Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
File: H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft (raw, json)
Hash identifier: 6IORrj14WDsluLL+PQzqsQgPsjUshlvCgrWW6zj52pw=
Subject key identifier: 4D:4D:A4:90:23:ED:DF:0A:03:88:FD:2D:0F:2C:FD:65:7E:CC:73:93
Authority key identifier: 1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
Certificate issuer: /CN=1f97599f63d787c65b2ef9ff70dd636527404466
Certificate serial: 019D3909CC2E41C2E96596B0585730162626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
Manifest number: 0F99
Signing time: Sun 29 Mar 2026 10:00:36 +0000
Manifest this update: Sun 29 Mar 2026 10:00:36 +0000
Manifest next update: Mon 30 Mar 2026 10:00:36 +0000
Files and hashes: 1: H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl (hash: WNIvmE3SuKmRmRNJcygQdU0GyrKOgRy75JBmQKs83Ug=)
2: ex-egV2q8xIsoN87xmhf0Beqsx8.roa (hash: yMk8zHkPeRJ7LF6AhIih+Hrdt/inz7ExGAHQpY4Q1X0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:cc:2e:41:c2:e9:65:96:b0:58:57:30:16:26:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f97599f63d787c65b2ef9ff70dd636527404466
Validity
Not Before: Mar 29 10:00:36 2026 GMT
Not After : Mar 30 10:00:36 2026 GMT
Subject: CN=4d4da49023eddf0a0388fd2d0f2cfd657ecc7393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f2:fa:83:7d:0c:99:3b:44:b0:8d:cb:9c:ad:
02:e9:ba:4d:77:33:bf:09:a7:70:c5:67:ac:57:ca:
8e:63:c7:74:13:dc:10:22:14:f4:20:9e:ab:c3:93:
83:36:41:1d:27:49:0c:b2:82:fc:d4:9c:5e:3f:4a:
2b:1d:cc:e1:3a:ee:11:f8:f3:e5:4e:70:50:02:aa:
f5:f7:f4:38:00:d2:b3:0b:f0:35:f2:e1:a8:d1:83:
ca:5b:f9:c1:d4:c7:58:1b:4e:0f:23:da:e1:14:3b:
83:c3:ed:27:70:8e:07:b4:9e:3b:17:54:11:8c:94:
e0:54:16:94:e3:49:70:5b:76:80:4a:85:db:5f:65:
b4:b6:f3:90:3b:cc:84:98:0d:bc:0f:61:2e:5c:bf:
74:68:f1:e6:7e:fe:a7:fd:38:20:28:ec:6c:84:ef:
1f:64:2a:51:61:a7:33:56:63:dc:88:02:64:70:bd:
e2:63:56:f5:da:58:5f:a5:43:d5:3e:1d:be:9a:5f:
e4:b7:c7:d4:ec:3d:0d:2b:d0:26:34:81:33:48:41:
06:4c:ad:63:41:f0:15:cd:7a:49:6d:9f:25:ce:6f:
4e:2e:47:81:a2:bf:2f:77:3c:19:ce:93:3d:83:e1:
6f:46:0e:5c:54:73:22:d1:a5:7d:78:5e:1b:f3:67:
90:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4D:A4:90:23:ED:DF:0A:03:88:FD:2D:0F:2C:FD:65:7E:CC:73:93
X509v3 Authority Key Identifier:
keyid:1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ff:85:2c:0b:c7:6e:b5:e8:56:42:88:99:67:f9:4b:ad:28:
00:3d:12:20:bd:2d:84:23:b7:a0:d8:99:6f:6e:85:c1:85:67:
d9:f0:25:03:b5:ef:1f:79:51:32:3d:55:90:63:11:94:62:ba:
97:f4:bc:c1:fa:3c:6b:1b:14:76:34:85:9a:b9:f6:b7:f0:6d:
74:6f:b7:f9:ad:fe:9b:50:32:e0:22:71:48:25:d5:69:1e:bb:
3d:37:be:cc:19:57:ce:8f:01:3e:fa:06:1d:84:52:ce:a9:85:
a9:c2:88:92:93:1b:13:d4:ca:2e:d6:c3:37:23:e2:f2:45:f5:
94:0f:43:d6:7f:9f:8b:54:c1:3e:3d:00:09:46:ef:2c:2a:73:
6d:4a:4e:eb:a3:98:30:09:92:03:27:23:cc:cc:f6:16:72:81:
d4:78:05:6d:5d:a5:dc:ea:fc:73:ff:be:ad:e5:d6:4e:83:8a:
ed:dc:fb:6b:7a:74:3d:b3:6e:f9:86:61:da:37:95:88:11:e1:
3a:8a:51:6c:e8:d2:c6:96:23:00:2e:78:38:c6:52:6d:54:b8:
fa:fb:cf:b9:d8:d8:6c:54:a8:e2:d0:73:2f:30:1a:3a:f5:e6:
1c:b7:00:7b:04:6c:5b:10:3e:4d:6e:2e:79:3a:83:64:73:6a:
1c:ce:4c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:43 2026 by rpki-client