Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
File: hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft (raw, json)
Hash identifier: cqq1fn5SsritIYSMavI7sFSI3rxpoAIXq5WKKlMNDiw=
Subject key identifier: 59:73:1D:86:68:84:34:82:AB:C1:7D:B4:2A:1A:13:4E:6D:1C:58:0A
Authority key identifier: 85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
Certificate issuer: /CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Certificate serial: 019D9886CD4CC5D7D321D4DC2CD6FE205428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
Manifest number: 1577
Signing time: Thu 16 Apr 2026 23:01:04 +0000
Manifest this update: Thu 16 Apr 2026 23:01:04 +0000
Manifest next update: Fri 17 Apr 2026 23:01:04 +0000
Files and hashes: 1: AskFBvRE4tY5tlit_Gy114m2J0A.roa (hash: J6ljvruIBCWnrpJURNZnlPx/uNcMw2gcnFDVYqRVqz0=)
2: hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl (hash: 9sHI3URAYFBU9MuIpTICgmtIhDv/zVddBX8mXzwaBLI=)
3: mMleahkhBsxzGvTuhDg0yXEwF_w.roa (hash: qQecQrTvSIfunD3zEv/rPkBZ+0gt71EWgnmmdmDO4Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:cd:4c:c5:d7:d3:21:d4:dc:2c:d6:fe:20:54:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Validity
Not Before: Apr 16 23:01:04 2026 GMT
Not After : Apr 17 23:01:04 2026 GMT
Subject: CN=59731d8668843482abc17db42a1a134e6d1c580a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:46:c3:f2:dc:c9:fa:7a:8c:3a:b0:e0:59:d9:
fe:77:a4:d9:d0:69:7a:86:ce:94:88:5a:3c:a2:c5:
42:11:1f:d4:88:28:f9:d5:78:b1:3e:94:b6:6e:70:
2a:dd:34:83:58:50:f4:d7:24:58:12:c2:00:6c:ac:
61:4b:b8:7d:06:f1:33:3b:6f:2b:aa:3d:2a:bc:98:
26:e0:65:cd:1e:2b:75:8e:6a:3c:2e:02:43:15:07:
27:f7:c3:8c:e6:cf:41:1c:21:ce:8c:d2:49:d4:18:
19:82:58:03:78:80:c9:8f:04:1b:2f:80:c1:f5:6c:
1a:27:f1:70:c3:25:36:78:f2:c0:25:b9:dd:6d:2a:
63:82:9f:2a:66:cc:ce:8b:68:04:d9:66:fa:df:9a:
b1:11:29:12:86:16:6b:27:6c:d5:49:b8:ca:37:59:
06:a4:d7:b5:81:d8:b5:5a:74:36:e9:f6:e4:db:e4:
16:dd:5e:99:9b:0e:1b:07:85:ec:5e:d0:96:b1:c7:
63:3d:be:2e:a3:c1:da:35:a2:8d:9a:62:94:8a:17:
b8:ec:29:da:d5:17:da:e5:95:0d:0a:3c:a7:4b:3a:
bc:24:2b:6b:4a:d3:de:0d:44:79:aa:1f:98:03:d2:
b5:eb:12:7d:14:03:ed:53:58:aa:c8:3a:c6:21:56:
6e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:73:1D:86:68:84:34:82:AB:C1:7D:B4:2A:1A:13:4E:6D:1C:58:0A
X509v3 Authority Key Identifier:
keyid:85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e1:81:47:c0:f6:f7:82:2a:96:45:86:38:ab:77:12:4d:1c:
6f:61:50:d5:7c:7e:23:6c:cf:56:6b:84:92:1a:ba:9f:7d:b1:
0a:50:ff:7b:04:80:a3:c9:61:36:24:70:fc:41:76:5c:d1:90:
80:05:30:03:7f:bf:40:bc:45:e3:03:85:41:41:97:48:e5:6e:
22:4f:9f:e0:5e:3d:9f:53:78:34:54:2c:38:bb:f0:89:2e:7d:
76:c2:0b:69:53:f0:3d:6b:d3:ca:b4:de:c1:a3:3b:d4:d1:3a:
8a:c2:79:14:b0:49:70:ab:48:f7:8f:d6:6f:aa:cc:22:6b:b3:
07:92:7e:02:27:27:cd:b3:06:91:65:19:a1:68:c6:a8:24:d2:
a8:fe:ab:1a:91:36:5a:35:08:ed:70:28:2e:9d:98:59:73:3f:
12:63:8c:35:3f:1f:38:96:81:ca:fe:00:5c:19:14:0e:f8:ee:
ab:b1:e2:fb:c4:a7:d4:4d:2c:26:31:55:49:a1:62:ce:a9:f5:
76:03:22:f6:22:59:7c:d8:44:7e:76:03:55:25:91:42:ad:24:
f9:ca:c2:fc:19:ba:87:43:1e:4e:ab:fb:3a:50:10:83:79:44:
31:8f:95:ec:ba:5f:2f:8a:0a:51:ea:f9:60:88:e7:f0:83:1e:
42:02:14:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Yhs1MxdfTIdTcLNb+IFQoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MmRjMGQwOTk4YjgxMjZiYWJiOTc3NWFiNDBjMTYyZWY5
NmZhMmQwHhcNMjYwNDE2MjMwMTA0WhcNMjYwNDE3MjMwMTA0WjAzMTEwLwYDVQQD
Eyg1OTczMWQ4NjY4ODQzNDgyYWJjMTdkYjQyYTFhMTM0ZTZkMWM1ODBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEbD8tzJ+nqMOrDgWdn+d6TZ0Gl6
hs6UiFo8osVCER/UiCj51XixPpS2bnAq3TSDWFD01yRYEsIAbKxhS7h9BvEzO28r
qj0qvJgm4GXNHit1jmo8LgJDFQcn98OM5s9BHCHOjNJJ1BgZglgDeIDJjwQbL4DB
9WwaJ/FwwyU2ePLAJbndbSpjgp8qZszOi2gE2Wb635qxESkShhZrJ2zVSbjKN1kG
pNe1gdi1WnQ26fbk2+QW3V6Zmw4bB4XsXtCWscdjPb4uo8HaNaKNmmKUihe47Cna
1Rfa5ZUNCjynSzq8JCtrStPeDUR5qh+YA9K16xJ9FAPtU1iqyDrGIVZuZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlzHYZohDSCq8F9tCoaE05tHFgKMB8GA1UdIwQY
MBaAFIUtwNCZi4EmuruXdatAwWLvlvotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFMzQTBKbUxnU2E2dTVkMXEwREJZdS1XLWkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8xY2Q2Y2EtYzA1Mi00ZTNkLTk3NGQt
ZDMyZTU2ZDc5YjJhLzEvaFMzQTBKbUxnU2E2dTVkMXEwREJZdS1XLWkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8xY2Q2Y2EtYzA1Mi00ZTNkLTk3NGQtZDMyZTU2ZDc5YjJh
LzEvaFMzQTBKbUxnU2E2dTVkMXEwREJZdS1XLWkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXeGBR8D2
94IqlkWGOKt3Ek0cb2FQ1Xx+I2zPVmuEkhq6n32xClD/ewSAo8lhNiRw/EF2XNGQ
gAUwA3+/QLxF4wOFQUGXSOVuIk+f4F49n1N4NFQsOLvwiS59dsILaVPwPWvTyrTe
waM71NE6isJ5FLBJcKtI94/Wb6rMImuzB5J+AicnzbMGkWUZoWjGqCTSqP6rGpE2
WjUI7XAoLp2YWXM/EmOMNT8fOJaByv4AXBkUDvjuq7Hi+8Sn1E0sJjFVSaFizqn1
dgMi9iJZfNhEfnYDVSWRQq0k+crC/Bm6h0MeTqv7OlAQg3lEMY+V7LpfL4oKUer5
YIjn8IMeQgIU/Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:36:52 2026 by rpki-client