Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
File: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft (raw, json)
Hash identifier: /yEOrPx9s/SOIL0nL/YicEbIRcUFlF63v3zLKk6rv1A=
Subject key identifier: 3E:52:3B:77:DE:F1:BC:D3:64:A2:4B:96:80:97:A5:9D:3E:1C:D2:55
Authority key identifier: 87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
Certificate issuer: /CN=87e64170f9d82c51670b9a44f329b20613a8082d
Certificate serial: 019D38D3631C89C03E7D1CFDAB6E75018653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
Manifest number: 1823
Signing time: Sun 29 Mar 2026 09:01:10 +0000
Manifest this update: Sun 29 Mar 2026 09:01:10 +0000
Manifest next update: Mon 30 Mar 2026 09:01:10 +0000
Files and hashes: 1: GeANBlc9szsh5X_dzXvwntyH33k.roa (hash: NtbXfKjFVCT4X+tyOUkrVXVVHjr7y8q2zKhpArvxwTk=)
2: XBuxFynVvxh8UiT_tJkPmhYk_oA.roa (hash: +W6/Wvk2I7PSxm+f/mLqDUSHpVa25RlpWluuWkH/7C8=)
3: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl (hash: FOMgDt5T+JidG7v6swxY4472eIcF8VHSE8MEKNX2DQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:63:1c:89:c0:3e:7d:1c:fd:ab:6e:75:01:86:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87e64170f9d82c51670b9a44f329b20613a8082d
Validity
Not Before: Mar 29 09:01:10 2026 GMT
Not After : Mar 30 09:01:10 2026 GMT
Subject: CN=3e523b77def1bcd364a24b968097a59d3e1cd255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2d:5c:25:92:69:9f:ae:00:9e:9a:68:c1:ac:
43:47:4e:68:5c:f7:21:92:bf:9f:4e:79:d4:19:77:
33:f0:f5:c5:8d:22:f2:be:49:da:84:8d:96:45:ec:
bc:7c:82:06:8d:e3:f7:2e:19:4d:5d:83:59:7b:79:
ec:e9:fc:c3:d1:9a:23:98:ac:62:44:2a:bf:9d:68:
e1:e5:2f:80:c8:5e:6d:69:9d:a1:8f:59:6d:98:98:
31:7f:f7:da:7f:b5:af:c5:dd:ab:55:6b:90:66:5a:
76:bb:e7:58:59:9a:b2:29:20:d8:ee:16:47:d5:b1:
d3:9d:31:d2:29:ae:1f:0f:e3:ea:ad:3b:e7:94:2b:
cd:db:51:2d:91:26:6b:a7:13:f0:f4:fa:a1:a7:48:
4f:01:2e:31:1b:bc:07:ae:74:6f:bc:d1:af:e7:77:
34:c8:c2:d3:29:11:9c:6c:bd:ab:c7:74:3d:5d:26:
56:52:32:f6:d4:00:22:b9:ff:e4:a1:bb:ef:32:e4:
16:27:8b:b0:83:e8:df:70:85:9e:1c:1c:75:77:52:
9a:fc:34:77:a1:bf:be:83:51:1b:0f:f3:17:fe:9c:
72:cb:ff:53:74:ad:ee:97:6a:75:61:61:0e:26:78:
1b:1d:c7:33:5d:c8:cd:61:b7:72:66:bc:37:bc:44:
9b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:52:3B:77:DE:F1:BC:D3:64:A2:4B:96:80:97:A5:9D:3E:1C:D2:55
X509v3 Authority Key Identifier:
keyid:87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:4f:a3:5e:bd:9f:e9:53:f0:08:94:87:10:a8:ef:bb:51:d7:
36:bd:69:0e:a8:15:51:0c:05:00:d8:b0:52:e8:78:16:bf:58:
af:33:39:e7:78:2f:e8:9b:07:1e:9d:a6:6c:9c:14:dd:89:05:
de:f3:ad:c0:73:6a:18:ea:05:68:d2:5a:f4:19:f5:c5:67:05:
91:fa:2f:11:ba:5e:d0:ed:8d:1c:29:21:93:33:da:a5:17:5a:
f1:16:a3:eb:4b:4f:fb:e1:06:aa:07:d3:30:1d:b8:60:0f:2f:
8b:12:5e:7e:f9:29:4a:be:9c:60:78:7c:01:55:c9:2d:3c:6d:
24:fa:e2:92:e7:26:12:2b:40:f9:70:40:38:a8:88:3a:d2:5d:
94:ff:8b:0c:5c:ca:d8:fb:f9:96:23:9b:21:8b:f9:a4:15:f3:
95:ac:b0:e1:a3:20:0e:3c:54:e1:eb:22:34:6c:cf:6b:62:dd:
e9:36:9a:51:10:09:87:86:30:5b:11:6a:c9:51:1e:19:b1:08:
81:91:18:69:28:91:67:0a:8d:4b:7c:e7:16:4e:3b:01:f9:e4:
f3:2c:e9:d0:c0:95:eb:80:d9:5f:00:b9:d2:94:db:6c:ee:09:
c3:a9:9a:b6:c9:0f:0d:e9:ca:30:c4:44:56:4c:80:3e:dd:99:
69:f7:be:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0402McicA+fRz9q251AYZTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZTY0MTcwZjlkODJjNTE2NzBiOWE0NGYzMjliMjA2MTNh
ODA4MmQwHhcNMjYwMzI5MDkwMTEwWhcNMjYwMzMwMDkwMTEwWjAzMTEwLwYDVQQD
EygzZTUyM2I3N2RlZjFiY2QzNjRhMjRiOTY4MDk3YTU5ZDNlMWNkMjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy1cJZJpn64AnppowaxDR05oXPch
kr+fTnnUGXcz8PXFjSLyvknahI2WRey8fIIGjeP3LhlNXYNZe3ns6fzD0ZojmKxi
RCq/nWjh5S+AyF5taZ2hj1ltmJgxf/faf7Wvxd2rVWuQZlp2u+dYWZqyKSDY7hZH
1bHTnTHSKa4fD+PqrTvnlCvN21EtkSZrpxPw9Pqhp0hPAS4xG7wHrnRvvNGv53c0
yMLTKRGcbL2rx3Q9XSZWUjL21AAiuf/kobvvMuQWJ4uwg+jfcIWeHBx1d1Ka/DR3
ob++g1EbD/MX/pxyy/9TdK3ul2p1YWEOJngbHcczXcjNYbdyZrw3vESbxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5SO3fe8bzTZKJLloCXpZ0+HNJVMB8GA1UdIwQY
MBaAFIfmQXD52CxRZwuaRPMpsgYTqAgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaC1aQmNQbllMRkZuQzVwRTh5bXlCaE9vQ0MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9iZWIyOWQtZjBlZS00MDdhLTk3MDIt
NmUxM2NjYmY0OTA2LzEvaC1aQmNQbllMRkZuQzVwRTh5bXlCaE9vQ0MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9iZWIyOWQtZjBlZS00MDdhLTk3MDItNmUxM2NjYmY0OTA2
LzEvaC1aQmNQbllMRkZuQzVwRTh5bXlCaE9vQ0MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlE+jXr2f
6VPwCJSHEKjvu1HXNr1pDqgVUQwFANiwUuh4Fr9YrzM553gv6JsHHp2mbJwU3YkF
3vOtwHNqGOoFaNJa9Bn1xWcFkfovEbpe0O2NHCkhkzPapRda8Raj60tP++EGqgfT
MB24YA8vixJefvkpSr6cYHh8AVXJLTxtJPrikucmEitA+XBAOKiIOtJdlP+LDFzK
2Pv5liObIYv5pBXzlayw4aMgDjxU4esiNGzPa2Ld6TaaURAJh4YwWxFqyVEeGbEI
gZEYaSiRZwqNS3znFk47Afnk8yzp0MCV64DZXwC50pTbbO4Jw6matskPDenKMMRE
VkyAPt2Zafe+8g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:11:51 2026 by rpki-client