Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
File: H1KEKQNNz7oB9__1x8yIVtTQbhs.mft (raw, json)
Hash identifier: Q7nBq5WrE3I+Fxlvv2ijSsiGdBB0A+69GxEbOoxfoS0=
Subject key identifier: D4:E6:FF:D9:C8:72:32:48:15:6C:A5:C7:83:9E:FA:D3:9B:7F:81:C4
Authority key identifier: 1F:52:84:29:03:4D:CF:BA:01:F7:FF:F5:C7:CC:88:56:D4:D0:6E:1B
Certificate issuer: /CN=1f528429034dcfba01f7fff5c7cc8856d4d06e1b
Certificate serial: 019D28847C7F041E7271721C63E815B6C037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
Manifest number: 0DE0
Signing time: Thu 26 Mar 2026 05:01:04 +0000
Manifest this update: Thu 26 Mar 2026 05:01:04 +0000
Manifest next update: Fri 27 Mar 2026 05:01:04 +0000
Files and hashes: 1: H1KEKQNNz7oB9__1x8yIVtTQbhs.crl (hash: 5kgnUuMvrVSae3CTKzEbFtATXoYo+y/c/QvN5bsW8dE=)
2: LmAKZqBdTFF5oLsEoluyDIA0344.roa (hash: hZY8m7f3JelI/bgQwSPE+IWZx3xID2uYH6Ji+lC9gck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:7c:7f:04:1e:72:71:72:1c:63:e8:15:b6:c0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f528429034dcfba01f7fff5c7cc8856d4d06e1b
Validity
Not Before: Mar 26 05:01:04 2026 GMT
Not After : Mar 27 05:01:04 2026 GMT
Subject: CN=d4e6ffd9c8723248156ca5c7839efad39b7f81c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:30:7e:09:85:e9:82:3f:e3:4a:8a:82:10:4a:
ab:75:cf:3a:91:00:13:3d:a0:8d:a6:b8:f0:b4:08:
a0:29:01:f1:d6:86:b0:5e:a7:1d:c0:a8:57:33:3f:
1f:55:04:d5:fc:ca:24:2c:cb:81:29:7c:30:27:f3:
e4:6f:82:c2:e1:ea:11:82:68:6d:5e:e4:1c:38:b6:
63:49:d7:7c:6a:43:61:14:aa:95:81:b8:df:3f:e2:
40:42:bb:fe:42:83:f2:87:68:d6:04:6e:49:4b:6b:
0c:6e:92:25:cb:10:70:d7:76:f3:35:37:e6:e4:ae:
54:2e:4e:be:a7:0d:1e:89:b7:92:d4:8f:64:ce:0f:
1a:1d:bf:81:66:f7:68:e5:56:25:d7:aa:a4:b8:dc:
ba:bf:a3:3b:4f:1d:ec:d5:30:d4:63:51:55:d7:34:
66:0b:c8:0d:3c:61:73:f4:ef:80:68:78:28:d6:ff:
6c:f4:a8:3c:cf:a9:11:bd:bc:55:e2:8b:a8:9c:2e:
9c:a3:31:25:0d:a0:a0:9f:2f:34:21:fb:56:b5:d2:
c2:a9:1e:98:06:6e:9b:92:25:f2:b6:81:4c:9e:34:
c9:06:70:31:a1:94:ae:52:84:a6:bc:ec:fb:a0:34:
c6:3f:6e:15:f9:43:16:ef:a4:50:86:67:e3:38:c9:
6e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E6:FF:D9:C8:72:32:48:15:6C:A5:C7:83:9E:FA:D3:9B:7F:81:C4
X509v3 Authority Key Identifier:
keyid:1F:52:84:29:03:4D:CF:BA:01:F7:FF:F5:C7:CC:88:56:D4:D0:6E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1KEKQNNz7oB9__1x8yIVtTQbhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/973bb5-0661-456c-9e1e-253be9f6ed3d/1/H1KEKQNNz7oB9__1x8yIVtTQbhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:fe:ce:32:58:cb:83:40:5a:23:25:b8:ad:24:01:56:3c:2e:
06:a0:c3:4b:59:4b:40:0e:f8:8d:50:a7:9a:67:5e:ce:76:a5:
eb:cc:a5:63:80:c2:fd:28:e2:79:f7:65:c3:a2:10:dd:20:5d:
29:9e:a8:de:0d:28:56:2b:84:fb:cb:f5:e4:fa:8a:dd:34:23:
f0:6f:7d:73:3a:68:c0:c9:ef:30:59:ec:df:80:45:da:b8:f7:
58:80:b4:b1:61:7c:e6:5c:bb:c2:12:7a:6c:5e:64:a6:00:89:
83:39:ca:7c:eb:af:b6:dc:91:86:f1:fe:77:c3:0e:9a:0a:ae:
2f:87:c3:12:f6:3f:5f:9c:ff:25:14:d8:bf:a8:ad:88:52:81:
c6:1b:53:b0:c1:47:0a:b9:20:8a:73:4b:ab:69:25:2f:84:1f:
f1:02:01:75:e5:56:60:92:2e:05:91:b4:e3:9d:af:54:4b:2c:
c9:7a:b5:0b:a9:99:08:8c:b0:03:6c:d1:e9:2a:4c:db:d4:25:
bd:02:2a:4d:2f:d1:d4:7d:4b:f0:21:c2:2f:b4:a8:9f:6b:a2:
6f:4b:be:67:9f:03:20:3d:11:76:6b:d7:01:50:0e:9d:e9:a5:
54:7f:cf:9d:27:25:79:0e:bc:12:55:d4:26:6d:1e:bd:77:cd:
d6:3e:a5:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohHx/BB5ycXIcY+gVtsA3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNTI4NDI5MDM0ZGNmYmEwMWY3ZmZmNWM3Y2M4ODU2ZDRk
MDZlMWIwHhcNMjYwMzI2MDUwMTA0WhcNMjYwMzI3MDUwMTA0WjAzMTEwLwYDVQQD
EyhkNGU2ZmZkOWM4NzIzMjQ4MTU2Y2E1Yzc4MzllZmFkMzliN2Y4MWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDB+CYXpgj/jSoqCEEqrdc86kQAT
PaCNprjwtAigKQHx1oawXqcdwKhXMz8fVQTV/MokLMuBKXwwJ/Pkb4LC4eoRgmht
XuQcOLZjSdd8akNhFKqVgbjfP+JAQrv+QoPyh2jWBG5JS2sMbpIlyxBw13bzNTfm
5K5ULk6+pw0eibeS1I9kzg8aHb+BZvdo5VYl16qkuNy6v6M7Tx3s1TDUY1FV1zRm
C8gNPGFz9O+AaHgo1v9s9Kg8z6kRvbxV4ouonC6cozElDaCgny80IftWtdLCqR6Y
Bm6bkiXytoFMnjTJBnAxoZSuUoSmvOz7oDTGP24V+UMW76RQhmfjOMlujQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTm/9nIcjJIFWylx4Oe+tObf4HEMB8GA1UdIwQY
MBaAFB9ShCkDTc+6Aff/9cfMiFbU0G4bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDFLRUtRTk56N29COV9fMXg4eUlWdFRRYmhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85NzNiYjUtMDY2MS00NTZjLTllMWUt
MjUzYmU5ZjZlZDNkLzEvSDFLRUtRTk56N29COV9fMXg4eUlWdFRRYmhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC85NzNiYjUtMDY2MS00NTZjLTllMWUtMjUzYmU5ZjZlZDNk
LzEvSDFLRUtRTk56N29COV9fMXg4eUlWdFRRYmhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGv7OMljL
g0BaIyW4rSQBVjwuBqDDS1lLQA74jVCnmmdeznal68ylY4DC/Sjiefdlw6IQ3SBd
KZ6o3g0oViuE+8v15PqK3TQj8G99czpowMnvMFns34BF2rj3WIC0sWF85ly7whJ6
bF5kpgCJgznKfOuvttyRhvH+d8MOmgquL4fDEvY/X5z/JRTYv6itiFKBxhtTsMFH
CrkginNLq2klL4Qf8QIBdeVWYJIuBZG0452vVEssyXq1C6mZCIywA2zR6SpM29Ql
vQIqTS/R1H1L8CHCL7Son2uib0u+Z58DID0RdmvXAVAOnemlVH/PnScleQ68ElXU
Jm0evXfN1j6l/g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:37:40 2026 by rpki-client