
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
File: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft (raw, json)
Hash identifier: 4eDDlv5kYbXV79XT5c7WKQqLZYiQEpu7M2T2ADyZpZQ=
Subject key identifier: 3D:20:E6:93:1E:BE:B5:0E:C2:1F:36:B6:CC:F1:43:4B:53:74:B2:B3
Authority key identifier: 87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
Certificate issuer: /CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Certificate serial: 019E1E34F7D2DEB196EDB86AF7E5B879AAB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
Manifest number: 16C2
Signing time: Tue 12 May 2026 22:00:48 +0000
Manifest this update: Tue 12 May 2026 22:00:48 +0000
Manifest next update: Wed 13 May 2026 22:00:48 +0000
Files and hashes: 1: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl (hash: ocfPZe8pOtv79A0XPEKrPa4+nvkrmJ2y8/F8pGlGtNA=)
2: pf2F8jqDhpJAuisFDDVK53DtP1c.roa (hash: gUPm9iAsnfZdwPMydWDH2B8Ki6HOxvfT2gKOapzDjp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:34:f7:d2:de:b1:96:ed:b8:6a:f7:e5:b8:79:aa:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Validity
Not Before: May 12 22:00:48 2026 GMT
Not After : May 13 22:00:48 2026 GMT
Subject: CN=3d20e6931ebeb50ec21f36b6ccf1434b5374b2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cd:6c:f2:97:83:90:2c:ab:5b:14:ae:96:3e:
76:6d:38:f4:5a:cc:f6:fb:d1:16:0d:b7:c3:f0:16:
a5:76:09:75:38:5d:83:82:9e:2f:ce:a8:97:16:06:
5f:82:ce:93:d1:1c:f8:95:d3:8c:8d:9e:b0:7d:55:
7f:3f:84:b1:e5:90:22:f1:15:e6:16:67:ec:67:34:
ef:af:df:a7:9b:34:43:fb:ff:7f:7a:c0:c4:8e:32:
cf:6b:bc:f7:f3:88:a2:94:97:b5:c8:44:cb:27:54:
a4:a9:1b:c4:1d:21:d8:7c:8f:52:aa:cd:01:af:94:
b7:ba:82:13:1b:a6:97:87:1b:b9:54:4e:12:b3:04:
20:eb:1a:d0:6b:50:a7:98:43:8a:c6:6a:b8:37:f9:
87:46:4a:d5:4e:50:8e:bc:9c:00:30:80:bb:32:db:
16:ee:3c:fd:05:cf:9f:8a:43:97:ca:ad:ff:1a:d9:
28:d0:a5:6b:51:82:0c:43:97:9f:a6:94:e0:89:75:
b8:de:41:87:f5:8d:bb:8b:a9:64:07:71:a5:6b:4e:
d9:b3:6b:86:bc:8d:c2:48:fc:17:0f:59:b0:56:ea:
4f:7a:b2:5d:a4:8d:33:52:14:68:df:fd:cf:d3:1a:
93:33:34:d6:eb:59:bd:56:25:50:ad:9a:96:f3:a8:
2c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:20:E6:93:1E:BE:B5:0E:C2:1F:36:B6:CC:F1:43:4B:53:74:B2:B3
X509v3 Authority Key Identifier:
keyid:87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:97:95:88:3f:9e:2f:73:5a:09:e2:e0:8c:fc:fe:60:37:8e:
f9:2b:b4:52:0a:93:ea:d9:01:9e:e8:b1:17:3e:bb:f0:76:ae:
42:da:1a:99:1a:9a:33:a9:95:ff:a6:70:56:b2:4e:98:b3:67:
ae:12:31:80:49:33:5a:61:8c:9c:d3:b4:df:75:bc:ca:6e:a0:
72:60:47:20:57:94:7e:ed:25:07:21:53:8b:f6:cd:b9:53:9b:
74:e6:1a:4f:be:c1:26:75:ea:08:c0:87:25:f8:f3:45:0f:e5:
01:dd:5b:09:f4:e6:70:4d:d9:2a:19:6b:65:4d:ef:33:c9:93:
7b:27:bf:fa:3f:00:1b:64:74:18:5e:2b:c6:c5:e3:14:e1:03:
60:02:9c:24:32:a2:26:50:11:f9:b4:64:94:42:0e:b5:2b:ae:
ce:f5:58:0b:33:10:87:17:b2:89:42:c9:eb:7a:27:35:83:26:
f0:6f:6a:4a:00:51:65:2a:fe:a3:c9:09:04:6e:bc:df:12:22:
e3:bd:0f:47:ef:e5:29:1c:7c:bb:5e:a3:78:94:cb:12:89:f5:
8a:20:4d:07:6d:f0:cc:1b:bb:03:03:27:d0:57:d9:f4:23:f1:
af:e0:d3:4e:13:77:50:2a:12:55:9b:1c:56:39:b4:1b:d6:33:
2f:ba:36:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:08:10 2026 by rpki-client