Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
File: H5_9juMrPjV5eNnLmSFszoE3oyQ.mft (raw, json)
Hash identifier: 5ACkso1BSlC5eR6yjX5xfWFXynOMYxdezuOc1feLOkw=
Subject key identifier: 9B:44:7C:42:73:19:0F:D6:21:DF:94:6F:FE:DC:33:55:AF:88:84:6F
Authority key identifier: 1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
Certificate issuer: /CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Certificate serial: 019D9998CB1A48FD910C46765E1E3864BFE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
Manifest number: 1855
Signing time: Fri 17 Apr 2026 04:00:20 +0000
Manifest this update: Fri 17 Apr 2026 04:00:20 +0000
Manifest next update: Sat 18 Apr 2026 04:00:20 +0000
Files and hashes: 1: H5_9juMrPjV5eNnLmSFszoE3oyQ.crl (hash: msL9uxMlvhav0c8HJmMo5bhOnArGfjmmIMxZGsQZZPM=)
2: UBCKv_WWXY7T8US1FqPcXNJVmjg.roa (hash: R7LskYqdTLN1UcYPAtGnZ+S1OveE97ZJ0efnayhth/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:cb:1a:48:fd:91:0c:46:76:5e:1e:38:64:bf:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Validity
Not Before: Apr 17 04:00:20 2026 GMT
Not After : Apr 18 04:00:20 2026 GMT
Subject: CN=9b447c4273190fd621df946ffedc3355af88846f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:f2:d1:ac:9b:1b:cb:1b:cd:fd:29:fb:dc:
d5:04:3e:7e:3a:d2:12:75:76:65:d6:dd:ad:e6:96:
b4:c9:fd:dc:fe:44:65:80:29:3a:fc:77:2e:de:b1:
0d:46:ac:55:40:7c:5c:d6:38:5b:6c:f0:c2:e8:f8:
3d:f5:be:07:c5:ef:67:7b:a1:16:04:49:3e:d9:2f:
b1:62:90:7c:32:d1:46:8c:9a:7a:d5:ae:a9:f5:1a:
18:4b:ec:ec:8d:e5:97:8a:cf:df:a7:1a:e8:e8:50:
17:ea:36:78:39:3b:c2:03:2a:ea:7b:7a:e0:4f:6a:
86:e1:04:f0:fd:65:32:c3:89:e9:e0:70:13:d8:3a:
97:44:5e:44:81:87:79:47:34:41:e8:8d:e3:41:64:
6b:08:ba:73:a8:5f:36:0d:ab:8e:c1:87:50:18:7c:
aa:3c:94:fa:8a:22:8b:38:c6:82:bf:e0:07:41:ea:
c4:99:5a:1c:59:b0:87:71:f7:5c:75:41:0a:af:f6:
76:fe:25:c0:57:a1:70:cd:35:88:11:d2:6f:c8:95:
8c:8c:43:cd:27:46:2f:fa:23:0a:39:0f:74:c5:43:
42:ec:e5:a6:c7:66:96:80:78:1e:62:33:19:22:6c:
5b:83:1d:b3:0d:42:93:cd:6f:c3:3b:dd:26:0e:ee:
40:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:44:7C:42:73:19:0F:D6:21:DF:94:6F:FE:DC:33:55:AF:88:84:6F
X509v3 Authority Key Identifier:
keyid:1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:60:36:44:46:77:b6:bb:10:a2:31:04:42:db:39:01:d7:bb:
59:69:95:6c:c7:5f:21:4b:f3:6e:13:97:f0:30:c2:ff:43:94:
c2:09:0a:61:05:bc:10:ea:68:13:57:ab:cb:06:ec:eb:85:2c:
83:5a:10:74:a9:77:c6:56:76:34:a2:aa:ec:f0:b7:f8:3b:0e:
52:4a:b4:72:96:45:53:10:5b:13:43:ad:23:7a:bc:3c:dc:91:
c2:da:8c:e1:cd:31:47:b0:5b:c8:90:9a:fd:ed:5e:d1:23:cb:
1a:57:0c:af:f6:aa:0f:e2:d5:bf:df:1d:86:f8:f6:0d:e1:8b:
46:1b:5c:21:8b:ff:50:65:83:8a:ba:e0:2a:be:0b:dc:f4:92:
95:8c:9e:4f:0c:57:61:11:ba:36:bf:c9:e6:e6:bc:c7:e8:9d:
22:66:72:71:7e:34:92:39:fc:7a:84:77:51:a8:e3:a3:73:0d:
6c:b2:ab:62:f8:af:aa:64:5b:58:e4:34:59:a1:93:5c:e0:2c:
ba:48:1b:41:da:92:94:5f:29:64:df:06:f2:df:38:75:fd:72:
ef:18:de:42:65:ac:95:25:d7:3d:5c:06:ee:49:35:8f:ab:69:
07:01:0c:8d:25:c8:05:27:ed:a0:ed:06:90:2c:95:12:93:65:
31:e4:fd:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmMsaSP2RDEZ2Xh44ZL/mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmOWZmZDhlZTMyYjNlMzU3OTc4ZDljYjk5MjE2Y2NlODEz
N2EzMjQwHhcNMjYwNDE3MDQwMDIwWhcNMjYwNDE4MDQwMDIwWjAzMTEwLwYDVQQD
Eyg5YjQ0N2M0MjczMTkwZmQ2MjFkZjk0NmZmZWRjMzM1NWFmODg4NDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupby0aybG8sbzf0p+9zVBD5+OtIS
dXZl1t2t5pa0yf3c/kRlgCk6/Hcu3rENRqxVQHxc1jhbbPDC6Pg99b4Hxe9ne6EW
BEk+2S+xYpB8MtFGjJp61a6p9RoYS+zsjeWXis/fpxro6FAX6jZ4OTvCAyrqe3rg
T2qG4QTw/WUyw4np4HAT2DqXRF5EgYd5RzRB6I3jQWRrCLpzqF82DauOwYdQGHyq
PJT6iiKLOMaCv+AHQerEmVocWbCHcfdcdUEKr/Z2/iXAV6FwzTWIEdJvyJWMjEPN
J0Yv+iMKOQ90xUNC7OWmx2aWgHgeYjMZImxbgx2zDUKTzW/DO90mDu5AgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtEfEJzGQ/WId+Ub/7cM1WviIRvMB8GA1UdIwQY
MBaAFB+f/Y7jKz41eXjZy5khbM6BN6MkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wM2ZmZDAtN2U4Yi00M2ZlLThlZWUt
YWFlNjM4ZGJiMWMxLzEvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8wM2ZmZDAtN2U4Yi00M2ZlLThlZWUtYWFlNjM4ZGJiMWMx
LzEvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjGA2REZ3
trsQojEEQts5Ade7WWmVbMdfIUvzbhOX8DDC/0OUwgkKYQW8EOpoE1erywbs64Us
g1oQdKl3xlZ2NKKq7PC3+DsOUkq0cpZFUxBbE0OtI3q8PNyRwtqM4c0xR7BbyJCa
/e1e0SPLGlcMr/aqD+LVv98dhvj2DeGLRhtcIYv/UGWDirrgKr4L3PSSlYyeTwxX
YRG6Nr/J5ua8x+idImZycX40kjn8eoR3Uajjo3MNbLKrYvivqmRbWOQ0WaGTXOAs
ukgbQdqSlF8pZN8G8t84df1y7xjeQmWslSXXPVwG7kk1j6tpBwEMjSXIBSftoO0G
kCyVEpNlMeT9cw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:57:01 2026 by rpki-client