Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
File: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft (raw, json)
Hash identifier: C2KObMi9UYCOYl9Joh2blidMDECCj9y8Lhv4JVkwAlM=
Subject key identifier: 01:9E:56:C5:F7:31:BC:40:22:ED:68:3F:51:38:0C:56:A3:75:45:95
Authority key identifier: 87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
Certificate issuer: /CN=8794395ac822dfe01165216c7781ffd61db28d5b
Certificate serial: 019DCD86F1D2951C17E9710BECBFC41AF1B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
Manifest number: 0761
Signing time: Mon 27 Apr 2026 06:01:06 +0000
Manifest this update: Mon 27 Apr 2026 06:01:06 +0000
Manifest next update: Tue 28 Apr 2026 06:01:06 +0000
Files and hashes: 1: L7s0ED57mNbRMv5scEab-MWU-0g.roa (hash: UTR/1aEsEtkTlQxKjpcPzSUv65QlBCtFASF3Ua17FGM=)
2: RBE0mA4HScE-lPJMqTTmYcsD2Hw.roa (hash: YHl21kGfBScrHLWB8nH7LfwSKrFDkFd1MvbGkxb2nBQ=)
3: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl (hash: 2ZY/RF1+yO672cRICtlTbgp0JSP7rJM4FHWmZw5cUbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:86:f1:d2:95:1c:17:e9:71:0b:ec:bf:c4:1a:f1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8794395ac822dfe01165216c7781ffd61db28d5b
Validity
Not Before: Apr 27 06:01:06 2026 GMT
Not After : Apr 28 06:01:06 2026 GMT
Subject: CN=019e56c5f731bc4022ed683f51380c56a3754595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5a:5c:8b:32:4b:80:67:79:cb:fa:68:56:0a:
81:8f:7b:8e:cd:b7:fe:0d:03:2f:5e:e9:1e:5a:f7:
4c:d1:99:e4:d2:85:59:c5:59:8b:75:fd:ae:11:93:
18:39:66:ad:e6:81:ec:54:a2:ca:29:c1:7c:c0:93:
5c:92:cd:c5:89:b2:f8:7b:f1:fe:91:50:fb:b4:e3:
02:16:42:d4:1e:09:95:d8:80:d9:d8:b4:25:82:1a:
13:aa:73:af:e7:01:0a:7a:37:42:bc:80:c8:e1:f6:
1b:44:98:98:c6:ba:6f:c0:e8:09:a2:06:a2:18:ab:
37:5e:8e:0b:8d:7c:b2:13:f2:bd:de:72:a0:1c:54:
48:ed:7e:df:5d:fe:76:d7:fc:83:cf:c2:84:31:3d:
1a:b0:03:0e:4f:4d:66:26:e8:de:4b:23:56:a0:6c:
d0:33:6b:1c:22:ab:72:90:4f:db:1e:33:57:a8:1a:
cf:bc:36:eb:3a:fd:87:b3:8b:a4:14:92:e3:d9:8a:
cf:03:6d:5a:f2:26:3d:cd:02:90:63:c5:16:c1:c5:
c9:9f:94:4b:83:de:be:ac:68:5f:7e:28:cb:b3:81:
12:2d:2e:dc:e4:ca:f9:79:bc:5d:3d:b7:1b:97:de:
a1:01:6c:1a:71:9d:6e:bd:9a:94:fe:d6:5b:9e:cc:
59:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9E:56:C5:F7:31:BC:40:22:ED:68:3F:51:38:0C:56:A3:75:45:95
X509v3 Authority Key Identifier:
keyid:87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:04:5a:38:96:75:fd:14:91:9f:68:e7:4b:06:88:fb:7d:e7:
de:e6:87:f8:c1:c7:2d:9d:9e:4d:59:23:1c:43:04:4b:7a:6c:
b8:c7:8d:79:b9:90:f4:83:d1:12:5c:7d:20:52:6d:ee:21:c0:
2b:1a:6a:8d:2b:7e:cb:99:f8:e9:64:03:64:e0:e2:6f:1b:f8:
c8:ad:b8:41:4a:ce:8c:2c:02:76:19:50:ec:88:92:31:31:b4:
cc:13:d9:df:2f:ce:3f:fc:26:0e:6d:a9:2c:0e:2f:73:29:a0:
51:c2:66:43:3a:83:8d:0d:e8:92:69:36:06:5c:eb:68:ef:01:
2b:e7:b4:2d:e6:27:52:a6:2b:78:f7:06:b7:29:42:32:ed:e5:
3d:42:ab:93:b8:37:c4:d3:15:c6:53:c8:27:89:30:3c:37:5b:
69:08:b2:57:62:40:49:f2:cf:fb:9c:d1:9b:c9:68:6b:d7:c6:
c6:5a:f5:fc:2b:7c:5d:3d:63:49:e9:df:a6:a7:a0:25:56:24:
4b:c4:9a:69:ca:4b:4d:2e:a9:da:f8:70:1a:03:09:d1:af:5e:
cb:e8:6d:17:c3:78:d7:ac:07:b9:ba:08:4e:c6:6b:60:4a:42:
65:bd:55:83:6b:c1:4c:5a:05:94:e5:29:95:1e:22:5c:b6:f6:
8c:d4:3c:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3NhvHSlRwX6XEL7L/EGvG2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OTQzOTVhYzgyMmRmZTAxMTY1MjE2Yzc3ODFmZmQ2MWRi
MjhkNWIwHhcNMjYwNDI3MDYwMTA2WhcNMjYwNDI4MDYwMTA2WjAzMTEwLwYDVQQD
EygwMTllNTZjNWY3MzFiYzQwMjJlZDY4M2Y1MTM4MGM1NmEzNzU0NTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FpcizJLgGd5y/poVgqBj3uOzbf+
DQMvXukeWvdM0Znk0oVZxVmLdf2uEZMYOWat5oHsVKLKKcF8wJNcks3FibL4e/H+
kVD7tOMCFkLUHgmV2IDZ2LQlghoTqnOv5wEKejdCvIDI4fYbRJiYxrpvwOgJogai
GKs3Xo4LjXyyE/K93nKgHFRI7X7fXf521/yDz8KEMT0asAMOT01mJujeSyNWoGzQ
M2scIqtykE/bHjNXqBrPvDbrOv2Hs4ukFJLj2YrPA21a8iY9zQKQY8UWwcXJn5RL
g96+rGhffijLs4ESLS7c5Mr5ebxdPbcbl96hAWwacZ1uvZqU/tZbnsxZPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGeVsX3MbxAIu1oP1E4DFajdUWVMB8GA1UdIwQY
MBaAFIeUOVrIIt/gEWUhbHeB/9Ydso1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDVRNVdzZ2kzLUFSWlNGc2Q0SF8xaDJ5alZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hMmEzYTQtYWI3NS00OWQ0LWE5NDEt
MzUzZjk4MTJiMWRiLzEvaDVRNVdzZ2kzLUFSWlNGc2Q0SF8xaDJ5alZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9hMmEzYTQtYWI3NS00OWQ0LWE5NDEtMzUzZjk4MTJiMWRi
LzEvaDVRNVdzZ2kzLUFSWlNGc2Q0SF8xaDJ5alZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAagRaOJZ1
/RSRn2jnSwaI+33n3uaH+MHHLZ2eTVkjHEMES3psuMeNebmQ9IPRElx9IFJt7iHA
KxpqjSt+y5n46WQDZODibxv4yK24QUrOjCwCdhlQ7IiSMTG0zBPZ3y/OP/wmDm2p
LA4vcymgUcJmQzqDjQ3okmk2BlzraO8BK+e0LeYnUqYrePcGtylCMu3lPUKrk7g3
xNMVxlPIJ4kwPDdbaQiyV2JASfLP+5zRm8loa9fGxlr1/Ct8XT1jSenfpqegJVYk
S8SaacpLTS6p2vhwGgMJ0a9ey+htF8N416wHuboITsZrYEpCZb1Vg2vBTFoFlOUp
lR4iXLb2jNQ8XA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:19 2026 by rpki-client