Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
File: h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft (raw, json)
Hash identifier: Bl9aYcXzyxHzpqYwooEvp3PRQx2ln4du86W+g68w3p0=
Subject key identifier: 56:40:84:C4:2B:4D:1A:C1:2B:9D:1C:33:9A:7F:7E:25:27:18:F0:87
Authority key identifier: 87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32
Certificate issuer: /CN=8775e6408b8e05aa914b874635a47b7b820c6c32
Certificate serial: 019D99629EE324CBFEF0849995DC6EF52D25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
Manifest number: 049D
Signing time: Fri 17 Apr 2026 03:01:10 +0000
Manifest this update: Fri 17 Apr 2026 03:01:10 +0000
Manifest next update: Sat 18 Apr 2026 03:01:10 +0000
Files and hashes: 1: 26tifeDJOokQX2xBf_3Nq0FjNP0.roa (hash: 9C1lRs6FbIMhNzNJlmiz4jKcDXBY2F5bdab09+tRw4k=)
2: h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl (hash: D7hZFol3+BDtDBVjOIZGvRyIYuOlPNdbpI2KGbOR0SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:9e:e3:24:cb:fe:f0:84:99:95:dc:6e:f5:2d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8775e6408b8e05aa914b874635a47b7b820c6c32
Validity
Not Before: Apr 17 03:01:10 2026 GMT
Not After : Apr 18 03:01:10 2026 GMT
Subject: CN=564084c42b4d1ac12b9d1c339a7f7e252718f087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:22:a6:f3:a4:26:a0:24:3e:dc:56:ee:f0:83:
e7:30:2d:4c:67:d7:a5:d9:84:ce:30:87:e2:c5:7c:
87:72:63:b9:58:eb:35:94:89:e8:35:ee:ed:63:63:
88:86:6f:a0:4b:8f:12:49:d7:4a:0a:1b:d8:f4:74:
38:c1:60:a1:b0:71:00:a4:f7:4b:60:83:59:47:dc:
54:db:a0:82:47:a8:ac:53:c7:07:4b:f3:b0:6d:7d:
01:33:48:0b:51:94:07:8b:86:7f:ac:72:c2:b4:85:
b8:13:37:cd:97:7f:88:2f:95:3d:73:70:5a:92:ff:
37:68:8a:c1:57:ea:0d:fa:0e:05:84:71:49:0d:d6:
81:61:be:fe:3c:e1:76:90:17:58:83:6d:f2:8e:78:
98:2e:35:0a:8e:89:3b:9e:8f:59:61:65:16:e5:c4:
27:a6:63:bd:dd:5b:62:73:91:76:1f:39:68:4a:ae:
65:b9:db:f4:8e:12:59:67:3d:fb:d2:5f:b2:46:2e:
5b:ec:30:06:a3:b4:94:9a:55:eb:54:48:6f:a6:6c:
31:f8:aa:26:c5:e9:4a:4c:7e:1c:e8:63:73:d8:d1:
e5:b3:04:1d:eb:eb:6f:aa:b7:68:81:29:38:ab:a3:
8c:32:b1:f6:06:e6:64:91:9e:0a:87:50:ed:7e:66:
c9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:40:84:C4:2B:4D:1A:C1:2B:9D:1C:33:9A:7F:7E:25:27:18:F0:87
X509v3 Authority Key Identifier:
keyid:87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:95:83:27:32:62:7c:ec:f1:cb:97:5d:d4:ff:1c:a3:e3:f9:
ae:93:e4:ae:1b:a7:1a:fe:33:de:26:93:d6:5f:2c:f0:4e:91:
c1:cb:b5:0f:03:97:b8:fc:02:2a:06:20:b8:e9:9b:56:97:4d:
b7:cb:1d:55:48:b4:54:8c:0f:b2:65:eb:fe:df:da:23:f4:d6:
88:e7:82:fd:00:02:b6:b6:82:15:00:73:2c:55:43:62:0a:e5:
8f:87:63:c4:db:7d:b1:54:13:a2:5a:49:e9:ff:7f:d0:0d:36:
88:b9:d8:2a:c0:10:13:13:73:66:75:17:25:0b:83:c3:07:8c:
7c:83:a6:35:d6:35:c4:3d:c7:c2:44:38:e6:5a:a9:63:4f:0c:
6a:29:bf:fb:68:67:fd:37:ed:91:50:d1:5d:85:5d:78:e5:fd:
00:0a:04:99:a3:6a:e6:f2:c0:fd:e3:3b:6a:72:40:5f:d2:cf:
ee:b9:6e:be:12:59:fe:e6:0d:73:b7:ec:2b:2d:8b:5f:30:ac:
48:36:8f:30:e1:dc:d6:1e:f5:6f:d3:4b:72:2b:f4:1b:55:57:
fa:47:1a:1d:10:7b:68:b6:ad:72:71:63:76:6d:13:8b:0c:c3:
a8:45:d6:50:11:b8:63:90:4f:c3:b5:d4:dc:ab:60:6e:60:a6:
33:a7:4c:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYp7jJMv+8ISZldxu9S0lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NzVlNjQwOGI4ZTA1YWE5MTRiODc0NjM1YTQ3YjdiODIw
YzZjMzIwHhcNMjYwNDE3MDMwMTEwWhcNMjYwNDE4MDMwMTEwWjAzMTEwLwYDVQQD
Eyg1NjQwODRjNDJiNGQxYWMxMmI5ZDFjMzM5YTdmN2UyNTI3MThmMDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyKm86QmoCQ+3Fbu8IPnMC1MZ9el
2YTOMIfixXyHcmO5WOs1lInoNe7tY2OIhm+gS48SSddKChvY9HQ4wWChsHEApPdL
YINZR9xU26CCR6isU8cHS/OwbX0BM0gLUZQHi4Z/rHLCtIW4EzfNl3+IL5U9c3Ba
kv83aIrBV+oN+g4FhHFJDdaBYb7+POF2kBdYg23yjniYLjUKjok7no9ZYWUW5cQn
pmO93Vtic5F2HzloSq5ludv0jhJZZz370l+yRi5b7DAGo7SUmlXrVEhvpmwx+Kom
xelKTH4c6GNz2NHlswQd6+tvqrdogSk4q6OMMrH2BuZkkZ4Kh1DtfmbJPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZAhMQrTRrBK50cM5p/fiUnGPCHMB8GA1UdIwQY
MBaAFId15kCLjgWqkUuHRjWke3uCDGwyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDNYbVFJdU9CYXFSUzRkR05hUjdlNElNYkRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zNmUwNjUtYTFmNi00ZTE0LWIyZDct
NjFlNTRjZmMyYWJjLzEvaDNYbVFJdU9CYXFSUzRkR05hUjdlNElNYkRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zNmUwNjUtYTFmNi00ZTE0LWIyZDctNjFlNTRjZmMyYWJj
LzEvaDNYbVFJdU9CYXFSUzRkR05hUjdlNElNYkRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhpWDJzJi
fOzxy5dd1P8co+P5rpPkrhunGv4z3iaT1l8s8E6Rwcu1DwOXuPwCKgYguOmbVpdN
t8sdVUi0VIwPsmXr/t/aI/TWiOeC/QACtraCFQBzLFVDYgrlj4djxNt9sVQTolpJ
6f9/0A02iLnYKsAQExNzZnUXJQuDwweMfIOmNdY1xD3HwkQ45lqpY08Maim/+2hn
/TftkVDRXYVdeOX9AAoEmaNq5vLA/eM7anJAX9LP7rluvhJZ/uYNc7fsKy2LXzCs
SDaPMOHc1h71b9NLciv0G1VX+kcaHRB7aLatcnFjdm0TiwzDqEXWUBG4Y5BPw7XU
3KtgbmCmM6dMUA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:01:02 2026 by rpki-client