Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
File: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft (raw, json)
Hash identifier: sqxAU2N4p/R9KQFzmPzTifkIXAqhT0DVD1ozHSHhtwQ=
Subject key identifier: B3:21:BF:69:4E:00:D9:E4:EC:57:62:D0:6F:0A:AE:8E:3A:0A:7A:1E
Authority key identifier: 85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
Certificate issuer: /CN=854e8383e8208936802362a09f36085a50fcd85a
Certificate serial: 019CABA2733DBC36C13D593D82018AC89184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
Manifest number: 17DC
Signing time: Sun 01 Mar 2026 23:01:16 +0000
Manifest this update: Sun 01 Mar 2026 23:01:16 +0000
Manifest next update: Mon 02 Mar 2026 23:01:16 +0000
Files and hashes: 1: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl (hash: WrFGY/TRClgZiQbwmAQcAKWJrir8rMK09+1Cx7VyMn0=)
2: tlPMQw1c3qKVnL4XtiEzRpXRVfk.roa (hash: 2OUcGgPvEsXk+44Fs3qPgVHHqN26oV6vSG6RCh8q2/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:73:3d:bc:36:c1:3d:59:3d:82:01:8a:c8:91:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854e8383e8208936802362a09f36085a50fcd85a
Validity
Not Before: Mar 1 23:01:16 2026 GMT
Not After : Mar 2 23:01:16 2026 GMT
Subject: CN=b321bf694e00d9e4ec5762d06f0aae8e3a0a7a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f9:5f:3d:48:cb:10:64:4e:ae:1d:97:1a:8a:
e9:19:9d:3c:cb:75:4d:e3:6d:e3:11:7e:2a:02:7e:
e3:a1:cc:8b:d2:64:6c:be:b5:77:a4:f4:5c:74:82:
95:d5:25:6b:71:18:3a:d7:c6:9d:43:8d:b6:be:57:
3e:6f:70:64:45:30:63:12:db:ec:ac:d8:ff:2c:4d:
df:f0:93:5d:7a:63:f4:75:ae:29:20:5c:16:71:9e:
dc:f6:01:3c:72:16:ac:ba:5f:b8:36:61:98:f7:f6:
79:41:4e:63:ee:ca:ec:f8:5f:00:96:b9:88:19:f3:
fd:ea:c1:eb:51:ba:4d:f5:c9:05:06:c0:6c:19:c3:
24:a3:bb:1f:29:cd:0e:0c:69:67:8a:39:4a:93:00:
e7:e2:44:a7:9d:ba:c4:a2:f6:5e:dd:b0:27:8b:1f:
76:8e:44:05:b6:7d:61:31:5c:ae:ed:85:5e:fa:be:
10:67:b6:6e:51:16:43:e8:b7:dc:38:ca:91:1d:aa:
29:2a:78:34:34:06:f4:41:b2:38:04:ef:76:ea:3e:
61:b7:82:2c:b9:e3:82:94:5b:af:27:de:d5:27:bc:
08:01:d2:b2:61:a6:a6:24:65:78:f2:c5:84:f2:25:
61:a7:26:83:e8:d8:52:6c:9c:97:15:de:f4:29:a7:
75:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:21:BF:69:4E:00:D9:E4:EC:57:62:D0:6F:0A:AE:8E:3A:0A:7A:1E
X509v3 Authority Key Identifier:
keyid:85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:75:99:b9:6d:2f:ee:f6:e7:01:63:97:11:24:db:73:31:0f:
a1:9e:ab:e1:29:65:de:74:f0:77:58:9a:01:89:89:2a:0b:c6:
c5:4c:fb:9a:a0:d4:0c:f6:e0:76:c9:9e:d9:8c:26:bb:f3:38:
2f:bc:e3:94:7a:21:aa:43:89:fb:98:b2:00:a8:50:4f:af:b2:
49:03:f6:66:d3:9c:2f:79:3d:cf:0e:85:07:55:65:92:37:da:
39:0a:0f:fb:70:29:b3:8b:60:11:68:89:f7:e7:af:30:ed:35:
85:a7:3c:d3:c8:f7:9b:6f:99:30:10:0b:b1:79:78:1d:de:74:
7a:00:70:11:59:00:d1:d2:ce:4f:bd:53:bc:0c:ae:b6:cb:f8:
3b:a7:15:70:14:d2:0d:15:b0:5f:79:81:88:1a:a6:ae:09:82:
56:ae:9b:56:84:bd:99:94:88:d5:42:62:0a:78:df:1c:46:32:
15:c9:d4:97:3d:a5:08:69:5d:b2:c4:77:fc:89:49:c0:1e:a3:
38:6a:33:ac:0e:61:83:35:94:1d:ec:92:c6:87:e8:35:10:a2:
dc:28:95:55:86:c2:7d:bf:91:ea:ff:69:ef:8b:e8:a7:fd:1f:
27:09:38:32:8f:e1:bd:a1:26:57:0d:11:f4:14:86:e1:eb:87:
c6:17:75:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyronM9vDbBPVk9ggGKyJGEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NGU4MzgzZTgyMDg5MzY4MDIzNjJhMDlmMzYwODVhNTBm
Y2Q4NWEwHhcNMjYwMzAxMjMwMTE2WhcNMjYwMzAyMjMwMTE2WjAzMTEwLwYDVQQD
EyhiMzIxYmY2OTRlMDBkOWU0ZWM1NzYyZDA2ZjBhYWU4ZTNhMGE3YTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/lfPUjLEGROrh2XGorpGZ08y3VN
423jEX4qAn7jocyL0mRsvrV3pPRcdIKV1SVrcRg618adQ422vlc+b3BkRTBjEtvs
rNj/LE3f8JNdemP0da4pIFwWcZ7c9gE8chasul+4NmGY9/Z5QU5j7srs+F8AlrmI
GfP96sHrUbpN9ckFBsBsGcMko7sfKc0ODGlnijlKkwDn4kSnnbrEovZe3bAnix92
jkQFtn1hMVyu7YVe+r4QZ7ZuURZD6LfcOMqRHaopKng0NAb0QbI4BO926j5ht4Is
ueOClFuvJ97VJ7wIAdKyYaamJGV48sWE8iVhpyaD6NhSbJyXFd70Kad1OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMhv2lOANnk7Fdi0G8Kro46CnoeMB8GA1UdIwQY
MBaAFIVOg4PoIIk2gCNioJ82CFpQ/NhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFU2RGctZ2dpVGFBSTJLZ256WUlXbEQ4MkZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lMWVkYWItMjQzOS00YTdjLTk4NGMt
ZTZmZjdjYTNlY2VmLzEvaFU2RGctZ2dpVGFBSTJLZ256WUlXbEQ4MkZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lMWVkYWItMjQzOS00YTdjLTk4NGMtZTZmZjdjYTNlY2Vm
LzEvaFU2RGctZ2dpVGFBSTJLZ256WUlXbEQ4MkZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbnWZuW0v
7vbnAWOXESTbczEPoZ6r4Sll3nTwd1iaAYmJKgvGxUz7mqDUDPbgdsme2Ywmu/M4
L7zjlHohqkOJ+5iyAKhQT6+ySQP2ZtOcL3k9zw6FB1VlkjfaOQoP+3Aps4tgEWiJ
9+evMO01hac808j3m2+ZMBALsXl4Hd50egBwEVkA0dLOT71TvAyutsv4O6cVcBTS
DRWwX3mBiBqmrgmCVq6bVoS9mZSI1UJiCnjfHEYyFcnUlz2lCGldssR3/IlJwB6j
OGozrA5hgzWUHeySxofoNRCi3CiVVYbCfb+R6v9p74vop/0fJwk4Mo/hvaEmVw0R
9BSG4euHxhd1qA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:25:12 2026 by rpki-client