Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
File: H5TRopzOJhU7k0-0fC7iFnS7hcs.mft (raw, json)
Hash identifier: Pa4f3eLUqwFjXerYxGjdR6RnVCvDH57gdOxA+p+l7No=
Subject key identifier: CD:9F:9B:39:CF:FB:6D:47:5A:3C:48:29:76:12:C7:B4:34:CB:92:BA
Authority key identifier: 1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB
Certificate issuer: /CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb
Certificate serial: 019CACEB5B12F78ADACEFCD5BEA1035F36E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
Manifest number: 14F2
Signing time: Mon 02 Mar 2026 05:00:31 +0000
Manifest this update: Mon 02 Mar 2026 05:00:31 +0000
Manifest next update: Tue 03 Mar 2026 05:00:31 +0000
Files and hashes: 1: H5TRopzOJhU7k0-0fC7iFnS7hcs.crl (hash: zBho+qMbPsTKY0EoXN4Sajfd1YIkWDNGZ3UWAMeYlKE=)
2: KarebT1i131F1F0b_jruzSe1lHY.roa (hash: UoRIjXeKvZYwlceblJKfWjA69FlQT++n1NlR0R55ggI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:5b:12:f7:8a:da:ce:fc:d5:be:a1:03:5f:36:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb
Validity
Not Before: Mar 2 05:00:31 2026 GMT
Not After : Mar 3 05:00:31 2026 GMT
Subject: CN=cd9f9b39cffb6d475a3c48297612c7b434cb92ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:c6:51:e5:91:c8:7f:cd:55:39:d9:ef:53:
12:fe:c5:9b:bf:66:b1:e6:18:5d:80:f2:57:7d:1f:
eb:18:50:58:65:0a:1d:1a:d9:bb:35:4b:74:70:3a:
b5:d9:7e:b3:25:af:f6:55:94:c1:4c:be:2d:1d:cc:
0e:7f:de:a0:aa:2c:ee:58:30:d5:75:a2:02:15:4f:
13:f7:6d:5d:de:96:6f:a2:0d:84:1e:33:33:10:58:
85:30:80:d3:18:7b:b6:25:db:d4:7c:66:0d:8e:22:
0a:37:0e:eb:91:ee:f5:19:d9:ba:43:c9:50:16:60:
80:27:61:93:b0:e9:4d:6c:48:40:4d:14:5b:3c:6f:
e9:a8:dc:7c:1d:22:3c:20:54:f9:5e:14:68:52:5f:
51:db:04:bc:9a:7b:4c:ac:ed:3c:f4:e2:07:70:1b:
d7:ff:98:d0:69:bb:42:b7:52:13:fe:53:63:8d:13:
c7:9e:03:50:46:9c:9a:1c:33:92:74:3e:14:c1:76:
ac:a0:2a:f0:5c:9c:fe:82:04:51:47:e8:20:0f:7a:
aa:32:67:5a:6e:b3:86:68:a4:86:80:6b:a9:a4:e1:
94:54:74:18:d6:95:9a:1e:69:eb:dc:9a:79:eb:b9:
b0:0c:f0:10:1d:07:46:0f:d8:82:44:53:37:65:fb:
4d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9F:9B:39:CF:FB:6D:47:5A:3C:48:29:76:12:C7:B4:34:CB:92:BA
X509v3 Authority Key Identifier:
keyid:1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:88:1b:21:f2:0f:1e:70:77:d6:29:c9:26:af:f1:50:68:97:
36:ad:bf:59:6b:f7:f6:ee:03:b9:76:76:15:18:d3:f9:1d:83:
d5:21:7e:3a:87:4e:fa:90:04:92:87:43:24:50:ce:78:bb:b3:
86:43:12:42:ef:bd:3e:38:fb:c5:ac:b7:0a:c7:f2:e0:09:a9:
34:cb:1d:4f:62:fe:bb:4f:63:be:43:f3:b2:86:6a:a9:10:5e:
6e:58:27:2d:89:d4:2c:fd:4a:d8:2a:f7:2f:12:93:e9:bf:df:
19:6d:63:18:29:e8:1e:13:0e:a9:16:29:a5:b6:3a:be:54:99:
21:a9:3f:24:b1:7e:11:47:63:ad:86:cf:47:5b:cf:b4:46:f2:
8e:22:be:da:29:a4:3a:b9:a6:ae:0c:f6:4c:da:cc:d9:3f:30:
10:7e:f4:a2:58:03:da:ac:dc:20:b7:47:9c:e6:e3:14:cd:49:
8f:70:87:61:a6:36:7e:d7:6b:4e:aa:94:f8:11:39:e4:ba:02:
42:bf:da:f6:1f:58:b5:f6:6a:b8:80:26:ad:bf:68:1b:a8:4f:
9c:75:2f:47:e4:2d:28:aa:7c:d1:a5:94:d2:42:72:54:0d:f4:
c1:06:e9:d8:63:df:bc:32:95:3a:6a:17:af:61:16:28:1f:c1:
79:04:a6:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys61sS94razvzVvqEDXzbkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmOTRkMWEyOWNjZTI2MTUzYjkzNGZiNDdjMmVlMjE2NzRi
Yjg1Y2IwHhcNMjYwMzAyMDUwMDMxWhcNMjYwMzAzMDUwMDMxWjAzMTEwLwYDVQQD
EyhjZDlmOWIzOWNmZmI2ZDQ3NWEzYzQ4Mjk3NjEyYzdiNDM0Y2I5MmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2DGUeWRyH/NVTnZ71MS/sWbv2ax
5hhdgPJXfR/rGFBYZQodGtm7NUt0cDq12X6zJa/2VZTBTL4tHcwOf96gqizuWDDV
daICFU8T921d3pZvog2EHjMzEFiFMIDTGHu2JdvUfGYNjiIKNw7rke71Gdm6Q8lQ
FmCAJ2GTsOlNbEhATRRbPG/pqNx8HSI8IFT5XhRoUl9R2wS8mntMrO089OIHcBvX
/5jQabtCt1IT/lNjjRPHngNQRpyaHDOSdD4UwXasoCrwXJz+ggRRR+ggD3qqMmda
brOGaKSGgGuppOGUVHQY1pWaHmnr3Jp567mwDPAQHQdGD9iCRFM3ZftNTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2fmznP+21HWjxIKXYSx7Q0y5K6MB8GA1UdIwQY
MBaAFB+U0aKcziYVO5NPtHwu4hZ0u4XLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDVUUm9wek9KaFU3azAtMGZDN2lGblM3aGNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8yY2I2M2YtMTYxMy00NTliLTgxMTUt
NTU0Y2FiYjlhZDA1LzEvSDVUUm9wek9KaFU3azAtMGZDN2lGblM3aGNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8yY2I2M2YtMTYxMy00NTliLTgxMTUtNTU0Y2FiYjlhZDA1
LzEvSDVUUm9wek9KaFU3azAtMGZDN2lGblM3aGNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtIgbIfIP
HnB31inJJq/xUGiXNq2/WWv39u4DuXZ2FRjT+R2D1SF+OodO+pAEkodDJFDOeLuz
hkMSQu+9Pjj7xay3Csfy4AmpNMsdT2L+u09jvkPzsoZqqRBeblgnLYnULP1K2Cr3
LxKT6b/fGW1jGCnoHhMOqRYppbY6vlSZIak/JLF+EUdjrYbPR1vPtEbyjiK+2imk
Ormmrgz2TNrM2T8wEH70olgD2qzcILdHnObjFM1Jj3CHYaY2ftdrTqqU+BE55LoC
Qr/a9h9YtfZquIAmrb9oG6hPnHUvR+QtKKp80aWU0kJyVA30wQbp2GPfvDKVOmoX
r2EWKB/BeQSmsQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:21:19 2026 by rpki-client