Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
File: hR1ONNTkhTnBcEUdTiYTiIf26SI.mft (raw, json)
Hash identifier: 4flZ2HDm+2lrWE+RluLfQ8HLLmpyXwahaFT/FkcxDEI=
Subject key identifier: 23:70:92:32:3B:21:A8:74:06:32:6A:C1:CD:52:97:F7:F1:65:E0:38
Authority key identifier: 85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
Certificate issuer: /CN=851d4e34d4e48539c170451d4e26138887f6e922
Certificate serial: 019DCF07C0D87074FEF011D8227B397D32BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
Manifest number: 148A
Signing time: Mon 27 Apr 2026 13:01:24 +0000
Manifest this update: Mon 27 Apr 2026 13:01:24 +0000
Manifest next update: Tue 28 Apr 2026 13:01:24 +0000
Files and hashes: 1: R833NOdXTD2aQWG3JavzKd06mys.roa (hash: fWZj94n90bNsji3CFK3WkNid37wFqWD8C1Qx/wwtaQQ=)
2: ZmLewUIWz9_zdShetR7Jdzl8lfo.roa (hash: fPaCPLobKeVWk/RzinoeDdlx4MxMtKzniHguRoc5v/k=)
3: hR1ONNTkhTnBcEUdTiYTiIf26SI.crl (hash: HrNlNeB54RmKECO3mCJfHfW7HIq2MOvjJmF9MNfger8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:c0:d8:70:74:fe:f0:11:d8:22:7b:39:7d:32:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851d4e34d4e48539c170451d4e26138887f6e922
Validity
Not Before: Apr 27 13:01:24 2026 GMT
Not After : Apr 28 13:01:24 2026 GMT
Subject: CN=237092323b21a87406326ac1cd5297f7f165e038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dd:13:04:3d:33:28:8d:ab:8b:4d:c5:42:7d:
cd:bd:8c:2c:fd:5a:03:da:03:2d:b9:d5:bf:f0:ff:
14:3a:e6:2f:71:d1:c4:6b:3d:7a:cc:73:c1:cd:de:
4b:fe:a1:5f:94:aa:81:9e:a7:0e:40:6f:57:0f:0b:
7e:82:f3:f3:09:c2:bd:49:6f:55:5c:d7:f4:da:9f:
62:a0:bf:1b:0d:eb:60:ad:39:de:e7:17:e7:b3:d1:
8a:46:65:65:5c:ca:25:95:13:80:c9:ca:2e:8a:b4:
c1:26:c8:8f:5d:5c:fb:e7:6c:70:34:9d:49:96:3e:
d2:e6:e5:2c:4d:80:f4:7f:fe:53:ed:f0:b9:f3:be:
61:59:af:e2:07:2b:c0:bf:a7:d3:25:88:a4:b7:b4:
73:3e:84:b1:b6:8f:4c:12:67:e8:df:2c:3e:b2:d9:
6e:cf:ac:3c:07:84:5f:13:1b:66:e0:b9:7d:45:00:
c0:2f:d2:53:07:1d:00:79:84:38:ee:42:61:4f:7f:
2f:eb:8a:1b:eb:18:d5:c0:2d:fe:af:4d:53:67:61:
01:57:b5:a4:99:97:9d:2b:ce:22:7e:e8:78:cf:bd:
32:e7:2c:86:2a:a2:bf:c7:06:9d:21:7b:c2:e4:79:
e9:83:48:04:08:91:47:6f:10:7d:28:40:83:82:a7:
d1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:70:92:32:3B:21:A8:74:06:32:6A:C1:CD:52:97:F7:F1:65:E0:38
X509v3 Authority Key Identifier:
keyid:85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c4:92:10:e1:24:6b:4f:5a:06:1e:c2:a2:4f:b5:8d:cb:b1:
20:79:1a:bb:9d:4d:07:bc:9b:5c:d0:5b:11:1d:59:49:56:97:
e3:24:1d:39:80:c2:70:f3:23:c5:51:8a:26:58:c8:de:91:0f:
b5:58:95:7c:4a:5e:0d:9d:9a:b7:19:be:95:25:02:a1:65:5d:
12:c8:bf:61:04:22:36:43:a2:94:4b:ec:76:db:23:b1:d7:24:
03:0d:d0:9f:48:78:3b:2d:f6:12:a9:d8:21:74:26:1f:39:00:
31:70:e1:b8:c9:39:01:1d:23:ef:80:c9:40:3b:94:d4:8e:48:
dc:e5:1f:94:24:e1:f4:05:ff:db:e2:b9:0c:73:d5:0c:87:2e:
29:3b:43:7e:18:d3:d2:39:e2:f5:ce:d9:34:10:71:76:f4:91:
67:8e:62:39:bf:e8:36:4c:5b:bb:58:8e:03:49:53:99:9f:bd:
49:7d:ea:24:42:ab:54:a2:03:43:77:8c:67:09:cf:e5:f7:a4:
84:e7:86:b2:43:9d:90:9d:3e:50:b2:a5:b6:f7:5e:11:e5:5c:
70:6d:ae:49:04:5b:06:1d:de:e2:4b:71:ec:88:a2:92:15:45:
ff:07:1c:27:04:e3:7a:01:92:7b:80:86:2a:09:76:94:06:62:
94:04:be:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PB8DYcHT+8BHYIns5fTK/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MWQ0ZTM0ZDRlNDg1MzljMTcwNDUxZDRlMjYxMzg4ODdm
NmU5MjIwHhcNMjYwNDI3MTMwMTI0WhcNMjYwNDI4MTMwMTI0WjAzMTEwLwYDVQQD
EygyMzcwOTIzMjNiMjFhODc0MDYzMjZhYzFjZDUyOTdmN2YxNjVlMDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst0TBD0zKI2ri03FQn3NvYws/VoD
2gMtudW/8P8UOuYvcdHEaz16zHPBzd5L/qFflKqBnqcOQG9XDwt+gvPzCcK9SW9V
XNf02p9ioL8bDetgrTne5xfns9GKRmVlXMollROAycouirTBJsiPXVz752xwNJ1J
lj7S5uUsTYD0f/5T7fC5875hWa/iByvAv6fTJYikt7RzPoSxto9MEmfo3yw+stlu
z6w8B4RfExtm4Ll9RQDAL9JTBx0AeYQ47kJhT38v64ob6xjVwC3+r01TZ2EBV7Wk
mZedK84ifuh4z70y5yyGKqK/xwadIXvC5Hnpg0gECJFHbxB9KECDgqfRNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNwkjI7Iah0BjJqwc1Sl/fxZeA4MB8GA1UdIwQY
MBaAFIUdTjTU5IU5wXBFHU4mE4iH9ukiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFIxT05OVGtoVG5CY0VVZFRpWVRpSWYyNlNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9iZjE1ODktNmFkZi00NGIzLTk3NDYt
ODFjNDA1NTE0OGUwLzEvaFIxT05OVGtoVG5CY0VVZFRpWVRpSWYyNlNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9iZjE1ODktNmFkZi00NGIzLTk3NDYtODFjNDA1NTE0OGUw
LzEvaFIxT05OVGtoVG5CY0VVZFRpWVRpSWYyNlNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAisSSEOEk
a09aBh7Cok+1jcuxIHkau51NB7ybXNBbER1ZSVaX4yQdOYDCcPMjxVGKJljI3pEP
tViVfEpeDZ2atxm+lSUCoWVdEsi/YQQiNkOilEvsdtsjsdckAw3Qn0h4Oy32EqnY
IXQmHzkAMXDhuMk5AR0j74DJQDuU1I5I3OUflCTh9AX/2+K5DHPVDIcuKTtDfhjT
0jni9c7ZNBBxdvSRZ45iOb/oNkxbu1iOA0lTmZ+9SX3qJEKrVKIDQ3eMZwnP5fek
hOeGskOdkJ0+ULKltvdeEeVccG2uSQRbBh3e4ktx7IiikhVF/wccJwTjegGSe4CG
Kgl2lAZilAS+Zw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:14:32 2026 by rpki-client