Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
File: R01HT5RpSoEE9eQTqyucCVWbefA.mft (raw, json)
Hash identifier: +cYNQopjy1SukhzLaXCcr2e8mtI0X6zyGHGXfw2ZPmM=
Subject key identifier: 0B:BD:C7:C7:D8:8E:3E:0F:44:22:9A:64:50:87:78:1E:55:B5:93:A4
Authority key identifier: 47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
Certificate issuer: /CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Certificate serial: 019D2772E73C91E707D8A98B20ED9481B165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
Manifest number: 04A9
Signing time: Thu 26 Mar 2026 00:02:14 +0000
Manifest this update: Thu 26 Mar 2026 00:02:14 +0000
Manifest next update: Fri 27 Mar 2026 00:02:14 +0000
Files and hashes: 1: R01HT5RpSoEE9eQTqyucCVWbefA.crl (hash: YQDKKLRZDITq+7glCX4SnJp+BZk3pk8PvxYwMvC+z9U=)
2: SBUsospASb3EsMhP62NmTHT6SVw.roa (hash: 0+KXBZnA9I41d7SaRHS/S7In8wI7A6juxPzuhg0b63k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:e7:3c:91:e7:07:d8:a9:8b:20:ed:94:81:b1:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Validity
Not Before: Mar 26 00:02:14 2026 GMT
Not After : Mar 27 00:02:14 2026 GMT
Subject: CN=0bbdc7c7d88e3e0f44229a645087781e55b593a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9b:c3:ef:bc:04:d1:1c:f8:fb:d6:44:35:30:
a8:9a:48:08:6c:34:75:86:09:a7:38:1f:b7:ec:43:
a6:a3:06:2f:13:f1:d6:7a:16:98:30:20:74:0d:75:
04:48:49:1b:4a:a2:c1:a7:86:24:90:2a:9b:36:38:
28:7a:16:4e:b7:7d:b2:d2:2a:47:30:37:dd:3f:3a:
8c:17:6c:e9:23:86:e9:17:36:d1:f1:f9:84:0f:94:
4e:59:43:7f:ee:58:d8:6c:a2:77:14:af:67:c5:89:
63:3a:20:cd:d2:e1:30:4f:32:c6:9c:57:6e:6f:5d:
58:fe:d4:95:10:99:75:3f:f6:6e:48:07:dc:72:39:
54:c6:3a:4d:1a:d2:6a:65:09:f8:05:c2:85:b1:b8:
3d:82:76:06:84:ad:c5:8d:75:36:a0:31:96:08:50:
09:be:fc:98:21:92:d6:1e:53:92:76:94:d9:e4:c2:
a3:7a:8c:74:e3:79:5c:54:b9:63:bc:33:a8:97:16:
50:70:5d:dd:ed:56:11:72:a0:81:15:05:cd:c6:d4:
6b:e5:16:50:81:36:19:e5:d3:f5:f5:c5:53:d1:7e:
17:c3:1d:bc:65:a4:08:e2:0b:15:ce:44:73:14:a3:
ae:de:ad:b2:86:8a:a4:38:5b:32:fa:35:30:ca:f0:
2c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BD:C7:C7:D8:8E:3E:0F:44:22:9A:64:50:87:78:1E:55:B5:93:A4
X509v3 Authority Key Identifier:
keyid:47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:57:c2:be:20:5a:23:f8:f2:26:b6:e3:dd:57:4b:0d:10:07:
34:d4:84:52:83:5e:9c:ba:f2:d0:1d:a5:f1:a3:ea:43:b8:3b:
19:3e:1d:89:89:1c:36:56:65:f2:45:ad:76:10:28:e9:b8:8d:
9d:0f:39:a7:b0:69:0e:e6:a7:42:1f:68:22:6a:64:dc:1a:74:
06:5e:17:61:b3:58:7d:31:34:93:0f:30:89:eb:3d:12:36:03:
7e:76:4f:45:cf:5f:7f:9e:bc:b3:11:de:10:0e:4d:78:31:19:
1b:4b:5a:6a:0f:93:80:4e:57:44:e3:f7:e8:5a:a9:a3:3c:ee:
05:36:0b:15:43:3b:e3:73:f7:99:61:14:ef:e0:35:2f:5d:73:
68:d2:39:06:e8:35:58:4a:d6:d9:19:e6:af:9b:fc:34:39:82:
78:90:2f:8e:1a:65:4c:05:5d:03:0b:95:4b:1c:73:d0:e3:eb:
7c:0a:39:68:92:27:06:65:9a:bb:86:52:57:19:f0:6a:46:68:
93:1b:54:d3:ad:86:5e:ac:be:34:5e:ce:e4:0d:3b:df:bc:24:
cd:5a:9a:64:14:49:66:5d:44:18:5d:7b:b2:6c:b2:43:0a:68:
08:83:79:97:07:da:f8:3f:dc:f1:ba:cc:dd:5b:87:10:7f:9a:
e6:b0:9b:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncuc8kecH2KmLIO2UgbFlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NGQ0NzRmOTQ2OTRhODEwNGY1ZTQxM2FiMmI5YzA5NTU5
Yjc5ZjAwHhcNMjYwMzI2MDAwMjE0WhcNMjYwMzI3MDAwMjE0WjAzMTEwLwYDVQQD
EygwYmJkYzdjN2Q4OGUzZTBmNDQyMjlhNjQ1MDg3NzgxZTU1YjU5M2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZvD77wE0Rz4+9ZENTComkgIbDR1
hgmnOB+37EOmowYvE/HWehaYMCB0DXUESEkbSqLBp4YkkCqbNjgoehZOt32y0ipH
MDfdPzqMF2zpI4bpFzbR8fmED5ROWUN/7ljYbKJ3FK9nxYljOiDN0uEwTzLGnFdu
b11Y/tSVEJl1P/ZuSAfccjlUxjpNGtJqZQn4BcKFsbg9gnYGhK3FjXU2oDGWCFAJ
vvyYIZLWHlOSdpTZ5MKjeox043lcVLljvDOolxZQcF3d7VYRcqCBFQXNxtRr5RZQ
gTYZ5dP19cVT0X4Xwx28ZaQI4gsVzkRzFKOu3q2yhoqkOFsy+jUwyvAs5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAu9x8fYjj4PRCKaZFCHeB5VtZOkMB8GA1UdIwQY
MBaAFEdNR0+UaUqBBPXkE6srnAlVm3nwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjAxSFQ1UnBTb0VFOWVRVHF5dWNDVldiZWZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny82MzhiYzMtZTk0NS00MDBhLWFmNzkt
MGI2ZjAwMmQxOTc4LzEvUjAxSFQ1UnBTb0VFOWVRVHF5dWNDVldiZWZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny82MzhiYzMtZTk0NS00MDBhLWFmNzktMGI2ZjAwMmQxOTc4
LzEvUjAxSFQ1UnBTb0VFOWVRVHF5dWNDVldiZWZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPVfCviBa
I/jyJrbj3VdLDRAHNNSEUoNenLry0B2l8aPqQ7g7GT4diYkcNlZl8kWtdhAo6biN
nQ85p7BpDuanQh9oImpk3Bp0Bl4XYbNYfTE0kw8wies9EjYDfnZPRc9ff568sxHe
EA5NeDEZG0taag+TgE5XROP36FqpozzuBTYLFUM743P3mWEU7+A1L11zaNI5Bug1
WErW2Rnmr5v8NDmCeJAvjhplTAVdAwuVSxxz0OPrfAo5aJInBmWau4ZSVxnwakZo
kxtU062GXqy+NF7O5A0737wkzVqaZBRJZl1EGF17smyyQwpoCIN5lwfa+D/c8brM
3VuHEH+a5rCbGQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:08:49 2026 by rpki-client