Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
File: h5Q8uG46cDgTd4-reQ1l8NohYVo.mft (raw, json)
Hash identifier: efHAjVg8H+hFeucKTpZZS7kjnSOGxAhYeICf5h48P9o=
Subject key identifier: D9:21:2E:12:FE:86:11:A0:2D:25:57:C1:D9:61:98:0F:3D:6B:51:49
Authority key identifier: 87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A
Certificate issuer: /CN=87943cb86e3a703813778fab790d65f0da21615a
Certificate serial: 019D284D6D441E11D6E7A1BAB1002C0386E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
Manifest number: 188E
Signing time: Thu 26 Mar 2026 04:00:55 +0000
Manifest this update: Thu 26 Mar 2026 04:00:55 +0000
Manifest next update: Fri 27 Mar 2026 04:00:55 +0000
Files and hashes: 1: Z4y_2Ze8pod86J3vPA08NXBKRWM.roa (hash: +xSQ1tZeQyFMF0gRPs8YaAbFYlQoE0EcBp2gy/TwTvw=)
2: h5Q8uG46cDgTd4-reQ1l8NohYVo.crl (hash: IZQ+LGOSMd/pgKGxarKgM7Gxq8JzDM5kd4ZZsFbuxtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:6d:44:1e:11:d6:e7:a1:ba:b1:00:2c:03:86:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87943cb86e3a703813778fab790d65f0da21615a
Validity
Not Before: Mar 26 04:00:55 2026 GMT
Not After : Mar 27 04:00:55 2026 GMT
Subject: CN=d9212e12fe8611a02d2557c1d961980f3d6b5149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a6:51:a4:d8:2e:f3:96:68:a9:62:db:d2:3b:
1f:be:3d:f4:9d:4e:d0:ee:f6:be:85:59:60:4d:e5:
5b:9b:b2:7c:fe:27:a8:88:80:14:8a:18:78:ac:4e:
2f:de:ed:9f:07:70:42:33:ec:3f:d4:bb:3e:58:b9:
b9:49:d2:fe:53:7a:30:f2:45:8e:8b:8b:64:28:6c:
7c:8b:f1:54:7a:bb:5d:0a:5c:08:83:7f:bb:2b:12:
95:2d:1f:4d:ec:9c:ac:2a:a1:90:12:48:3d:57:99:
25:26:b5:79:fe:40:48:cc:a4:5a:33:4b:7e:3c:ec:
14:96:58:88:2c:ae:22:88:dd:78:e1:ab:3f:4e:8c:
dc:2f:c0:ea:79:63:31:81:e3:10:d9:ae:46:95:39:
ff:cb:10:0b:95:25:87:10:d7:64:18:d8:9a:8b:4c:
21:4f:f0:17:32:65:5f:ab:79:b2:fe:77:9d:85:ad:
48:d0:dd:41:c4:3b:2a:16:af:bb:b7:d0:a9:aa:db:
10:bf:37:45:23:4c:5c:7e:81:ca:1b:53:5d:86:37:
f8:40:d9:92:bb:10:11:29:0f:1b:23:72:22:2a:28:
63:ec:7b:1e:c6:54:cf:78:b4:17:64:c7:c5:b5:dc:
87:66:25:41:c0:c8:e7:6a:3b:5f:bb:06:af:b6:d1:
5a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:21:2E:12:FE:86:11:A0:2D:25:57:C1:D9:61:98:0F:3D:6B:51:49
X509v3 Authority Key Identifier:
keyid:87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:be:fc:07:9d:72:4f:38:68:6c:56:3f:4b:ca:e9:a1:61:65:
7d:a1:6f:36:51:95:90:6d:85:27:98:24:aa:a2:d5:1d:c6:67:
b8:3f:d0:ab:02:7c:eb:04:81:c9:0f:ba:75:87:89:c1:be:3a:
5e:51:0d:9c:dc:b7:0a:d3:1c:cf:11:f3:e9:cf:4c:9c:fe:d2:
7c:f3:97:b6:94:4c:f5:67:d8:65:9f:a8:f2:ec:10:d3:20:6a:
4d:ad:b4:a5:59:14:9d:66:6f:b9:94:8b:02:df:99:1b:0c:0d:
d5:e3:d2:6b:b7:3a:4c:12:29:74:2b:3d:4f:94:af:16:57:f9:
0f:19:2b:bc:e1:39:17:36:81:b9:13:38:ce:ea:6a:10:de:d6:
5e:be:c0:34:b5:13:bb:6a:f3:a6:28:02:aa:d3:26:4e:f7:b9:
51:1b:3e:0b:b3:13:fc:ee:c7:48:c7:5f:65:4d:f2:f6:3e:a6:
b7:76:28:46:98:d2:59:56:75:5d:f1:e6:0b:13:d7:ad:33:68:
8b:2c:66:16:1e:c2:af:c4:d2:68:2e:c8:c2:fe:4d:80:34:50:
fe:f3:8f:0b:59:bf:24:de:00:48:f2:98:dd:42:53:06:c1:15:
71:02:73:b1:1a:8c:f2:4f:d2:a8:bd:bb:c6:16:dc:41:e1:87:
a9:97:b3:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTW1EHhHW56G6sQAsA4bpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OTQzY2I4NmUzYTcwMzgxMzc3OGZhYjc5MGQ2NWYwZGEy
MTYxNWEwHhcNMjYwMzI2MDQwMDU1WhcNMjYwMzI3MDQwMDU1WjAzMTEwLwYDVQQD
EyhkOTIxMmUxMmZlODYxMWEwMmQyNTU3YzFkOTYxOTgwZjNkNmI1MTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKZRpNgu85ZoqWLb0jsfvj30nU7Q
7va+hVlgTeVbm7J8/ieoiIAUihh4rE4v3u2fB3BCM+w/1Ls+WLm5SdL+U3ow8kWO
i4tkKGx8i/FUertdClwIg3+7KxKVLR9N7JysKqGQEkg9V5klJrV5/kBIzKRaM0t+
POwUlliILK4iiN144as/TozcL8DqeWMxgeMQ2a5GlTn/yxALlSWHENdkGNiai0wh
T/AXMmVfq3my/nedha1I0N1BxDsqFq+7t9CpqtsQvzdFI0xcfoHKG1Ndhjf4QNmS
uxARKQ8bI3IiKihj7HsexlTPeLQXZMfFtdyHZiVBwMjnajtfuwavttFaOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkhLhL+hhGgLSVXwdlhmA89a1FJMB8GA1UdIwQY
MBaAFIeUPLhuOnA4E3ePq3kNZfDaIWFaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDVROHVHNDZjRGdUZDQtcmVRMWw4Tm9oWVZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85NThmZWYtMGQ1NS00YzAwLWJlOGEt
Y2M1ODA1MjFkMDBmLzEvaDVROHVHNDZjRGdUZDQtcmVRMWw4Tm9oWVZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi85NThmZWYtMGQ1NS00YzAwLWJlOGEtY2M1ODA1MjFkMDBm
LzEvaDVROHVHNDZjRGdUZDQtcmVRMWw4Tm9oWVZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS778B51y
TzhobFY/S8rpoWFlfaFvNlGVkG2FJ5gkqqLVHcZnuD/QqwJ86wSByQ+6dYeJwb46
XlENnNy3CtMczxHz6c9MnP7SfPOXtpRM9WfYZZ+o8uwQ0yBqTa20pVkUnWZvuZSL
At+ZGwwN1ePSa7c6TBIpdCs9T5SvFlf5DxkrvOE5FzaBuRM4zupqEN7WXr7ANLUT
u2rzpigCqtMmTve5URs+C7MT/O7HSMdfZU3y9j6mt3YoRpjSWVZ1XfHmCxPXrTNo
iyxmFh7Cr8TSaC7Iwv5NgDRQ/vOPC1m/JN4ASPKY3UJTBsEVcQJzsRqM8k/SqL27
xhbcQeGHqZezCg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:31 2026 by rpki-client