Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
File: hrIjA95LCocPz-e2VWwCT3XHajQ.mft (raw, json)
Hash identifier: K9Yk2X2BzYtxhACWPf06NrVj5cqapE2sdt3/Qt/Hp4I=
Subject key identifier: 5F:8A:48:AD:EC:EF:8E:64:33:51:6B:6B:21:7F:A4:38:06:F2:B3:31
Authority key identifier: 86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
Certificate issuer: /CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Certificate serial: 019D37F6E1228FBA160B86B7447D339D1B20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
Manifest number: 1390
Signing time: Sun 29 Mar 2026 05:00:19 +0000
Manifest this update: Sun 29 Mar 2026 05:00:19 +0000
Manifest next update: Mon 30 Mar 2026 05:00:19 +0000
Files and hashes: 1: PreLEhXrBI_UKFJOTXBGTgHoYF0.roa (hash: YyPA9bxM1XffwGYRaKy9yqFp9gB0LZF+tWz17YqGofw=)
2: fW-vmq3lP_3MyQWkZHy-CbMNL3I.roa (hash: tS5uriJcYFbYG/ALXKZnCG1DLjQm/ccSm8DkPwEWxXI=)
3: hrIjA95LCocPz-e2VWwCT3XHajQ.crl (hash: 3kQDSSysQsUoK9ILCDIZX7rZo8E9tylARGe54fm7CZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:e1:22:8f:ba:16:0b:86:b7:44:7d:33:9d:1b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Validity
Not Before: Mar 29 05:00:19 2026 GMT
Not After : Mar 30 05:00:19 2026 GMT
Subject: CN=5f8a48adecef8e6433516b6b217fa43806f2b331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f4:7d:52:23:0d:b2:d5:ed:3b:de:99:44:93:
c8:bf:30:74:c4:5c:d2:5d:67:28:7f:46:ae:13:97:
4a:7d:33:a5:d2:0f:bf:fe:37:9f:db:c6:e7:37:bc:
6a:be:01:b6:94:32:10:7d:bd:ee:ff:b1:4f:58:36:
d5:c3:d4:5a:0b:9c:02:8d:47:55:bc:00:68:9e:1e:
10:6c:83:db:0b:cf:07:63:24:b5:01:4d:4a:f8:09:
bc:c6:2a:44:b8:f8:48:8d:45:f7:e0:30:1f:98:19:
e1:c1:76:0d:e6:e9:29:55:6d:a3:15:05:32:7a:99:
90:00:00:05:bf:90:c9:de:5b:2f:9f:f2:a2:ca:2e:
0d:a3:85:16:44:67:a9:ba:f9:41:41:8d:92:fb:ac:
05:5f:47:6c:2d:2d:2d:a9:4c:39:7d:ad:0d:cf:99:
19:09:ce:bf:7d:4d:88:66:dc:b8:d5:ba:c6:51:d5:
81:85:b1:b7:2b:74:02:d0:df:59:ce:42:1b:ca:79:
65:4f:a8:ef:eb:cf:25:ff:8b:66:0a:0e:92:21:60:
86:99:9e:4b:58:2c:50:89:03:f7:81:d2:eb:73:a8:
a2:e1:22:4d:67:83:b2:7a:36:32:3f:04:24:f5:0c:
4d:0c:3e:2a:68:8e:c5:83:98:51:aa:f0:25:a8:a1:
12:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8A:48:AD:EC:EF:8E:64:33:51:6B:6B:21:7F:A4:38:06:F2:B3:31
X509v3 Authority Key Identifier:
keyid:86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:97:2e:9d:67:cf:71:3a:ce:bd:5b:04:e0:93:73:5b:b1:f5:
96:4d:77:fd:f9:5f:1c:7d:82:63:95:ab:7a:93:2c:d5:52:25:
fc:b7:d3:f4:0e:12:d1:ac:bf:60:da:ae:c5:20:52:7b:04:0d:
80:7f:74:9d:c4:ba:0a:16:14:ca:83:14:1a:06:0a:70:64:0d:
0f:62:0d:24:2f:93:f8:6e:93:92:2a:64:5a:6b:d9:76:20:15:
3d:e9:ec:b1:bb:0b:53:06:93:35:25:10:f2:46:a3:bb:bc:6a:
54:f6:af:4b:a1:4c:bd:50:0b:5a:a2:5d:50:71:6e:07:04:9c:
32:eb:3b:a6:92:31:72:ff:c6:12:72:68:e1:de:46:55:32:7f:
80:09:c2:61:67:16:2d:3d:16:05:d4:fe:76:86:2e:1a:f8:b9:
b9:65:3c:c0:25:2b:40:6e:d3:ac:2e:af:02:8c:29:43:0d:06:
80:f1:bd:b8:d9:e6:59:e8:ee:4b:03:b8:a1:c7:b4:1a:9d:97:
f7:16:f1:03:f8:08:cc:1e:ff:02:b9:ad:b7:ae:f9:7f:da:d4:
d4:28:82:05:f0:57:db:47:0e:88:94:a4:3d:40:98:23:3a:3c:
92:e3:12:cd:3a:6f:2d:cc:78:66:e4:16:82:35:55:52:e0:95:
7c:63:05:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039uEij7oWC4a3RH0znRsgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2YjIyMzAzZGU0YjBhODcwZmNmZTdiNjU1NmMwMjRmNzVj
NzZhMzQwHhcNMjYwMzI5MDUwMDE5WhcNMjYwMzMwMDUwMDE5WjAzMTEwLwYDVQQD
Eyg1ZjhhNDhhZGVjZWY4ZTY0MzM1MTZiNmIyMTdmYTQzODA2ZjJiMzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvR9UiMNstXtO96ZRJPIvzB0xFzS
XWcof0auE5dKfTOl0g+//jef28bnN7xqvgG2lDIQfb3u/7FPWDbVw9RaC5wCjUdV
vABonh4QbIPbC88HYyS1AU1K+Am8xipEuPhIjUX34DAfmBnhwXYN5ukpVW2jFQUy
epmQAAAFv5DJ3lsvn/Kiyi4No4UWRGepuvlBQY2S+6wFX0dsLS0tqUw5fa0Nz5kZ
Cc6/fU2IZty41brGUdWBhbG3K3QC0N9ZzkIbynllT6jv688l/4tmCg6SIWCGmZ5L
WCxQiQP3gdLrc6ii4SJNZ4OyejYyPwQk9QxNDD4qaI7Fg5hRqvAlqKES2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+KSK3s745kM1FrayF/pDgG8rMxMB8GA1UdIwQY
MBaAFIayIwPeSwqHD8/ntlVsAk91x2o0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHJJakE5NUxDb2NQei1lMlZXd0NUM1hIYWpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hZmQ3MGYtYzMwMC00OWNiLWI3Mjkt
NzJhYjU5ODdmNjA5LzEvaHJJakE5NUxDb2NQei1lMlZXd0NUM1hIYWpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hZmQ3MGYtYzMwMC00OWNiLWI3MjktNzJhYjU5ODdmNjA5
LzEvaHJJakE5NUxDb2NQei1lMlZXd0NUM1hIYWpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAipcunWfP
cTrOvVsE4JNzW7H1lk13/flfHH2CY5WrepMs1VIl/LfT9A4S0ay/YNquxSBSewQN
gH90ncS6ChYUyoMUGgYKcGQND2INJC+T+G6TkipkWmvZdiAVPenssbsLUwaTNSUQ
8kaju7xqVPavS6FMvVALWqJdUHFuBwScMus7ppIxcv/GEnJo4d5GVTJ/gAnCYWcW
LT0WBdT+doYuGvi5uWU8wCUrQG7TrC6vAowpQw0GgPG9uNnmWejuSwO4oce0Gp2X
9xbxA/gIzB7/Armtt675f9rU1CiCBfBX20cOiJSkPUCYIzo8kuMSzTpvLcx4ZuQW
gjVVUuCVfGMFqw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:56 2026 by rpki-client