Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
File: H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft (raw, json)
Hash identifier: kRjGVbgEsyaVt15RgcbFYNb9qw5GosqhLGgowOVIsoU=
Subject key identifier: 2E:05:7C:01:26:9A:81:01:FC:78:63:A1:30:E9:79:18:61:BB:61:71
Authority key identifier: 1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
Certificate issuer: /CN=1f97599f63d787c65b2ef9ff70dd636527404466
Certificate serial: 019D9998E998808AC0128F2057C478608CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
Manifest number: 0FCB
Signing time: Fri 17 Apr 2026 04:00:28 +0000
Manifest this update: Fri 17 Apr 2026 04:00:28 +0000
Manifest next update: Sat 18 Apr 2026 04:00:28 +0000
Files and hashes: 1: H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl (hash: Gjad+WXHE09x9MBJamqMRWojYZNQ9fI7E7bzI8TMsaU=)
2: ex-egV2q8xIsoN87xmhf0Beqsx8.roa (hash: yMk8zHkPeRJ7LF6AhIih+Hrdt/inz7ExGAHQpY4Q1X0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:e9:98:80:8a:c0:12:8f:20:57:c4:78:60:8c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f97599f63d787c65b2ef9ff70dd636527404466
Validity
Not Before: Apr 17 04:00:28 2026 GMT
Not After : Apr 18 04:00:28 2026 GMT
Subject: CN=2e057c01269a8101fc7863a130e9791861bb6171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7c:73:0c:76:ed:a6:ff:6f:88:5e:7c:f0:5a:
4d:4d:e5:ba:cf:cd:c9:d2:92:ba:8f:45:f6:4e:93:
17:25:e7:e0:32:5a:93:07:45:f4:45:49:f6:db:d6:
7f:5e:ca:0f:b3:39:dd:78:ee:b4:c0:3e:c0:63:18:
bc:d1:c2:8f:af:ad:d5:ac:a7:be:da:3b:bf:70:29:
a3:1b:64:5c:7b:0d:8f:35:3a:b4:ab:1f:3a:31:5b:
29:6f:b2:b7:90:71:00:d0:72:80:f0:76:46:b8:51:
d5:21:e2:3e:eb:c6:8f:00:6e:b5:85:1d:ae:cb:d3:
56:53:e4:33:17:48:c6:5d:c8:7f:3c:d0:50:e7:ff:
c7:70:f4:5a:b2:8f:6b:8c:30:e9:57:8e:5f:20:9d:
b6:9e:56:28:da:55:d9:b7:17:9c:0a:45:60:1e:2d:
b3:a1:8e:d9:1b:09:f2:9c:64:7f:4a:fd:52:22:93:
1e:2e:03:2c:bd:ac:c7:a7:19:75:83:24:99:0a:0f:
0d:65:0d:a3:55:64:60:02:13:3c:44:15:10:e6:d9:
e7:f5:90:d9:36:3a:87:30:06:b5:54:4f:8d:d6:a6:
97:1d:2e:16:2a:49:f2:8c:35:00:55:a1:71:7d:86:
4f:ae:d8:7a:ea:2b:f9:72:18:42:65:ea:6e:1a:a8:
cd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:05:7C:01:26:9A:81:01:FC:78:63:A1:30:E9:79:18:61:BB:61:71
X509v3 Authority Key Identifier:
keyid:1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:87:fa:a0:17:46:0e:1c:9d:8e:3f:9b:87:fe:c3:ad:f0:e1:
0b:4d:3a:2a:96:6e:1e:ac:96:89:db:ea:68:a4:6d:18:07:ae:
1e:6e:58:25:c7:90:fc:03:a2:b3:5a:f4:a5:93:26:a1:e9:5c:
59:5b:14:d4:f5:21:7c:aa:6e:de:c9:be:75:55:41:f8:56:04:
cf:65:6a:d4:46:e2:38:85:9b:66:f3:83:f5:34:00:62:fc:c3:
62:7b:e1:b0:a2:bd:39:11:34:58:a8:63:37:f7:d1:b5:c6:08:
17:ee:f2:0b:fe:e5:4c:18:a4:b2:50:13:b7:5a:be:de:a9:ef:
58:f3:17:c1:25:b6:3c:1e:02:3d:4f:5e:14:f8:0f:cc:87:1c:
16:e2:ba:08:88:82:bb:12:c7:ff:c8:dc:56:ba:2d:2b:ab:64:
f1:0f:36:82:06:a2:ba:47:c6:06:8e:3e:32:c6:23:49:73:4f:
9c:02:dd:e4:82:bb:7a:f1:9f:06:23:c4:58:30:e1:2d:c7:5e:
e6:cc:fe:d6:a0:86:ff:a3:a8:3d:4d:0a:6e:e4:77:0b:e5:b8:
5d:c7:67:67:f4:12:65:2b:b0:eb:d0:34:22:1d:5d:d9:3c:bd:
29:d9:d2:dd:38:8f:d9:83:49:29:ab:c9:8b:de:04:70:47:38:
26:17:38:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmOmYgIrAEo8gV8R4YIzhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmOTc1OTlmNjNkNzg3YzY1YjJlZjlmZjcwZGQ2MzY1Mjc0
MDQ0NjYwHhcNMjYwNDE3MDQwMDI4WhcNMjYwNDE4MDQwMDI4WjAzMTEwLwYDVQQD
EygyZTA1N2MwMTI2OWE4MTAxZmM3ODYzYTEzMGU5NzkxODYxYmI2MTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3xzDHbtpv9viF588FpNTeW6z83J
0pK6j0X2TpMXJefgMlqTB0X0RUn229Z/XsoPszndeO60wD7AYxi80cKPr63VrKe+
2ju/cCmjG2Rcew2PNTq0qx86MVspb7K3kHEA0HKA8HZGuFHVIeI+68aPAG61hR2u
y9NWU+QzF0jGXch/PNBQ5//HcPRaso9rjDDpV45fIJ22nlYo2lXZtxecCkVgHi2z
oY7ZGwnynGR/Sv1SIpMeLgMsvazHpxl1gySZCg8NZQ2jVWRgAhM8RBUQ5tnn9ZDZ
NjqHMAa1VE+N1qaXHS4WKknyjDUAVaFxfYZPrth66iv5chhCZepuGqjNpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4FfAEmmoEB/HhjoTDpeRhhu2FxMB8GA1UdIwQY
MBaAFB+XWZ9j14fGWy75/3DdY2UnQERmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDVkWm4yUFhoOFpiTHZuX2NOMWpaU2RBUkdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMWE5NWItNGJlOS00OTdlLWJkZjct
N2VjZTdkMDczNjUxLzEvSDVkWm4yUFhoOFpiTHZuX2NOMWpaU2RBUkdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hMWE5NWItNGJlOS00OTdlLWJkZjctN2VjZTdkMDczNjUx
LzEvSDVkWm4yUFhoOFpiTHZuX2NOMWpaU2RBUkdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4f6oBdG
Dhydjj+bh/7DrfDhC006KpZuHqyWidvqaKRtGAeuHm5YJceQ/AOis1r0pZMmoelc
WVsU1PUhfKpu3sm+dVVB+FYEz2Vq1EbiOIWbZvOD9TQAYvzDYnvhsKK9ORE0WKhj
N/fRtcYIF+7yC/7lTBikslATt1q+3qnvWPMXwSW2PB4CPU9eFPgPzIccFuK6CIiC
uxLH/8jcVrotK6tk8Q82ggaiukfGBo4+MsYjSXNPnALd5IK7evGfBiPEWDDhLcde
5sz+1qCG/6OoPU0KbuR3C+W4XcdnZ/QSZSuw69A0Ih1d2Ty9KdnS3TiP2YNJKavJ
i94EcEc4Jhc4Ag==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:43:43 2026 by rpki-client