Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
File: h7E5b9Eccw7yBEgSmygoVqxQTLc.mft (raw, json)
Hash identifier: C2bHWLghumBVDS3LETwpkMRWkMw5vD4eZLj5qL+Ah4c=
Subject key identifier: 5D:9A:A0:D0:C0:12:71:62:E5:D2:AF:0E:93:01:B3:25:BB:11:7C:68
Authority key identifier: 87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
Certificate issuer: /CN=87b1396fd11c730ef20448129b282856ac504cb7
Certificate serial: 019CAD22F14EEEB909245E7310EE7EAADE26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
Manifest number: 075F
Signing time: Mon 02 Mar 2026 06:01:14 +0000
Manifest this update: Mon 02 Mar 2026 06:01:14 +0000
Manifest next update: Tue 03 Mar 2026 06:01:14 +0000
Files and hashes: 1: c1HdnsaldKTIKaEky6ateQiz5kY.roa (hash: C5p2Kdt/yLKTGq1QeYyJYKudSwTzAauf7jP1eJuSAr8=)
2: h7E5b9Eccw7yBEgSmygoVqxQTLc.crl (hash: uXbkWlDHtcJcCVxS3XWdjwnpZyCOp8TBlXEC01b5sfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:f1:4e:ee:b9:09:24:5e:73:10:ee:7e:aa:de:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b1396fd11c730ef20448129b282856ac504cb7
Validity
Not Before: Mar 2 06:01:14 2026 GMT
Not After : Mar 3 06:01:14 2026 GMT
Subject: CN=5d9aa0d0c0127162e5d2af0e9301b325bb117c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:c5:fc:54:47:83:8d:50:92:f9:c9:87:bb:19:
da:88:73:ed:d8:e7:e2:b3:73:74:5e:d4:68:94:1b:
55:8e:f2:5c:92:12:1f:c5:41:54:36:b2:10:25:1b:
75:22:e2:6d:4d:e2:90:56:c5:be:ec:20:2d:c5:5d:
9e:6e:b5:58:11:22:04:70:21:3c:bc:cc:ab:b2:42:
64:69:f3:20:6c:b5:62:30:91:59:08:40:42:81:63:
ae:d0:a0:1b:22:04:6d:6c:13:0f:b3:1e:91:95:a0:
84:98:37:c4:40:91:ab:19:a6:1f:73:84:e1:42:1e:
d7:66:01:c8:8c:96:56:70:54:fd:46:5e:de:aa:d4:
82:42:18:78:7a:13:ec:11:a4:8e:10:aa:4a:64:02:
ed:2c:18:68:8a:16:54:8a:47:04:a3:49:4d:73:8d:
44:01:c6:35:66:41:1a:9f:03:f4:4f:c4:29:2c:ff:
c4:2f:d2:d7:c3:cd:31:9d:75:2a:f4:1e:57:90:f9:
d4:e9:15:2c:7e:1d:62:6c:57:0d:1c:f2:e5:a6:e5:
95:a7:a3:90:79:e6:0a:20:bc:82:ef:36:62:8d:d0:
5a:fe:8a:f6:dc:50:f3:db:fa:10:b7:4b:f0:a8:52:
0a:20:e5:e5:a5:0d:ad:10:a7:87:33:bd:de:c3:45:
4c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9A:A0:D0:C0:12:71:62:E5:D2:AF:0E:93:01:B3:25:BB:11:7C:68
X509v3 Authority Key Identifier:
keyid:87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:15:74:59:08:b4:8a:00:91:9e:66:c8:ec:8d:a0:d1:66:ea:
3b:24:5c:2c:00:f8:1e:99:14:a4:7b:90:94:b8:81:af:71:f8:
