Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
File: H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft (raw, json)
Hash identifier: 639oXj6jhNGJaBw8PnR3JQou+tCIxxPKHfcmejIYOpE=
Subject key identifier: E4:DF:6D:7D:C4:10:28:01:CF:C6:3C:94:0D:4C:75:EA:31:A8:4E:E6
Authority key identifier: 1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61
Certificate issuer: /CN=1f688f9857d9e440c1058dc8959e49f8b3183f61
Certificate serial: 01A14DD03A339871807D92DD69028764D399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
Manifest number: 1AAC
Signing time: Sun 18 Oct 2026 07:00:54 +0000
Manifest this update: Sun 18 Oct 2026 07:00:54 +0000
Manifest next update: Mon 19 Oct 2026 07:00:54 +0000
Files and hashes: 1: 5ISKJbp4rbTdCWF2uAdFb5yPoJI.roa (hash: OH5/o4eCRTtPdgmEfAYqQLH3iOBiZD4gNNNHJ0XoTvs=)
2: H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl (hash: Lrw8u77tMFT1xkAfk0eX6DyG4+mia2Ai9apGQeXtZYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4d:d0:3a:33:98:71:80:7d:92:dd:69:02:87:64:d3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f688f9857d9e440c1058dc8959e49f8b3183f61
Validity
Not Before: Oct 18 07:00:54 2026 GMT
Not After : Oct 19 07:00:54 2026 GMT
Subject: CN=e4df6d7dc4102801cfc63c940d4c75ea31a84ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ed:7c:90:62:97:96:bd:e7:97:c2:b9:a3:f4:
4d:95:65:ba:56:bb:2a:a6:bb:c0:65:56:fd:c6:bb:
c2:35:cf:47:97:d0:fc:f0:d3:4b:c5:02:bf:42:da:
1b:42:82:5b:34:c7:31:1b:65:4e:96:af:78:99:9d:
18:b8:8b:aa:2a:f4:89:f7:7e:f4:f3:a0:77:17:a2:
c9:01:e0:9f:bb:df:c4:47:af:cc:34:0e:8b:2b:89:
7d:66:4c:cd:de:b4:25:69:01:d6:03:18:f8:cf:24:
47:26:b4:cb:13:1a:9e:f9:ac:fc:2a:3f:98:75:7b:
13:04:53:f8:43:0f:b5:ea:93:66:1f:21:fd:61:0f:
8a:50:d2:93:97:2d:1a:cc:8c:12:ee:e0:0e:dd:58:
9b:3f:1e:06:58:27:c1:2f:9c:21:81:1e:06:fe:93:
90:04:8c:71:9f:b9:8f:c1:01:cc:08:25:92:ae:28:
8b:37:ae:f9:28:55:3c:70:ad:ab:ee:05:dc:82:b5:
cf:c1:09:a3:cc:88:9b:7b:5e:c6:65:64:ef:21:03:
ec:28:76:e0:89:c8:4f:88:76:26:c4:5b:0d:b5:e1:
a2:b5:ef:9b:e4:4c:18:55:e7:d8:0e:3a:60:52:8f:
22:1c:29:5b:e8:c0:ce:bd:f9:51:de:5b:5b:45:f8:
f1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DF:6D:7D:C4:10:28:01:CF:C6:3C:94:0D:4C:75:EA:31:A8:4E:E6
X509v3 Authority Key Identifier:
keyid:1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:08:43:79:f0:2c:13:68:29:f0:c4:1e:22:67:b1:ac:20:5b:
9f:4a:d8:6b:b5:8c:a5:3f:4b:6d:35:84:03:77:cc:d5:2e:78:
47:79:be:d1:ea:bf:12:6b:f6:86:08:cd:93:54:93:4e:6a:b8:
98:fe:4e:44:a4:c0:68:ee:0f:ac:f5:ef:15:3a:34:16:00:a6:
e0:f9:44:5d:97:3f:3c:7e:9c:20:62:ad:de:9e:39:3d:85:ab:
ef:74:dd:fd:2b:37:0a:39:47:84:c8:1a:fc:70:e5:60:e4:ec:
d2:66:87:95:63:94:f6:bf:c3:ae:a4:1a:7a:8b:77:7c:93:a8:
8d:6e:c7:5e:41:22:e2:6f:ac:d4:31:d1:f5:4d:df:9b:8d:0b:
43:3e:43:30:54:11:4e:a3:62:9e:73:2b:06:8d:8e:fb:ba:52:
b4:2f:cb:99:ef:9f:86:4e:d9:f1:ab:2f:ef:73:48:94:55:fe:
95:b2:e2:ed:82:33:15:78:06:1a:19:88:cf:77:ec:b8:9b:b5:
30:45:d7:01:e8:66:02:3a:40:c1:c2:a9:3f:19:16:be:d1:d8:
b6:5b:9d:af:b2:d8:8a:66:7c:21:d7:32:6f:bb:08:f9:44:c2:
d0:b8:a6:56:be:23:45:dd:0c:1b:bd:48:74:ff:7f:e3:fc:bd:
e3:57:79:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFN0DozmHGAfZLdaQKHZNOZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNjg4Zjk4NTdkOWU0NDBjMTA1OGRjODk1OWU0OWY4YjMx
ODNmNjEwHhcNMjYxMDE4MDcwMDU0WhcNMjYxMDE5MDcwMDU0WjAzMTEwLwYDVQQD
EyhlNGRmNmQ3ZGM0MTAyODAxY2ZjNjNjOTQwZDRjNzVlYTMxYTg0ZWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu18kGKXlr3nl8K5o/RNlWW6Vrsq
prvAZVb9xrvCNc9Hl9D88NNLxQK/QtobQoJbNMcxG2VOlq94mZ0YuIuqKvSJ9370
86B3F6LJAeCfu9/ER6/MNA6LK4l9ZkzN3rQlaQHWAxj4zyRHJrTLExqe+az8Kj+Y
dXsTBFP4Qw+16pNmHyH9YQ+KUNKTly0azIwS7uAO3VibPx4GWCfBL5whgR4G/pOQ
BIxxn7mPwQHMCCWSriiLN675KFU8cK2r7gXcgrXPwQmjzIibe17GZWTvIQPsKHbg
ichPiHYmxFsNteGite+b5EwYVefYDjpgUo8iHClb6MDOvflR3ltbRfjx/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTfbX3EECgBz8Y8lA1MdeoxqE7mMB8GA1UdIwQY
MBaAFB9oj5hX2eRAwQWNyJWeSfizGD9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDJpUG1GZlo1RURCQlkzSWxaNUotTE1ZUDJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wNTc3ODAtNTJlOC00Nzc3LThhMjUt
MDIxYzJlMDczNWIxLzEvSDJpUG1GZlo1RURCQlkzSWxaNUotTE1ZUDJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8wNTc3ODAtNTJlOC00Nzc3LThhMjUtMDIxYzJlMDczNWIx
LzEvSDJpUG1GZlo1RURCQlkzSWxaNUotTE1ZUDJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewhDefAs
E2gp8MQeImexrCBbn0rYa7WMpT9LbTWEA3fM1S54R3m+0eq/Emv2hgjNk1STTmq4
mP5ORKTAaO4PrPXvFTo0FgCm4PlEXZc/PH6cIGKt3p45PYWr73Td/Ss3CjlHhMga
/HDlYOTs0maHlWOU9r/DrqQaeot3fJOojW7HXkEi4m+s1DHR9U3fm40LQz5DMFQR
TqNinnMrBo2O+7pStC/Lme+fhk7Z8asv73NIlFX+lbLi7YIzFXgGGhmIz3fsuJu1
MEXXAehmAjpAwcKpPxkWvtHYtludr7LYimZ8Idcyb7sI+UTC0LimVr4jRd0MG71I
dP9/4/y941d5cw==
-----END CERTIFICATE-----
Generated at Sun Oct 18 12:05:08 2026 by rpki-client