Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
File: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft (raw, json)
Hash identifier: Bh6keUlT3X9nH6j4wYQBglD8Pe9pFZY5Iogjchel060=
Subject key identifier: 18:EC:F9:F3:11:D6:FC:99:18:34:69:4D:19:5B:64:B4:E2:57:48:8F
Authority key identifier: 87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
Certificate issuer: /CN=87e64170f9d82c51670b9a44f329b20613a8082d
Certificate serial: 019D2583DF869D31086699FA730956740CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
Manifest number: 1819
Signing time: Wed 25 Mar 2026 15:01:32 +0000
Manifest this update: Wed 25 Mar 2026 15:01:32 +0000
Manifest next update: Thu 26 Mar 2026 15:01:32 +0000
Files and hashes: 1: GeANBlc9szsh5X_dzXvwntyH33k.roa (hash: NtbXfKjFVCT4X+tyOUkrVXVVHjr7y8q2zKhpArvxwTk=)
2: XBuxFynVvxh8UiT_tJkPmhYk_oA.roa (hash: +W6/Wvk2I7PSxm+f/mLqDUSHpVa25RlpWluuWkH/7C8=)
3: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl (hash: WKAMMrIxIjyn4T8y7mtKO0+R4Ia+BcVmOsF8AjPsL1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:df:86:9d:31:08:66:99:fa:73:09:56:74:0c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87e64170f9d82c51670b9a44f329b20613a8082d
Validity
Not Before: Mar 25 15:01:32 2026 GMT
Not After : Mar 26 15:01:32 2026 GMT
Subject: CN=18ecf9f311d6fc991834694d195b64b4e257488f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c7:83:0d:0e:af:55:45:ce:ec:af:09:70:91:
eb:50:38:2f:5d:a0:25:ad:67:0c:23:5c:d4:78:4c:
9d:96:4c:ad:32:f8:1a:c3:58:7e:16:26:c7:02:4b:
44:c3:99:17:67:d2:0d:52:d9:47:69:cf:76:d1:15:
5c:22:31:15:2f:9a:eb:6d:73:9a:8c:11:12:74:58:
de:06:fd:c3:49:0c:5c:78:68:51:1c:f7:f0:77:e9:
c1:e1:21:cd:c1:33:aa:41:c9:1d:f6:74:19:23:2c:
96:9d:c2:c1:69:30:35:62:e2:e1:da:10:53:ec:95:
b6:a8:3d:bf:41:50:fe:69:6d:1c:34:8b:d6:19:0c:
c6:40:b1:25:36:d7:28:ec:77:96:5e:a1:fc:07:ef:
a9:c8:bb:9c:c0:f0:a4:56:61:4a:33:25:1d:6f:cd:
2e:86:73:4c:78:20:d2:fe:5d:00:ba:3d:34:f7:ee:
ec:4c:a0:e0:59:19:f9:88:d4:7c:1c:45:7a:79:62:
ca:ba:26:5a:6e:d6:b5:5b:7c:1f:c3:f6:ef:c1:7c:
08:39:5b:7e:cc:21:4a:b7:4b:22:f5:02:c3:4d:65:
5b:2e:e3:bb:ed:52:e2:9a:dc:6e:54:49:e1:3d:c2:
cc:cc:e2:34:cd:a3:8a:31:cd:1d:fd:73:a5:b4:ce:
bd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EC:F9:F3:11:D6:FC:99:18:34:69:4D:19:5B:64:B4:E2:57:48:8F
X509v3 Authority Key Identifier:
keyid:87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b5:c8:03:84:ac:89:eb:b2:47:53:0f:53:16:2a:e7:66:12:
