Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
File: H8SSerGUrhI3_eLTvvaQOIk_DcU.mft (raw, json)
Hash identifier: 78PquM6FoPVOD5/v5NVTyCCx+I+0fvpuoatzJBG4sJg=
Subject key identifier: ED:38:52:F2:52:1D:14:07:C6:87:C2:76:90:85:D6:AF:FF:36:0B:72
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial: 019D2771B98AEB3EC05D7898CC34D8CC1D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
Manifest number: 1310
Signing time: Thu 26 Mar 2026 00:00:57 +0000
Manifest this update: Thu 26 Mar 2026 00:00:57 +0000
Manifest next update: Fri 27 Mar 2026 00:00:57 +0000
Files and hashes: 1: 2sAFd_2T-QSzjwb2W27Kt8rE6fU.roa (hash: dj9SKHwvFkDv++RY82DTGyA13Fg+Qhu+MtqHoiJGTCM=)
2: BKvtDw_ImhwxFNI1ekkbNYkUXwk.roa (hash: /VZVAuv74zBcHkw4LlrMbR/O9CrhLBCzyGy9tiiwFV8=)
3: H8SSerGUrhI3_eLTvvaQOIk_DcU.crl (hash: HCDb7cPtGKuqqWmBk2AbC3d2zldZHFDr49M07SEZDK8=)
4: L-HaZX9usmOHR6Pjk5otTPA1E78.roa (hash: /WFLFbwadanJe6aEYwFifcAD7b8Cq5KJxqbQIlZqM3E=)
5: UNn5xwOI4pjWBM6seGSkeIWT0Nc.roa (hash: t97vMIzTWrcDPs3sy3oo5iwIaLusws7qeRkc875GNOM=)
6: ftINbgTGX7o6dou2oYKs0I7El3k.roa (hash: jNNcSKLkF+5io94CcEYFYhsKdZJ9Jwyes5nzKJmJiP8=)
7: iyhjc5phndkfHPAS-mJffX2oKQ8.roa (hash: An3uftXXHdR16RwQ6iTIEtnf1eCcuaLyKpysOrsvtMU=)
8: rCmOJaiPm10i_Ntu2MdzaI9ze6U.roa (hash: swhB5WKc0D5wVrqnsiWG0FRIgd/l0/nxiZL6cviDAgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:b9:8a:eb:3e:c0:5d:78:98:cc:34:d8:cc:1d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Validity
Not Before: Mar 26 00:00:57 2026 GMT
Not After : Mar 27 00:00:57 2026 GMT
Subject: CN=ed3852f2521d1407c687c2769085d6afff360b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:45:3f:54:e2:4d:db:36:ba:92:1f:37:94:fb:
d0:05:be:a7:45:90:e1:23:5f:58:f0:89:4f:e1:d7:
c4:26:ef:c6:7e:03:95:14:7d:8d:27:e3:b4:0f:f4:
65:0b:d0:34:2b:38:41:8f:1f:d4:1c:13:e4:3c:59:
62:4f:0e:a0:ec:ac:3d:ab:01:59:a6:51:f8:e0:f3:
f9:aa:f8:32:eb:d4:ef:30:81:94:f8:10:4d:6e:ba:
52:ec:81:c2:c9:0e:62:4e:12:63:6a:0e:82:f4:5f:
37:b8:b1:69:2b:de:0a:3c:c9:f9:46:18:c8:02:79:
2a:77:64:e1:60:48:9b:d2:96:3e:08:83:07:2f:06:
c3:84:fb:01:dd:be:82:d2:8e:f1:ec:04:67:74:25:
0d:c4:22:4b:35:6f:b7:ce:a4:a8:7a:45:1c:06:3c:
0c:0c:96:c1:7c:bf:21:aa:bf:e4:1c:28:ef:6c:7f:
58:42:60:6b:af:ed:21:bb:dc:ea:ab:aa:65:8d:71:
21:bb:1e:03:5b:61:5f:31:7d:d2:b8:d9:4a:dc:7b:
0b:0f:67:d0:6f:81:31:71:4e:67:81:58:23:69:47:
ff:69:38:ce:d0:f2:cd:e9:36:1e:48:16:dc:43:b2:
33:e6:36:3c:85:46:7b:27:6e:d6:79:f7:aa:8c:fe:
24:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:38:52:F2:52:1D:14:07:C6:87:C2:76:90:85:D6:AF:FF:36:0B:72
X509v3 Authority Key Identifier:
keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a2:ae:88:2e:ec:cd:99:14:c8:89:92:df:e9:31:b2:01:f4:
a1:85:ef:19:bd:e4:0d:56:b6:2f:6a:7e:40:32:d0:02:ad:48:
02:df:c3:28:22:bd:d0:24:66:93:c0:e3:7c:58:bc:31:86:57:
05:c9:b4:b9:7a:64:54:6c:97:cc:17:74:28:f8:95:7c:9b:dc:
8f:1d:9a:c8:1b:34:13:23:0b:0b:42:ab:ab:ed:4e:13:d9:d3:
92:5c:3c:81:90:0b:82:61:12:69:bb:28:49:ff:9d:19:1d:63:
70:dc:ca:f3:6f:03:4d:97:e9:49:88:47:f5:5c:f5:f8:18:e8:
2f:a8:33:b6:94:c3:0d:3e:4b:dd:c5:e0:ee:1e:53:1f:dd:d0:
9c:cf:de:2b:e5:d1:0a:65:92:e0:14:7e:b4:39:2b:b4:ee:5c:
f3:57:d6:87:33:a6:5e:19:53:16:c2:66:e6:1b:57:68:72:a1:
74:3e:ee:43:6a:5d:0f:fd:42:27:08:dc:ba:58:38:ae:1a:5d:
7d:67:45:26:c2:4b:b7:cb:49:0a:30:d0:74:cf:66:b0:29:93:
9b:c1:c2:23:11:f6:c0:a4:d5:6d:df:98:55:11:2e:c7:07:81:
bb:04:f7:46:d7:c0:c7:80:93:3c:56:45:a2:43:52:03:15:a9:
70:d8:34:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncbmK6z7AXXiYzDTYzB16MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYzQ5MjdhYjE5NGFlMTIzN2ZkZTJkM2JlZjY5MDM4ODkz
ZjBkYzUwHhcNMjYwMzI2MDAwMDU3WhcNMjYwMzI3MDAwMDU3WjAzMTEwLwYDVQQD
EyhlZDM4NTJmMjUyMWQxNDA3YzY4N2MyNzY5MDg1ZDZhZmZmMzYwYjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUU/VOJN2za6kh83lPvQBb6nRZDh
I19Y8IlP4dfEJu/GfgOVFH2NJ+O0D/RlC9A0KzhBjx/UHBPkPFliTw6g7Kw9qwFZ
plH44PP5qvgy69TvMIGU+BBNbrpS7IHCyQ5iThJjag6C9F83uLFpK94KPMn5RhjI
Ankqd2ThYEib0pY+CIMHLwbDhPsB3b6C0o7x7ARndCUNxCJLNW+3zqSoekUcBjwM
DJbBfL8hqr/kHCjvbH9YQmBrr+0hu9zqq6pljXEhux4DW2FfMX3SuNlK3HsLD2fQ
b4ExcU5ngVgjaUf/aTjO0PLN6TYeSBbcQ7Iz5jY8hUZ7J27WefeqjP4kRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO04UvJSHRQHxofCdpCF1q//NgtyMB8GA1UdIwQY
MBaAFB/EknqxlK4SN/3i0772kDiJPw3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85NDNkNWQtNTYwYy00MzE0LWFmODIt
OGI4YTAxYmQ3NDE0LzEvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS85NDNkNWQtNTYwYy00MzE0LWFmODItOGI4YTAxYmQ3NDE0
LzEvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKKuiC7s
zZkUyImS3+kxsgH0oYXvGb3kDVa2L2p+QDLQAq1IAt/DKCK90CRmk8DjfFi8MYZX
Bcm0uXpkVGyXzBd0KPiVfJvcjx2ayBs0EyMLC0Krq+1OE9nTklw8gZALgmESabso
Sf+dGR1jcNzK828DTZfpSYhH9Vz1+BjoL6gztpTDDT5L3cXg7h5TH93QnM/eK+XR
CmWS4BR+tDkrtO5c81fWhzOmXhlTFsJm5htXaHKhdD7uQ2pdD/1CJwjculg4rhpd
fWdFJsJLt8tJCjDQdM9msCmTm8HCIxH2wKTVbd+YVREuxweBuwT3RtfAx4CTPFZF
okNSAxWpcNg0Vw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:06:13 2026 by rpki-client