
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
File: H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft (raw, json)
Hash identifier: yMCrkmWnykw2kq2HPg571f2X0wDbVwh49fdjLz51B7Y=
Subject key identifier: 4D:43:A8:D8:C6:F4:8F:93:5E:EE:F7:E2:A2:F8:0E:90:12:0C:61:37
Authority key identifier: 1F:44:39:C7:57:B6:B6:46:DF:16:84:4F:5A:52:9E:E2:75:20:73:6E
Certificate issuer: /CN=1f4439c757b6b646df16844f5a529ee27520736e
Certificate serial: 019D37F738F113B96FC377C4A04A07B37ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
Manifest number: 0756
Signing time: Sun 29 Mar 2026 05:00:41 +0000
Manifest this update: Sun 29 Mar 2026 05:00:41 +0000
Manifest next update: Mon 30 Mar 2026 05:00:41 +0000
Files and hashes: 1: H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl (hash: TUlpzIuMv9bMBKhmU25p5GCx4M4MNmXxRefgqmTqvxs=)
2: k6iypoa6LHwlwb2qIMXLLBYL54M.roa (hash: mfnNfPCGzWqdDV2YD4QQcqHG+UEJW0CMtavWwVN5thM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:38:f1:13:b9:6f:c3:77:c4:a0:4a:07:b3:7a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4439c757b6b646df16844f5a529ee27520736e
Validity
Not Before: Mar 29 05:00:41 2026 GMT
Not After : Mar 30 05:00:41 2026 GMT
Subject: CN=4d43a8d8c6f48f935eeef7e2a2f80e90120c6137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:aa:fa:0c:85:fb:75:35:e8:06:4a:ce:fa:e5:
cc:53:57:7f:df:e7:e9:48:6c:68:85:47:47:69:8c:
7f:6b:91:39:6f:0c:31:86:97:c3:d6:55:6c:4f:ed:
20:d5:5a:b2:aa:fa:ad:05:45:e7:5a:76:8c:49:c5:
12:d9:48:64:16:ac:ee:b7:67:70:f6:59:d5:32:57:
48:f4:dc:a2:fc:f4:33:61:9e:9a:41:93:b0:c4:15:
aa:e6:b4:8a:33:48:d6:63:8d:82:65:48:c6:a6:9f:
2d:d4:93:0a:79:1c:6e:d3:7c:ff:07:ec:70:7a:64:
34:88:b1:1b:61:5b:d0:79:7b:bd:4e:d5:62:26:77:
90:3f:91:ca:01:88:0b:22:3e:70:e4:c1:35:46:0c:
e4:ca:12:bb:b1:b7:88:ed:d4:33:b6:08:7f:d0:28:
0b:f1:fc:70:b9:0c:0f:2b:b0:98:73:3d:6c:5f:5a:
8c:49:8b:3f:e1:d5:7e:d6:5f:28:b6:a5:54:25:7c:
ee:ed:0a:ef:96:7f:36:3e:b0:a7:d8:ab:d7:19:d0:
b0:91:bf:e7:06:ee:10:c2:bf:eb:bb:9b:16:2d:55:
0a:83:20:05:ca:c9:c2:ea:dc:f5:2d:d8:04:78:b7:
38:76:0e:66:3e:97:b3:2f:85:10:9c:f1:d9:4a:d1:
7d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:43:A8:D8:C6:F4:8F:93:5E:EE:F7:E2:A2:F8:0E:90:12:0C:61:37
X509v3 Authority Key Identifier:
keyid:1F:44:39:C7:57:B6:B6:46:DF:16:84:4F:5A:52:9E:E2:75:20:73:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:67:17:4f:00:e5:b4:ec:8c:55:eb:ad:ea:f1:1c:89:cf:99:
