Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
File: Has2Xsw1BFitorCUnuZ--djG9Nw.mft (raw, json)
Hash identifier: 9mubf/tmnND73C+GHR5KeMNQFx0jhhTPBkHOGdFdJIs=
Subject key identifier: 64:2D:B3:E5:3E:04:DA:D0:05:F4:67:F8:EC:7E:98:54:0C:DD:CE:E0
Authority key identifier: 1D:AB:36:5E:CC:35:04:58:AD:A2:B0:94:9E:E6:7E:F9:D8:C6:F4:DC
Certificate issuer: /CN=1dab365ecc350458ada2b0949ee67ef9d8c6f4dc
Certificate serial: 019D29B98B92A3969003E1EE50D430D0D3C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
Manifest number: 0190
Signing time: Thu 26 Mar 2026 10:38:38 +0000
Manifest this update: Thu 26 Mar 2026 10:38:38 +0000
Manifest next update: Fri 27 Mar 2026 10:38:38 +0000
Files and hashes: 1: 2GIqOre8aovyQcr1e-R8g-dbRi4.roa (hash: 4xC7s77noCbz+G4tY4JMBYQVDuhDu5K8B/uxESDNLmE=)
2: GJ9jq1utAOnfB6vGzK5aQugyYRo.roa (hash: 4LC584iGEYWuEuibcnVRjFRB3sB/Gg71VV3hzTlGieE=)
3: Has2Xsw1BFitorCUnuZ--djG9Nw.crl (hash: emiatfoQ11b5uFpSwEYJWf2OlQS7KM274elAhBpMEgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:b9:8b:92:a3:96:90:03:e1:ee:50:d4:30:d0:d3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dab365ecc350458ada2b0949ee67ef9d8c6f4dc
Validity
Not Before: Mar 26 10:38:38 2026 GMT
Not After : Mar 27 10:38:38 2026 GMT
Subject: CN=642db3e53e04dad005f467f8ec7e98540cddcee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ec:e7:3c:f5:e7:93:a0:42:f2:df:d2:8b:2d:
96:5e:1e:95:39:37:73:32:bd:5d:7b:d2:7f:94:28:
05:d0:0c:e0:92:0e:29:b8:ee:07:45:17:96:cb:5d:
0b:46:06:38:cd:41:f4:04:dc:18:d7:57:f0:f5:12:
26:f1:42:97:c2:b8:db:04:a4:dd:bc:bd:51:6f:82:
d8:c7:d9:01:5a:40:49:f8:2e:9f:0d:36:9b:e8:46:
93:fe:d4:e0:a5:7d:95:85:4d:6c:71:81:93:e9:61:
b4:e3:f2:63:77:97:98:62:29:ad:5c:94:5b:ea:8d:
54:d9:5d:59:66:fe:61:48:e5:54:4b:cc:95:69:53:
f7:8a:71:b7:34:af:92:f2:d6:c2:03:5a:bd:47:2e:
bb:d8:ae:21:07:eb:77:13:94:ef:6f:87:21:40:65:
4d:c9:56:1a:cb:7e:3d:85:a2:92:28:23:8d:0f:98:
13:41:4a:48:c6:17:ae:d0:30:1e:43:28:7b:65:85:
a4:9f:57:e8:37:d8:61:fd:42:52:d8:03:26:f4:c6:
23:0c:c9:29:33:94:56:b2:2b:77:44:8d:e8:55:52:
47:f4:d1:a6:7b:2e:77:60:b9:9b:d9:16:71:a8:dc:
79:75:1d:09:09:d9:01:a6:89:57:7e:73:21:2d:90:
8b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2D:B3:E5:3E:04:DA:D0:05:F4:67:F8:EC:7E:98:54:0C:DD:CE:E0
X509v3 Authority Key Identifier:
keyid:1D:AB:36:5E:CC:35:04:58:AD:A2:B0:94:9E:E6:7E:F9:D8:C6:F4:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:44:51:da:df:db:c2:70:39:ad:c0:11:41:e2:0a:63:53:98:
