Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
File: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft (raw, json)
Hash identifier: LDpxp9JBzwmdiuujNqwzvS6tLQhNdwGMTmPX1vpEms8=
Subject key identifier: 3A:C1:0B:14:6F:34:4D:13:D6:2B:E8:15:DD:59:5E:A9:AD:01:1B:B1
Authority key identifier: 87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
Certificate issuer: /CN=87e64170f9d82c51670b9a44f329b20613a8082d
Certificate serial: 019CADC7F85BB6A88009D0E08178034BF719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
Manifest number: 17DB
Signing time: Mon 02 Mar 2026 09:01:29 +0000
Manifest this update: Mon 02 Mar 2026 09:01:29 +0000
Manifest next update: Tue 03 Mar 2026 09:01:29 +0000
Files and hashes: 1: GeANBlc9szsh5X_dzXvwntyH33k.roa (hash: NtbXfKjFVCT4X+tyOUkrVXVVHjr7y8q2zKhpArvxwTk=)
2: XBuxFynVvxh8UiT_tJkPmhYk_oA.roa (hash: +W6/Wvk2I7PSxm+f/mLqDUSHpVa25RlpWluuWkH/7C8=)
3: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl (hash: zpaBZeXBD5rJKzodI+wrYscegHsaK1Rx077wJRSTP6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:f8:5b:b6:a8:80:09:d0:e0:81:78:03:4b:f7:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87e64170f9d82c51670b9a44f329b20613a8082d
Validity
Not Before: Mar 2 09:01:29 2026 GMT
Not After : Mar 3 09:01:29 2026 GMT
Subject: CN=3ac10b146f344d13d62be815dd595ea9ad011bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:a5:a1:07:e8:55:52:e3:30:ff:54:03:50:a3:
6b:3d:85:c0:bf:99:25:50:3d:6e:eb:7b:ba:79:e1:
00:14:9c:0d:a2:02:e2:d6:09:4d:55:af:a7:c8:80:
08:93:ef:b6:0d:99:88:7d:1d:24:50:5d:77:1d:fb:
4c:49:32:63:78:29:32:ca:24:c6:92:09:c6:29:74:
01:0e:61:ff:49:ba:4b:32:21:b4:a0:a5:be:57:de:
63:6e:79:f1:36:5a:a3:75:ca:54:ad:6b:98:c8:9d:
97:1c:f7:82:a8:f7:15:6e:c8:f9:1c:1f:c0:53:fc:
4d:b0:44:a4:08:24:5f:f4:92:49:a0:e3:07:23:d3:
2b:f6:80:ea:f4:95:54:ac:ce:c3:46:91:ca:f8:c7:
95:30:b3:cf:fd:04:27:70:b1:07:a8:b8:79:3e:45:
a8:28:2b:b0:6d:db:07:4b:62:d4:a6:16:c2:55:62:
9d:74:d0:7c:f7:09:7b:86:54:d8:c5:f8:a3:b9:41:
7b:94:d5:ae:77:00:ed:be:c6:e1:e8:07:eb:3e:ef:
ed:68:8a:3f:8f:e4:a8:89:3f:56:ff:60:26:c4:97:
51:9e:e1:2f:34:f5:42:89:e6:be:62:64:34:d4:ea:
09:b7:e5:8e:b6:f3:bd:2f:c0:1d:8a:c6:6f:78:77:
80:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C1:0B:14:6F:34:4D:13:D6:2B:E8:15:DD:59:5E:A9:AD:01:1B:B1
X509v3 Authority Key Identifier:
keyid:87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c0:cb:f3:8c:e0:37:af:6e:dc:4d:98:e1:12:d2:15:99:4f:
cc:87:c5:5a:f3:12:38:b9:1f:9a:49:49:3a:86:49:43:60:7e:
83:e8:74:94:b5:87:f8:7e:98:8b:4d:14:37:2f:e0:be:6f:c8:
f9:31:bc:c6:b8:87:bb:92:45:6b:d6:05:34:39:bc:ca:96:13:
7d:16:f5:81:c7:4e:1e:c8:f4:3d:e6:9a:44:ed:12:fe:d9:bb:
98:39:ab:b6:01:6d:4b:c0:38:4e:3a:a2:62:3c:3b:ee:9e:70:
b5:40:44:8f:c1:cb:fe:af:8f:9a:d5:92:b2:c0:b7:9b:96:ba:
8b:27:46:ed:66:cb:ad:5a:0d:42:0d:70:ec:f3:cf:0b:8b:5b:
8f:38:d1:fe:66:50:e0:98:7f:75:d0:4e:b5:31:80:f7:0e:42:
17:71:d5:d9:66:1c:ef:ea:d4:95:89:79:8f:68:8f:b3:98:04:
8d:70:64:6f:a1:bc:48:f8:88:97:cc:52:ea:f3:66:6c:c1:06:
47:a7:3a:04:db:69:5c:f2:fd:3e:20:c1:07:d0:65:86:c7:4f:
c0:05:45:66:e5:9e:3d:9e:44:bc:8e:f8:82:fa:0e:d1:55:c2:
d3:1a:4b:a2:2c:62:02:db:51:93:2a:7c:5e:0f:be:24:d7:08:
99:68:75:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx/hbtqiACdDggXgDS/cZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZTY0MTcwZjlkODJjNTE2NzBiOWE0NGYzMjliMjA2MTNh
ODA4MmQwHhcNMjYwMzAyMDkwMTI5WhcNMjYwMzAzMDkwMTI5WjAzMTEwLwYDVQQD
EygzYWMxMGIxNDZmMzQ0ZDEzZDYyYmU4MTVkZDU5NWVhOWFkMDExYmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+6WhB+hVUuMw/1QDUKNrPYXAv5kl
UD1u63u6eeEAFJwNogLi1glNVa+nyIAIk++2DZmIfR0kUF13HftMSTJjeCkyyiTG
kgnGKXQBDmH/SbpLMiG0oKW+V95jbnnxNlqjdcpUrWuYyJ2XHPeCqPcVbsj5HB/A
U/xNsESkCCRf9JJJoOMHI9Mr9oDq9JVUrM7DRpHK+MeVMLPP/QQncLEHqLh5PkWo
KCuwbdsHS2LUphbCVWKddNB89wl7hlTYxfijuUF7lNWudwDtvsbh6AfrPu/taIo/
j+SoiT9W/2AmxJdRnuEvNPVCiea+YmQ01OoJt+WOtvO9L8AdisZveHeAvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrBCxRvNE0T1ivoFd1ZXqmtARuxMB8GA1UdIwQY
MBaAFIfmQXD52CxRZwuaRPMpsgYTqAgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaC1aQmNQbllMRkZuQzVwRTh5bXlCaE9vQ0MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9iZWIyOWQtZjBlZS00MDdhLTk3MDIt
NmUxM2NjYmY0OTA2LzEvaC1aQmNQbllMRkZuQzVwRTh5bXlCaE9vQ0MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9iZWIyOWQtZjBlZS00MDdhLTk3MDItNmUxM2NjYmY0OTA2
LzEvaC1aQmNQbllMRkZuQzVwRTh5bXlCaE9vQ0MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT8DL84zg
N69u3E2Y4RLSFZlPzIfFWvMSOLkfmklJOoZJQ2B+g+h0lLWH+H6Yi00UNy/gvm/I
+TG8xriHu5JFa9YFNDm8ypYTfRb1gcdOHsj0PeaaRO0S/tm7mDmrtgFtS8A4Tjqi
Yjw77p5wtUBEj8HL/q+PmtWSssC3m5a6iydG7WbLrVoNQg1w7PPPC4tbjzjR/mZQ
4Jh/ddBOtTGA9w5CF3HV2WYc7+rUlYl5j2iPs5gEjXBkb6G8SPiIl8xS6vNmbMEG
R6c6BNtpXPL9PiDBB9BlhsdPwAVFZuWePZ5EvI74gvoO0VXC0xpLoixiAttRkyp8
Xg++JNcImWh17Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:39:20 2026 by rpki-client