Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
File: h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft (raw, json)
Hash identifier: WIwFwOsu+9cufoo2FtkxuPXNNUdVHJpeD4/vJKNMmH4=
Subject key identifier: 7D:A3:4D:6B:44:9C:66:A8:77:03:AC:A3:79:F6:35:3E:F4:BA:02:1B
Authority key identifier: 87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
Certificate issuer: /CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Certificate serial: 019D378912AC27DA334FADBBA26492F17483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
Manifest number: 1203
Signing time: Sun 29 Mar 2026 03:00:23 +0000
Manifest this update: Sun 29 Mar 2026 03:00:23 +0000
Manifest next update: Mon 30 Mar 2026 03:00:23 +0000
Files and hashes: 1: 4fVpw4jDmLgLlVEJ14HcYjkhURc.roa (hash: OgxhauoTFqD32kP7fqq3sMCVlZur9FHQRJ/kNIVIhFQ=)
2: h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl (hash: oC1LDTcFltx6enX1IYHGjQueEQyJYjIR4ia/7OIEMXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:12:ac:27:da:33:4f:ad:bb:a2:64:92:f1:74:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Validity
Not Before: Mar 29 03:00:23 2026 GMT
Not After : Mar 30 03:00:23 2026 GMT
Subject: CN=7da34d6b449c66a87703aca379f6353ef4ba021b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2c:ba:37:71:cc:55:6e:0f:9c:da:f8:54:d9:
d7:10:bc:1a:f6:32:4a:c3:b8:45:d9:5f:f8:8c:7a:
e0:7a:7e:b9:1c:74:71:a5:12:f6:93:ea:df:3d:9c:
c4:3d:58:60:fb:cb:8d:2f:b5:71:3b:0c:62:7e:29:
5a:aa:23:fd:28:bf:d2:24:5a:68:b2:1a:40:bf:92:
89:62:2c:0c:0e:31:a3:9d:c1:84:ae:a2:9f:db:8e:
06:8a:ef:11:8d:eb:af:8c:a1:f5:e9:12:3f:ca:0c:
4a:9f:77:6c:35:11:17:3d:97:46:62:0c:b2:47:22:
e9:12:69:1f:dd:82:f3:3e:6d:0c:6c:e4:8c:1f:3f:
b7:ab:ee:df:15:27:6d:ee:11:47:08:af:4a:5a:c9:
fb:3f:02:54:87:55:9c:5c:7d:3b:cd:84:fe:ae:01:
f7:81:86:b1:80:7e:6e:ad:41:af:6e:5c:e5:7e:f6:
f5:c1:25:a6:85:66:d8:58:0c:68:5a:39:d6:87:25:
5d:80:ce:76:94:d2:b5:5a:9e:17:22:bf:5f:f4:5f:
b3:e2:8b:4e:6a:ba:8c:51:99:63:c1:65:47:ef:83:
71:fd:c1:31:f0:bd:6a:20:49:01:e6:37:01:a4:8e:
e0:b8:ec:c7:56:b0:01:c6:ce:0e:d1:70:a0:9d:af:
bd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A3:4D:6B:44:9C:66:A8:77:03:AC:A3:79:F6:35:3E:F4:BA:02:1B
X509v3 Authority Key Identifier:
keyid:87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:dc:b8:ca:4e:e3:90:4d:b6:6d:04:79:3f:d3:d3:fa:d7:67:
11:2a:5e:d6:4e:33:fc:2f:85:c9:f8:48:d2:da:df:78:ef:55:
3e:42:26:02:64:7b:e7:15:8d:78:fb:34:84:ac:36:6c:49:cf:
13:cf:0a:69:bb:56:eb:64:de:43:93:b4:bf:7c:4d:07:91:b9:
83:3c:7e:1f:51:a9:21:d7:53:b1:14:6c:2b:47:3b:62:f6:91:
da:70:6f:b0:97:b9:2e:5f:43:b1:e5:09:06:dc:27:51:be:04:
b0:b9:49:1b:c7:3b:ee:2e:93:2c:11:8a:32:77:87:37:07:9c:
bc:3e:4e:fd:28:90:aa:8f:6e:2b:58:5a:9a:92:c2:86:c6:15:
1c:3d:8c:ac:70:04:fc:bb:97:a1:18:d7:7b:f5:1c:20:61:4d:
9e:75:b0:ef:6a:1a:98:c6:10:d1:72:83:d7:5c:33:1a:82:55:
3c:19:e3:23:4b:3c:b9:ae:a2:ea:e1:41:9d:52:77:ca:a0:ca:
8b:20:be:98:b2:32:b8:05:c6:ae:09:4a:b1:b2:a3:c7:6e:97:
78:4a:c4:84:b5:a4:be:af:92:70:23:b8:fd:7c:e7:00:ff:a1:
ab:00:35:20:4d:e5:5b:7b:68:bf:d0:87:d2:d3:b6:d3:82:6c:
ba:6d:5c:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iRKsJ9ozT627omSS8XSDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NGFhMTZmZDJhMmM5MzZjMGFhNGZiNTYyNGY2MmJjNTZh
NTRkZjgwHhcNMjYwMzI5MDMwMDIzWhcNMjYwMzMwMDMwMDIzWjAzMTEwLwYDVQQD
Eyg3ZGEzNGQ2YjQ0OWM2NmE4NzcwM2FjYTM3OWY2MzUzZWY0YmEwMjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSy6N3HMVW4PnNr4VNnXELwa9jJK
w7hF2V/4jHrgen65HHRxpRL2k+rfPZzEPVhg+8uNL7VxOwxifilaqiP9KL/SJFpo
shpAv5KJYiwMDjGjncGErqKf244Giu8RjeuvjKH16RI/ygxKn3dsNREXPZdGYgyy
RyLpEmkf3YLzPm0MbOSMHz+3q+7fFSdt7hFHCK9KWsn7PwJUh1WcXH07zYT+rgH3
gYaxgH5urUGvblzlfvb1wSWmhWbYWAxoWjnWhyVdgM52lNK1Wp4XIr9f9F+z4otO
arqMUZljwWVH74Nx/cEx8L1qIEkB5jcBpI7guOzHVrABxs4O0XCgna+9iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2jTWtEnGaodwOso3n2NT70ugIbMB8GA1UdIwQY
MBaAFIdKoW/Sosk2wKpPtWJPYrxWpU34MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDBxaGI5S2l5VGJBcWstMVlrOWl2RmFsVGZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83ZmVhNWEtZWQ3OC00YmE5LTlhMTct
ZmRiYzdjNGNmNDllLzEvaDBxaGI5S2l5VGJBcWstMVlrOWl2RmFsVGZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC83ZmVhNWEtZWQ3OC00YmE5LTlhMTctZmRiYzdjNGNmNDll
LzEvaDBxaGI5S2l5VGJBcWstMVlrOWl2RmFsVGZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmty4yk7j
kE22bQR5P9PT+tdnESpe1k4z/C+FyfhI0trfeO9VPkImAmR75xWNePs0hKw2bEnP
E88KabtW62TeQ5O0v3xNB5G5gzx+H1GpIddTsRRsK0c7YvaR2nBvsJe5Ll9DseUJ
BtwnUb4EsLlJG8c77i6TLBGKMneHNwecvD5O/SiQqo9uK1hampLChsYVHD2MrHAE
/LuXoRjXe/UcIGFNnnWw72oamMYQ0XKD11wzGoJVPBnjI0s8ua6i6uFBnVJ3yqDK
iyC+mLIyuAXGrglKsbKjx26XeErEhLWkvq+ScCO4/XznAP+hqwA1IE3lW3tov9CH
0tO204Jsum1cZA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:28 2026 by rpki-client