Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
File: hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft (raw, json)
Hash identifier: IURBOKHg3eedJgxUANU10bvdGgJleZJci3Htt2gjZ2E=
Subject key identifier: 62:01:12:C7:69:2C:D6:66:0D:9B:57:7A:B6:AA:A1:09:A4:C7:9A:B5
Authority key identifier: 85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84
Certificate issuer: /CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084
Certificate serial: 019CAAFD614D7C2BC67F1A6F11FD4D8E8CEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
Manifest number: 0F6C
Signing time: Sun 01 Mar 2026 20:00:58 +0000
Manifest this update: Sun 01 Mar 2026 20:00:58 +0000
Manifest next update: Mon 02 Mar 2026 20:00:58 +0000
Files and hashes: 1: Mm3cGWuzg7gyTt25MrA_Cb8WYyU.roa (hash: QSO9mmv4K2NyhZinj8I/GzIYb/RrAcM6Y8mv7blhZ40=)
2: hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl (hash: AoSMk7EslhxaxlOo1cREsLjCSrQx1bxMGpkVWVNKl1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:61:4d:7c:2b:c6:7f:1a:6f:11:fd:4d:8e:8c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084
Validity
Not Before: Mar 1 20:00:58 2026 GMT
Not After : Mar 2 20:00:58 2026 GMT
Subject: CN=620112c7692cd6660d9b577ab6aaa109a4c79ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fb:8d:b7:9b:b1:d1:67:9c:44:ea:45:98:78:
fd:66:e8:9e:c4:db:ed:f2:67:7b:23:50:ba:5d:27:
1c:5e:e0:24:28:02:71:f5:50:e5:70:a2:fe:3f:aa:
d3:b8:2c:31:50:01:c0:d5:3d:f7:48:f8:81:c2:90:
81:f5:cf:20:b1:84:5b:d5:2a:a2:f0:ff:a5:7b:63:
64:f6:c6:24:22:59:9b:2d:58:57:37:74:33:d6:43:
70:1e:a9:10:77:0d:dd:76:30:73:b3:37:32:17:3e:
67:61:72:c1:bb:b5:2a:34:50:1d:ef:21:ae:49:55:
08:ed:24:d1:c7:c0:e1:24:a3:8c:c5:37:ef:64:f8:
3e:dd:a2:20:13:ee:65:c5:e7:fd:96:a2:de:39:c1:
b4:a2:b5:ad:51:bc:77:b5:fb:85:37:7f:5b:a6:86:
8d:af:5c:21:b2:fe:2a:63:64:e1:dd:74:be:b0:74:
e8:41:f9:4e:e5:48:2e:6e:d2:3f:c5:19:65:34:ba:
90:01:2d:f8:13:89:94:38:5f:cf:f6:90:be:7c:7f:
77:4c:35:ca:c5:d4:e0:8b:45:e1:8a:9d:03:11:51:
6d:04:11:40:8d:47:fd:2d:40:a0:40:35:c0:ec:dd:
2b:84:a3:02:55:bc:00:45:58:f7:c5:b3:d4:2b:6d:
aa:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:01:12:C7:69:2C:D6:66:0D:9B:57:7A:B6:AA:A1:09:A4:C7:9A:B5
X509v3 Authority Key Identifier:
keyid:85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:42:37:2c:c9:9e:81:b2:1f:35:c5:91:d7:30:b6:a6:86:a6:
cc:ba:b6:e0:1c:88:93:03:07:a6:3f:49:9c:7a:3d:7b:4f:12:
