Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
File: h5kgiOdlXLE0AgypWw5X1Oba9A8.mft (raw, json)
Hash identifier: oQ+J1IFikFxCy4gAF/XDOHgZL8Dry5MYq+s4l4tHKbM=
Subject key identifier: 4F:7E:2B:C5:C7:55:A5:C6:4A:AE:29:A1:B3:95:1E:3B:04:A1:96:41
Authority key identifier: 87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F
Certificate issuer: /CN=87992088e7655cb134020ca95b0e57d4e6daf40f
Certificate serial: 019CAE34F399D4152DB8BEF2ACCBE55FE584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 11:00:31 +0000
Manifest this update: Mon 02 Mar 2026 11:00:31 +0000
Manifest next update: Tue 03 Mar 2026 11:00:31 +0000
Files and hashes: 1: h5kgiOdlXLE0AgypWw5X1Oba9A8.crl (hash: GLQIDKXg86F1WG0krUoSCpwx1PVxI9MZzsuBYcvaH6Y=)
2: uOT6tJlrkH7uNore0SwrHv6B2q8.roa (hash: sj7kmuH/7FdqL+TtQaRY1OsxURdzt9SlOSUYNlEq6iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:34:f3:99:d4:15:2d:b8:be:f2:ac:cb:e5:5f:e5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87992088e7655cb134020ca95b0e57d4e6daf40f
Validity
Not Before: Mar 2 11:00:31 2026 GMT
Not After : Mar 3 11:00:31 2026 GMT
Subject: CN=4f7e2bc5c755a5c64aae29a1b3951e3b04a19641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:31:9e:90:c4:94:1c:bb:25:ef:c9:ad:39:be:
5f:d2:91:83:42:2b:91:0b:e3:44:0f:f9:dd:67:f1:
76:6e:6c:f2:ca:5d:2a:1e:bf:4a:7b:01:8d:b8:c6:
b4:14:eb:f7:80:ef:d8:f5:3f:7e:24:ac:98:3d:ad:
c8:03:53:1f:79:3f:d2:f9:61:2e:88:0e:c7:db:2f:
8a:19:76:34:24:42:a2:fe:af:b8:ab:96:a0:0d:1e:
b1:b3:7e:8d:ac:ae:63:3e:cc:f1:21:3e:e2:b6:16:
b0:07:a3:7e:37:1d:20:5c:17:a3:72:1d:36:0c:af:
2d:f8:c1:59:ed:4c:30:be:1c:e1:6a:3c:a3:15:71:
4c:78:0d:25:1b:1e:a3:78:6e:36:6c:08:0f:6d:b6:
23:fc:fc:4c:1f:d5:a6:03:98:d1:96:24:68:3f:8f:
1d:6f:b3:12:ee:86:e9:b6:99:18:40:44:a0:df:8f:
69:df:99:32:a5:d3:ed:0f:39:48:89:22:c4:50:33:
22:ac:6c:ff:4e:6d:f0:f8:43:f1:bf:f7:3b:86:3c:
a3:54:31:16:b4:17:af:a0:e1:12:6e:1f:97:0f:05:
3f:41:36:84:8e:a8:6d:9f:a0:90:52:a8:13:06:05:
99:70:47:4b:43:df:aa:8b:2e:84:bf:2c:f0:1f:ff:
1c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7E:2B:C5:C7:55:A5:C6:4A:AE:29:A1:B3:95:1E:3B:04:A1:96:41
X509v3 Authority Key Identifier:
keyid:87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:19:ab:bf:98:da:43:d1:92:a4:aa:33:d2:5b:92:93:aa:b4:
07:49:11:ec:80:8c:b5:8f:69:36:25:6b:61:ea:b7:7c:33:b2:
74:54:96:46:2f:99:17:09:73:30:38:a0:2d:ca:be:16:14:65:
7c:54:5d:04:37:c4:1f:24:79:39:4a:3b:69:16:a8:58:80:e3:
3e:fc:43:32:dd:63:2d:34:20:0b:f8:ae:59:40:d1:c9:e1:24:
f2:ae:68:50:15:0e:da:4f:c7:2f:b6:f6:79:38:80:89:b7:bd:
76:51:0c:b4:ac:54:ce:f8:4b:cf:1d:0f:ce:d5:ba:44:ad:46:
1a:7c:17:fa:2c:4b:2c:c6:8a:82:44:95:63:ae:0f:c9:99:60:
41:3f:87:81:5e:38:aa:0b:05:78:41:ef:c8:3e:17:2b:1d:2a:
39:76:68:de:2f:09:69:08:60:3d:60:7e:b1:11:4b:d9:77:e4:
4b:1d:55:82:f2:e7:fb:8f:be:c7:ae:73:b3:8b:59:6b:3f:45:
40:c3:12:ed:9a:1d:74:74:eb:22:54:f9:fc:32:93:e6:29:1a:
70:4e:87:75:61:fe:23:93:05:a3:9e:fc:29:e1:96:23:d6:05:
3f:15:e7:5d:26:0d:8e:30:d9:90:7c:e5:d7:95:d3:51:0d:fd:
56:a4:95:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNPOZ1BUtuL7yrMvlX+WEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OTkyMDg4ZTc2NTVjYjEzNDAyMGNhOTViMGU1N2Q0ZTZk
YWY0MGYwHhcNMjYwMzAyMTEwMDMxWhcNMjYwMzAzMTEwMDMxWjAzMTEwLwYDVQQD
Eyg0ZjdlMmJjNWM3NTVhNWM2NGFhZTI5YTFiMzk1MWUzYjA0YTE5NjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTGekMSUHLsl78mtOb5f0pGDQiuR
C+NED/ndZ/F2bmzyyl0qHr9KewGNuMa0FOv3gO/Y9T9+JKyYPa3IA1MfeT/S+WEu
iA7H2y+KGXY0JEKi/q+4q5agDR6xs36NrK5jPszxIT7ithawB6N+Nx0gXBejch02
DK8t+MFZ7UwwvhzhajyjFXFMeA0lGx6jeG42bAgPbbYj/PxMH9WmA5jRliRoP48d
b7MS7obptpkYQESg349p35kypdPtDzlIiSLEUDMirGz/Tm3w+EPxv/c7hjyjVDEW
tBevoOESbh+XDwU/QTaEjqhtn6CQUqgTBgWZcEdLQ9+qiy6EvyzwH/8cNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9+K8XHVaXGSq4pobOVHjsEoZZBMB8GA1UdIwQY
MBaAFIeZIIjnZVyxNAIMqVsOV9Tm2vQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDVrZ2lPZGxYTEUwQWd5cFd3NVgxT2JhOUE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lMDgzMTgtMjk3NS00MTdhLWI4NjMt
ODVlYTYzYzI0NDc0LzEvaDVrZ2lPZGxYTEUwQWd5cFd3NVgxT2JhOUE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9lMDgzMTgtMjk3NS00MTdhLWI4NjMtODVlYTYzYzI0NDc0
LzEvaDVrZ2lPZGxYTEUwQWd5cFd3NVgxT2JhOUE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRmrv5ja
Q9GSpKoz0luSk6q0B0kR7ICMtY9pNiVrYeq3fDOydFSWRi+ZFwlzMDigLcq+FhRl
fFRdBDfEHyR5OUo7aRaoWIDjPvxDMt1jLTQgC/iuWUDRyeEk8q5oUBUO2k/HL7b2
eTiAibe9dlEMtKxUzvhLzx0PztW6RK1GGnwX+ixLLMaKgkSVY64PyZlgQT+HgV44
qgsFeEHvyD4XKx0qOXZo3i8JaQhgPWB+sRFL2XfkSx1VgvLn+4++x65zs4tZaz9F
QMMS7ZoddHTrIlT5/DKT5ikacE6HdWH+I5MFo578KeGWI9YFPxXnXSYNjjDZkHzl
15XTUQ39VqSVGQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:14:03 2026 by rpki-client