Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
File: H1BLG7cWjmgLGVQvj3MDhhRMil8.mft (raw, json)
Hash identifier: HurTMwJtyMOyQcFhmYAoHznIiu+oVF0zqny6PwO394o=
Subject key identifier: F5:62:0F:1D:6E:B2:12:3B:AF:CE:F4:0A:80:32:9B:55:78:9C:92:67
Authority key identifier: 1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F
Certificate issuer: /CN=1f504b1bb7168e680b19542f8f730386144c8a5f
Certificate serial: 019D99CFCBFD55EDC2053D311C1448E45F24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 05:00:25 +0000
Manifest this update: Fri 17 Apr 2026 05:00:25 +0000
Manifest next update: Sat 18 Apr 2026 05:00:25 +0000
Files and hashes: 1: H1BLG7cWjmgLGVQvj3MDhhRMil8.crl (hash: tSEtVM52zlaGqLewybLaq8GhRSlaw1kI3W77EL90EzY=)
2: gzR8azEl4wcKru5enQWHMrN0j30.roa (hash: bAZA0ZtvqfxWtuunPZUhJQgUIWIvjRpShcnV9aNKnnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:cb:fd:55:ed:c2:05:3d:31:1c:14:48:e4:5f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f504b1bb7168e680b19542f8f730386144c8a5f
Validity
Not Before: Apr 17 05:00:25 2026 GMT
Not After : Apr 18 05:00:25 2026 GMT
Subject: CN=f5620f1d6eb2123bafcef40a80329b55789c9267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fc:dd:e4:f0:40:7f:42:36:3c:3e:4e:00:0e:
48:77:5c:2d:21:ed:ed:53:c0:cd:a1:2f:3d:fb:72:
7f:e8:d0:1e:75:f1:3c:9a:43:e1:17:3e:2a:59:65:
fa:5d:a1:34:aa:e4:7f:87:21:21:e7:35:bb:ee:ae:
e7:27:5d:78:2b:be:80:ff:08:d1:5d:a4:8a:19:c6:
a0:ac:7f:6b:2f:19:11:34:fa:eb:97:58:7a:de:8c:
93:54:85:df:5d:b0:ab:aa:9a:7a:5d:ae:30:6b:42:
bf:b4:ee:a7:45:54:7f:f4:b1:c9:9c:72:49:f7:e7:
5a:da:95:a6:55:02:d2:ca:14:38:e2:9b:3c:7a:3b:
b4:a0:c9:60:03:9f:12:4a:f6:89:ff:1a:34:7b:f5:
5a:af:bb:1b:5c:b9:ed:2a:25:26:0b:00:8b:00:b3:
ed:40:f9:be:9e:55:28:fd:3d:ae:62:47:89:7e:c5:
cb:d2:ec:93:3f:58:ee:99:9b:03:23:63:2c:59:3f:
22:d7:fa:e6:6e:11:e4:c5:62:41:32:04:72:08:6e:
8d:11:b6:74:28:f4:1d:54:8b:b3:52:20:05:6f:75:
ff:8a:4f:23:42:ac:88:95:6a:b1:0c:4b:d4:47:2a:
e6:64:09:62:bb:e5:3e:73:6f:c3:88:09:60:65:44:
71:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:62:0F:1D:6E:B2:12:3B:AF:CE:F4:0A:80:32:9B:55:78:9C:92:67
X509v3 Authority Key Identifier:
keyid:1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:19:30:cf:8f:34:3c:7d:19:ca:15:f6:05:0e:01:4e:0c:51:
bb:fc:8c:6c:1a:9a:97:01:c1:27:25:6e:c6:2c:d8:32:0b:ca:
71:8f:44:1e:63:f1:b6:31:23:b2:63:79:da:69:aa:d9:55:f5:
98:27:1f:a6:03:66:91:8a:29:6e:f6:67:42:22:af:8c:6b:f5:
d1:f8:9d:8c:0e:26:b7:37:37:35:06:91:f8:5d:06:de:15:40:
a2:b1:33:5a:df:fc:02:49:07:9e:da:8d:87:95:8f:39:c6:60:
4d:3c:de:b5:44:ce:40:d8:fd:31:60:f0:6e:f4:ef:09:90:53:
13:9e:b5:70:5a:0b:67:2b:0a:58:a9:75:4b:44:7a:87:66:be:
bc:f8:62:2d:44:7f:d8:87:67:ba:df:09:7a:f0:58:ca:d5:cf:
5b:d9:27:77:b5:34:a7:fe:a6:21:ce:26:9d:a6:f0:54:aa:4e:
2f:a9:85:1d:b9:20:af:f6:f6:f5:fd:12:5d:88:28:f3:1f:b5:
2d:ee:86:98:d5:59:c4:dc:65:d0:1d:06:9c:b6:7b:10:df:71:
14:66:47:30:2e:29:49:3d:e4:0c:e4:fb:a8:92:fe:46:8c:c8:
27:e3:8f:11:4e:87:f0:d2:d4:63:1f:7d:3d:a3:19:ee:4c:2a:
45:7b:c6:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Zz8v9Ve3CBT0xHBRI5F8kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNTA0YjFiYjcxNjhlNjgwYjE5NTQyZjhmNzMwMzg2MTQ0
YzhhNWYwHhcNMjYwNDE3MDUwMDI1WhcNMjYwNDE4MDUwMDI1WjAzMTEwLwYDVQQD
EyhmNTYyMGYxZDZlYjIxMjNiYWZjZWY0MGE4MDMyOWI1NTc4OWM5MjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvzd5PBAf0I2PD5OAA5Id1wtIe3t
U8DNoS89+3J/6NAedfE8mkPhFz4qWWX6XaE0quR/hyEh5zW77q7nJ114K76A/wjR
XaSKGcagrH9rLxkRNPrrl1h63oyTVIXfXbCrqpp6Xa4wa0K/tO6nRVR/9LHJnHJJ
9+da2pWmVQLSyhQ44ps8eju0oMlgA58SSvaJ/xo0e/Var7sbXLntKiUmCwCLALPt
QPm+nlUo/T2uYkeJfsXL0uyTP1jumZsDI2MsWT8i1/rmbhHkxWJBMgRyCG6NEbZ0
KPQdVIuzUiAFb3X/ik8jQqyIlWqxDEvURyrmZAliu+U+c2/DiAlgZURxWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPViDx1ushI7r870CoAym1V4nJJnMB8GA1UdIwQY
MBaAFB9QSxu3Fo5oCxlUL49zA4YUTIpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDFCTEc3Y1dqbWdMR1ZRdmozTURoaFJNaWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8zYzc0YTgtOWY3Mi00YzA2LWI1MTYt
MzViYjYwZWEwN2MxLzEvSDFCTEc3Y1dqbWdMR1ZRdmozTURoaFJNaWw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8zYzc0YTgtOWY3Mi00YzA2LWI1MTYtMzViYjYwZWEwN2Mx
LzEvSDFCTEc3Y1dqbWdMR1ZRdmozTURoaFJNaWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBkwz480
PH0ZyhX2BQ4BTgxRu/yMbBqalwHBJyVuxizYMgvKcY9EHmPxtjEjsmN52mmq2VX1
mCcfpgNmkYopbvZnQiKvjGv10fidjA4mtzc3NQaR+F0G3hVAorEzWt/8AkkHntqN
h5WPOcZgTTzetUTOQNj9MWDwbvTvCZBTE561cFoLZysKWKl1S0R6h2a+vPhiLUR/
2Idnut8JevBYytXPW9knd7U0p/6mIc4mnabwVKpOL6mFHbkgr/b29f0SXYgo8x+1
Le6GmNVZxNxl0B0GnLZ7EN9xFGZHMC4pST3kDOT7qJL+RozIJ+OPEU6H8NLUYx99
PaMZ7kwqRXvG/g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:00:14 2026 by rpki-client