a9:ae:b6:6b:78:71:32:20:c9:ee:19:fc:e9:7d:db:75:e3:68:
1c:d8:ef:56:a7:c7:c9:99:c9:d4:bd:46:6c:1a:f7:24:25:b9:
99:4a:c8:4f:e5:16:24:41:8f:43:71:55:2a:fb:7f:9d:2f:77:
0a:9f:7c:0f:41:94:ba:aa:de:20:22:c7:72:98:47:9d:10:5b:
48:a2:67:56:58:8c:4c:d0:c7:75:f5:6a:76:5e:46:d8:05:4a:
84:57:7e:9d:ba:15:89:1e:48:cb:3d:8d:34:34:21:96:bd:41:
76:f3:5c:32:94:e6:d6:f9:7a:fd:88:40:17:ac:38:33:b6:96:
4d:26:6a:7b:6a:36:4b:6a:ba:f4:bb:d6:10:c9:15:04:69:8b:
44:7c:00:7c:d1:c9:b1:42:db:9f:f7:fa:ed:4f:05:23:fd:e6:
0a:0b:d0:93:5a:86:0f:35:44:a9:4c:24:ae:62:70:02:12:64:
26:69:97:03:9c:c8:37:5a:57:9b:89:3c:46:32:d3:11:2d:51:
7c:86:07:8b:1e:f6:c7:c4:46:cb:21:33:ef:8c:a1:a3:96:56:
39:4b:98:87:eb:ac:6d:2e:aa:12:1d:5f:53:bf:ec:f6:11:b4:
8d:4c:c2:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039zjxE7lvw3fEoEoHs3q9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDQzOWM3NTdiNmI2NDZkZjE2ODQ0ZjVhNTI5ZWUyNzUy
MDczNmUwHhcNMjYwMzI5MDUwMDQxWhcNMjYwMzMwMDUwMDQxWjAzMTEwLwYDVQQD
Eyg0ZDQzYThkOGM2ZjQ4ZjkzNWVlZWY3ZTJhMmY4MGU5MDEyMGM2MTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6r6DIX7dTXoBkrO+uXMU1d/3+fp
SGxohUdHaYx/a5E5bwwxhpfD1lVsT+0g1VqyqvqtBUXnWnaMScUS2UhkFqzut2dw
9lnVMldI9Nyi/PQzYZ6aQZOwxBWq5rSKM0jWY42CZUjGpp8t1JMKeRxu03z/B+xw
emQ0iLEbYVvQeXu9TtViJneQP5HKAYgLIj5w5ME1RgzkyhK7sbeI7dQztgh/0CgL
8fxwuQwPK7CYcz1sX1qMSYs/4dV+1l8otqVUJXzu7Qrvln82PrCn2KvXGdCwkb/n
Bu4Qwr/ru5sWLVUKgyAFysnC6tz1LdgEeLc4dg5mPpezL4UQnPHZStF9jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1DqNjG9I+TXu734qL4DpASDGE3MB8GA1UdIwQY
MBaAFB9EOcdXtrZG3xaET1pSnuJ1IHNuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBRNXgxZTJ0a2JmRm9SUFdsS2U0blVnYzI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mZTllYjMtM2IxYi00ZmY0LWEzNzQt
NWE1ZDBiZDg3NjBlLzEvSDBRNXgxZTJ0a2JmRm9SUFdsS2U0blVnYzI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mZTllYjMtM2IxYi00ZmY0LWEzNzQtNWE1ZDBiZDg3NjBl
LzEvSDBRNXgxZTJ0a2JmRm9SUFdsS2U0blVnYzI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmcXTwDl
tOyMVeut6vEcic+Zqa62a3hxMiDJ7hn86X3bdeNoHNjvVqfHyZnJ1L1GbBr3JCW5
mUrIT+UWJEGPQ3FVKvt/nS93Cp98D0GUuqreICLHcphHnRBbSKJnVliMTNDHdfVq
dl5G2AVKhFd+nboViR5Iyz2NNDQhlr1BdvNcMpTm1vl6/YhAF6w4M7aWTSZqe2o2
S2q69LvWEMkVBGmLRHwAfNHJsULbn/f67U8FI/3mCgvQk1qGDzVEqUwkrmJwAhJk
JmmXA5zIN1pXm4k8RjLTES1RfIYHix72x8RGyyEz74yho5ZWOUuYh+usbS6qEh1f
U7/s9hG0jUzCZQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:50 2026 by rpki-client