28:7f:44:86:
2d:b2:38:b8:28:37:d5:e7:4d:f9:2b:e2:88:e7:f7:59:55:72:
30:1a:81:1d:47:22:f4:a5:bc:b3:d2:34:e1:0f:1b:23:18:17:
ba:0c:68:19:41:34:d1:9b:c0:ba:c0:93:1b:52:35:89:36:59:
90:2d:86:32:ab:02:ac:4a:5d:4a:8b:65:f1:d2:8d:d3:a0:4e:
8a:bc:7c:57:1e:8f:4a:73:c2:a2:ef:e8:e3:68:97:ed:20:0d:
16:8b:e4:75:8c:7e:e3:c8:11:57:a4:4f:36:ca:80:67:34:a4:
8c:b8:45:e8:1f:61:c8:b9:1f:15:1c:e3:66:e5:ff:8c:87:74:
06:25:86:86:4c:47:3c:53:91:09:9c:01:37:47:f6:e4:e4:34:
27:19:03:7c:a4:b4:a6:dc:dc:c4:8f:80:1e:9e:07:74:a9:a1:
0a:ed:2e:7c:74:00:41:ef:e2:f6:ca:68:b3:fe:a3:2e:6d:71:
d7:7b:d4:a3:ed:97:bd:b8:c9:f8:81:8f:69:8b:bf:44:53:10:
4b:ff:46:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWYzs86EULE1M0Ne1qDabMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMmI1MGRhZWYzYTBjYmRiNzJiMjNjYTNkYmJlZmMxNTcz
NTgzZjkwHhcNMjYwMzAyMDcwMDUyWhcNMjYwMzAzMDcwMDUyWjAzMTEwLwYDVQQD
EygyMWZlM2RiM2QwZTdkOWZjYmU0YWY1NDcyODc4OTk5YjM0YTU0ZjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB7qNF5BItGWeTuOcPkTwR7pRKeG
vGcu1I0zSjJiS5d3Gzhc0HRL3L2+ePUBT55ZLsWi2hR7eumN6L8Fcr3zp8ADaRvs
ujeW6GUhGJ9BECzC8acnVxQbzFLti/oWbFGDY2d/R9P7XTCPgPuwNeFPtI5jwHFy
UEvylUNood0J1I8imOINb4ouZ/Y8N2drI95rLz8/XT5n1StqUKSCK+gWp+/4pIS/
f5d/SwZSsgqlPxX3hHpa7PrBdqQh0bHE5aEPlqVf/THi/ekM2uERAicM0lhMWifT
GONbCwtYbLjUSimtVgWVYK1rciCAKZjzTTYGnDHRMw1Y0fiIqRC/eqdOnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCH+PbPQ59n8vkr1Ryh4mZs0pU8FMB8GA1UdIwQY
MBaAFBwrUNrvOgy9tysjyj2778FXNYP5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEN0UTJ1ODZETDIzS3lQS1BidnZ3VmMxZ19rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82ZjJiMzctMGQxNy00NWFiLTgyODIt
YWI0MjYzZWQ0MGRlLzEvSEN0UTJ1ODZETDIzS3lQS1BidnZ3VmMxZ19rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS82ZjJiMzctMGQxNy00NWFiLTgyODItYWI0MjYzZWQ0MGRl
LzEvSEN0UTJ1ODZETDIzS3lQS1BidnZ3VmMxZ19rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHvtc05tj
VQXVqwBR03uXR+ta/9kTNp0QkE+Z8LPJlXBFSZIM+w43nYUohXlNgtjJ6GQof0SG
LbI4uCg31edN+SviiOf3WVVyMBqBHUci9KW8s9I04Q8bIxgXugxoGUE00ZvAusCT
G1I1iTZZkC2GMqsCrEpdSotl8dKN06BOirx8Vx6PSnPCou/o42iX7SANFovkdYx+
48gRV6RPNsqAZzSkjLhF6B9hyLkfFRzjZuX/jId0BiWGhkxHPFORCZwBN0f25OQ0
JxkDfKS0ptzcxI+AHp4HdKmhCu0ufHQAQe/i9spos/6jLm1x13vUo+2XvbjJ+IGP
aYu/RFMQS/9G1Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:20:50 2026 by rpki-client