Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
File: h9mQExRnt30RFit5--OwbKirLTk.mft (raw, json)
Hash identifier: Yonjzr6i+zPa54qTDLsTQq0IBzqIccuHPxPtbO59x84=
Subject key identifier: 8F:98:DF:BF:AD:15:BB:4E:C3:AA:A8:43:62:71:08:23:45:B0:42:84
Authority key identifier: 87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
Certificate issuer: /CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Certificate serial: 019E1EA3619976DF498C543C9F7CE5D42130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
Manifest number: 191A
Signing time: Wed 13 May 2026 00:01:24 +0000
Manifest this update: Wed 13 May 2026 00:01:24 +0000
Manifest next update: Thu 14 May 2026 00:01:24 +0000
Files and hashes: 1: 4L2HrkOMp5Px3ZdgqOBGMnz6oXw.roa (hash: qjbkKzm11wnXRFJIt4quryujdmBS5m5m8Id3/w9vHFw=)
2: 78tSQmB_UZC_rIGDHLnxnqOm3fI.roa (hash: 3kNkwMTWy/XYCkJODFF1IVosQpGtDfhW2/dwVf0UwBQ=)
3: C3Lj3Wt6YNWIPGHmadEQ-dchhaw.roa (hash: fn0aOrz4mN4OtO/EtlMrSuF4wh5zaQaJSbD2ep7jxzI=)
4: JIk4GJqmgSwzYSk0JGPNI21QRnM.roa (hash: 45ZLZSPO108JAO0yb1j8MEBiHT4QdE4zU9XBhQbVqtg=)
5: PY323kbvCRFsNrwGFI26gXv0gpE.roa (hash: U0ksXLpw7uH4vwqe/cNwV58+FVim6JoHjXiFGt1giNE=)
6: h9mQExRnt30RFit5--OwbKirLTk.crl (hash: E9fBRHCwwVUc/bFvImStpUF83SHueqcwOGjwfsSKLP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:61:99:76:df:49:8c:54:3c:9f:7c:e5:d4:21:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Validity
Not Before: May 13 00:01:24 2026 GMT
Not After : May 14 00:01:24 2026 GMT
Subject: CN=8f98dfbfad15bb4ec3aaa8436271082345b04284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:62:3f:49:b2:d1:e4:29:71:8a:cf:2e:83:3e:
92:64:5e:e9:12:f3:b3:37:48:c7:61:f7:4f:07:be:
96:b8:ce:63:cb:bd:ca:01:e1:33:76:84:00:8e:cc:
02:40:c5:f7:5d:ee:73:79:3c:91:41:91:1c:60:9c:
50:d9:ee:27:d5:e7:e0:f3:40:34:8c:24:f0:3a:80:
b5:b8:8c:19:e3:59:00:3f:dd:3c:a2:39:26:9b:c2:
03:46:37:e6:1f:9f:4e:02:5e:a5:74:dc:be:c4:8a:
b8:93:73:4e:29:cb:47:3a:01:05:da:18:83:5a:03:
41:5a:56:7b:74:1d:7d:f0:08:2d:b3:ed:d7:91:07:
df:ba:03:94:d9:93:fa:2a:fc:7a:8f:56:06:69:95:
5e:1d:01:00:33:83:7a:36:8e:a0:28:44:5c:cf:84:
ef:b7:98:45:0c:3d:fc:15:e1:03:31:51:9b:10:de:
1d:2c:fe:2a:de:06:5e:98:1e:72:9a:4b:4b:8a:4c:
ad:5e:82:88:9b:31:aa:ec:ba:6e:14:59:d3:bd:a8:
aa:5f:bf:bd:87:7b:dc:cd:c2:01:57:08:b0:72:42:
c5:68:40:bc:af:8b:56:4a:af:25:ad:f2:34:9d:a3:
97:06:48:41:a7:57:9b:9b:34:6d:02:83:7f:33:db:
f0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:98:DF:BF:AD:15:BB:4E:C3:AA:A8:43:62:71:08:23:45:B0:42:84
X509v3 Authority Key Identifier:
keyid:87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e9:e9:35:9e:4c:dc:0e:6b:de:b3:b1:e3:de:33:14:77:73:
36:6a:9e:76:36:47:45:a2:f3:60:c3:fd:1a:33:9d:49:99:0f:
54:3f:39:c5:45:d8:a0:4a:32:40:39:01:6e:09:33:41:ff:60:
e6:51:c0:d1:83:4f:79:02:47:3f:34:98:15:eb:87:5e:aa:6d:
25:fb:36:df:e8:1a:15:0b:f4:7a:da:64:00:32:e4:e9:81:d9:
cb:2e:5c:d4:f0:ac:c8:46:e1:1e:c5:02:22:e1:92:da:68:ca:
f5:d2:13:b5:aa:84:9f:d9:02:f0:28:ed:25:a8:25:9e:80:37:
2f:bf:a3:69:eb:b6:c7:11:79:11:13:3a:ea:21:c7:ad:ef:1b:
69:80:f6:05:f3:31:30:62:63:ac:3d:5b:0b:a6:2b:42:82:14:
e0:74:e9:fe:2e:6b:b4:19:05:62:62:fa:11:d0:ee:5a:28:4c:
5c:ea:96:b7:40:e1:cb:b8:95:a9:d4:67:72:f6:1b:2f:97:e7:
1d:49:e1:97:85:cb:ca:60:70:14:62:ce:35:01:e1:78:f1:4b:
31:df:e8:d8:3e:94:2c:28:d0:13:b4:85:72:75:57:b0:dd:7d:
df:19:c5:60:1e:82:a7:65:6b:10:96:ab:67:cf:d7:8d:ba:d6:
c5:4f:88:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo2GZdt9JjFQ8n3zl1CEwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZDk5MDEzMTQ2N2I3N2QxMTE2MmI3OWZiZTNiMDZjYThh
YjJkMzkwHhcNMjYwNTEzMDAwMTI0WhcNMjYwNTE0MDAwMTI0WjAzMTEwLwYDVQQD
Eyg4Zjk4ZGZiZmFkMTViYjRlYzNhYWE4NDM2MjcxMDgyMzQ1YjA0Mjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmI/SbLR5Clxis8ugz6SZF7pEvOz
N0jHYfdPB76WuM5jy73KAeEzdoQAjswCQMX3Xe5zeTyRQZEcYJxQ2e4n1efg80A0
jCTwOoC1uIwZ41kAP908ojkmm8IDRjfmH59OAl6ldNy+xIq4k3NOKctHOgEF2hiD
WgNBWlZ7dB198Agts+3XkQffugOU2ZP6Kvx6j1YGaZVeHQEAM4N6No6gKERcz4Tv
t5hFDD38FeEDMVGbEN4dLP4q3gZemB5ymktLikytXoKImzGq7LpuFFnTvaiqX7+9
h3vczcIBVwiwckLFaEC8r4tWSq8lrfI0naOXBkhBp1ebmzRtAoN/M9vwKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+Y37+tFbtOw6qoQ2JxCCNFsEKEMB8GA1UdIwQY
MBaAFIfZkBMUZ7d9ERYrefvjsGyoqy05MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDltUUV4Um50MzBSRml0NS0tT3diS2lyTFRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni81ZGVhOTctN2VmNy00ZGIwLTk0YmMt
YjhlOGIzNGRiMjkwLzEvaDltUUV4Um50MzBSRml0NS0tT3diS2lyTFRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni81ZGVhOTctN2VmNy00ZGIwLTk0YmMtYjhlOGIzNGRiMjkw
LzEvaDltUUV4Um50MzBSRml0NS0tT3diS2lyTFRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANenpNZ5M
3A5r3rOx494zFHdzNmqedjZHRaLzYMP9GjOdSZkPVD85xUXYoEoyQDkBbgkzQf9g
5lHA0YNPeQJHPzSYFeuHXqptJfs23+gaFQv0etpkADLk6YHZyy5c1PCsyEbhHsUC
IuGS2mjK9dITtaqEn9kC8CjtJaglnoA3L7+jaeu2xxF5ERM66iHHre8baYD2BfMx
MGJjrD1bC6YrQoIU4HTp/i5rtBkFYmL6EdDuWihMXOqWt0Dhy7iVqdRncvYbL5fn
HUnhl4XLymBwFGLONQHhePFLMd/o2D6ULCjQE7SFcnVXsN193xnFYB6Cp2VrEJar
Z8/XjbrWxU+Ifg==
-----END CERTIFICATE-----
Generated at Wed May 13 05:31:39 2026 by rpki-client