Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
File: H5TRopzOJhU7k0-0fC7iFnS7hcs.mft (raw, json)
Hash identifier: My9IJF2TyY7a5U4rcVlvgIZYTACmuE1cFOTplhdL5Hc=
Subject key identifier: 2E:24:D5:6B:D3:79:E7:2F:DF:E0:14:71:60:0E:80:4E:8B:D0:D0:C0
Authority key identifier: 1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB
Certificate issuer: /CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb
Certificate serial: 019D37F739089232E04A3677FAD26680FD6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
Manifest number: 153A
Signing time: Sun 29 Mar 2026 05:00:41 +0000
Manifest this update: Sun 29 Mar 2026 05:00:41 +0000
Manifest next update: Mon 30 Mar 2026 05:00:41 +0000
Files and hashes: 1: H5TRopzOJhU7k0-0fC7iFnS7hcs.crl (hash: acfbuVPDIBAGhpSm1BS269jCgspvoIYwGVNQEqK5hPw=)
2: KarebT1i131F1F0b_jruzSe1lHY.roa (hash: UoRIjXeKvZYwlceblJKfWjA69FlQT++n1NlR0R55ggI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:39:08:92:32:e0:4a:36:77:fa:d2:66:80:fd:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb
Validity
Not Before: Mar 29 05:00:41 2026 GMT
Not After : Mar 30 05:00:41 2026 GMT
Subject: CN=2e24d56bd379e72fdfe01471600e804e8bd0d0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7e:40:25:a8:7b:84:c1:9c:3c:f8:05:19:cb:
78:6d:ed:8c:44:59:3a:2a:47:61:49:cd:91:fb:f2:
ec:32:84:36:a2:62:49:ec:2a:e2:42:24:5a:d0:82:
8a:71:bc:ab:f3:cc:2e:44:57:f5:92:8c:78:93:52:
82:78:ff:63:48:20:cf:95:67:46:05:b6:47:65:21:
17:b7:fc:f0:0a:4e:9a:ba:e1:bc:af:b1:ba:66:cc:
1b:f7:91:f4:5f:8d:d2:04:8d:dd:7b:d0:b1:d5:85:
0f:e0:c7:05:fd:de:26:27:68:75:c6:a0:fa:ff:c3:
e6:f4:e6:c1:61:15:5f:76:91:6e:04:03:53:ef:51:
98:2f:62:aa:b5:f6:f0:44:15:87:39:bb:95:05:84:
93:55:81:06:5c:a3:ba:3b:6a:4f:59:77:85:d4:72:
d4:96:d9:7f:25:f9:4e:f6:66:7e:07:49:44:bd:63:
10:9d:48:31:98:79:70:cb:2f:76:73:34:ec:43:44:
95:fa:3c:94:49:74:3b:6c:da:45:42:5f:dc:03:67:
b6:3a:11:87:9e:48:db:9b:e3:e8:65:a1:60:1f:66:
cb:d7:cd:00:00:b6:9e:1c:e9:f6:41:5d:36:85:00:
bb:d3:52:bc:1a:35:cf:85:3d:7e:27:21:40:b9:27:
40:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:24:D5:6B:D3:79:E7:2F:DF:E0:14:71:60:0E:80:4E:8B:D0:D0:C0
X509v3 Authority Key Identifier:
keyid:1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:58:c6:64:c8:da:e4:9a:31:75:ea:45:b5:0e:73:95:16:a8:
1b:3e:f2:bf:ab:91:b1:28:29:81:02:ab:45:3b:0a:b4:8a:40:
57:6f:ac:b0:43:b1:2a:6d:30:7e:49:27:a6:dd:15:64:6a:69:
b3:d4:69:a3:95:8a:5a:1f:16:d8:57:27:d9:0a:42:81:a2:5b:
2d:f8:66:a6:1c:df:d7:ac:4a:9d:f2:a9:9e:05:35:a0:1b:f6:
fe:5b:3d:51:29:44:27:5a:fe:37:60:0e:5a:30:da:f7:80:43:
72:db:48:65:ac:74:90:8d:c7:73:e9:75:2e:ea:e6:4b:95:dd:
18:5b:66:68:c1:14:6a:b9:b1:f0:dd:d2:0e:5d:75:db:de:3f:
eb:d5:1a:48:5d:c1:ed:f7:04:f4:85:05:30:54:7c:69:34:62:
35:81:8b:23:7d:de:2a:3b:2a:27:f4:9c:f3:d6:c8:23:43:36:
01:45:8a:42:b0:df:c2:e6:e4:3a:ef:18:82:41:0d:03:dc:4b:
09:b6:69:8d:c3:54:e3:57:e8:b7:37:3a:65:77:88:d9:84:db:
1f:82:d4:7f:5f:cc:46:b5:bd:10:a8:dc:64:cc:23:e2:00:a2:
9d:a5:9a:c5:1a:a9:30:df:0f:f4:9b:73:b4:e7:eb:45:85:71:
6a:63:6f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:39 2026 by rpki-client