Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
File: H1BLG7cWjmgLGVQvj3MDhhRMil8.mft (raw, json)
Hash identifier: kdbX4grmIEIGuA/c8EdH+fRzFqDrS3JFJiDu25bTqp8=
Subject key identifier: 00:93:D8:81:4C:F1:9A:BB:CE:45:11:AE:D7:B3:37:CB:7F:1B:E9:0D
Authority key identifier: 1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F
Certificate issuer: /CN=1f504b1bb7168e680b19542f8f730386144c8a5f
Certificate serial: 019D3752808B10E773ED8EEE6591FF79D7D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 02:00:46 +0000
Manifest this update: Sun 29 Mar 2026 02:00:46 +0000
Manifest next update: Mon 30 Mar 2026 02:00:46 +0000
Files and hashes: 1: H1BLG7cWjmgLGVQvj3MDhhRMil8.crl (hash: /GCfsI67ZQ4ADHvlmgqb3e3i9wCWK9WmePP6i6MKyaA=)
2: gzR8azEl4wcKru5enQWHMrN0j30.roa (hash: bAZA0ZtvqfxWtuunPZUhJQgUIWIvjRpShcnV9aNKnnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:80:8b:10:e7:73:ed:8e:ee:65:91:ff:79:d7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f504b1bb7168e680b19542f8f730386144c8a5f
Validity
Not Before: Mar 29 02:00:46 2026 GMT
Not After : Mar 30 02:00:46 2026 GMT
Subject: CN=0093d8814cf19abbce4511aed7b337cb7f1be90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c6:fd:12:12:b9:18:f5:00:78:43:99:3b:77:
be:bb:fc:0e:d6:9a:07:f3:28:8a:14:07:7d:04:19:
1e:66:18:38:1e:14:a5:ed:a0:66:bb:87:be:81:45:
5b:92:33:20:1e:44:2c:31:cc:52:e3:4f:e2:00:00:
b1:72:f6:83:d8:4c:34:00:68:2d:e1:6b:c1:6d:88:
8b:19:d7:ca:35:b7:90:2e:c8:10:08:3f:c7:5b:e5:
59:fb:7f:e9:48:77:80:98:3d:2f:57:dc:b3:e6:e8:
1d:8f:1b:57:ae:02:5c:ce:09:68:7f:05:c5:45:9d:
8b:de:fe:4c:8d:36:45:ae:99:a6:d6:e9:c2:bc:99:
62:06:cf:62:0a:91:e1:3d:4b:00:a5:c8:5c:af:1e:
c3:1a:fc:5e:44:dc:a4:0d:7e:4e:f8:7a:ab:ce:eb:
f6:f6:29:52:f7:ca:4a:d9:d5:f3:81:b7:f4:78:92:
0f:42:1c:1d:9c:ab:ae:6d:45:f4:77:9e:c9:33:a0:
44:2f:86:9c:36:3e:5e:75:a8:45:d3:60:7b:7c:b7:
2b:25:6f:30:09:0b:a2:f9:20:d4:ee:a3:06:54:a4:
23:29:b2:85:dc:ec:4f:78:31:80:07:fc:0a:81:e9:
f4:58:b0:a2:ef:9c:fe:2e:ad:3f:40:db:4f:9b:bb:
aa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:93:D8:81:4C:F1:9A:BB:CE:45:11:AE:D7:B3:37:CB:7F:1B:E9:0D
X509v3 Authority Key Identifier:
keyid:1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e5:9f:7d:74:b4:f4:6a:33:88:ae:25:fe:aa:f5:8b:11:7f:
b3:70:11:2a:93:49:94:94:c6:96:54:3e:5d:5b:57:70:07:ba:
