Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
File: rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft (raw, json)
Hash identifier: 2VvSWjSnMfbH8nc9n015G46rKBgXbBhJtoKSJyhkMKo=
Subject key identifier: 6B:65:F4:7F:E0:55:FB:63:CC:6E:F2:E5:15:35:3C:BE:51:66:AC:C6
Authority key identifier: AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5
Certificate issuer: /CN=ae1ef3d626a754e43d07c700d0513c114b660ef5
Certificate serial: 019D38D2CB2431E8EAEF35E4F449FB63CD2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 09:00:31 +0000
Manifest this update: Sun 29 Mar 2026 09:00:31 +0000
Manifest next update: Mon 30 Mar 2026 09:00:31 +0000
Files and hashes: 1: csk4BDz5s79i6tCuRhaWetkbfYE.roa (hash: y6UPDjUC5Ue0t7W29lJsgRf1Q1DAQIYmF8ZHDpBKink=)
2: rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl (hash: 9Ln4N9rpuv4Tw9uYhEDr0mVXUH9LeH162OO/CLWrNsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:cb:24:31:e8:ea:ef:35:e4:f4:49:fb:63:cd:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1ef3d626a754e43d07c700d0513c114b660ef5
Validity
Not Before: Mar 29 09:00:31 2026 GMT
Not After : Mar 30 09:00:31 2026 GMT
Subject: CN=6b65f47fe055fb63cc6ef2e515353cbe5166acc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ef:53:f6:91:77:3e:9d:be:8f:74:e7:b1:08:
a0:7d:28:b5:12:3d:20:76:74:e9:58:53:c7:22:17:
f7:e3:b2:3d:41:50:9f:79:16:44:65:2c:cc:03:05:
06:97:91:62:90:c9:8c:46:a6:a7:a2:95:6b:0c:09:
2f:0c:23:f4:82:5d:fe:70:8d:25:3e:ae:a9:68:8e:
c6:ec:77:95:d8:35:79:ed:82:b3:d6:81:59:58:c5:
27:fb:3e:0a:70:5d:4a:27:02:e3:22:cb:aa:d6:ea:
3c:f2:bf:3e:ee:05:0c:10:3f:3c:b1:19:2c:68:00:
94:50:c3:72:ff:35:f4:82:2d:2e:c7:32:c6:cd:5a:
ec:f4:59:d4:ea:87:c3:16:a6:71:26:a6:19:3f:27:
6d:ea:72:1a:20:a1:7f:32:24:c7:7b:f4:1c:ac:19:
04:a7:76:ca:db:71:15:7f:56:d3:3a:16:5f:58:1d:
0a:46:26:cb:7b:67:04:73:ff:f2:d4:7b:3f:36:6b:
79:b1:63:42:e6:ea:43:1d:1d:1b:b7:79:39:fe:57:
00:ee:aa:f7:72:1e:e7:7b:04:c4:ab:e8:b2:84:61:
97:ab:b3:f6:c1:39:24:1a:c1:52:f7:1e:f1:aa:43:
84:a7:8e:6f:ca:ec:18:09:dd:c9:b7:97:a4:5a:0d:
f3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:65:F4:7F:E0:55:FB:63:CC:6E:F2:E5:15:35:3C:BE:51:66:AC:C6
X509v3 Authority Key Identifier:
keyid:AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:12:8e:13:fe:b6:2b:fd:ab:85:c8:9f:ab:a7:d7:02:d7:31:
b0:41:16:58:2c:85:a1:b7:bf:e9:2e:35:40:5c:7f:44:8b:38:
