Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
File: h9f30vwTSJFMAGtVq5Py0uM5DeY.mft (raw, json)
Hash identifier: dPbt9zdZ+JE4XnY9lQVFO8s0adDhPfVKMJK3LJqRCzc=
Subject key identifier: 33:9F:81:4A:68:FC:C8:B9:7B:AC:B7:49:50:CB:CA:91:37:F3:3A:F1
Authority key identifier: 87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
Certificate issuer: /CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Certificate serial: 019CAB34B66F3B1F36D6A08FC80CA1FEE7ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
Manifest number: 15AF
Signing time: Sun 01 Mar 2026 21:01:24 +0000
Manifest this update: Sun 01 Mar 2026 21:01:24 +0000
Manifest next update: Mon 02 Mar 2026 21:01:24 +0000
Files and hashes: 1: 4cy1aqEYp9F7V13taLUgvqJl6bk.roa (hash: y4AZgnc6ll/dTvazfgvRlzMdkBW1msJHbGpj1pvELdM=)
2: h9f30vwTSJFMAGtVq5Py0uM5DeY.crl (hash: 1102cPTKaTI19E/F+Ra728CkXJQH5f5E3FgYfimYvPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:b6:6f:3b:1f:36:d6:a0:8f:c8:0c:a1:fe:e7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Validity
Not Before: Mar 1 21:01:24 2026 GMT
Not After : Mar 2 21:01:24 2026 GMT
Subject: CN=339f814a68fcc8b97bacb74950cbca9137f33af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f3:31:c0:aa:ad:45:02:08:b8:a2:a5:e5:af:
94:65:2a:39:67:68:8d:e2:6c:45:39:0f:9b:7c:b8:
3b:eb:a7:4e:7b:ec:33:ca:76:82:05:e5:df:58:00:
7b:41:a0:8b:68:e6:f0:63:88:36:36:a3:55:19:65:
e4:3a:ca:16:79:ac:c0:03:37:7b:8d:ff:a4:82:06:
e7:15:a9:bd:c6:ab:ce:01:e4:a3:95:7f:bc:d4:e6:
09:e7:ae:de:3f:3a:42:de:8e:c0:41:19:cf:d1:c3:
e8:b4:68:ea:e4:3a:a1:d6:48:59:11:6e:cc:f1:6f:
c7:04:f4:7f:50:a7:50:b8:21:9d:e4:ac:f9:0e:d0:
f1:39:6a:03:5b:e2:7f:5d:15:7a:78:57:d2:2e:08:
28:38:5d:5e:e2:44:6d:69:18:27:72:5f:a8:a8:ba:
89:b1:8f:0d:68:fa:5f:35:e5:b2:9f:22:23:4e:ff:
c0:1b:b8:61:03:24:6a:21:49:a0:e2:96:7c:78:da:
28:df:d8:f0:f1:a7:d3:aa:e4:e4:22:09:6f:de:eb:
ab:05:c7:6d:aa:ab:e4:ca:16:43:e0:04:05:ca:57:
15:a5:73:e5:6d:3b:b8:66:f2:bd:1b:12:68:10:c4:
bf:74:53:42:72:3d:5b:25:bc:0e:7c:34:2a:89:7b:
e9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9F:81:4A:68:FC:C8:B9:7B:AC:B7:49:50:CB:CA:91:37:F3:3A:F1
X509v3 Authority Key Identifier:
keyid:87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:db:db:6d:1d:7e:84:1e:5a:59:b8:73:ac:2f:04:08:30:97:
83:ea:95:30:5c:8b:52:9b:05:e4:ec:67:2a:8c:7b:61:ad:f3:
70:39:4f:75:04:17:d9:3a:b9:c2:af:8f:06:4f:87:13:d8:e7:
53:80:85:24:4d:31:89:ec:b0:c2:bc:8d:31:fc:13:03:b6:54:
02:7b:da:84:42:ab:ea:16:d0:bc:20:74:16:3e:d6:24:5a:51:
45:41:b9:aa:26:d4:ab:b4:d1:5a:2a:3d:49:3b:09:7d:86:97:
f1:fd:02:61:4d:3e:c5:ba:a9:32:03:51:eb:5e:2e:eb:6a:e9:
12:96:68:a1:57:63:24:be:cf:34:1b:b2:70:a9:4c:05:75:2b:
08:9c:9b:2c:4d:44:05:c1:99:98:bc:52:ec:33:95:1d:bc:e6:
2f:fa:f4:2f:3b:65:20:2e:ba:b2:11:6b:38:e5:f2:3c:a2:cc:
50:db:d8:84:29:74:77:b1:3d:fe:95:17:93:4a:0a:be:cb:35:
f8:ce:b5:02:a1:a7:d7:c5:47:24:58:37:fe:11:6a:e2:24:d7:
1b:10:86:86:33:11:a1:59:3b:35:b1:b9:38:67:fa:94:e2:96:
04:7c:ac:b5:a6:9a:b1:e3:27:be:d2:88:cc:2a:d4:aa:ef:7c:
8b:32:cf:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNLZvOx821qCPyAyh/uftMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZDdmN2QyZmMxMzQ4OTE0YzAwNmI1NWFiOTNmMmQyZTMz
OTBkZTYwHhcNMjYwMzAxMjEwMTI0WhcNMjYwMzAyMjEwMTI0WjAzMTEwLwYDVQQD
EygzMzlmODE0YTY4ZmNjOGI5N2JhY2I3NDk1MGNiY2E5MTM3ZjMzYWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvMxwKqtRQIIuKKl5a+UZSo5Z2iN
4mxFOQ+bfLg766dOe+wzynaCBeXfWAB7QaCLaObwY4g2NqNVGWXkOsoWeazAAzd7
jf+kggbnFam9xqvOAeSjlX+81OYJ567ePzpC3o7AQRnP0cPotGjq5Dqh1khZEW7M
8W/HBPR/UKdQuCGd5Kz5DtDxOWoDW+J/XRV6eFfSLggoOF1e4kRtaRgncl+oqLqJ
sY8NaPpfNeWynyIjTv/AG7hhAyRqIUmg4pZ8eNoo39jw8afTquTkIglv3uurBcdt
qqvkyhZD4AQFylcVpXPlbTu4ZvK9GxJoEMS/dFNCcj1bJbwOfDQqiXvp7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOfgUpo/Mi5e6y3SVDLypE38zrxMB8GA1UdIwQY
MBaAFIfX99L8E0iRTABrVauT8tLjOQ3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNjU5MmUtYjFjMS00MDdjLThmMDQt
MzAxZGYyNzIxNTJlLzEvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9hNjU5MmUtYjFjMS00MDdjLThmMDQtMzAxZGYyNzIxNTJl
LzEvaDlmMzB2d1RTSkZNQUd0VnE1UHkwdU01RGVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKNvbbR1+
hB5aWbhzrC8ECDCXg+qVMFyLUpsF5OxnKox7Ya3zcDlPdQQX2Tq5wq+PBk+HE9jn
U4CFJE0xieywwryNMfwTA7ZUAnvahEKr6hbQvCB0Fj7WJFpRRUG5qibUq7TRWio9
STsJfYaX8f0CYU0+xbqpMgNR614u62rpEpZooVdjJL7PNBuycKlMBXUrCJybLE1E
BcGZmLxS7DOVHbzmL/r0LztlIC66shFrOOXyPKLMUNvYhCl0d7E9/pUXk0oKvss1
+M61AqGn18VHJFg3/hFq4iTXGxCGhjMRoVk7NbG5OGf6lOKWBHystaaaseMnvtKI
zCrUqu98izLPMQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:14 2026 by rpki-client