Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
File: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft (raw, json)
Hash identifier: LVgIEB3NKBsGnkxdameKn0mi6gOuk6dkW6zgynLs+9I=
Subject key identifier: 35:57:C7:28:0D:02:E7:8D:44:25:4F:2B:03:D5:5F:D9:0A:78:72:D0
Authority key identifier: 85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
Certificate issuer: /CN=854e8383e8208936802362a09f36085a50fcd85a
Certificate serial: 019D992B4005A043FFA8B77CD9012A4E80F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
Manifest number: 1857
Signing time: Fri 17 Apr 2026 02:00:41 +0000
Manifest this update: Fri 17 Apr 2026 02:00:41 +0000
Manifest next update: Sat 18 Apr 2026 02:00:41 +0000
Files and hashes: 1: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl (hash: hKKVjCFc0JxcVIWYyqiSkS6GhI00D7CPU9NYbORBIfU=)
2: tlPMQw1c3qKVnL4XtiEzRpXRVfk.roa (hash: 2OUcGgPvEsXk+44Fs3qPgVHHqN26oV6vSG6RCh8q2/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:40:05:a0:43:ff:a8:b7:7c:d9:01:2a:4e:80:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854e8383e8208936802362a09f36085a50fcd85a
Validity
Not Before: Apr 17 02:00:41 2026 GMT
Not After : Apr 18 02:00:41 2026 GMT
Subject: CN=3557c7280d02e78d44254f2b03d55fd90a7872d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:02:77:f7:60:71:0e:a5:a7:c7:7f:98:2c:fb:
96:af:91:28:be:d3:9b:b5:e3:6c:11:54:23:0a:98:
bb:c2:6c:a2:e7:19:32:4d:40:f5:9f:09:c2:3f:46:
15:41:05:ef:10:40:8e:cb:38:bb:f5:2f:a5:97:ec:
bb:45:a3:3e:05:30:9c:62:71:88:27:62:82:29:36:
51:7e:e3:d3:26:35:90:f8:b5:be:5d:d7:bb:80:70:
8b:96:a8:bb:b5:bd:f8:86:18:c5:92:7f:ce:df:44:
68:ca:1c:79:60:a5:c3:82:be:a5:bc:a9:0b:91:37:
b9:04:e5:0d:52:d5:f7:95:58:c9:a8:3f:d2:f3:36:
ef:cd:ee:eb:3d:e8:fd:62:47:ed:40:3c:63:6a:68:
fa:d0:16:b1:ee:74:68:72:17:a1:a0:24:3f:e1:10:
96:c2:e3:63:fb:6a:77:5b:1f:62:a9:3b:b6:38:3d:
ab:cd:9b:c1:39:bd:15:b3:3f:39:c5:c0:c1:ee:56:
2a:e8:ba:ea:6b:0a:e5:94:69:42:cb:10:3f:b9:59:
96:ce:a1:a1:76:41:29:86:63:b4:4b:e7:32:57:87:
6a:b3:18:ec:a3:89:b0:d0:f2:1d:3e:05:ae:9a:cc:
bf:30:b0:da:3a:e0:e4:3d:82:66:2f:26:8f:d4:c3:
f8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:57:C7:28:0D:02:E7:8D:44:25:4F:2B:03:D5:5F:D9:0A:78:72:D0
X509v3 Authority Key Identifier:
keyid:85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:1a:de:04:ad:4d:c7:dc:fc:4f:2c:1e:ff:96:fd:16:ba:16:
3a:1f:66:10:b0:7a:69:29:c3:8a:a0:19:3f:6a:b8:27:df:d7:
0e:93:77:9e:00:e8:c8:11:cd:65:c0:38:6b:34:a5:16:62:7c:
fd:64:28:c5:24:e9:c7:d7:56:7c:07:8d:6c:12:70:57:9e:9f:
c0:72:6e:55:49:c3:21:6c:c7:7b:91:7e:30:d4:6b:aa:8d:3a:
5a:75:50:e1:51:64:63:05:a7:9b:2a:04:ca:d0:25:0e:dd:7c:
73:87:07:fb:22:33:ea:77:fb:d9:5a:c9:a6:64:56:26:60:9f:
4e:83:62:44:99:bd:7a:fb:f8:51:dc:f3:e6:b1:5b:d9:70:6e:
b1:01:74:0b:3f:97:0e:8e:58:ff:7d:8c:e4:49:56:80:16:7c:
fb:ed:1a:2e:d5:45:23:42:86:45:82:09:1a:42:7c:7b:76:2b:
77:b6:43:16:72:69:5f:5a:0a:e2:47:05:72:b4:31:5b:28:a9:
dd:7e:19:33:34:b1:dc:23:94:89:82:94:c2:4a:45:4e:56:21:
c8:29:76:40:3c:c0:c7:aa:97:df:fd:07:dd:fb:39:dc:0e:4f:
4d:9a:cd:08:df:40:97:43:5a:4d:7f:53:68:ff:f9:25:a2:ef:
b9:da:f7:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK0AFoEP/qLd82QEqToD5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NGU4MzgzZTgyMDg5MzY4MDIzNjJhMDlmMzYwODVhNTBm
Y2Q4NWEwHhcNMjYwNDE3MDIwMDQxWhcNMjYwNDE4MDIwMDQxWjAzMTEwLwYDVQQD
EygzNTU3YzcyODBkMDJlNzhkNDQyNTRmMmIwM2Q1NWZkOTBhNzg3MmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QJ392BxDqWnx3+YLPuWr5EovtOb
teNsEVQjCpi7wmyi5xkyTUD1nwnCP0YVQQXvEECOyzi79S+ll+y7RaM+BTCcYnGI
J2KCKTZRfuPTJjWQ+LW+Xde7gHCLlqi7tb34hhjFkn/O30Royhx5YKXDgr6lvKkL
kTe5BOUNUtX3lVjJqD/S8zbvze7rPej9YkftQDxjamj60Bax7nRochehoCQ/4RCW
wuNj+2p3Wx9iqTu2OD2rzZvBOb0Vsz85xcDB7lYq6LrqawrllGlCyxA/uVmWzqGh
dkEphmO0S+cyV4dqsxjso4mw0PIdPgWumsy/MLDaOuDkPYJmLyaP1MP46wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVXxygNAueNRCVPKwPVX9kKeHLQMB8GA1UdIwQY
MBaAFIVOg4PoIIk2gCNioJ82CFpQ/NhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFU2RGctZ2dpVGFBSTJLZ256WUlXbEQ4MkZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lMWVkYWItMjQzOS00YTdjLTk4NGMt
ZTZmZjdjYTNlY2VmLzEvaFU2RGctZ2dpVGFBSTJLZ256WUlXbEQ4MkZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lMWVkYWItMjQzOS00YTdjLTk4NGMtZTZmZjdjYTNlY2Vm
LzEvaFU2RGctZ2dpVGFBSTJLZ256WUlXbEQ4MkZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAABreBK1N
x9z8Tywe/5b9FroWOh9mELB6aSnDiqAZP2q4J9/XDpN3ngDoyBHNZcA4azSlFmJ8
/WQoxSTpx9dWfAeNbBJwV56fwHJuVUnDIWzHe5F+MNRrqo06WnVQ4VFkYwWnmyoE
ytAlDt18c4cH+yIz6nf72VrJpmRWJmCfToNiRJm9evv4Udzz5rFb2XBusQF0Cz+X
Do5Y/32M5ElWgBZ8++0aLtVFI0KGRYIJGkJ8e3Yrd7ZDFnJpX1oK4kcFcrQxWyip
3X4ZMzSx3COUiYKUwkpFTlYhyCl2QDzAx6qX3/0H3fs53A5PTZrNCN9Al0NaTX9T
aP/5JaLvudr3Sg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:14:44 2026 by rpki-client