Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
File: _H1Kt3YauiTzPVtt-8J8q3OLte4.mft (raw, json)
Hash identifier: nXcOF6i4Uz5536RLddTC7h7RCNyeN3SzIuZaWWw4dus=
Subject key identifier: 85:D1:7B:29:EC:9C:48:B6:DF:E0:3C:0C:BF:DA:18:B6:FB:52:A7:54
Authority key identifier: FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
Certificate issuer: /CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Certificate serial: 019CA9B3E9628870C04A47A0A0B2A0FD9616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
Manifest number: 14E4
Signing time: Sun 01 Mar 2026 14:01:06 +0000
Manifest this update: Sun 01 Mar 2026 14:01:06 +0000
Manifest next update: Mon 02 Mar 2026 14:01:06 +0000
Files and hashes: 1: _H1Kt3YauiTzPVtt-8J8q3OLte4.crl (hash: 4Wzi6rK2ewyvayhyzUGLD80oa7/PKgRMPxC1fEcNM5k=)
2: pIzu0UPpsP8clP4GJvMQ5mOsgdU.roa (hash: cY4H2iigWEWrWAaGXnc1Tjbm637H9ISvb9VWaDHjJoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:e9:62:88:70:c0:4a:47:a0:a0:b2:a0:fd:96:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Validity
Not Before: Mar 1 14:01:06 2026 GMT
Not After : Mar 2 14:01:06 2026 GMT
Subject: CN=85d17b29ec9c48b6dfe03c0cbfda18b6fb52a754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a6:2b:c2:08:e7:d8:57:09:ab:8b:b6:9f:88:
24:da:da:1e:45:97:e9:67:53:6a:41:c4:4c:a5:72:
15:fc:ec:8d:ee:52:f1:d3:4d:14:66:19:0b:88:3f:
75:23:05:66:35:d4:0a:fc:12:7c:7a:43:07:aa:60:
54:7d:87:a6:63:45:e7:59:e2:d5:f8:24:d8:dd:63:
b6:2b:7c:02:8b:55:b9:f9:41:54:7d:a4:cb:e8:bf:
b1:b7:60:86:ed:5d:ff:e4:91:65:84:4f:25:99:cd:
92:9e:34:3f:b4:ff:c5:79:1e:0b:2d:b9:38:9a:1a:
1b:49:af:a0:f2:bb:cb:2b:37:47:84:1d:3d:2d:c4:
67:d4:f7:c8:60:62:68:e5:87:1d:3d:ee:b6:6d:4e:
41:08:fa:27:ee:c6:d5:fc:7e:85:2e:bf:68:4a:37:
fd:61:f3:c1:9b:cb:38:ad:22:39:55:34:92:08:08:
36:52:b1:09:0e:bc:d5:d7:8c:05:af:47:81:d5:13:
0a:aa:06:1c:03:cb:44:ae:da:ee:a2:2e:d4:db:dd:
3b:cd:02:a9:94:3f:f9:c3:a7:35:8c:83:4e:c2:42:
60:50:00:7a:1d:49:41:2d:5c:c9:7b:08:4f:1a:81:
17:ca:34:b6:be:90:9e:b8:a8:d4:a3:80:17:97:9a:
34:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D1:7B:29:EC:9C:48:B6:DF:E0:3C:0C:BF:DA:18:B6:FB:52:A7:54
X509v3 Authority Key Identifier:
keyid:FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e9:95:72:a4:50:ea:24:1e:f3:db:55:a2:17:5e:61:3f:6b:
51:fb:b7:a4:1c:fa:42:48:27:77:45:e9:7a:d6:6e:93:f0:dd:
c9:f6:74:ef:fd:3c:02:47:24:3d:54:10:7e:91:0a:0c:67:5f:
7d:bb:88:dc:6a:c0:08:2b:4a:03:32:71:21:6d:94:8f:43:f1:
b7:8b:b6:3b:2e:a8:6f:e3:09:a0:52:f6:ad:52:ca:e5:ac:86:
5c:33:6b:a3:0b:2f:7f:e6:c0:6a:f8:d3:7b:0e:66:42:84:5a:
42:b7:85:c4:1e:e0:be:b5:eb:84:a2:63:0e:75:8d:44:6a:f5:
48:b4:f6:f0:89:13:ab:f6:e0:2c:1a:08:fc:30:bd:a4:40:49:
0e:b7:83:25:e1:7d:b7:8e:b4:a6:43:b3:3f:37:ef:6b:e4:c6:
a0:1c:91:ff:1d:98:93:41:09:98:83:99:3d:c0:0b:a3:92:bd:
4f:f6:a6:9e:04:39:6a:34:ee:16:e7:b3:81:9f:76:f1:fd:7a:
07:80:26:08:de:ee:0d:6e:48:2b:ae:f9:e9:c2:7e:a4:a8:08:
68:0f:a9:b3:a6:4f:ad:72:ad:48:8b:e1:52:1f:0e:9a:e6:3f:
de:3a:b7:29:e2:0d:a0:48:b9:53:e9:60:95:59:fe:8f:79:15:
14:ee:1b:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyps+liiHDASkegoLKg/ZYWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjN2Q0YWI3NzYxYWJhMjRmMzNkNWI2ZGZiYzI3Y2FiNzM4
YmI1ZWUwHhcNMjYwMzAxMTQwMTA2WhcNMjYwMzAyMTQwMTA2WjAzMTEwLwYDVQQD
Eyg4NWQxN2IyOWVjOWM0OGI2ZGZlMDNjMGNiZmRhMThiNmZiNTJhNzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaYrwgjn2FcJq4u2n4gk2toeRZfp
Z1NqQcRMpXIV/OyN7lLx000UZhkLiD91IwVmNdQK/BJ8ekMHqmBUfYemY0XnWeLV
+CTY3WO2K3wCi1W5+UFUfaTL6L+xt2CG7V3/5JFlhE8lmc2SnjQ/tP/FeR4LLbk4
mhobSa+g8rvLKzdHhB09LcRn1PfIYGJo5YcdPe62bU5BCPon7sbV/H6FLr9oSjf9
YfPBm8s4rSI5VTSSCAg2UrEJDrzV14wFr0eB1RMKqgYcA8tErtruoi7U2907zQKp
lD/5w6c1jINOwkJgUAB6HUlBLVzJewhPGoEXyjS2vpCeuKjUo4AXl5o0CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXReynsnEi23+A8DL/aGLb7UqdUMB8GA1UdIwQY
MBaAFPx9Srd2Grok8z1bbfvCfKtzi7XuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0gxS3QzWWF1aVR6UFZ0dC04SjhxM09MdGU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8wMjg3Y2YtODUzYi00NTE2LTlmMDYt
NDUyZWMzYTk1ODhiLzEvX0gxS3QzWWF1aVR6UFZ0dC04SjhxM09MdGU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8wMjg3Y2YtODUzYi00NTE2LTlmMDYtNDUyZWMzYTk1ODhi
LzEvX0gxS3QzWWF1aVR6UFZ0dC04SjhxM09MdGU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFOmVcqRQ
6iQe89tVohdeYT9rUfu3pBz6Qkgnd0XpetZuk/DdyfZ07/08AkckPVQQfpEKDGdf
fbuI3GrACCtKAzJxIW2Uj0Pxt4u2Oy6ob+MJoFL2rVLK5ayGXDNrowsvf+bAavjT
ew5mQoRaQreFxB7gvrXrhKJjDnWNRGr1SLT28IkTq/bgLBoI/DC9pEBJDreDJeF9
t460pkOzPzfva+TGoByR/x2Yk0EJmIOZPcALo5K9T/amngQ5ajTuFuezgZ928f16
B4AmCN7uDW5IK6756cJ+pKgIaA+ps6ZPrXKtSIvhUh8OmuY/3jq3KeINoEi5U+lg
lVn+j3kVFO4b8w==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:20 2026 by rpki-client