2e:9d:69:a8:7c:d4:a0:2f:3a:14:1c:04:a7:3d:3b:94:2c:dd:
32:b2:b2:24:80:09:79:ae:1b:80:2f:fb:93:f4:4f:20:13:e8:
e6:cb:a5:50:8c:a5:2c:07:15:e1:05:a3:bd:72:88:d3:b7:36:
33:d6:3b:6a:d2:6b:89:bb:71:04:57:de:52:a7:42:ec:27:e8:
68:70:7d:bf:d9:5b:a9:5b:9a:4a:c1:52:b4:b1:6d:67:c9:c8:
29:16:47:14:d6:b6:6f:10:3f:e0:77:b5:09:c4:36:98:71:43:
89:82:4b:9c:ee:5d:5b:16:a5:80:27:88:93:d1:5f:46:40:06:
16:53:86:0a:c1:01:f2:3a:d4:c5:7e:dd:d3:e8:a0:32:85:b3:
c3:7e:39:90:fb:ad:89:cf:8c:67:33:63:17:9d:c0:bb:9d:a0:
95:fc:99:a3:1a:17:9e:55:98:63:64:d1:81:78:6f:f2:e2:15:
d6:4f:e4:81:c2:35:75:f6:f4:07:bf:be:4a:a2:9b:f8:cd:59:
e2:6e:df:67:ca:96:85:7b:6b:bd:73:f5:01:b3:e1:14:8c:5a:
d3:2d:7c:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UoCLEOdz7Y7uZZH/edfRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNTA0YjFiYjcxNjhlNjgwYjE5NTQyZjhmNzMwMzg2MTQ0
YzhhNWYwHhcNMjYwMzI5MDIwMDQ2WhcNMjYwMzMwMDIwMDQ2WjAzMTEwLwYDVQQD
EygwMDkzZDg4MTRjZjE5YWJiY2U0NTExYWVkN2IzMzdjYjdmMWJlOTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusb9EhK5GPUAeEOZO3e+u/wO1poH
8yiKFAd9BBkeZhg4HhSl7aBmu4e+gUVbkjMgHkQsMcxS40/iAACxcvaD2Ew0AGgt
4WvBbYiLGdfKNbeQLsgQCD/HW+VZ+3/pSHeAmD0vV9yz5ugdjxtXrgJczglofwXF
RZ2L3v5MjTZFrpmm1unCvJliBs9iCpHhPUsApchcrx7DGvxeRNykDX5O+Hqrzuv2
9ilS98pK2dXzgbf0eJIPQhwdnKuubUX0d57JM6BEL4acNj5edahF02B7fLcrJW8w
CQui+SDU7qMGVKQjKbKF3OxPeDGAB/wKgen0WLCi75z+Lq0/QNtPm7uqBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACT2IFM8Zq7zkURrtezN8t/G+kNMB8GA1UdIwQY
MBaAFB9QSxu3Fo5oCxlUL49zA4YUTIpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDFCTEc3Y1dqbWdMR1ZRdmozTURoaFJNaWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8zYzc0YTgtOWY3Mi00YzA2LWI1MTYt
MzViYjYwZWEwN2MxLzEvSDFCTEc3Y1dqbWdMR1ZRdmozTURoaFJNaWw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8zYzc0YTgtOWY3Mi00YzA2LWI1MTYtMzViYjYwZWEwN2Mx
LzEvSDFCTEc3Y1dqbWdMR1ZRdmozTURoaFJNaWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjuWffXS0
9GoziK4l/qr1ixF/s3ARKpNJlJTGllQ+XVtXcAe6Lp1pqHzUoC86FBwEpz07lCzd
MrKyJIAJea4bgC/7k/RPIBPo5sulUIylLAcV4QWjvXKI07c2M9Y7atJribtxBFfe
UqdC7CfoaHB9v9lbqVuaSsFStLFtZ8nIKRZHFNa2bxA/4He1CcQ2mHFDiYJLnO5d
WxalgCeIk9FfRkAGFlOGCsEB8jrUxX7d0+igMoWzw345kPutic+MZzNjF53Au52g
lfyZoxoXnlWYY2TRgXhv8uIV1k/kgcI1dfb0B7++SqKb+M1Z4m7fZ8qWhXtrvXP1
AbPhFIxa0y183g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:43 2026 by rpki-client