Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
File: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft (raw, json)
Hash identifier: +PjZWiXJgRU9WEJLKSa+LBaXAQ8x+cNI0aIiBk6higU=
Subject key identifier: 92:CA:9E:C1:CF:D7:D4:28:0A:C1:D3:51:94:6D:B2:2C:9F:3C:2A:25
Authority key identifier: 1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3
Certificate issuer: /CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3
Certificate serial: 019D389C32B4FF28B4314842B2C25C8C738D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
Manifest number: 01B5
Signing time: Sun 29 Mar 2026 08:00:53 +0000
Manifest this update: Sun 29 Mar 2026 08:00:53 +0000
Manifest next update: Mon 30 Mar 2026 08:00:53 +0000
Files and hashes: 1: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl (hash: 8P+YX3cuvJMypkIk0+bLA+1OSIX6bHf+8D9Ya26qpT8=)
2: XOOQ9FAgyADXPO_GL-32MuK-1-4.roa (hash: Rqa7wVCVV9KpfmZD61heEG7d6s4LvjlFlafZP5De1nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:32:b4:ff:28:b4:31:48:42:b2:c2:5c:8c:73:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3
Validity
Not Before: Mar 29 08:00:53 2026 GMT
Not After : Mar 30 08:00:53 2026 GMT
Subject: CN=92ca9ec1cfd7d4280ac1d351946db22c9f3c2a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1e:7b:f7:79:03:d4:6e:d1:ca:2a:e7:08:96:
1e:4a:30:cd:df:f8:6f:b8:16:d8:e4:0e:bb:8f:72:
e8:8a:75:ff:aa:2a:34:d3:65:15:85:cb:be:2b:33:
85:27:83:c1:5f:e5:fd:df:3b:84:bb:b4:ab:c7:bc:
81:b6:39:4d:64:bb:1c:58:c1:05:b1:1a:87:d4:f6:
fc:fd:b3:b3:18:00:83:bb:8e:33:e4:a3:9c:62:3b:
2b:ff:67:4f:41:66:32:60:58:0e:63:9e:d2:29:e9:
3a:40:0f:ea:c5:4e:fc:c1:fd:7a:c5:93:b0:2a:9d:
ec:bd:a9:0e:7f:c4:ce:72:22:da:55:23:b2:f9:9e:
be:92:68:13:ed:bf:05:31:db:0b:d1:3a:bf:7c:32:
c1:a1:b7:a7:dd:6a:ca:cb:04:33:5c:77:ad:63:78:
e4:b7:6d:5f:57:be:5b:e8:93:b2:e1:9b:e4:e8:a8:
5c:a7:18:c7:6c:0e:6d:7c:56:55:eb:cd:bc:54:69:
a4:d0:4f:42:fa:a4:34:62:e1:cc:11:c3:9d:bb:57:
4e:71:4f:ce:08:19:6f:7c:37:41:f5:72:b0:75:66:
64:9a:64:4f:bd:96:4a:66:a6:36:a5:7a:65:21:e4:
37:ab:64:a4:90:ac:ac:0e:8d:c1:69:df:98:5e:66:
af:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CA:9E:C1:CF:D7:D4:28:0A:C1:D3:51:94:6D:B2:2C:9F:3C:2A:25
X509v3 Authority Key Identifier:
keyid:1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ab:3b:15:07:a2:1b:6c:be:94:50:52:98:c7:24:7f:f8:3e:
73:8c:e5:21:89:c0:8e:5d:eb:b6:d2:52:23:0b:b3:c5:65:05:
