Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
File: H5_9juMrPjV5eNnLmSFszoE3oyQ.mft (raw, json)
Hash identifier: YbeT1DOumjVYolHic2DtXEF8qjRpdxOBuvdrHTGWpkc=
Subject key identifier: 03:BA:46:69:E2:09:A9:BC:C1:CF:0B:DA:E1:61:3D:71:3C:5F:27:BC
Authority key identifier: 1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
Certificate issuer: /CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Certificate serial: 019CAC103245F8417159D68025448B5F75D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
Manifest number: 17DA
Signing time: Mon 02 Mar 2026 01:01:08 +0000
Manifest this update: Mon 02 Mar 2026 01:01:08 +0000
Manifest next update: Tue 03 Mar 2026 01:01:08 +0000
Files and hashes: 1: H5_9juMrPjV5eNnLmSFszoE3oyQ.crl (hash: AFSQQYXzUe1gw0IqMVK+PHPXJjP+rp/Km49R76BYo9U=)
2: UBCKv_WWXY7T8US1FqPcXNJVmjg.roa (hash: R7LskYqdTLN1UcYPAtGnZ+S1OveE97ZJ0efnayhth/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:32:45:f8:41:71:59:d6:80:25:44:8b:5f:75:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Validity
Not Before: Mar 2 01:01:08 2026 GMT
Not After : Mar 3 01:01:08 2026 GMT
Subject: CN=03ba4669e209a9bcc1cf0bdae1613d713c5f27bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6c:a7:64:25:e4:f0:db:4b:6d:d0:12:5d:e1:
02:97:b6:3e:1d:38:db:90:5c:b5:12:04:aa:45:81:
04:50:30:f7:d6:f8:ab:63:7d:e4:20:8b:5f:dc:9e:
d9:3e:37:15:dd:c8:57:e5:a5:ab:cf:dc:02:aa:87:
2e:07:ec:b8:50:d6:3e:92:d8:a5:24:b0:37:47:0e:
fc:22:00:37:d4:73:66:40:30:18:1c:9c:5f:34:6c:
77:a1:d8:ee:76:bd:02:73:13:75:c1:f2:11:ad:36:
63:64:9a:d0:8e:5f:26:6b:63:a3:84:87:cf:5a:2c:
97:d4:6b:00:ca:a4:35:03:da:99:91:50:25:7f:bd:
d5:d1:57:47:dc:28:3e:3c:c1:4e:e9:7a:a0:64:cb:
ba:25:c8:31:0f:a0:ab:c7:9e:9d:87:e0:b6:03:b9:
ce:c8:b8:29:f5:a1:b4:2f:fb:77:c6:f0:35:ab:5e:
af:05:37:cd:48:63:3d:17:bb:fd:24:9a:61:cc:ff:
6e:eb:5f:df:70:5a:a3:0d:6b:32:7c:13:b2:96:71:
e1:23:f3:fb:0d:5d:7c:a3:61:4c:81:1e:45:c3:df:
7a:e5:55:42:06:cb:03:6a:26:02:b0:f7:f9:57:b6:
7e:18:34:19:af:25:6b:e3:65:05:03:aa:1a:d4:c4:
b6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BA:46:69:E2:09:A9:BC:C1:CF:0B:DA:E1:61:3D:71:3C:5F:27:BC
X509v3 Authority Key Identifier:
keyid:1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f5:9f:d2:8c:6c:f3:32:22:af:77:39:34:3b:6b:2c:0c:b6:
13:1a:ac:e4:64:ff:f6:77:c9:f0:90:93:d3:e0:e6:55:85:33:
96:6c:9b:25:58:13:38:44:9d:07:98:71:8c:40:c4:9d:c9:5e:
05:80:6c:bb:1b:df:fb:f8:0a:5b:66:8c:8e:5f:a4:cc:f4:24:
30:07:9d:5b:41:08:a3:8f:db:8f:0c:96:0c:26:1e:ea:31:22:
33:85:0a:40:e7:8b:58:cb:c5:b4:13:ac:b6:be:4b:c3:9f:91:
8d:46:b1:b0:48:60:e6:b0:51:b1:37:d5:c8:cd:cc:f2:4a:cf:
e3:44:58:2d:d0:60:35:ce:0c:fb:99:66:54:74:5b:90:a6:65:
79:fb:b4:13:63:2e:1d:35:e2:ab:50:54:8e:93:97:a8:29:84:
56:f9:9f:21:20:f2:50:97:a0:d1:21:51:61:c5:31:94:32:1e:
2b:cb:eb:c7:94:f0:fd:8c:6e:a3:c7:ff:15:04:21:1d:3a:84:
5d:41:a2:68:db:7f:8a:5e:e4:a3:0f:13:c9:74:af:2f:ea:75:
f6:c5:b1:1a:9d:1c:e7:1f:11:fc:df:d8:2f:c3:81:38:22:66:
87:f9:2c:20:53:09:84:ff:bf:7a:94:6e:86:88:2b:c2:47:7f:
12:c5:4d:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysEDJF+EFxWdaAJUSLX3XSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmOWZmZDhlZTMyYjNlMzU3OTc4ZDljYjk5MjE2Y2NlODEz
N2EzMjQwHhcNMjYwMzAyMDEwMTA4WhcNMjYwMzAzMDEwMTA4WjAzMTEwLwYDVQQD
EygwM2JhNDY2OWUyMDlhOWJjYzFjZjBiZGFlMTYxM2Q3MTNjNWYyN2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGynZCXk8NtLbdASXeECl7Y+HTjb
kFy1EgSqRYEEUDD31virY33kIItf3J7ZPjcV3chX5aWrz9wCqocuB+y4UNY+ktil
JLA3Rw78IgA31HNmQDAYHJxfNGx3odjudr0CcxN1wfIRrTZjZJrQjl8ma2OjhIfP
WiyX1GsAyqQ1A9qZkVAlf73V0VdH3Cg+PMFO6XqgZMu6JcgxD6Crx56dh+C2A7nO
yLgp9aG0L/t3xvA1q16vBTfNSGM9F7v9JJphzP9u61/fcFqjDWsyfBOylnHhI/P7
DV18o2FMgR5Fw9965VVCBssDaiYCsPf5V7Z+GDQZryVr42UFA6oa1MS2dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAO6RmniCam8wc8L2uFhPXE8Xye8MB8GA1UdIwQY
MBaAFB+f/Y7jKz41eXjZy5khbM6BN6MkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wM2ZmZDAtN2U4Yi00M2ZlLThlZWUt
YWFlNjM4ZGJiMWMxLzEvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8wM2ZmZDAtN2U4Yi00M2ZlLThlZWUtYWFlNjM4ZGJiMWMx
LzEvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmvWf0oxs
8zIir3c5NDtrLAy2Exqs5GT/9nfJ8JCT0+DmVYUzlmybJVgTOESdB5hxjEDEncle
BYBsuxvf+/gKW2aMjl+kzPQkMAedW0EIo4/bjwyWDCYe6jEiM4UKQOeLWMvFtBOs
tr5Lw5+RjUaxsEhg5rBRsTfVyM3M8krP40RYLdBgNc4M+5lmVHRbkKZlefu0E2Mu
HTXiq1BUjpOXqCmEVvmfISDyUJeg0SFRYcUxlDIeK8vrx5Tw/Yxuo8f/FQQhHTqE
XUGiaNt/il7kow8TyXSvL+p19sWxGp0c5x8R/N/YL8OBOCJmh/ksIFMJhP+/epRu
hogrwkd/EsVN2A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:41 2026 by rpki-client