
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft
File: h338-RVp2BViJvwnkOZ5BnY6KwM.mft (raw, json)
Hash identifier: Kmpz9yjvrWDLhSQjKHUy+GUDMLF3KBRttUkk4DkBDfE=
Subject key identifier: F2:B5:E4:86:46:3D:4D:0D:BA:D8:64:F5:16:DC:1E:C8:C2:80:61:66
Authority key identifier: 87:7D:FC:F9:15:69:D8:15:62:26:FC:27:90:E6:79:06:76:3A:2B:03
Certificate issuer: /CN=877dfcf91569d8156226fc2790e67906763a2b03
Certificate serial: 019D33758BAF6C0186E3F31D8B1C287DDCCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft
Manifest number: 188C
Signing time: Sat 28 Mar 2026 08:00:34 +0000
Manifest this update: Sat 28 Mar 2026 08:00:34 +0000
Manifest next update: Sun 29 Mar 2026 08:00:34 +0000
Files and hashes: 1: h338-RVp2BViJvwnkOZ5BnY6KwM.crl (hash: BEvGs4KhkrvEgL2b18BI8hZdPv0VLpNcQ27PzvH/Isw=)
2: psNr_hTMl_I5KVL4YqNClQzsa0U.roa (hash: iOzy4wHtJLtwL9zu93am3QAJzNv3kq9Sr3PhqUJ5iL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:8b:af:6c:01:86:e3:f3:1d:8b:1c:28:7d:dc:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877dfcf91569d8156226fc2790e67906763a2b03
Validity
Not Before: Mar 28 08:00:34 2026 GMT
Not After : Mar 29 08:00:34 2026 GMT
Subject: CN=f2b5e486463d4d0dbad864f516dc1ec8c2806166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ba:c1:e7:04:ba:a8:69:db:ea:ec:4d:47:6a:
b9:5c:dc:a9:62:37:a7:0b:4a:f1:c3:c4:ae:5e:86:
9c:1c:4f:3a:5d:fa:ce:fb:ad:c1:3c:aa:7b:d9:6f:
8a:7b:92:e1:f0:f9:41:d9:c1:a2:7c:67:88:d1:cb:
31:0c:af:a3:d4:6d:b7:6a:83:da:c6:83:82:86:58:
dd:4f:f3:fd:91:ec:c7:7f:75:b0:9e:85:63:bf:e4:
42:a7:03:5b:cd:86:08:bd:2c:f3:03:b0:d6:63:d1:
5c:a6:14:28:33:dd:7f:cc:4b:68:5d:4f:8e:9c:27:
bd:6f:f7:f7:f3:1a:4e:82:63:f1:b1:c6:f7:c5:70:
f7:22:6d:67:ae:27:ee:7d:16:37:8a:00:92:90:16:
68:fb:8e:85:bc:24:11:c0:48:0b:a0:75:0b:38:d9:
e3:ab:1a:be:e9:73:59:dd:3a:8b:4a:9a:75:cf:2f:
1b:29:e4:62:d0:a4:af:09:40:5d:4e:68:e6:b2:0c:
16:cd:4b:08:49:9d:58:5c:53:31:ac:66:94:19:ff:
78:29:d1:33:45:f0:ef:58:e1:e6:72:77:f7:25:b8:
74:a7:bb:18:c3:6d:68:0a:96:a6:92:b7:0d:a5:f0:
a3:ed:b8:6a:d0:a7:ae:37:cf:cd:52:77:98:24:2c:
aa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B5:E4:86:46:3D:4D:0D:BA:D8:64:F5:16:DC:1E:C8:C2:80:61:66
X509v3 Authority Key Identifier:
keyid:87:7D:FC:F9:15:69:D8:15:62:26:FC:27:90:E6:79:06:76:3A:2B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:39:0a:1e:e2:42:ab:42:a2:fc:fc:c6:28:15:76:58:c0:4f:
8e:3a:6c:1d:d0:8a:78:b8:33:8f:34:ac:68:88:9f:94:31:cb:
50:8b:03:57:9c:65:40:c4:e5:39:85:bb:6e:f6:65:9d:89:27:
ca:c2:c7:51:02:5e:36:94:2f:cb:0f:a8:46:61:e2:88:ff:bf:
c5:6c:72:d3:dd:f0:dc:3c:dc:34:fc:82:6e:35:5b:92:f7:a7:
eb:86:b5:16:7e:29:03:66:fd:f6:d8:7f:fe:84:7e:7c:b4:de:
87:b8:d2:1f:85:60:72:6c:bc:1c:58:ed:7e:6a:32:ee:2b:78:
63:70:38:b8:f9:37:4a:fe:98:f1:56:18:7d:d6:9b:9d:3c:78:
25:03:f1:e7:c9:8d:35:47:b7:50:2b:a5:cd:83:7f:7e:aa:9b:
ba:12:8e:91:4b:e4:94:41:28:b8:a9:89:fd:c9:5f:48:3f:bc:
d3:33:ca:94:33:ab:d6:2c:06:0d:05:09:5a:68:b3:89:38:94:
08:8c:4c:b2:11:36:8f:4b:34:18:68:f4:6a:25:b2:32:6b:96:
06:fe:8b:c4:9f:0c:84:66:d9:20:07:79:98:da:68:df:83:2e:
d5:b9:c1:98:8b:c6:81:27:85:ca:00:d3:b7:e7:89:88:0c:fa:
d8:4f:4d:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zdYuvbAGG4/MdixwofdzKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3N2RmY2Y5MTU2OWQ4MTU2MjI2ZmMyNzkwZTY3OTA2NzYz
YTJiMDMwHhcNMjYwMzI4MDgwMDM0WhcNMjYwMzI5MDgwMDM0WjAzMTEwLwYDVQQD
EyhmMmI1ZTQ4NjQ2M2Q0ZDBkYmFkODY0ZjUxNmRjMWVjOGMyODA2MTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrrB5wS6qGnb6uxNR2q5XNypYjen
C0rxw8SuXoacHE86XfrO+63BPKp72W+Ke5Lh8PlB2cGifGeI0csxDK+j1G23aoPa
xoOChljdT/P9kezHf3WwnoVjv+RCpwNbzYYIvSzzA7DWY9FcphQoM91/zEtoXU+O
nCe9b/f38xpOgmPxscb3xXD3Im1nrifufRY3igCSkBZo+46FvCQRwEgLoHULONnj
qxq+6XNZ3TqLSpp1zy8bKeRi0KSvCUBdTmjmsgwWzUsISZ1YXFMxrGaUGf94KdEz
RfDvWOHmcnf3Jbh0p7sYw21oCpamkrcNpfCj7bhq0KeuN8/NUneYJCyqNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPK15IZGPU0Nuthk9RbcHsjCgGFmMB8GA1UdIwQY
MBaAFId9/PkVadgVYib8J5DmeQZ2OisDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDMzOC1SVnAyQlZpSnZ3bmtPWjVCblk2S3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mMmJkYzgtNzllNy00OGNkLWE5OTQt
YWQ0OTU4NThiMzJjLzEvaDMzOC1SVnAyQlZpSnZ3bmtPWjVCblk2S3dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9mMmJkYzgtNzllNy00OGNkLWE5OTQtYWQ0OTU4NThiMzJj
LzEvaDMzOC1SVnAyQlZpSnZ3bmtPWjVCblk2S3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajkKHuJC
q0Ki/PzGKBV2WMBPjjpsHdCKeLgzjzSsaIiflDHLUIsDV5xlQMTlOYW7bvZlnYkn
ysLHUQJeNpQvyw+oRmHiiP+/xWxy093w3DzcNPyCbjVbkven64a1Fn4pA2b99th/
/oR+fLTeh7jSH4Vgcmy8HFjtfmoy7it4Y3A4uPk3Sv6Y8VYYfdabnTx4JQPx58mN
NUe3UCulzYN/fqqbuhKOkUvklEEouKmJ/clfSD+80zPKlDOr1iwGDQUJWmiziTiU
CIxMshE2j0s0GGj0aiWyMmuWBv6LxJ8MhGbZIAd5mNpo34Mu1bnBmIvGgSeFygDT
t+eJiAz62E9NUQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:28:56 2026 by rpki-client