Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft
File: h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft (raw, json)
Hash identifier: InoRtTqMG6HI6lQTcsu1aIxiJzJHuq9K61cyu0E4/DA=
Subject key identifier: 07:8D:17:6D:4C:23:1F:4D:D8:60:AA:EA:F0:DD:91:90:00:AA:CE:A7
Authority key identifier: 87:51:05:4D:FB:FD:AD:22:C4:9E:6B:BA:DA:B3:A1:8F:42:A1:C3:64
Certificate issuer: /CN=8751054dfbfdad22c49e6bbadab3a18f42a1c364
Certificate serial: 019D27DFBAFAD940C3F473136AD711202831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft
Manifest number: 021F
Signing time: Thu 26 Mar 2026 02:01:06 +0000
Manifest this update: Thu 26 Mar 2026 02:01:06 +0000
Manifest next update: Fri 27 Mar 2026 02:01:06 +0000
Files and hashes: 1: H6uqUGEMkw_GDxczJD1M696P_zE.roa (hash: nWnw8H8sn82+YCkD2O0kI6uMQ5WeKNqhPpnI/ZrVopY=)
2: h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl (hash: MISIytL1L2qJugoNELl2/1HonTcprTlKhdvcAT8WW7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:ba:fa:d9:40:c3:f4:73:13:6a:d7:11:20:28:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8751054dfbfdad22c49e6bbadab3a18f42a1c364
Validity
Not Before: Mar 26 02:01:06 2026 GMT
Not After : Mar 27 02:01:06 2026 GMT
Subject: CN=078d176d4c231f4dd860aaeaf0dd919000aacea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:64:08:9c:be:70:0b:41:c1:0b:9a:f8:d3:b8:
85:ff:b3:12:c4:db:06:60:d6:9a:e2:dc:22:56:ea:
ef:6f:3c:28:a8:ca:d9:e0:b8:70:8a:1b:f5:a5:c3:
bc:f1:23:81:e4:69:31:b5:10:6d:12:dc:25:b0:f5:
c5:9e:c8:a5:b3:f4:44:8c:f7:40:02:e0:1a:0a:ec:
c6:af:ce:bc:9e:16:fd:6c:0f:c4:c6:88:ba:fa:93:
22:49:37:09:26:cc:9f:a9:f1:0b:69:03:6c:a2:4d:
98:3e:d0:6c:2a:17:e2:2e:57:dd:42:0f:7b:27:43:
1b:25:62:08:e8:bf:a3:0d:56:03:4a:39:04:9b:37:
c4:fd:9e:f8:5d:14:bb:ad:68:41:9e:d7:36:55:c0:
57:49:c6:19:0c:cf:09:4b:69:1e:d6:18:6a:93:8a:
d4:92:a5:89:0a:a6:e3:f2:52:24:e2:f5:e1:21:fb:
62:81:f9:ed:96:d3:2f:7d:a2:af:51:e3:c4:93:0f:
c0:ee:b0:22:36:eb:15:0e:2a:42:e1:8f:96:52:d4:
43:dd:36:1f:61:f1:50:e7:7f:a9:35:ff:48:bc:e9:
d7:4f:34:75:14:76:bf:e7:70:2b:1b:ce:89:69:fa:
6f:22:21:2f:b5:a5:bf:0d:8f:2f:e6:52:88:0b:5f:
e4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8D:17:6D:4C:23:1F:4D:D8:60:AA:EA:F0:DD:91:90:00:AA:CE:A7
X509v3 Authority Key Identifier:
keyid:87:51:05:4D:FB:FD:AD:22:C4:9E:6B:BA:DA:B3:A1:8F:42:A1:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:96:81:5d:45:b7:8d:9a:c9:c6:32:b1:7a:3c:70:b3:ac:b7:
c6:90:5c:43:c4:5c:39:bf:b1:ee:31:dc:91:85:82:04:e9:31:
ad:bb:ce:4d:3e:e0:66:57:a0:0c:5c:2d:99:46:45:45:82:af:
b0:a7:09:2b:2c:9c:13:d7:04:bd:17:f3:07:96:43:be:a8:8a:
c8:48:07:6b:76:c1:02:db:c8:b5:c7:19:5b:f5:ce:cc:f1:16:
08:19:a0:34:bc:52:90:ca:35:cd:0c:a0:d4:b1:75:66:a6:88:
20:ba:24:7c:a0:a8:a2:69:99:16:6a:5b:42:d9:4b:8c:c7:24:
67:48:9b:11:09:98:43:fb:1a:01:67:7b:d4:1a:07:6a:90:16:
8b:b4:3d:b0:41:ef:16:40:ce:ae:1d:49:b0:4f:3a:62:37:1c:
7e:93:11:72:82:1d:ef:ed:52:ff:6e:1a:e1:5d:d5:f0:b4:f2:
1b:f6:96:e0:9a:d2:79:24:53:c0:2c:12:2f:35:83:94:5b:bd:
53:21:77:37:12:5b:06:f3:b8:bf:c1:c3:82:3f:af:06:80:a3:
ab:96:78:b3:1d:ae:66:c7:47:13:06:c2:b2:4e:66:1a:be:fc:
52:0a:b7:19:16:86:b5:e6:59:89:f0:10:7f:99:3a:bb:f4:b9:
5f:5a:8d:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n37r62UDD9HMTatcRICgxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NTEwNTRkZmJmZGFkMjJjNDllNmJiYWRhYjNhMThmNDJh
MWMzNjQwHhcNMjYwMzI2MDIwMTA2WhcNMjYwMzI3MDIwMTA2WjAzMTEwLwYDVQQD
EygwNzhkMTc2ZDRjMjMxZjRkZDg2MGFhZWFmMGRkOTE5MDAwYWFjZWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGQInL5wC0HBC5r407iF/7MSxNsG
YNaa4twiVurvbzwoqMrZ4Lhwihv1pcO88SOB5GkxtRBtEtwlsPXFnsils/REjPdA
AuAaCuzGr868nhb9bA/Exoi6+pMiSTcJJsyfqfELaQNsok2YPtBsKhfiLlfdQg97
J0MbJWII6L+jDVYDSjkEmzfE/Z74XRS7rWhBntc2VcBXScYZDM8JS2ke1hhqk4rU
kqWJCqbj8lIk4vXhIftigfntltMvfaKvUePEkw/A7rAiNusVDipC4Y+WUtRD3TYf
YfFQ53+pNf9IvOnXTzR1FHa/53ArG86JafpvIiEvtaW/DY8v5lKIC1/kGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAeNF21MIx9N2GCq6vDdkZAAqs6nMB8GA1UdIwQY
MBaAFIdRBU37/a0ixJ5rutqzoY9CocNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDFFRlRmdjlyU0xFbm11NjJyT2hqMEtodzJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xZGE3ZWMtMWMzNC00NjQ3LTllODMt
NzU3OWU4NWExYTQ5LzEvaDFFRlRmdjlyU0xFbm11NjJyT2hqMEtodzJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8xZGE3ZWMtMWMzNC00NjQ3LTllODMtNzU3OWU4NWExYTQ5
LzEvaDFFRlRmdjlyU0xFbm11NjJyT2hqMEtodzJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5aBXUW3
jZrJxjKxejxws6y3xpBcQ8RcOb+x7jHckYWCBOkxrbvOTT7gZlegDFwtmUZFRYKv
sKcJKyycE9cEvRfzB5ZDvqiKyEgHa3bBAtvItccZW/XOzPEWCBmgNLxSkMo1zQyg
1LF1ZqaIILokfKCoommZFmpbQtlLjMckZ0ibEQmYQ/saAWd71BoHapAWi7Q9sEHv
FkDOrh1JsE86YjccfpMRcoId7+1S/24a4V3V8LTyG/aW4JrSeSRTwCwSLzWDlFu9
UyF3NxJbBvO4v8HDgj+vBoCjq5Z4sx2uZsdHEwbCsk5mGr78Ugq3GRaGteZZifAQ
f5k6u/S5X1qNxQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:55:44 2026 by rpki-client