Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
File: H5TRopzOJhU7k0-0fC7iFnS7hcs.mft (raw, json)
Hash identifier: q5KdS+kK/tNlRFZ2dmTGk+Tkyn3iRsrAHNVD1lqGPxU=
Subject key identifier: F1:E0:6A:C3:65:C1:80:52:93:70:76:EB:E0:99:F3:BA:4E:AA:35:46
Authority key identifier: 1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB
Certificate issuer: /CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb
Certificate serial: 019D9A75135647207028563FA7697CCBAEF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
Manifest number: 156D
Signing time: Fri 17 Apr 2026 08:00:57 +0000
Manifest this update: Fri 17 Apr 2026 08:00:57 +0000
Manifest next update: Sat 18 Apr 2026 08:00:57 +0000
Files and hashes: 1: H5TRopzOJhU7k0-0fC7iFnS7hcs.crl (hash: IZvcIoSIJmakfnW+IwAqvcn+TBXojZrIC7+B1CO5+KY=)
2: KarebT1i131F1F0b_jruzSe1lHY.roa (hash: UoRIjXeKvZYwlceblJKfWjA69FlQT++n1NlR0R55ggI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:13:56:47:20:70:28:56:3f:a7:69:7c:cb:ae:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb
Validity
Not Before: Apr 17 08:00:57 2026 GMT
Not After : Apr 18 08:00:57 2026 GMT
Subject: CN=f1e06ac365c18052937076ebe099f3ba4eaa3546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:19:5d:82:3e:13:dc:ea:0e:ec:47:ec:b6:5c:
6f:9b:54:98:6d:fb:60:d3:17:9f:44:76:94:dc:92:
6e:d9:f5:5b:8f:35:68:19:92:12:44:0f:b2:9b:b3:
9f:68:12:75:79:59:32:d2:fe:8a:fe:a8:5c:01:2c:
ad:3c:aa:87:de:cd:ba:00:6b:a7:e3:fe:ea:d9:e4:
54:55:4e:70:bd:03:a1:f1:7b:bc:9c:c6:ee:98:92:
8f:2c:9a:b4:ad:e7:56:5d:98:6d:2c:6a:dc:ec:1f:
19:f3:92:2e:b4:46:24:37:c7:9c:3e:13:e3:b1:ff:
b0:68:e3:77:da:3e:d7:c2:fe:b8:74:aa:73:6c:fd:
c7:c5:2d:a7:dc:18:9c:f1:62:97:03:5a:a3:f5:62:
37:99:4b:9a:33:17:26:ab:8e:b3:61:ec:36:20:ee:
07:02:af:79:c2:35:1e:b0:dc:5c:62:b9:7c:3f:a9:
76:01:cc:0b:96:49:40:1e:20:44:41:69:20:9e:da:
92:bd:6f:94:fa:b1:33:33:16:4f:fe:6b:c7:b9:c0:
db:20:1c:3f:df:3d:65:63:d1:7e:75:2b:72:3e:55:
4e:8e:cd:b0:71:dd:df:c1:1f:40:b9:73:6e:98:ee:
74:f2:8d:3c:66:14:de:0b:9b:3c:5e:a8:0d:4b:7f:
1e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E0:6A:C3:65:C1:80:52:93:70:76:EB:E0:99:F3:BA:4E:AA:35:46
X509v3 Authority Key Identifier:
keyid:1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ae:7c:43:40:b5:2c:30:38:2e:ea:63:c6:43:50:da:53:4e:
2d:50:d0:ac:50:a0:2f:cb:43:e2:2c:54:49:76:96:47:4c:21:
be:93:7e:40:91:a1:5e:28:03:72:6f:83:d9:7e:5c:02:03:d4:
f4:7f:59:a4:13:6b:28:36:4f:3a:42:47:8d:df:db:22:37:a1:
44:75:39:2c:ce:a7:77:bb:f7:53:71:cd:fa:50:33:f5:6c:c2:
b7:2d:d3:ed:04:0e:1e:a0:65:36:1b:2d:68:1b:4e:c8:50:40:
ad:da:e5:44:b4:c0:40:6a:44:0e:62:9b:98:10:75:27:b4:61:
c1:15:77:d2:d6:13:d8:dd:4d:47:4d:05:dc:1b:7c:ea:06:fc:
f3:c1:23:56:1d:80:e4:d8:51:0d:95:3a:9c:65:da:80:e1:71:
59:58:66:a2:6a:25:d3:10:77:06:74:77:36:52:39:93:e1:3a:
98:ca:b3:ac:a6:e9:c8:fb:9d:ab:fe:d9:fa:89:a0:a9:a7:bc:
69:40:fc:67:d5:39:76:bf:89:35:62:af:13:d0:9c:d1:35:fe:
0d:d7:5c:ac:8b:83:93:f5:24:a5:f4:98:6a:0e:b5:88:6d:7e:
20:1d:1b:48:be:c4:5e:1e:78:8f:80:a7:a7:2d:46:fe:eb:3d:
e0:95:24:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adRNWRyBwKFY/p2l8y67xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmOTRkMWEyOWNjZTI2MTUzYjkzNGZiNDdjMmVlMjE2NzRi
Yjg1Y2IwHhcNMjYwNDE3MDgwMDU3WhcNMjYwNDE4MDgwMDU3WjAzMTEwLwYDVQQD
EyhmMWUwNmFjMzY1YzE4MDUyOTM3MDc2ZWJlMDk5ZjNiYTRlYWEzNTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxldgj4T3OoO7Efstlxvm1SYbftg
0xefRHaU3JJu2fVbjzVoGZISRA+ym7OfaBJ1eVky0v6K/qhcASytPKqH3s26AGun
4/7q2eRUVU5wvQOh8Xu8nMbumJKPLJq0redWXZhtLGrc7B8Z85IutEYkN8ecPhPj
sf+waON32j7Xwv64dKpzbP3HxS2n3Bic8WKXA1qj9WI3mUuaMxcmq46zYew2IO4H
Aq95wjUesNxcYrl8P6l2AcwLlklAHiBEQWkgntqSvW+U+rEzMxZP/mvHucDbIBw/
3z1lY9F+dStyPlVOjs2wcd3fwR9AuXNumO508o08ZhTeC5s8XqgNS38ewwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHgasNlwYBSk3B26+CZ87pOqjVGMB8GA1UdIwQY
MBaAFB+U0aKcziYVO5NPtHwu4hZ0u4XLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDVUUm9wek9KaFU3azAtMGZDN2lGblM3aGNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8yY2I2M2YtMTYxMy00NTliLTgxMTUt
NTU0Y2FiYjlhZDA1LzEvSDVUUm9wek9KaFU3azAtMGZDN2lGblM3aGNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8yY2I2M2YtMTYxMy00NTliLTgxMTUtNTU0Y2FiYjlhZDA1
LzEvSDVUUm9wek9KaFU3azAtMGZDN2lGblM3aGNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArq58Q0C1
LDA4LupjxkNQ2lNOLVDQrFCgL8tD4ixUSXaWR0whvpN+QJGhXigDcm+D2X5cAgPU
9H9ZpBNrKDZPOkJHjd/bIjehRHU5LM6nd7v3U3HN+lAz9WzCty3T7QQOHqBlNhst
aBtOyFBArdrlRLTAQGpEDmKbmBB1J7RhwRV30tYT2N1NR00F3Bt86gb888EjVh2A
5NhRDZU6nGXagOFxWVhmomol0xB3BnR3NlI5k+E6mMqzrKbpyPudq/7Z+omgqae8
aUD8Z9U5dr+JNWKvE9Cc0TX+DddcrIuDk/UkpfSYag61iG1+IB0bSL7EXh54j4Cn
py1G/us94JUkbQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:16:01 2026 by rpki-client