Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
File: HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft (raw, json)
Hash identifier: P8i1kAuDR+hfht7oDijGNoG/VJQ/bxlDg/T+tSpKnSM=
Subject key identifier: 07:F5:14:38:C2:4B:6E:2C:AE:E8:DD:BD:02:16:99:17:0A:29:35:3E
Authority key identifier: 1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
Certificate issuer: /CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Certificate serial: 019D296164BDB8FCE14205EC9E3166273675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 09:02:21 +0000
Manifest this update: Thu 26 Mar 2026 09:02:21 +0000
Manifest next update: Fri 27 Mar 2026 09:02:21 +0000
Files and hashes: 1: 4t1yiUQVN5Px9-wGHy62XxxqimU.roa (hash: FHoafxoTZhFU/Fxu+bGTDh9a2aT1nhPTACKs/kC0+Jg=)
2: 8jW3c1tdyMykRFAb8cKVIvXYm1o.roa (hash: Q0T2eH3RlaxZhFvfRSxmpGRJmTvjnKlI3xGp5fpQfVU=)
3: HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl (hash: 0+aTidYFiwVISLBGohhR3b0SjIfhOotzJGpZYV3y9FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:64:bd:b8:fc:e1:42:05:ec:9e:31:66:27:36:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Validity
Not Before: Mar 26 09:02:21 2026 GMT
Not After : Mar 27 09:02:21 2026 GMT
Subject: CN=07f51438c24b6e2caee8ddbd021699170a29353e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:22:95:ca:f1:60:1a:a1:52:f7:88:6d:97:2b:
4a:da:9d:6e:77:2b:93:6b:9d:86:ec:51:ff:8c:39:
29:ba:c4:6f:cb:51:8d:95:15:c1:25:0d:ac:fe:75:
9d:cb:68:a3:ba:bb:62:b6:b0:d9:4b:e5:c8:a1:e9:
4a:cc:c5:07:94:31:f0:92:05:04:4f:44:cc:92:50:
36:ac:22:ba:1c:23:d0:5a:7b:2d:ba:e5:d2:25:4e:
b7:30:c7:4f:4b:35:53:44:29:43:44:67:51:9a:be:
fd:04:b6:0d:a7:f9:a3:66:d2:c9:ac:75:fe:56:da:
85:58:59:0b:4a:8f:4a:62:ae:73:b6:55:b9:aa:9f:
4c:ce:90:15:c7:e2:e8:73:69:8c:cd:54:57:16:5d:
17:85:ee:ca:c6:a8:2c:2c:06:2f:77:cd:76:e0:dc:
8d:39:73:8b:2f:f6:26:ad:c7:07:3c:42:b4:1c:1a:
78:17:f4:b8:23:62:53:87:51:9c:e6:40:cd:b1:24:
1a:4c:44:81:d2:aa:a2:86:c1:d1:ef:fd:a3:ad:2b:
61:6e:9c:56:3d:f6:8a:62:db:79:ec:bb:a4:93:e6:
5e:b5:e1:93:c4:b6:af:26:06:35:28:cb:97:0f:53:
52:2d:c6:6a:dd:1a:27:a7:ef:76:74:87:ae:42:57:
06:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F5:14:38:C2:4B:6E:2C:AE:E8:DD:BD:02:16:99:17:0A:29:35:3E
X509v3 Authority Key Identifier:
keyid:1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2f:02:9b:eb:f9:38:01:a6:4b:fc:07:69:08:07:fb:df:a3:
7d:73:29:a5:c3:0e:03:76:51:3f:e1:df:57:61:92:11:6a:42:
51:92:d7:d7:b9:96:7b:33:41:19:d1:cd:39:fb:1f:53:c4:af:
83:1a:3c:08:79:8c:c5:2e:ae:6c:87:4a:34:69:32:a5:c6:27:
de:e7:2c:95:d7:62:96:0d:fd:42:68:40:a8:8a:e9:b6:6e:a5:
bc:4c:a9:ba:0d:1b:ee:4c:f3:e9:8e:a0:b3:a6:be:dd:a1:f6:
c6:8d:02:c3:1c:31:86:0a:97:f5:87:6d:3b:a4:15:dc:68:c3:
d8:5c:57:38:42:a1:08:b4:33:e0:73:82:6d:01:51:d3:72:46:
e8:aa:b6:de:08:bf:ba:79:3e:d2:5d:4e:24:25:a1:42:d0:22:
df:d9:bb:6a:b5:8c:21:f4:eb:cb:84:8a:30:7b:fc:61:eb:01:
b1:d4:31:b6:09:b5:cc:ae:94:db:31:c4:0e:f1:c4:ba:ff:18:
e4:28:9a:76:69:d9:a0:ae:20:40:a5:91:fd:aa:42:61:54:bb:
04:d3:e2:e0:7e:ad:a1:70:38:ec:45:10:8f:dd:00:f2:64:ff:
c9:2d:d3:e7:57:76:cd:42:e9:02:c0:92:a3:a6:4f:65:e9:ca:
28:72:fa:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYWS9uPzhQgXsnjFmJzZ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMWUzNTQzNjJjYjkyMjRjMDE2ZGFjOTQ0ZTNkOWQ0OTkw
OWIxN2YwHhcNMjYwMzI2MDkwMjIxWhcNMjYwMzI3MDkwMjIxWjAzMTEwLwYDVQQD
EygwN2Y1MTQzOGMyNGI2ZTJjYWVlOGRkYmQwMjE2OTkxNzBhMjkzNTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySKVyvFgGqFS94htlytK2p1udyuT
a52G7FH/jDkpusRvy1GNlRXBJQ2s/nWdy2ijurtitrDZS+XIoelKzMUHlDHwkgUE
T0TMklA2rCK6HCPQWnstuuXSJU63MMdPSzVTRClDRGdRmr79BLYNp/mjZtLJrHX+
VtqFWFkLSo9KYq5ztlW5qp9MzpAVx+Loc2mMzVRXFl0Xhe7KxqgsLAYvd8124NyN
OXOLL/YmrccHPEK0HBp4F/S4I2JTh1Gc5kDNsSQaTESB0qqihsHR7/2jrSthbpxW
PfaKYtt57Lukk+ZeteGTxLavJgY1KMuXD1NSLcZq3Ronp+92dIeuQlcG5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAf1FDjCS24srujdvQIWmRcKKTU+MB8GA1UdIwQY
MBaAFB0eNUNiy5IkwBbayUTj2dSZCbF/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFI0MVEyTExraVRBRnRySlJPUFoxSmtKc1g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8yODJiMTktNjhiOS00ZWYzLWFkMzkt
NmVjOGM4MWZkYzNmLzEvSFI0MVEyTExraVRBRnRySlJPUFoxSmtKc1g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8yODJiMTktNjhiOS00ZWYzLWFkMzktNmVjOGM4MWZkYzNm
LzEvSFI0MVEyTExraVRBRnRySlJPUFoxSmtKc1g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfy8Cm+v5
OAGmS/wHaQgH+9+jfXMppcMOA3ZRP+HfV2GSEWpCUZLX17mWezNBGdHNOfsfU8Sv
gxo8CHmMxS6ubIdKNGkypcYn3ucslddilg39QmhAqIrptm6lvEypug0b7kzz6Y6g
s6a+3aH2xo0CwxwxhgqX9YdtO6QV3GjD2FxXOEKhCLQz4HOCbQFR03JG6Kq23gi/
unk+0l1OJCWhQtAi39m7arWMIfTry4SKMHv8YesBsdQxtgm1zK6U2zHEDvHEuv8Y
5CiadmnZoK4gQKWR/apCYVS7BNPi4H6toXA47EUQj90A8mT/yS3T51d2zULpAsCS
o6ZPZenKKHL6Kg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:25 2026 by rpki-client