d0:d6:43:63:be:a0:80:27:84:88:78:40:89:24:84:01:e5:cc:
90:ae:13:ad:f0:6d:20:07:f8:dd:07:cf:c5:44:51:80:22:bb:
0a:c8:e5:a6:d9:a5:e1:69:d0:cc:4a:f1:5f:00:a8:fb:db:e1:
5b:93:ca:a6:7d:2d:c3:83:d1:4b:8d:f4:79:c4:9e:61:ea:2b:
45:b1:2a:29:6e:97:c2:fa:af:00:e0:29:f9:6e:be:b3:fb:84:
36:5f:d3:b3:a6:dd:ee:6a:62:78:3e:8a:1c:48:76:04:dc:b9:
f2:10:d3:cf:10:67:63:74:2d:bc:dc:32:6d:9b:a8:c2:2c:a6:
09:6c:ef:ce:73:b7:a8:d3:b4:e1:c7:04:3e:6d:60:3f:d4:0d:
45:c1:27:72:84:23:88:0c:3c:f6:89:1f:bf:79:0a:c0:bc:24:
7f:9a:bf:4f:bb:de:57:e3:e7:28:87:43:39:75:b5:fd:21:de:
e0:4c:b4:f4:1a:f4:1c:dd:f2:f8:39:b5:c9:0c:43:70:be:8e:
aa:5c:f1:d8:0a:4a:14:60:d8:9c:f2:60:fc:73:a3:c1:ae:5b:
9f:47:1d:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040sskMejq7zXk9En7Y80qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMWVmM2Q2MjZhNzU0ZTQzZDA3YzcwMGQwNTEzYzExNGI2
NjBlZjUwHhcNMjYwMzI5MDkwMDMxWhcNMjYwMzMwMDkwMDMxWjAzMTEwLwYDVQQD
Eyg2YjY1ZjQ3ZmUwNTVmYjYzY2M2ZWYyZTUxNTM1M2NiZTUxNjZhY2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO9T9pF3Pp2+j3TnsQigfSi1Ej0g
dnTpWFPHIhf347I9QVCfeRZEZSzMAwUGl5FikMmMRqanopVrDAkvDCP0gl3+cI0l
Pq6paI7G7HeV2DV57YKz1oFZWMUn+z4KcF1KJwLjIsuq1uo88r8+7gUMED88sRks
aACUUMNy/zX0gi0uxzLGzVrs9FnU6ofDFqZxJqYZPydt6nIaIKF/MiTHe/QcrBkE
p3bK23EVf1bTOhZfWB0KRibLe2cEc//y1Hs/Nmt5sWNC5upDHR0bt3k5/lcA7qr3
ch7newTEq+iyhGGXq7P2wTkkGsFS9x7xqkOEp45vyuwYCd3Jt5ekWg3zTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtl9H/gVftjzG7y5RU1PL5RZqzGMB8GA1UdIwQY
MBaAFK4e89Ymp1TkPQfHANBRPBFLZg71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmg3ejFpYW5WT1E5QjhjQTBGRThFVXRtRHZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hZmU5YjgtZTg4MS00NDYyLWExZWUt
OGU4MWQxMzUwNzM2LzEvcmg3ejFpYW5WT1E5QjhjQTBGRThFVXRtRHZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9hZmU5YjgtZTg4MS00NDYyLWExZWUtOGU4MWQxMzUwNzM2
LzEvcmg3ejFpYW5WT1E5QjhjQTBGRThFVXRtRHZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxKOE/62
K/2rhcifq6fXAtcxsEEWWCyFobe/6S41QFx/RIs40NZDY76ggCeEiHhAiSSEAeXM
kK4TrfBtIAf43QfPxURRgCK7Csjlptml4WnQzErxXwCo+9vhW5PKpn0tw4PRS430
ecSeYeorRbEqKW6XwvqvAOAp+W6+s/uENl/Ts6bd7mpieD6KHEh2BNy58hDTzxBn
Y3QtvNwybZuowiymCWzvznO3qNO04ccEPm1gP9QNRcEncoQjiAw89okfv3kKwLwk
f5q/T7veV+PnKIdDOXW1/SHe4Ey09Br0HN3y+Dm1yQxDcL6Oqlzx2ApKFGDYnPJg
/HOjwa5bn0cd8g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:00 2026 by rpki-client