Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
File: Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft (raw, json)
Hash identifier: +e7oJz+nEpj525kWj8JcqMl7ot+b3I3OPZvkiGbyVc0=
Subject key identifier: BD:40:90:A8:A4:C0:4D:9A:E4:1A:65:17:99:C7:BD:58:C2:6F:A3:48
Authority key identifier: 1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C
Certificate issuer: /CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
Certificate serial: 019D284D811B7B8D7CFB0CD7A2B605F07D84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
Manifest number: 0AC5
Signing time: Thu 26 Mar 2026 04:01:00 +0000
Manifest this update: Thu 26 Mar 2026 04:01:00 +0000
Manifest next update: Fri 27 Mar 2026 04:01:00 +0000
Files and hashes: 1: Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl (hash: vReg57cKyMkBdR4GxH8caDXhMhRwNXnupiVSO9sP7GI=)
2: ZGLqYNMtolm5eL1wUXAdIeFX7S8.roa (hash: NyeDj2CCt8I3KwuYf4K9J8j74vTWf4ATwXYKw7Y/SY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:81:1b:7b:8d:7c:fb:0c:d7:a2:b6:05:f0:7d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
Validity
Not Before: Mar 26 04:01:00 2026 GMT
Not After : Mar 27 04:01:00 2026 GMT
Subject: CN=bd4090a8a4c04d9ae41a651799c7bd58c26fa348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c9:75:b1:67:de:d8:26:6a:61:70:8b:54:95:
c7:d9:fb:ab:77:25:f2:be:32:34:4a:36:77:86:bf:
fb:7e:1a:e3:99:c0:cf:b4:4d:a7:d0:7b:02:9a:d0:
5c:b1:79:fe:49:de:80:0f:b3:43:a6:6b:17:e3:89:
08:fa:86:2c:dc:e2:60:29:39:9a:71:9a:f0:b3:be:
e0:fe:f4:e3:c8:04:d8:2e:5d:6b:6b:3a:44:4f:86:
d0:57:b8:66:31:5d:6f:7d:59:8b:81:73:cb:74:a5:
0e:fd:2c:e5:d8:c8:f9:7f:1b:5b:ac:15:22:6a:13:
df:98:08:07:50:e0:cd:c0:b2:83:dd:02:c0:1b:18:
67:7d:a5:83:d8:26:0a:c1:05:4d:9d:2c:f1:57:f1:
79:96:70:8b:5b:81:6e:70:86:fc:52:16:23:d7:52:
50:62:24:cb:8b:09:08:c4:b3:e7:4b:41:60:2c:ec:
9b:1a:6d:5a:8f:c2:05:f2:e1:b5:65:7a:4c:0f:55:
17:97:32:9b:22:ae:6f:fa:15:cb:b9:1f:a7:be:e9:
9a:a4:07:4b:fd:01:db:31:e3:81:31:c7:14:b5:48:
02:bc:b4:3e:a6:6d:94:fe:90:f5:57:88:fc:98:1d:
32:78:3f:eb:cb:a6:41:62:3d:d2:fa:6f:d8:0d:e9:
65:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:40:90:A8:A4:C0:4D:9A:E4:1A:65:17:99:C7:BD:58:C2:6F:A3:48
X509v3 Authority Key Identifier:
keyid:1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:1c:98:88:b8:71:c1:eb:cc:a8:e7:ea:37:68:8e:08:86:61:
7a:fa:fd:40:82:07:d5:4d:9e:a7:33:f6:83:82:22:b8:fe:9b:
34:0b:8c:92:b1:ae:41:45:70:89:1a:97:c0:a5:e7:88:a9:ef:
49:6b:e4:e9:49:b0:64:47:86:c6:24:64:bc:58:83:46:be:a9:
7d:bb:60:d8:1e:a2:cb:f0:64:28:79:4f:2f:df:7a:00:0b:66:
0b:92:a5:d4:ac:fd:04:2a:c3:cb:2f:78:80:9d:5f:d8:d7:35:
61:b8:44:96:fe:c4:15:e0:aa:97:d4:22:cb:70:d2:4d:16:3b:
6f:af:36:d1:0e:76:33:4a:2e:2c:c8:89:d5:9d:61:37:4e:12:
c5:80:32:8c:a7:ab:79:41:b5:ac:07:c6:ab:65:53:32:75:36:
d0:e5:f6:7c:73:3f:86:4a:4c:ac:3a:6f:f9:6e:ef:18:9b:c7:
0f:ad:bb:ef:57:33:a2:0a:a6:93:90:1a:41:44:3b:f6:1a:92:
9e:ab:c1:ba:79:06:cf:62:66:e3:21:c1:31:ee:18:d3:96:f9:
fd:d1:4d:44:62:ec:51:fa:63:84:ef:46:bc:41:fb:68:03:66:
9e:7b:84:99:21:8c:3e:4f:65:4d:04:9a:a4:5d:71:01:0e:aa:
d7:26:3c:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTYEbe418+wzXorYF8H2EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmM2UzYmY1NjBkYTBiMTI2MThiMDI3YWFjYTYxZmFjNzhk
NWZmNWMwHhcNMjYwMzI2MDQwMTAwWhcNMjYwMzI3MDQwMTAwWjAzMTEwLwYDVQQD
EyhiZDQwOTBhOGE0YzA0ZDlhZTQxYTY1MTc5OWM3YmQ1OGMyNmZhMzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsl1sWfe2CZqYXCLVJXH2furdyXy
vjI0SjZ3hr/7fhrjmcDPtE2n0HsCmtBcsXn+Sd6AD7NDpmsX44kI+oYs3OJgKTma
cZrws77g/vTjyATYLl1razpET4bQV7hmMV1vfVmLgXPLdKUO/Szl2Mj5fxtbrBUi
ahPfmAgHUODNwLKD3QLAGxhnfaWD2CYKwQVNnSzxV/F5lnCLW4FucIb8UhYj11JQ
YiTLiwkIxLPnS0FgLOybGm1aj8IF8uG1ZXpMD1UXlzKbIq5v+hXLuR+nvumapAdL
/QHbMeOBMccUtUgCvLQ+pm2U/pD1V4j8mB0yeD/ry6ZBYj3S+m/YDellzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1AkKikwE2a5BplF5nHvVjCb6NIMB8GA1UdIwQY
MBaAFB8+O/Vg2gsSYYsCeqymH6x41f9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHo0NzlXRGFDeEpoaXdKNnJLWWZySGpWXzF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81ZGIwYTgtYjhlNy00ZjQ0LWIwM2Et
ZWE1NzMxNjg0OTE3LzEvSHo0NzlXRGFDeEpoaXdKNnJLWWZySGpWXzF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81ZGIwYTgtYjhlNy00ZjQ0LWIwM2EtZWE1NzMxNjg0OTE3
LzEvSHo0NzlXRGFDeEpoaXdKNnJLWWZySGpWXzF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkByYiLhx
wevMqOfqN2iOCIZhevr9QIIH1U2epzP2g4IiuP6bNAuMkrGuQUVwiRqXwKXniKnv
SWvk6UmwZEeGxiRkvFiDRr6pfbtg2B6iy/BkKHlPL996AAtmC5Kl1Kz9BCrDyy94
gJ1f2Nc1YbhElv7EFeCql9Qiy3DSTRY7b6820Q52M0ouLMiJ1Z1hN04SxYAyjKer
eUG1rAfGq2VTMnU20OX2fHM/hkpMrDpv+W7vGJvHD62771czogqmk5AaQUQ79hqS
nqvBunkGz2Jm4yHBMe4Y05b5/dFNRGLsUfpjhO9GvEH7aANmnnuEmSGMPk9lTQSa
pF1xAQ6q1yY82w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:37:45 2026 by rpki-client