4d:20:0a:71:2f:18:09:5d:67:90:ab:d1:b6:4e:86:90:ad:56:
d1:02:9e:ad:c8:84:81:5f:da:a6:f6:3b:7b:c2:c9:a2:20:39:
aa:3b:b2:cf:6b:b2:1f:58:49:5b:7f:e3:53:df:19:f4:e1:7a:
fc:b7:11:63:45:80:61:6e:5e:3a:eb:9b:0c:12:5f:91:05:df:
e1:e2:37:a0:81:a6:44:48:bc:32:61:81:96:a2:96:05:8b:08:
74:91:45:ec:50:50:24:cd:e1:08:08:36:42:d0:11:e7:7a:d0:
f7:0e:92:04:ca:9a:95:66:8f:ca:b1:cd:17:7d:21:0a:13:89:
86:86:fe:82:c1:c3:e3:88:26:ba:b3:cd:67:ec:e7:bd:8a:8e:
45:ca:4d:9a:4e:c7:f0:97:59:1f:ea:cf:81:2f:d7:b4:c1:41:
84:3e:69:73:be:1d:75:c2:35:0f:c6:e4:1e:bd:b6:7a:9c:96:
f4:d0:33:11:bc:2d:d8:9c:57:b2:ed:51:4e:da:d5:28:04:9a:
cd:a6:35:a3:cd:90:81:67:07:02:87:90:81:e2:73:05:e2:b3:
07:bf:6f:e7:b5:65:7d:3c:ae:a3:5d:0d:a4:6e:8a:35:b9:55:
75:46:a6:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg9+GnTEIZpn6cwlWdAzQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZTY0MTcwZjlkODJjNTE2NzBiOWE0NGYzMjliMjA2MTNh
ODA4MmQwHhcNMjYwMzI1MTUwMTMyWhcNMjYwMzI2MTUwMTMyWjAzMTEwLwYDVQQD
EygxOGVjZjlmMzExZDZmYzk5MTgzNDY5NGQxOTViNjRiNGUyNTc0ODhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08eDDQ6vVUXO7K8JcJHrUDgvXaAl
rWcMI1zUeEydlkytMvgaw1h+FibHAktEw5kXZ9INUtlHac920RVcIjEVL5rrbXOa
jBESdFjeBv3DSQxceGhRHPfwd+nB4SHNwTOqQckd9nQZIyyWncLBaTA1YuLh2hBT
7JW2qD2/QVD+aW0cNIvWGQzGQLElNtco7HeWXqH8B++pyLucwPCkVmFKMyUdb80u
hnNMeCDS/l0Auj009+7sTKDgWRn5iNR8HEV6eWLKuiZabta1W3wfw/bvwXwIOVt+
zCFKt0si9QLDTWVbLuO77VLimtxuVEnhPcLMzOI0zaOKMc0d/XOltM69bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjs+fMR1vyZGDRpTRlbZLTiV0iPMB8GA1UdIwQY
MBaAFIfmQXD52CxRZwuaRPMpsgYTqAgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaC1aQmNQbllMRkZuQzVwRTh5bXlCaE9vQ0MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9iZWIyOWQtZjBlZS00MDdhLTk3MDIt
NmUxM2NjYmY0OTA2LzEvaC1aQmNQbllMRkZuQzVwRTh5bXlCaE9vQ0MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9iZWIyOWQtZjBlZS00MDdhLTk3MDItNmUxM2NjYmY0OTA2
LzEvaC1aQmNQbllMRkZuQzVwRTh5bXlCaE9vQ0MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjrXIA4Ss
ieuyR1MPUxYq52YSTSAKcS8YCV1nkKvRtk6GkK1W0QKerciEgV/apvY7e8LJoiA5
qjuyz2uyH1hJW3/jU98Z9OF6/LcRY0WAYW5eOuubDBJfkQXf4eI3oIGmREi8MmGB
lqKWBYsIdJFF7FBQJM3hCAg2QtAR53rQ9w6SBMqalWaPyrHNF30hChOJhob+gsHD
44gmurPNZ+znvYqORcpNmk7H8JdZH+rPgS/XtMFBhD5pc74ddcI1D8bkHr22epyW
9NAzEbwt2JxXsu1RTtrVKASazaY1o82QgWcHAoeQgeJzBeKzB79v57VlfTyuo10N
pG6KNblVdUam+A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:45:14 2026 by rpki-client