ae:08:d9:bf:14:22:d0:e1:c0:f1:7f:6b:7e:b8:42:df:01:8e:
cc:c2:9b:cb:c6:cb:02:ab:6f:5a:a5:f0:af:4c:cf:69:d5:2b:
94:ad:a7:10:85:fb:56:6e:7a:ef:a4:be:02:db:9b:96:6f:64:
b7:22:10:18:29:c0:2e:96:9e:8c:4c:dd:99:47:24:e3:0d:63:
0e:ee:2a:43:c7:7b:45:0e:f8:6b:a0:63:4c:94:b7:cd:5c:e6:
4f:d4:c0:75:09:6a:d6:77:9e:0a:e8:dd:f3:da:97:f0:a1:9b:
23:e9:96:95:bf:10:e2:19:9f:41:31:4c:d1:b0:fd:ba:00:3a:
e1:e6:13:b5:c3:bc:93:af:27:a3:a5:0e:d1:6b:9d:3c:29:a6:
3a:f1:d0:37:e6:14:29:e2:8f:0b:29:ce:33:fb:ab:51:87:29:
1b:63:19:cc:6f:fd:e7:56:57:32:be:45:8b:53:62:07:5c:82:
9f:b9:9c:5a:a6:b4:ff:d4:ea:22:cf:74:a1:d9:33:f1:d3:b5:
63:5e:d7:5b:8f:13:a9:d6:e6:d4:ec:92:dc:32:b6:94:c1:98:
f1:1b:54:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/WFNfCvGfxpvEf1NjozuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZDA1ZTAxN2UzMzNkMTdiM2FlYjhjNWQ0OTQzYmU4ZGM2
N2MwODQwHhcNMjYwMzAxMjAwMDU4WhcNMjYwMzAyMjAwMDU4WjAzMTEwLwYDVQQD
Eyg2MjAxMTJjNzY5MmNkNjY2MGQ5YjU3N2FiNmFhYTEwOWE0Yzc5YWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPuNt5ux0WecROpFmHj9ZuiexNvt
8md7I1C6XSccXuAkKAJx9VDlcKL+P6rTuCwxUAHA1T33SPiBwpCB9c8gsYRb1Sqi
8P+le2Nk9sYkIlmbLVhXN3Qz1kNwHqkQdw3ddjBzszcyFz5nYXLBu7UqNFAd7yGu
SVUI7STRx8DhJKOMxTfvZPg+3aIgE+5lxef9lqLeOcG0orWtUbx3tfuFN39bpoaN
r1whsv4qY2Th3XS+sHToQflO5UgubtI/xRllNLqQAS34E4mUOF/P9pC+fH93TDXK
xdTgi0Xhip0DEVFtBBFAjUf9LUCgQDXA7N0rhKMCVbwARVj3xbPUK22q7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIBEsdpLNZmDZtXeraqoQmkx5q1MB8GA1UdIwQY
MBaAFIXQXgF+Mz0Xs664xdSUO+jcZ8CEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGRCZUFYNHpQUmV6cnJqRjFKUTc2Tnhud0lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8wOTVhYzktYzNmYS00NjVkLTgzMWQt
NDdjOTUwMzM2ZTJmLzEvaGRCZUFYNHpQUmV6cnJqRjFKUTc2Tnhud0lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8wOTVhYzktYzNmYS00NjVkLTgzMWQtNDdjOTUwMzM2ZTJm
LzEvaGRCZUFYNHpQUmV6cnJqRjFKUTc2Tnhud0lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQkI3LMme
gbIfNcWR1zC2poamzLq24ByIkwMHpj9JnHo9e08SrgjZvxQi0OHA8X9rfrhC3wGO
zMKby8bLAqtvWqXwr0zPadUrlK2nEIX7Vm5676S+Atublm9ktyIQGCnALpaejEzd
mUck4w1jDu4qQ8d7RQ74a6BjTJS3zVzmT9TAdQlq1neeCujd89qX8KGbI+mWlb8Q
4hmfQTFM0bD9ugA64eYTtcO8k68no6UO0WudPCmmOvHQN+YUKeKPCynOM/urUYcp
G2MZzG/951ZXMr5Fi1NiB1yCn7mcWqa0/9TqIs90odkz8dO1Y17XW48Tqdbm1OyS
3DK2lMGY8RtUnw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:07 2026 by rpki-client