Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
File: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft (raw, json)
Hash identifier: /ruhLPu3jTtk/OSSHlqHhoBbs6M/l8zpLm2/O8MfO0E=
Subject key identifier: E7:30:B3:B8:93:C8:5C:11:59:25:A2:E9:CB:FF:20:D1:9F:AD:AC:6B
Authority key identifier: D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
Certificate issuer: /CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Certificate serial: 019E1C47274D953759442204C71D97A99DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
Manifest number: 1912
Signing time: Tue 12 May 2026 13:01:25 +0000
Manifest this update: Tue 12 May 2026 13:01:25 +0000
Manifest next update: Wed 13 May 2026 13:01:25 +0000
Files and hashes: 1: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl (hash: 6LgLpeMyS85EjoigolZNqywTcFaVg2xZZfgCEGi8h9s=)
2: Gez5PpAamR2Dld4nToIpywC4n04.roa (hash: DLzb0cAOuJy5ZOk7xS5DW/f6ULYNGKEl0VG/BvqN4oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:27:4d:95:37:59:44:22:04:c7:1d:97:a9:9d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Validity
Not Before: May 12 13:01:25 2026 GMT
Not After : May 13 13:01:25 2026 GMT
Subject: CN=e730b3b893c85c115925a2e9cbff20d19fadac6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8d:3e:15:3d:e6:7c:42:1e:2e:40:e1:99:5b:
d6:14:c2:c7:e0:51:7b:2a:04:5a:e8:48:bb:0c:2d:
f0:da:0e:53:b2:39:38:55:24:9e:51:c3:bd:67:bd:
0d:04:0c:52:5a:8c:25:ef:1b:cb:fd:ed:d9:87:85:
b3:6f:46:22:b6:e9:9f:43:3d:fd:17:a3:19:c0:98:
a8:4c:61:0f:f4:99:32:ff:c9:b9:3c:bd:67:ff:b6:
0c:9f:2e:04:1b:85:46:99:72:65:0b:8a:c1:02:71:
13:7e:7e:b4:b7:13:ae:8d:70:6a:e9:29:33:2d:96:
c1:85:b3:ed:d5:72:f7:67:2b:1e:ea:52:76:e1:fd:
c9:9c:91:d5:6d:a3:1a:5c:c6:da:01:00:3a:02:e0:
5d:fb:c9:19:40:1c:48:c6:38:c1:fb:58:cb:8b:78:
55:a5:1e:2b:ed:df:0a:9a:f1:20:e7:25:e8:37:6b:
00:c6:f7:f7:53:6e:21:49:57:90:f2:6c:f2:48:3a:
84:5b:17:9c:d5:34:6f:15:00:cf:4d:12:4f:48:f2:
bc:e1:0f:46:da:63:f6:78:8a:f3:cb:3b:cd:d2:e3:
f6:f9:38:1b:7b:1f:be:c1:e9:7f:fa:fc:e5:b6:0c:
c8:93:d2:2c:4b:be:85:c6:53:6b:3c:d9:50:d3:f5:
58:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:30:B3:B8:93:C8:5C:11:59:25:A2:E9:CB:FF:20:D1:9F:AD:AC:6B
X509v3 Authority Key Identifier:
keyid:D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:86:ee:31:1a:be:56:09:42:56:4b:28:75:dc:f0:c4:30:96:
07:fd:d5:b7:1c:25:c1:76:6c:89:83:ec:3a:40:cf:82:48:21:
16:71:6b:b0:ef:a6:71:b1:26:da:d6:0d:f9:6c:92:5c:59:ba:
5f:23:94:29:03:83:41:f8:6c:3b:64:1b:17:fc:5a:1e:27:fe:
10:ed:dd:20:21:d3:e2:aa:49:ac:cd:ac:27:c9:43:d5:af:41:
23:da:d1:e1:7e:e0:d3:c9:68:06:10:e9:ee:a8:5e:34:ec:b6:
c0:5b:50:f0:64:9e:03:d9:c3:25:f6:73:8b:b7:e4:2f:34:f2:
b1:2b:b4:2c:08:94:b3:a2:e2:ef:19:8d:a2:c0:09:fc:cf:95:
d2:fc:0d:61:22:09:6f:90:dd:01:b9:8e:91:dc:af:4a:ff:77:
ad:8f:0f:df:1e:11:54:40:88:22:fb:ce:1a:5f:b8:7c:28:c0:
34:68:44:22:95:47:ac:72:6c:f4:58:97:de:d0:f0:d1:44:8a:
2f:3f:7e:e7:db:9c:9e:43:9f:79:0c:07:39:0b:a9:1f:13:60:
b0:2f:b7:d8:6e:2c:8e:75:33:f6:0f:34:c3:9a:4b:f2:ed:7e:
b8:5a:71:4a:18:73:65:a3:1a:fa:f6:b6:62:56:13:ab:8e:55:
3c:2d:ae:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cRydNlTdZRCIExx2XqZ3zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MTI3NDJiOTFkNzcwZmU4ZWZiYzliNWRjZjhkYzM4OTg0
ZGQwZjAwHhcNMjYwNTEyMTMwMTI1WhcNMjYwNTEzMTMwMTI1WjAzMTEwLwYDVQQD
EyhlNzMwYjNiODkzYzg1YzExNTkyNWEyZTljYmZmMjBkMTlmYWRhYzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI0+FT3mfEIeLkDhmVvWFMLH4FF7
KgRa6Ei7DC3w2g5Tsjk4VSSeUcO9Z70NBAxSWowl7xvL/e3Zh4Wzb0YitumfQz39
F6MZwJioTGEP9Jky/8m5PL1n/7YMny4EG4VGmXJlC4rBAnETfn60txOujXBq6Skz
LZbBhbPt1XL3Zyse6lJ24f3JnJHVbaMaXMbaAQA6AuBd+8kZQBxIxjjB+1jLi3hV
pR4r7d8KmvEg5yXoN2sAxvf3U24hSVeQ8mzySDqEWxec1TRvFQDPTRJPSPK84Q9G
2mP2eIrzyzvN0uP2+Tgbex++wel/+vzltgzIk9IsS76FxlNrPNlQ0/VYfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcws7iTyFwRWSWi6cv/INGfraxrMB8GA1UdIwQY
MBaAFNYSdCuR13D+jvvJtdz43DiYTdDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWhKMEs1SFhjUDZPLThtMTNQamNPSmhOMFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8xM2ZiNjUtNGVlNy00MDI2LWFhM2Et
OWQ1NmUzYWRjYTkwLzEvMWhKMEs1SFhjUDZPLThtMTNQamNPSmhOMFBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8xM2ZiNjUtNGVlNy00MDI2LWFhM2EtOWQ1NmUzYWRjYTkw
LzEvMWhKMEs1SFhjUDZPLThtMTNQamNPSmhOMFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjobuMRq+
VglCVksoddzwxDCWB/3VtxwlwXZsiYPsOkDPgkghFnFrsO+mcbEm2tYN+WySXFm6
XyOUKQODQfhsO2QbF/xaHif+EO3dICHT4qpJrM2sJ8lD1a9BI9rR4X7g08loBhDp
7qheNOy2wFtQ8GSeA9nDJfZzi7fkLzTysSu0LAiUs6Li7xmNosAJ/M+V0vwNYSIJ
b5DdAbmOkdyvSv93rY8P3x4RVECIIvvOGl+4fCjANGhEIpVHrHJs9FiX3tDw0USK
Lz9+59ucnkOfeQwHOQupHxNgsC+32G4sjnUz9g80w5pL8u1+uFpxShhzZaMa+va2
YlYTq45VPC2uJw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:14:39 2026 by rpki-client