Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
File: H5_9juMrPjV5eNnLmSFszoE3oyQ.mft (raw, json)
Hash identifier: vS5MGqW6kp4pkyr93Btx+ca20ZkdcoBOPIgYTZlM1oo=
Subject key identifier: 14:BC:07:C6:A5:09:24:1E:95:B0:3C:FF:18:65:D2:39:2F:D1:8D:DC
Authority key identifier: 1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
Certificate issuer: /CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Certificate serial: 01A0C2C43DF2B229C50F8A44D94FFB67A173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
Manifest number: 19F8
Signing time: Mon 21 Sep 2026 07:00:35 +0000
Manifest this update: Mon 21 Sep 2026 07:00:35 +0000
Manifest next update: Tue 22 Sep 2026 07:00:35 +0000
Files and hashes: 1: H5_9juMrPjV5eNnLmSFszoE3oyQ.crl (hash: oEL+0MzYEcton3RDEU+1d5finpa9Uum/IvXWiUeJ+rU=)
2: UBCKv_WWXY7T8US1FqPcXNJVmjg.roa (hash: R7LskYqdTLN1UcYPAtGnZ+S1OveE97ZJ0efnayhth/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:3d:f2:b2:29:c5:0f:8a:44:d9:4f:fb:67:a1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Validity
Not Before: Sep 21 07:00:35 2026 GMT
Not After : Sep 22 07:00:35 2026 GMT
Subject: CN=14bc07c6a509241e95b03cff1865d2392fd18ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:c8:00:93:b1:85:10:26:7d:3f:2c:bf:72:
e7:a8:64:a3:c3:57:1f:cd:91:06:c6:99:7e:f6:05:
9c:86:e4:f4:0d:75:8f:74:82:fa:33:fb:81:1a:d1:
40:63:83:5a:cb:8b:8b:82:33:8c:a3:ee:8b:ae:89:
2b:81:4b:57:28:cf:2e:bb:34:1a:b2:d3:f1:e6:9d:
9a:bb:8e:cc:29:50:bc:cb:4b:9f:d6:ea:92:11:33:
e1:a6:b7:d1:fa:e8:d4:30:18:b9:d3:42:b1:ba:a9:
cc:86:97:af:7b:dc:ba:6a:37:e2:f5:a3:08:2a:1b:
70:a9:f5:cf:22:bd:09:9a:05:02:43:9a:0f:e8:5e:
76:10:9e:1a:a9:10:5b:dd:80:7f:96:b8:46:a6:74:
00:d3:dc:ef:2d:1a:5d:17:70:d6:a4:f3:f8:d0:41:
97:cb:2c:ea:cd:8b:20:0e:2b:b6:b9:16:b7:3f:39:
e8:b4:6e:15:8f:e5:d1:a8:9c:bb:a5:8b:45:ac:6a:
eb:0d:7b:56:49:f3:35:ad:ea:4a:73:eb:ef:1b:4b:
65:25:28:31:8d:c1:47:e8:29:3c:9f:fe:20:87:dd:
d5:ee:e2:e9:f7:96:bf:5f:55:07:c1:63:f2:6e:17:
76:b0:d3:14:0d:f4:1f:0d:ac:e7:3c:0c:c1:e1:07:
71:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BC:07:C6:A5:09:24:1E:95:B0:3C:FF:18:65:D2:39:2F:D1:8D:DC
X509v3 Authority Key Identifier:
keyid:1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:63:e8:64:e4:30:14:9b:74:48:51:0b:93:62:b3:45:ba:48:
4b:ad:7b:ef:b3:2a:15:3e:a4:a7:ff:7a:d5:d5:6e:a8:da:d5:
dc:60:ec:29:72:42:51:bf:40:98:ab:65:de:ac:c5:0d:53:5b:
2a:ec:95:63:f4:a4:23:04:c4:f8:6f:6f:7a:2c:e4:c2:0c:0a:
49:d4:45:4e:ee:5f:e0:f8:1e:14:96:ec:32:54:ce:53:63:d2:
0d:be:19:ef:19:80:6a:c0:5f:2f:e7:51:a1:b6:e7:d8:6a:a2:
10:54:91:9f:21:e8:65:36:a1:f5:f2:92:9f:4c:ec:4a:66:78:
0d:9b:5a:76:b2:ed:24:f5:bc:69:5e:ac:94:43:16:42:bf:44:
cb:21:66:9a:c6:4b:cd:08:8f:45:83:d6:06:0f:87:f5:24:ca:
f0:76:85:47:9b:f2:97:57:85:7d:d9:93:3d:d3:ca:f9:86:7e:
e9:d3:15:56:e0:9e:46:14:c0:bd:21:ef:ab:a3:35:c2:7d:48:
e8:db:fa:62:eb:52:34:40:e7:61:b7:0a:fb:70:b1:74:84:a1:
b3:d0:fd:f0:d5:11:7a:a7:d7:40:ab:ad:3d:16:fb:ca:a9:1c:
19:86:2e:df:93:b1:75:33:a5:41:d1:cf:51:44:6f:95:e5:98:
04:75:5d:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCxD3ysinFD4pE2U/7Z6FzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmOWZmZDhlZTMyYjNlMzU3OTc4ZDljYjk5MjE2Y2NlODEz
N2EzMjQwHhcNMjYwOTIxMDcwMDM1WhcNMjYwOTIyMDcwMDM1WjAzMTEwLwYDVQQD
EygxNGJjMDdjNmE1MDkyNDFlOTViMDNjZmYxODY1ZDIzOTJmZDE4ZGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNDIAJOxhRAmfT8sv3LnqGSjw1cf
zZEGxpl+9gWchuT0DXWPdIL6M/uBGtFAY4Nay4uLgjOMo+6LrokrgUtXKM8uuzQa
stPx5p2au47MKVC8y0uf1uqSETPhprfR+ujUMBi500KxuqnMhpeve9y6ajfi9aMI
KhtwqfXPIr0JmgUCQ5oP6F52EJ4aqRBb3YB/lrhGpnQA09zvLRpdF3DWpPP40EGX
yyzqzYsgDiu2uRa3PznotG4Vj+XRqJy7pYtFrGrrDXtWSfM1repKc+vvG0tlJSgx
jcFH6Ck8n/4gh93V7uLp95a/X1UHwWPybhd2sNMUDfQfDaznPAzB4QdxBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBS8B8alCSQelbA8/xhl0jkv0Y3cMB8GA1UdIwQY
MBaAFB+f/Y7jKz41eXjZy5khbM6BN6MkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wM2ZmZDAtN2U4Yi00M2ZlLThlZWUt
YWFlNjM4ZGJiMWMxLzEvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8wM2ZmZDAtN2U4Yi00M2ZlLThlZWUtYWFlNjM4ZGJiMWMx
LzEvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGPoZOQw
FJt0SFELk2KzRbpIS61777MqFT6kp/961dVuqNrV3GDsKXJCUb9AmKtl3qzFDVNb
KuyVY/SkIwTE+G9veizkwgwKSdRFTu5f4PgeFJbsMlTOU2PSDb4Z7xmAasBfL+dR
obbn2GqiEFSRnyHoZTah9fKSn0zsSmZ4DZtadrLtJPW8aV6slEMWQr9EyyFmmsZL
zQiPRYPWBg+H9STK8HaFR5vyl1eFfdmTPdPK+YZ+6dMVVuCeRhTAvSHvq6M1wn1I
6Nv6YutSNEDnYbcK+3CxdIShs9D98NUReqfXQKutPRb7yqkcGYYu35OxdTOlQdHP
UURvleWYBHVdXg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:43:46 2026 by rpki-client