Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
File: HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft (raw, json)
Hash identifier: sx6TljkRasS17ookSDWPIoVZGR3otcKSXIkgo6gYswg=
Subject key identifier: 5D:BA:97:E2:26:57:4F:1F:FB:A7:37:15:A9:B8:7F:2F:A2:F3:C9:D3
Authority key identifier: 1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
Certificate issuer: /CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Certificate serial: 019D38D37CE718F4492D8D0091DF3A0FD968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 09:01:17 +0000
Manifest this update: Sun 29 Mar 2026 09:01:17 +0000
Manifest next update: Mon 30 Mar 2026 09:01:17 +0000
Files and hashes: 1: 4t1yiUQVN5Px9-wGHy62XxxqimU.roa (hash: FHoafxoTZhFU/Fxu+bGTDh9a2aT1nhPTACKs/kC0+Jg=)
2: 8jW3c1tdyMykRFAb8cKVIvXYm1o.roa (hash: Q0T2eH3RlaxZhFvfRSxmpGRJmTvjnKlI3xGp5fpQfVU=)
3: HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl (hash: voRppeUqqxn3Sk7te5i0EZccG8RE/MP/ikHDMxx9Zbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:7c:e7:18:f4:49:2d:8d:00:91:df:3a:0f:d9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Validity
Not Before: Mar 29 09:01:17 2026 GMT
Not After : Mar 30 09:01:17 2026 GMT
Subject: CN=5dba97e226574f1ffba73715a9b87f2fa2f3c9d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d0:ae:a1:0c:b9:3f:6b:81:bd:cd:91:bc:f4:
ba:39:e2:b2:8b:84:af:5b:16:8a:3a:7a:6e:b7:4b:
1a:73:70:42:0c:ed:ba:7f:56:55:e7:49:95:ac:ba:
13:d6:d6:b3:13:f0:af:da:2f:ee:14:6f:38:4c:2b:
c9:7c:8e:8c:59:9f:b8:c3:9c:ca:2d:42:77:bf:cf:
50:de:ff:69:7d:60:76:db:0c:b5:ff:ef:74:82:2e:
8f:93:34:90:9e:59:4b:f2:33:7f:b4:8f:1c:4c:46:
5a:ca:45:4a:60:be:06:fb:ef:7c:83:ec:ac:a4:ba:
65:68:a8:c4:36:da:69:89:8d:86:12:a1:99:0a:fd:
9c:80:df:a5:0f:91:c8:e8:e5:e6:75:18:93:57:ce:
07:f0:60:55:67:ff:c9:f6:38:bc:dd:33:c6:59:fa:
20:e5:8e:69:2d:f1:67:ea:64:48:5f:7a:53:72:53:
3a:53:82:a4:71:b7:57:1b:16:bf:af:4a:a7:a8:35:
99:01:16:b8:c3:fa:34:32:23:04:b3:12:78:00:94:
8f:ed:20:0e:21:c0:6d:28:96:ec:a8:07:73:7a:4e:
19:b2:87:5f:a4:ce:c1:86:a6:cb:ae:af:87:92:3d:
31:65:d2:03:d3:4f:1f:7d:b6:38:53:aa:f0:70:ae:
ea:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BA:97:E2:26:57:4F:1F:FB:A7:37:15:A9:B8:7F:2F:A2:F3:C9:D3
X509v3 Authority Key Identifier:
keyid:1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d0:a7:80:0c:63:dd:76:8c:33:97:88:84:d0:ff:72:39:a6:
8e:fa:53:7f:17:85:61:1a:14:b9:e7:9a:9c:9b:38:ff:0f:61:
05:4e:d1:1c:78:0e:61:c0:03:ef:33:95:43:21:84:74:87:ea:
e9:4b:bd:3c:20:fe:6c:e5:01:2e:53:7c:f4:84:e3:9c:1b:f1:
88:4d:41:76:7c:69:b9:38:b9:ae:a8:02:08:5d:ce:f6:f0:12:
0b:87:d8:18:93:d4:57:3c:5f:6f:70:24:dc:12:47:19:a8:65:
4a:d4:84:f1:a1:3c:39:8c:6a:82:16:26:28:12:08:62:77:d0:
33:8e:a9:a3:0d:e4:6f:b1:b1:dc:e4:59:2c:78:f2:0d:a3:5d:
e6:58:5f:77:c2:86:39:19:38:c7:ee:d6:a8:2b:52:e4:ab:74:
98:ff:eb:6a:38:9c:97:65:bc:a3:d2:11:77:45:07:2b:a5:97:
35:37:bc:19:54:17:71:59:9a:9a:bb:06:95:d7:f1:16:4f:f3:
d6:d6:d9:0e:08:2c:66:ce:f4:29:d7:a2:83:3d:94:06:93:0f:
17:e5:ae:1d:d8:68:0f:fa:d0:81:bb:af:51:86:d1:c3:24:8d:
6a:e3:69:10:14:61:46:42:a5:2a:27:91:bc:e9:4e:15:3b:3b:
de:d6:83:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0403znGPRJLY0Akd86D9loMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMWUzNTQzNjJjYjkyMjRjMDE2ZGFjOTQ0ZTNkOWQ0OTkw
OWIxN2YwHhcNMjYwMzI5MDkwMTE3WhcNMjYwMzMwMDkwMTE3WjAzMTEwLwYDVQQD
Eyg1ZGJhOTdlMjI2NTc0ZjFmZmJhNzM3MTVhOWI4N2YyZmEyZjNjOWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdCuoQy5P2uBvc2RvPS6OeKyi4Sv
WxaKOnput0sac3BCDO26f1ZV50mVrLoT1tazE/Cv2i/uFG84TCvJfI6MWZ+4w5zK
LUJ3v89Q3v9pfWB22wy1/+90gi6PkzSQnllL8jN/tI8cTEZaykVKYL4G++98g+ys
pLplaKjENtppiY2GEqGZCv2cgN+lD5HI6OXmdRiTV84H8GBVZ//J9ji83TPGWfog
5Y5pLfFn6mRIX3pTclM6U4KkcbdXGxa/r0qnqDWZARa4w/o0MiMEsxJ4AJSP7SAO
IcBtKJbsqAdzek4ZsodfpM7BhqbLrq+Hkj0xZdID008ffbY4U6rwcK7q0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF26l+ImV08f+6c3Fam4fy+i88nTMB8GA1UdIwQY
MBaAFB0eNUNiy5IkwBbayUTj2dSZCbF/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFI0MVEyTExraVRBRnRySlJPUFoxSmtKc1g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8yODJiMTktNjhiOS00ZWYzLWFkMzkt
NmVjOGM4MWZkYzNmLzEvSFI0MVEyTExraVRBRnRySlJPUFoxSmtKc1g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8yODJiMTktNjhiOS00ZWYzLWFkMzktNmVjOGM4MWZkYzNm
LzEvSFI0MVEyTExraVRBRnRySlJPUFoxSmtKc1g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNCngAxj
3XaMM5eIhND/cjmmjvpTfxeFYRoUueeanJs4/w9hBU7RHHgOYcAD7zOVQyGEdIfq
6Uu9PCD+bOUBLlN89ITjnBvxiE1BdnxpuTi5rqgCCF3O9vASC4fYGJPUVzxfb3Ak
3BJHGahlStSE8aE8OYxqghYmKBIIYnfQM46pow3kb7Gx3ORZLHjyDaNd5lhfd8KG
ORk4x+7WqCtS5Kt0mP/rajicl2W8o9IRd0UHK6WXNTe8GVQXcVmamrsGldfxFk/z
1tbZDggsZs70Kdeigz2UBpMPF+WuHdhoD/rQgbuvUYbRwySNauNpEBRhRkKlKieR
vOlOFTs73taDMg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:34 2026 by rpki-client