Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
File: h5TVZDYKUh21mK7m5qL41mkhtsU.mft (raw, json)
Hash identifier: b9t5EDv0/PhwpSklMAf3AqIZi3kzR046C/ezhCTnEyA=
Subject key identifier: 2C:26:C6:2D:D3:95:7E:83:0C:E1:D7:80:4B:70:88:83:0A:B2:93:AD
Authority key identifier: 87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5
Certificate issuer: /CN=8794d564360a521db598aee6e6a2f8d66921b6c5
Certificate serial: 019DD0BF172FCF5D33C0699F066262560E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
Manifest number: 0161
Signing time: Mon 27 Apr 2026 21:01:17 +0000
Manifest this update: Mon 27 Apr 2026 21:01:17 +0000
Manifest next update: Tue 28 Apr 2026 21:01:17 +0000
Files and hashes: 1: h5TVZDYKUh21mK7m5qL41mkhtsU.crl (hash: KG+h28WP07tm7oky7ZHKo/zvRFnvY5sYO/BpEF9htlY=)
2: l_d_CxebXDc82wsd4U0BFVkGTh0.roa (hash: uFClusAny8IXHB2cwB2oabcg7BQ3SgYHOlNBk9mPDms=)
3: qGufgpnXsdA505UL9rLMl_XkECY.roa (hash: J3gwk0cVtFF6iJ602SqYnRybno+t/W1jMS3C5xgfXqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:bf:17:2f:cf:5d:33:c0:69:9f:06:62:62:56:0e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8794d564360a521db598aee6e6a2f8d66921b6c5
Validity
Not Before: Apr 27 21:01:17 2026 GMT
Not After : Apr 28 21:01:17 2026 GMT
Subject: CN=2c26c62dd3957e830ce1d7804b7088830ab293ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e9:60:60:da:2e:de:c7:5c:04:a1:94:9e:05:
44:ab:9d:91:4f:fa:06:b5:88:eb:93:6b:63:55:ed:
29:a0:7b:e9:b8:ea:0c:24:66:9d:4a:09:af:7f:0a:
2d:70:52:7f:6c:45:8b:cd:0f:f3:f6:a1:12:8e:f4:
80:c7:09:9c:3d:02:28:74:72:b3:22:46:d4:5e:82:
88:35:5b:33:7d:40:d2:5c:6e:98:d5:fb:c9:07:09:
c6:2f:80:ff:02:cc:c4:a0:5d:b4:61:6e:d9:3d:ae:
9e:39:28:a4:2f:d7:0e:50:35:cc:70:ba:3e:fa:46:
b8:13:05:3a:3c:a9:4b:96:93:45:04:da:1e:ad:00:
58:54:e7:33:e9:13:7a:ae:9d:07:32:ec:ae:b7:dc:
3b:c1:8d:50:33:f5:7c:39:72:32:64:80:b1:01:86:
7b:89:23:35:d4:02:67:d0:05:cf:65:cd:7e:3e:40:
3b:d1:fc:87:fd:85:88:ab:7d:98:8f:80:a1:1a:3a:
20:65:3c:96:96:62:2b:d6:6f:1f:8e:13:23:13:ac:
99:77:0c:56:04:3b:49:52:d3:40:7e:a3:d2:f3:56:
11:98:93:48:2c:da:c6:c3:c1:62:6f:8c:b2:80:86:
13:e7:c2:43:a0:57:a5:ff:f6:78:26:fa:77:a4:a4:
3c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:26:C6:2D:D3:95:7E:83:0C:E1:D7:80:4B:70:88:83:0A:B2:93:AD
X509v3 Authority Key Identifier:
keyid:87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:00:3d:98:9f:58:47:80:8d:70:0e:c2:55:e9:1f:d1:8d:b1:
e3:e9:db:b4:be:84:51:ad:57:cc:75:02:dd:be:f9:ea:19:53:
f9:89:33:bd:51:50:01:a9:72:67:28:1a:9e:4b:39:0b:5d:48:
38:74:57:01:52:cc:49:9e:4f:fd:b5:26:c9:2e:ba:74:46:aa:
9a:d1:33:f9:d6:d6:3f:bd:6a:2b:e8:68:e8:7a:1e:8c:37:88:
ae:f9:3b:88:35:6f:53:ff:7a:55:1f:d8:65:72:87:ff:dd:27:
43:36:12:12:41:7d:35:96:fe:cd:6f:5f:f5:53:6f:69:0d:7d:
5b:06:27:ca:ba:83:b9:8d:69:90:98:43:38:6f:05:2c:32:2b:
76:e3:83:1e:88:7d:13:66:04:4b:12:9c:f0:25:b6:31:42:a3:
6d:6c:c1:5e:49:e7:58:7b:9a:99:f1:25:00:46:e8:58:67:26:
c8:ef:c3:43:1b:de:42:cc:09:75:0c:64:68:98:76:81:d7:e7:
50:b2:0e:49:21:9b:71:c6:c0:e1:05:03:a8:23:74:fa:e4:1a:
69:16:4d:b3:8b:04:20:c1:59:ea:0f:1a:a2:a9:d2:74:01:f2:
75:72:a8:84:df:15:a2:23:0b:a9:9c:ab:c8:58:76:b7:3f:cc:
86:05:e3:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Qvxcvz10zwGmfBmJiVg50MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OTRkNTY0MzYwYTUyMWRiNTk4YWVlNmU2YTJmOGQ2Njky
MWI2YzUwHhcNMjYwNDI3MjEwMTE3WhcNMjYwNDI4MjEwMTE3WjAzMTEwLwYDVQQD
EygyYzI2YzYyZGQzOTU3ZTgzMGNlMWQ3ODA0YjcwODg4MzBhYjI5M2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+lgYNou3sdcBKGUngVEq52RT/oG
tYjrk2tjVe0poHvpuOoMJGadSgmvfwotcFJ/bEWLzQ/z9qESjvSAxwmcPQIodHKz
IkbUXoKINVszfUDSXG6Y1fvJBwnGL4D/AszEoF20YW7ZPa6eOSikL9cOUDXMcLo+
+ka4EwU6PKlLlpNFBNoerQBYVOcz6RN6rp0HMuyut9w7wY1QM/V8OXIyZICxAYZ7
iSM11AJn0AXPZc1+PkA70fyH/YWIq32Yj4ChGjogZTyWlmIr1m8fjhMjE6yZdwxW
BDtJUtNAfqPS81YRmJNILNrGw8Fib4yygIYT58JDoFel//Z4Jvp3pKQ83wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwmxi3TlX6DDOHXgEtwiIMKspOtMB8GA1UdIwQY
MBaAFIeU1WQ2ClIdtZiu5uai+NZpIbbFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDVUVlpEWUtVaDIxbUs3bTVxTDQxbWtodHNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9jYTE2NjctZGU4Zi00NWRjLTkwMDct
NWFmZTBjNDJjZjc3LzEvaDVUVlpEWUtVaDIxbUs3bTVxTDQxbWtodHNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9jYTE2NjctZGU4Zi00NWRjLTkwMDctNWFmZTBjNDJjZjc3
LzEvaDVUVlpEWUtVaDIxbUs3bTVxTDQxbWtodHNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhwA9mJ9Y
R4CNcA7CVekf0Y2x4+nbtL6EUa1XzHUC3b756hlT+YkzvVFQAalyZyganks5C11I
OHRXAVLMSZ5P/bUmyS66dEaqmtEz+dbWP71qK+ho6HoejDeIrvk7iDVvU/96VR/Y
ZXKH/90nQzYSEkF9NZb+zW9f9VNvaQ19WwYnyrqDuY1pkJhDOG8FLDIrduODHoh9
E2YESxKc8CW2MUKjbWzBXknnWHuamfElAEboWGcmyO/DQxveQswJdQxkaJh2gdfn
ULIOSSGbccbA4QUDqCN0+uQaaRZNs4sEIMFZ6g8aoqnSdAHydXKohN8VoiMLqZyr
yFh2tz/MhgXjCw==
-----END CERTIFICATE-----
Generated at Tue Apr 28 00:31:20 2026 by rpki-client