43:6b:16:d0:80:c1:e1:7d:58:45:f7:f7:ec:f5:ee:ad:38:57:
50:b4:2b:90:e6:74:f6:c6:40:8b:f4:33:09:1d:b2:d6:44:b6:
f8:70:38:09:50:92:a1:4e:a2:00:ae:ed:a7:87:f6:ed:e5:59:
b7:5a:20:3c:f7:eb:fd:6d:94:7e:96:c0:80:13:fb:55:03:df:
ea:e0:11:c8:63:8b:6c:e6:19:94:4c:ee:c3:3c:a8:89:a1:6d:
79:a0:16:67:81:47:5f:f8:42:08:95:2c:6a:8b:31:9b:9f:2f:
06:c7:c4:49:29:3b:71:65:0a:be:ab:17:28:79:dd:fb:e5:66:
a8:00:a1:2d:ce:ef:33:90:a5:eb:a4:70:3d:2c:b3:59:f2:f7:
0a:b2:88:17:c8:12:d6:34:e5:c2:c5:39:9e:ad:e8:9a:8f:e4:
fa:df:19:b3:fd:de:ec:ab:7a:69:a3:02:5c:5e:63:29:76:59:
ab:c7:fe:07:4e:26:d2:12:88:f4:24:a0:d7:54:b6:96:0e:25:
fd:43:56:4f:02:c5:b9:f3:5e:fa:8f:ac:51:4b:c4:e1:db:e2:
07:b5:04:5c:7f:b0:69:2a:86:da:89:c3:0a:c6:42:b6:4b:58:
10:ea:65:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0puYuSo5aQA+HuUNQw0NPAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYWIzNjVlY2MzNTA0NThhZGEyYjA5NDllZTY3ZWY5ZDhj
NmY0ZGMwHhcNMjYwMzI2MTAzODM4WhcNMjYwMzI3MTAzODM4WjAzMTEwLwYDVQQD
Eyg2NDJkYjNlNTNlMDRkYWQwMDVmNDY3ZjhlYzdlOTg1NDBjZGRjZWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuznPPXnk6BC8t/Siy2WXh6VOTdz
Mr1de9J/lCgF0Azgkg4puO4HRReWy10LRgY4zUH0BNwY11fw9RIm8UKXwrjbBKTd
vL1Rb4LYx9kBWkBJ+C6fDTab6EaT/tTgpX2VhU1scYGT6WG04/Jjd5eYYimtXJRb
6o1U2V1ZZv5hSOVUS8yVaVP3inG3NK+S8tbCA1q9Ry672K4hB+t3E5Tvb4chQGVN
yVYay349haKSKCOND5gTQUpIxheu0DAeQyh7ZYWkn1foN9hh/UJS2AMm9MYjDMkp
M5RWsit3RI3oVVJH9NGmey53YLmb2RZxqNx5dR0JCdkBpolXfnMhLZCLGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQts+U+BNrQBfRn+Ox+mFQM3c7gMB8GA1UdIwQY
MBaAFB2rNl7MNQRYraKwlJ7mfvnYxvTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGFzMlhzdzFCRml0b3JDVW51Wi0tZGpHOU53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mYThmNzgtNzZlNS00OGE5LWFiYjAt
NjBhZTc2NjQ2ZGQ0LzEvSGFzMlhzdzFCRml0b3JDVW51Wi0tZGpHOU53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mYThmNzgtNzZlNS00OGE5LWFiYjAtNjBhZTc2NjQ2ZGQ0
LzEvSGFzMlhzdzFCRml0b3JDVW51Wi0tZGpHOU53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz0RR2t/b
wnA5rcARQeIKY1OYQ2sW0IDB4X1YRff37PXurThXULQrkOZ09sZAi/QzCR2y1kS2
+HA4CVCSoU6iAK7tp4f27eVZt1ogPPfr/W2UfpbAgBP7VQPf6uARyGOLbOYZlEzu
wzyoiaFteaAWZ4FHX/hCCJUsaosxm58vBsfESSk7cWUKvqsXKHnd++VmqAChLc7v
M5Cl66RwPSyzWfL3CrKIF8gS1jTlwsU5nq3omo/k+t8Zs/3e7Kt6aaMCXF5jKXZZ
q8f+B04m0hKI9CSg11S2lg4l/UNWTwLFufNe+o+sUUvE4dviB7UEXH+waSqG2onD
CsZCtktYEOpldw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:24:07 2026 by rpki-client