Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
File: H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft (raw, json)
Hash identifier: Ng2vFjBN8gpatZT3UE4lByYL1zCs11Q2T/Po0O7P+PM=
Subject key identifier: 1B:12:94:21:03:B5:26:E0:74:B2:08:71:91:13:AF:CE:26:64:35:31
Authority key identifier: 1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5
Certificate issuer: /CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5
Certificate serial: 019D382E8E8B37B275C200369AD7446386BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
Manifest number: 0D94
Signing time: Sun 29 Mar 2026 06:01:08 +0000
Manifest this update: Sun 29 Mar 2026 06:01:08 +0000
Manifest next update: Mon 30 Mar 2026 06:01:08 +0000
Files and hashes: 1: H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl (hash: r3d9kfGnJpc2wyz6z1+SgXw1gj/jzR4JVSYKvPxtT+o=)
2: afKBlYSGIMBV_VMkuFvv4MisLCI.roa (hash: s1e49FrGfKuZntD2cZ980PigitairMSPS2lGbyZKLV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:8e:8b:37:b2:75:c2:00:36:9a:d7:44:63:86:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5
Validity
Not Before: Mar 29 06:01:08 2026 GMT
Not After : Mar 30 06:01:08 2026 GMT
Subject: CN=1b12942103b526e074b208719113afce26643531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b2:1e:21:65:ca:6f:db:fe:3f:08:b7:ad:c2:
c8:a3:82:7b:fd:cf:fb:67:d2:72:77:10:ce:79:08:
af:97:dc:9c:03:1e:d8:ed:27:93:da:75:87:47:bb:
fe:ac:5d:16:60:7c:dc:86:bd:99:93:ab:b4:f8:34:
35:a2:b4:4d:dc:4f:00:07:d3:5c:7d:e6:af:c2:5b:
7c:5d:9c:43:27:ed:6f:d8:f6:8a:4b:d7:c4:ac:54:
65:47:09:76:95:ca:a8:78:a6:56:3a:57:e1:94:d0:
1d:84:62:62:c6:44:10:24:3e:c3:68:d8:c1:aa:51:
94:c2:6e:65:91:bd:22:98:6c:90:42:a4:ce:98:02:
08:9e:e7:7b:ab:4f:f2:e2:41:46:93:16:8b:55:54:
ce:dd:8f:23:bd:f3:3a:f2:3c:87:7c:5b:04:09:b8:
c4:6b:85:61:21:97:b4:08:d9:5d:9a:d7:1a:76:03:
32:3f:58:62:b0:ec:e4:7c:e8:30:68:27:84:df:52:
a8:1d:83:20:ef:43:4a:fb:fe:48:9a:22:5c:dc:b4:
cd:19:af:3a:cc:6e:89:a8:2c:84:8a:c2:f2:eb:9f:
ee:9a:48:bb:6b:23:a7:5e:48:9d:c0:b2:94:1e:e7:
30:68:9e:bf:65:2c:c5:f4:ff:21:dd:1e:33:4c:8a:
99:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:12:94:21:03:B5:26:E0:74:B2:08:71:91:13:AF:CE:26:64:35:31
X509v3 Authority Key Identifier:
keyid:1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:19:99:5a:06:83:9c:ec:01:4b:ff:4a:39:87:5e:dd:e8:05:
d0:50:02:f7:57:82:3d:55:ae:fa:41:ea:0c:e4:40:8a:b7:68:
fb:a2:ed:e0:a7:49:7d:fa:87:fd:cd:f5:45:35:03:7e:1f:20:
db:f9:5d:a3:74:ad:ef:f8:b0:e9:26:db:10:7a:c5:10:b2:69:
f8:d1:d2:e3:03:13:0b:cb:f8:41:1d:73:83:9b:e5:bf:e0:3b:
f0:d2:91:d9:f1:67:ed:45:1e:04:76:ae:a2:77:4a:7c:90:60:
e2:08:19:7c:a9:f7:ff:5e:48:ed:47:9f:89:67:1b:cc:3a:28:
a2:f1:ce:c6:d4:c8:0e:92:cc:c7:78:d3:38:95:79:73:32:fa:
41:70:03:7c:42:94:ef:b9:9e:0e:be:ec:c4:a8:c0:36:65:c9:
56:ae:8d:f0:ce:c5:66:63:9d:de:58:50:08:aa:98:fe:c6:fa:
92:74:67:a2:6f:62:d7:cf:ac:39:0a:93:d2:e4:c5:8d:1a:3e:
84:ef:2e:af:7c:47:cf:96:41:44:c9:8b:18:38:0e:72:54:af:
d6:38:65:d9:b2:02:dd:f2:32:23:ea:52:5b:60:a2:ca:d4:64:
ce:23:84:04:00:e3:1b:77:6a:33:c7:cc:5b:a9:50:45:10:fa:
fc:bb:5e:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Lo6LN7J1wgA2mtdEY4a9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmOTAwNGVhMDUzOGM3M2MyM2EzZDFkZmRjMTIxZjBlNjAw
YWNkZjUwHhcNMjYwMzI5MDYwMTA4WhcNMjYwMzMwMDYwMTA4WjAzMTEwLwYDVQQD
EygxYjEyOTQyMTAzYjUyNmUwNzRiMjA4NzE5MTEzYWZjZTI2NjQzNTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7IeIWXKb9v+Pwi3rcLIo4J7/c/7
Z9JydxDOeQivl9ycAx7Y7SeT2nWHR7v+rF0WYHzchr2Zk6u0+DQ1orRN3E8AB9Nc
feavwlt8XZxDJ+1v2PaKS9fErFRlRwl2lcqoeKZWOlfhlNAdhGJixkQQJD7DaNjB
qlGUwm5lkb0imGyQQqTOmAIInud7q0/y4kFGkxaLVVTO3Y8jvfM68jyHfFsECbjE
a4VhIZe0CNldmtcadgMyP1hisOzkfOgwaCeE31KoHYMg70NK+/5ImiJc3LTNGa86
zG6JqCyEisLy65/umki7ayOnXkidwLKUHucwaJ6/ZSzF9P8h3R4zTIqZBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBsSlCEDtSbgdLIIcZETr84mZDUxMB8GA1UdIwQY
MBaAFB+QBOoFOMc8I6PR39wSHw5gCs31MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDVBRTZnVTR4endqbzlIZjNCSWZEbUFLemZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yM2Q3YjctNWFlNi00NjMxLWIxNDIt
NDk2YWJlZTdjZTc5LzEvSDVBRTZnVTR4endqbzlIZjNCSWZEbUFLemZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yM2Q3YjctNWFlNi00NjMxLWIxNDItNDk2YWJlZTdjZTc5
LzEvSDVBRTZnVTR4endqbzlIZjNCSWZEbUFLemZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRmZWgaD
nOwBS/9KOYde3egF0FAC91eCPVWu+kHqDORAirdo+6Lt4KdJffqH/c31RTUDfh8g
2/ldo3St7/iw6SbbEHrFELJp+NHS4wMTC8v4QR1zg5vlv+A78NKR2fFn7UUeBHau
ondKfJBg4ggZfKn3/15I7UefiWcbzDooovHOxtTIDpLMx3jTOJV5czL6QXADfEKU
77meDr7sxKjANmXJVq6N8M7FZmOd3lhQCKqY/sb6knRnom9i18+sOQqT0uTFjRo+
hO8ur3xHz5ZBRMmLGDgOclSv1jhl2bIC3fIyI+pSW2CiytRkziOEBADjG3dqM8fM
W6lQRRD6/LteSA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:15 2026 by rpki-client