dd:51:26:f7:22:5a:80:33:ef:b8:40:e1:23:42:36:a4:37:d9:
cf:30:d3:5a:91:86:72:9a:6e:c4:f1:05:2b:18:24:1b:fa:0b:
97:dc:99:75:74:aa:ce:14:3a:41:bb:d4:94:39:97:25:6a:f4:
40:8f:bb:73:f2:02:c4:f7:69:55:20:08:57:a3:22:24:05:82:
ae:cc:cd:ef:c6:0d:04:ef:4b:b4:b2:f1:70:d6:09:a4:88:9b:
d1:93:ae:59:0a:06:c7:76:88:d2:46:d3:bf:b5:52:13:a1:f8:
9a:f5:3c:d6:79:bf:9a:19:3b:bc:ea:b6:7a:e9:61:30:aa:b3:
10:da:fd:24:57:9b:52:19:27:04:61:d5:de:04:a9:84:2a:2e:
7b:c3:71:e6:7e:ea:28:05:24:10:b1:e1:ab:b1:9a:bd:87:23:
89:d0:24:bc:33:41:59:45:6f:50:e1:35:5e:30:48:b2:e1:95:
ef:d3:b0:ac:62:2c:02:9b:47:2e:8d:9a:dc:ff:cc:db:b4:5d:
3e:0c:1b:8a:e2:70:13:08:c6:53:c0:66:e5:d9:a7:e9:50:a1:
ce:b7:2b:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIvFO7rkJJF5zEO5+qt4mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YjEzOTZmZDExYzczMGVmMjA0NDgxMjliMjgyODU2YWM1
MDRjYjcwHhcNMjYwMzAyMDYwMTE0WhcNMjYwMzAzMDYwMTE0WjAzMTEwLwYDVQQD
Eyg1ZDlhYTBkMGMwMTI3MTYyZTVkMmFmMGU5MzAxYjMyNWJiMTE3YzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/MX8VEeDjVCS+cmHuxnaiHPt2Ofi
s3N0XtRolBtVjvJckhIfxUFUNrIQJRt1IuJtTeKQVsW+7CAtxV2ebrVYESIEcCE8
vMyrskJkafMgbLViMJFZCEBCgWOu0KAbIgRtbBMPsx6RlaCEmDfEQJGrGaYfc4Th
Qh7XZgHIjJZWcFT9Rl7eqtSCQhh4ehPsEaSOEKpKZALtLBhoihZUikcEo0lNc41E
AcY1ZkEanwP0T8QpLP/EL9LXw80xnXUq9B5XkPnU6RUsfh1ibFcNHPLlpuWVp6OQ
eeYKILyC7zZijdBa/or23FDz2/oQt0vwqFIKIOXlpQ2tEKeHM73ew0VMEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2aoNDAEnFi5dKvDpMBsyW7EXxoMB8GA1UdIwQY
MBaAFIexOW/RHHMO8gRIEpsoKFasUEy3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDdFNWI5RWNjdzd5QkVnU215Z29WcXhRVExjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zOGJjOTAtMWQ1My00ZDQ3LWJiZGIt
ZjRlN2M5Y2M0M2ZmLzEvaDdFNWI5RWNjdzd5QkVnU215Z29WcXhRVExjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8zOGJjOTAtMWQ1My00ZDQ3LWJiZGItZjRlN2M5Y2M0M2Zm
LzEvaDdFNWI5RWNjdzd5QkVnU215Z29WcXhRVExjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghV0WQi0
igCRnmbI7I2g0WbqOyRcLAD4HpkUpHuQlLiBr3H43VEm9yJagDPvuEDhI0I2pDfZ
zzDTWpGGcppuxPEFKxgkG/oLl9yZdXSqzhQ6QbvUlDmXJWr0QI+7c/ICxPdpVSAI
V6MiJAWCrszN78YNBO9LtLLxcNYJpIib0ZOuWQoGx3aI0kbTv7VSE6H4mvU81nm/
mhk7vOq2eulhMKqzENr9JFebUhknBGHV3gSphCoue8Nx5n7qKAUkELHhq7GavYcj
idAkvDNBWUVvUOE1XjBIsuGV79OwrGIsAptHLo2a3P/M27RdPgwbiuJwEwjGU8Bm
5dmn6VChzrcrCA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:57:12 2026 by rpki-client