ef:44:27:39:e1:27:de:4d:2f:3b:9f:e8:57:16:29:4f:18:5b:
8e:b0:30:30:6b:14:e8:bd:1d:90:17:3c:9f:f7:f1:31:db:00:
9a:61:11:2b:fb:3e:3d:2a:0b:da:7a:15:81:44:01:04:e0:e6:
f0:d3:75:f8:b4:c0:60:a6:68:7f:26:84:fc:29:53:44:2f:8c:
f2:79:e9:fd:3f:93:7f:1e:f8:0e:ff:6c:77:9d:e3:8f:38:3e:
a6:e5:8d:5a:5f:9a:26:bb:31:a2:3e:e4:75:0b:dd:98:95:01:
ec:64:6c:b3:cd:06:22:f0:79:62:e3:11:e5:6d:bc:1e:32:af:
a8:76:a8:98:03:6c:11:49:94:b9:e7:2e:9d:90:e4:6c:14:bc:
f6:6d:41:10:69:d9:79:e4:20:72:dc:74:ca:54:80:fc:f3:64:
33:e0:00:62:c7:38:fd:e6:8b:92:fe:33:c3:11:4b:4f:33:36:
19:47:a0:f0:1b:21:a8:6e:31:e4:b0:e7:b7:36:13:6f:e7:8d:
6a:9d:b2:aa:88:f6:da:79:a4:01:1c:8c:f6:bb:13:b6:a4:92:
f5:6d:c2:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nDK0/yi0MUhCssJcjHONMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNTM5YTYxNGUwYWExY2ZhMTlmY2Y4ZWUwYmZhYTAzNDYz
MTQzYzMwHhcNMjYwMzI5MDgwMDUzWhcNMjYwMzMwMDgwMDUzWjAzMTEwLwYDVQQD
Eyg5MmNhOWVjMWNmZDdkNDI4MGFjMWQzNTE5NDZkYjIyYzlmM2MyYTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmR5793kD1G7RyirnCJYeSjDN3/hv
uBbY5A67j3LoinX/qio002UVhcu+KzOFJ4PBX+X93zuEu7Srx7yBtjlNZLscWMEF
sRqH1Pb8/bOzGACDu44z5KOcYjsr/2dPQWYyYFgOY57SKek6QA/qxU78wf16xZOw
Kp3svakOf8TOciLaVSOy+Z6+kmgT7b8FMdsL0Tq/fDLBoben3WrKywQzXHetY3jk
t21fV75b6JOy4Zvk6KhcpxjHbA5tfFZV6828VGmk0E9C+qQ0YuHMEcOdu1dOcU/O
CBlvfDdB9XKwdWZkmmRPvZZKZqY2pXplIeQ3q2SkkKysDo3Bad+YXmavFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLKnsHP19QoCsHTUZRtsiyfPColMB8GA1UdIwQY
MBaAFB9TmmFOCqHPoZ/PjuC/qgNGMUPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDFPYVlVNEtvYy1objgtTzRMLXFBMFl4UThNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS85MjdiZjEtNzk5OS00M2UxLWI3ZjUt
YWJlMWUzNzkyNWNmLzEvSDFPYVlVNEtvYy1objgtTzRMLXFBMFl4UThNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS85MjdiZjEtNzk5OS00M2UxLWI3ZjUtYWJlMWUzNzkyNWNm
LzEvSDFPYVlVNEtvYy1objgtTzRMLXFBMFl4UThNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqs7FQei
G2y+lFBSmMckf/g+c4zlIYnAjl3rttJSIwuzxWUF70QnOeEn3k0vO5/oVxYpTxhb
jrAwMGsU6L0dkBc8n/fxMdsAmmERK/s+PSoL2noVgUQBBODm8NN1+LTAYKZofyaE
/ClTRC+M8nnp/T+Tfx74Dv9sd53jjzg+puWNWl+aJrsxoj7kdQvdmJUB7GRss80G
IvB5YuMR5W28HjKvqHaomANsEUmUuecunZDkbBS89m1BEGnZeeQgctx0ylSA/PNk
M+AAYsc4/eaLkv4zwxFLTzM2GUeg8BshqG4x5LDntzYTb+eNap2yqoj22nmkARyM
9rsTtqSS9W3CLg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:10 2026 by rpki-client