Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
File: H5_9juMrPjV5eNnLmSFszoE3oyQ.mft (raw, json)
Hash identifier: W8vm8U+/CFd/deJYXd4JQYu5lzAzKNdPIpDbylVOeSw=
Subject key identifier: 3E:92:55:F4:1A:3D:87:7C:8D:6F:2B:15:02:CE:34:27:FA:4D:D4:39
Authority key identifier: 1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
Certificate issuer: /CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Certificate serial: 01A13E5D492EBD291D36BDE008D147987194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
Manifest number: 1A38
Signing time: Thu 15 Oct 2026 07:01:03 +0000
Manifest this update: Thu 15 Oct 2026 07:01:03 +0000
Manifest next update: Fri 16 Oct 2026 07:01:03 +0000
Files and hashes: 1: H5_9juMrPjV5eNnLmSFszoE3oyQ.crl (hash: 0I36L7YqqRqp1qWohrU8JqoKJvN3p2aq+1+CxCoTSWI=)
2: UBCKv_WWXY7T8US1FqPcXNJVmjg.roa (hash: R7LskYqdTLN1UcYPAtGnZ+S1OveE97ZJ0efnayhth/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5d:49:2e:bd:29:1d:36:bd:e0:08:d1:47:98:71:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Validity
Not Before: Oct 15 07:01:03 2026 GMT
Not After : Oct 16 07:01:03 2026 GMT
Subject: CN=3e9255f41a3d877c8d6f2b1502ce3427fa4dd439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ca:51:06:c0:45:94:e7:b7:78:ad:80:86:52:
8f:8f:0d:25:63:9d:ba:a3:6e:96:06:7e:c8:cc:bf:
ec:58:ab:8a:34:d7:d5:e4:06:46:25:2c:37:41:66:
25:ef:7d:49:80:32:00:66:48:d2:24:79:1d:1b:1f:
af:bd:f1:e4:87:a5:a4:36:bf:dd:42:06:44:06:f1:
73:e6:60:ef:a0:14:a3:02:88:82:43:db:ae:c8:6a:
2d:64:ee:35:e6:0f:5d:12:42:ce:2e:5e:cb:7d:90:
98:7e:60:24:f7:f6:b3:71:50:1b:63:48:68:0f:83:
72:51:b8:3f:bd:1c:f2:17:7d:a0:39:6f:d2:6b:7f:
5f:14:ee:e1:63:cd:1a:97:90:9f:ea:6b:96:c7:0c:
12:d1:14:7c:aa:ea:56:47:f5:97:ed:83:de:09:0f:
18:07:8d:1d:01:bf:02:53:05:87:bd:cf:8b:5d:a7:
62:aa:d5:9e:3a:c4:87:bc:e9:00:87:36:9a:1b:c2:
01:ee:54:d2:fb:63:01:fc:7e:a3:87:42:3a:cd:e2:
ed:12:cf:67:fd:c7:03:bf:2c:58:60:8f:7a:92:10:
2b:6b:3b:86:54:ed:9c:53:2e:24:c7:0e:38:70:49:
10:f9:c1:88:5e:87:cd:46:89:13:b0:bd:d0:a0:3b:
99:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:92:55:F4:1A:3D:87:7C:8D:6F:2B:15:02:CE:34:27:FA:4D:D4:39
X509v3 Authority Key Identifier:
keyid:1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b2:6b:33:e7:7d:2f:bd:a5:a4:e2:97:dd:53:d1:46:d0:a6:
3f:27:95:ab:9b:dd:1a:6f:c0:87:3e:30:9e:c1:74:85:85:ae:
30:6e:5c:18:93:ce:11:db:c8:f2:b1:1a:7d:bf:6c:9d:3e:9a:
21:ab:db:5d:f4:95:c3:87:fa:cf:e6:dd:0c:3c:e6:67:81:04:
fc:62:34:e7:2d:3c:86:77:b4:66:67:3a:78:88:82:da:c8:d1:
7b:19:4f:d3:11:b5:cd:3f:4f:2e:30:c0:b1:c3:94:c1:a0:cf:
a0:ff:19:e2:24:4a:54:48:1d:3a:f9:f0:b6:1b:5f:e7:80:1b:
0d:1d:6e:19:55:7d:4f:2a:e1:c7:ae:25:c1:8b:ff:01:fa:8d:
1f:6f:e7:e5:5f:39:c3:50:12:74:eb:ba:91:71:b3:16:91:ef:
fe:c0:ba:d7:ea:57:7c:eb:c4:9e:bc:9a:e7:5b:c4:5c:ae:99:
16:96:c1:3b:25:76:e3:b5:9c:9f:83:bb:07:27:e7:7a:79:d6:
40:f0:5d:1c:4f:b9:24:98:4c:09:38:f4:d0:05:c4:6c:15:c0:
53:96:32:49:7f:89:bf:04:f9:ea:6d:04:a3:1d:90:f1:04:42:
b9:38:70:d6:77:94:7b:79:33:b6:09:f6:22:97:dc:f8:02:31:
6e:12:79:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+XUkuvSkdNr3gCNFHmHGUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmOWZmZDhlZTMyYjNlMzU3OTc4ZDljYjk5MjE2Y2NlODEz
N2EzMjQwHhcNMjYxMDE1MDcwMTAzWhcNMjYxMDE2MDcwMTAzWjAzMTEwLwYDVQQD
EygzZTkyNTVmNDFhM2Q4NzdjOGQ2ZjJiMTUwMmNlMzQyN2ZhNGRkNDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcpRBsBFlOe3eK2AhlKPjw0lY526
o26WBn7IzL/sWKuKNNfV5AZGJSw3QWYl731JgDIAZkjSJHkdGx+vvfHkh6WkNr/d
QgZEBvFz5mDvoBSjAoiCQ9uuyGotZO415g9dEkLOLl7LfZCYfmAk9/azcVAbY0ho
D4NyUbg/vRzyF32gOW/Sa39fFO7hY80al5Cf6muWxwwS0RR8qupWR/WX7YPeCQ8Y
B40dAb8CUwWHvc+LXadiqtWeOsSHvOkAhzaaG8IB7lTS+2MB/H6jh0I6zeLtEs9n
/ccDvyxYYI96khArazuGVO2cUy4kxw44cEkQ+cGIXofNRokTsL3QoDuZrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6SVfQaPYd8jW8rFQLONCf6TdQ5MB8GA1UdIwQY
MBaAFB+f/Y7jKz41eXjZy5khbM6BN6MkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wM2ZmZDAtN2U4Yi00M2ZlLThlZWUt
YWFlNjM4ZGJiMWMxLzEvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8wM2ZmZDAtN2U4Yi00M2ZlLThlZWUtYWFlNjM4ZGJiMWMx
LzEvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMbJrM+d9
L72lpOKX3VPRRtCmPyeVq5vdGm/Ahz4wnsF0hYWuMG5cGJPOEdvI8rEafb9snT6a
IavbXfSVw4f6z+bdDDzmZ4EE/GI05y08hne0Zmc6eIiC2sjRexlP0xG1zT9PLjDA
scOUwaDPoP8Z4iRKVEgdOvnwthtf54AbDR1uGVV9Tyrhx64lwYv/AfqNH2/n5V85
w1ASdOu6kXGzFpHv/sC61+pXfOvEnrya51vEXK6ZFpbBOyV247Wcn4O7ByfnennW
QPBdHE+5JJhMCTj00AXEbBXAU5YySX+JvwT56m0Eox2Q8QRCuThw1neUe3kztgn2
Ipfc+AIxbhJ5vg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:16 2026 by rpki-client