Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
File: h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft (raw, json)
Hash identifier: m14nKzcQLqulcJ4lEkUb/yUtCW4W1+jXEkXmpDwSc5U=
Subject key identifier: 4D:BE:3D:13:82:06:FA:CF:84:5C:AE:CB:C8:79:FE:96:BF:1C:C9:C7
Authority key identifier: 87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
Certificate issuer: /CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Certificate serial: 019D27046BBBCBC8027161A5FCFCA6DA70AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
Manifest number: 1433
Signing time: Wed 25 Mar 2026 22:01:34 +0000
Manifest this update: Wed 25 Mar 2026 22:01:34 +0000
Manifest next update: Thu 26 Mar 2026 22:01:34 +0000
Files and hashes: 1: aMxhZsLMDx304AXjnZldJIQi_VU.roa (hash: nX4KFrnvKm65Zf0OrETssJJWMj+/5dAoLpEa4nDLRE4=)
2: h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl (hash: 8KHiM54B1JFj1wsBiAss/fLh7FN3W7xQRRfaodJbKME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:6b:bb:cb:c8:02:71:61:a5:fc:fc:a6:da:70:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Validity
Not Before: Mar 25 22:01:34 2026 GMT
Not After : Mar 26 22:01:34 2026 GMT
Subject: CN=4dbe3d138206facf845caecbc879fe96bf1cc9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d9:5e:82:0a:9c:55:cf:57:f9:f5:c5:d0:86:
39:ce:2a:ae:03:50:ef:ff:05:9a:18:37:4e:2d:45:
8d:0c:8d:06:ae:a3:9d:d9:c0:3e:c0:cf:b5:86:65:
a8:ab:f7:2a:df:71:f0:4f:96:53:40:f3:13:be:ba:
b1:85:34:b0:4c:d2:43:6c:75:7b:26:f5:ca:e9:80:
ac:d8:ba:66:63:e1:f3:30:64:8f:28:55:3b:40:dc:
a2:1c:8e:c4:f2:de:77:bc:68:63:1d:5b:4b:98:78:
c0:ca:b7:f5:9f:f1:92:43:97:2f:44:72:57:d2:32:
84:74:25:e7:59:b6:8e:bf:c5:d3:8e:76:53:a9:e7:
54:50:4a:b2:87:87:54:e6:23:3d:60:b2:b1:19:89:
3f:ab:a6:a8:1f:6e:3f:5e:c1:38:5a:95:58:f1:4c:
bc:29:39:fc:22:5d:2e:fe:22:73:97:2a:10:58:13:
7e:d0:dd:94:87:d9:55:c2:6f:e7:0a:61:4b:23:b0:
79:c7:6d:a1:c8:8d:18:ba:88:2f:b2:b3:2a:fe:90:
70:98:34:8c:01:c7:eb:35:dd:42:97:2f:18:a8:1c:
d7:88:55:67:c6:a1:14:90:8c:bd:be:74:af:0a:03:
fb:8a:60:f3:44:68:1f:24:80:13:28:97:ca:6c:fe:
22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BE:3D:13:82:06:FA:CF:84:5C:AE:CB:C8:79:FE:96:BF:1C:C9:C7
X509v3 Authority Key Identifier:
keyid:87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:fe:e5:a6:d3:18:0f:23:2c:18:34:2c:ec:6f:6f:70:3f:a9:
17:73:69:cd:fe:f1:04:46:84:e5:46:e0:b1:fc:40:8c:5b:5f:
df:a5:a0:80:84:70:14:3d:49:65:fc:29:26:d2:9c:e1:08:43:
a5:5f:ce:ed:c3:b3:80:92:43:58:ad:52:b2:db:aa:7c:c1:1e:
a5:7e:75:60:5f:b9:06:0c:1c:e2:13:6f:e5:02:38:2c:df:a9:
51:ed:23:ab:f5:f4:5b:60:2d:97:69:b8:20:51:8a:f3:d3:14:
f4:a6:33:27:46:9f:28:f1:29:58:13:68:04:bf:f2:ea:24:82:
0a:fd:c9:d1:31:7c:65:76:f0:a6:0c:e9:a7:2d:f5:86:32:d7:
b2:46:ba:92:5c:a8:59:95:ca:2e:a6:ff:c1:d9:b2:6f:4d:e0:
0c:ca:a7:bc:4d:bc:84:c2:6e:69:4c:5b:2d:b1:6f:b0:4f:e4:
22:3f:58:8c:ae:4e:b2:7f:7e:58:7d:65:03:ba:e1:9a:4d:f8:
b8:fa:f3:c1:57:5e:01:dc:03:24:b9:e4:0e:b3:ff:53:3e:86:
76:e4:de:0c:4a:a0:d3:2f:71:1e:0e:bb:e3:43:72:35:52:b2:
86:28:03:1c:22:1b:a0:81:20:88:60:70:80:af:f3:dc:55:56:
0d:4a:cb:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBGu7y8gCcWGl/Pym2nCuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZjQ1ZTNhNDA2OWQ0ZjVlYmQ1ZjZlNjQyMWQ4ZDNjYWJl
MzA5MjEwHhcNMjYwMzI1MjIwMTM0WhcNMjYwMzI2MjIwMTM0WjAzMTEwLwYDVQQD
Eyg0ZGJlM2QxMzgyMDZmYWNmODQ1Y2FlY2JjODc5ZmU5NmJmMWNjOWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNleggqcVc9X+fXF0IY5ziquA1Dv
/wWaGDdOLUWNDI0GrqOd2cA+wM+1hmWoq/cq33HwT5ZTQPMTvrqxhTSwTNJDbHV7
JvXK6YCs2LpmY+HzMGSPKFU7QNyiHI7E8t53vGhjHVtLmHjAyrf1n/GSQ5cvRHJX
0jKEdCXnWbaOv8XTjnZTqedUUEqyh4dU5iM9YLKxGYk/q6aoH24/XsE4WpVY8Uy8
KTn8Il0u/iJzlyoQWBN+0N2Uh9lVwm/nCmFLI7B5x22hyI0YuogvsrMq/pBwmDSM
AcfrNd1Cly8YqBzXiFVnxqEUkIy9vnSvCgP7imDzRGgfJIATKJfKbP4iswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2+PROCBvrPhFyuy8h5/pa/HMnHMB8GA1UdIwQY
MBaAFIf0XjpAadT169X25kIdjTyr4wkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaF9SZU9rQnAxUFhyMWZibVFoMk5QS3ZqQ1NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84YmRmZDMtZDVhMS00NWI5LTkyOTYt
NjMxOWJiMDc5YzQ0LzEvaF9SZU9rQnAxUFhyMWZibVFoMk5QS3ZqQ1NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC84YmRmZDMtZDVhMS00NWI5LTkyOTYtNjMxOWJiMDc5YzQ0
LzEvaF9SZU9rQnAxUFhyMWZibVFoMk5QS3ZqQ1NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaf7lptMY
DyMsGDQs7G9vcD+pF3Npzf7xBEaE5UbgsfxAjFtf36WggIRwFD1JZfwpJtKc4QhD
pV/O7cOzgJJDWK1SstuqfMEepX51YF+5Bgwc4hNv5QI4LN+pUe0jq/X0W2Atl2m4
IFGK89MU9KYzJ0afKPEpWBNoBL/y6iSCCv3J0TF8ZXbwpgzppy31hjLXska6klyo
WZXKLqb/wdmyb03gDMqnvE28hMJuaUxbLbFvsE/kIj9YjK5Osn9+WH1lA7rhmk34
uPrzwVdeAdwDJLnkDrP/Uz6GduTeDEqg0y9xHg6740NyNVKyhigDHCIboIEgiGBw
gK/z3FVWDUrLkg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:17 2026 by rpki-client