Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
File: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft (raw, json)
Hash identifier: 3yzQfIYkXsxto+I2W2f4IS06UAeOnQCJGFJFKVBJS1M=
Subject key identifier: 23:DF:83:15:86:ED:2E:73:17:82:BC:8E:91:29:5B:64:29:46:76:A9
Authority key identifier: 87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
Certificate issuer: /CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Certificate serial: 019D28F24AEE3D51756A8A82C8B6B15E2CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
Manifest number: 1643
Signing time: Thu 26 Mar 2026 07:01:00 +0000
Manifest this update: Thu 26 Mar 2026 07:01:00 +0000
Manifest next update: Fri 27 Mar 2026 07:01:00 +0000
Files and hashes: 1: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl (hash: 2FJSP/ZATX91InUH9AvgICfGOLWJhJXeEh2si0LuMs0=)
2: pf2F8jqDhpJAuisFDDVK53DtP1c.roa (hash: gUPm9iAsnfZdwPMydWDH2B8Ki6HOxvfT2gKOapzDjp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:4a:ee:3d:51:75:6a:8a:82:c8:b6:b1:5e:2c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Validity
Not Before: Mar 26 07:01:00 2026 GMT
Not After : Mar 27 07:01:00 2026 GMT
Subject: CN=23df831586ed2e731782bc8e91295b64294676a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4f:1a:12:e9:47:8d:cc:a1:a3:7f:f6:30:8b:
dd:62:4e:09:8b:ed:05:42:e0:c2:fa:19:e5:6d:b8:
a6:e0:c2:0e:40:52:f2:31:98:82:b0:b9:19:3d:cf:
03:f4:0b:b1:cf:11:f9:e3:de:98:90:8f:0f:0f:21:
77:07:82:8e:19:6c:46:df:8c:3e:7a:3e:7b:e9:28:
47:cd:09:32:21:29:bf:17:56:d7:0f:1f:62:5c:a8:
e3:4e:cf:60:22:7c:eb:a5:08:03:93:b4:23:e1:32:
c3:25:2a:0f:f9:39:ed:05:6e:59:f9:27:9b:bc:a5:
5f:47:f3:1d:15:81:cb:a2:c5:74:32:a4:ea:e5:71:
8c:0f:cd:7e:3a:11:67:94:c9:d3:6a:c9:b4:8d:a7:
00:3f:19:85:49:97:03:0f:8e:0b:0b:0e:fd:d5:56:
83:35:b2:fe:62:b9:ca:ea:bd:f1:f5:43:71:dc:f4:
ca:ae:47:fb:4e:2f:99:08:06:e8:8e:88:e6:f4:83:
9c:70:77:fb:6c:0e:0d:10:70:97:d9:bd:f5:7a:6c:
02:fc:1a:9b:f8:6b:56:b4:37:bf:8a:d2:73:6c:46:
9d:9a:11:09:34:02:a5:2c:6a:64:5c:6f:0b:3b:8c:
f2:0a:18:a8:d6:ce:8f:64:15:cc:80:cb:15:62:3c:
ca:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DF:83:15:86:ED:2E:73:17:82:BC:8E:91:29:5B:64:29:46:76:A9
X509v3 Authority Key Identifier:
keyid:87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:9b:ba:2b:6f:40:38:8f:b8:30:a0:d9:45:d8:92:b0:70:9f:
28:c0:6d:ba:90:ba:4c:da:86:7e:a7:99:1c:98:d7:5a:4f:a7:
2a:03:2e:28:e7:0c:05:10:03:51:ec:94:91:1c:fe:dc:5f:95:
c3:1b:38:56:17:aa:e9:63:9c:5e:1c:11:74:c4:2d:fa:56:32:
48:7a:3a:fa:9a:3b:36:6a:86:d1:ab:63:48:c2:ea:62:6d:f9:
bf:06:ab:27:9e:11:71:99:ea:79:85:34:89:0e:03:9b:dc:35:
5f:61:99:55:a5:7f:d2:35:28:e8:c5:bc:73:08:d8:8d:8b:2f:
72:15:e4:5a:8d:69:a6:36:d7:52:ed:66:1e:2c:b1:b7:06:39:
f9:a1:43:70:73:f1:76:e4:fb:30:7f:03:df:0b:11:2e:c8:e5:
d8:9d:ec:04:e6:fc:45:17:7a:17:65:bd:10:4f:5e:69:07:9a:
67:7a:d8:98:51:ab:39:e3:8b:c5:33:2b:a2:12:e6:84:3f:f3:
eb:75:77:fc:43:a4:72:ef:4a:e3:6a:e6:da:9c:94:77:bd:d8:
28:ce:2c:c2:90:2a:8c:9d:c5:cd:c4:b3:ed:37:74:1c:70:39:
ff:68:6e:43:da:91:8b:85:ae:cc:6a:cd:fe:0c:87:16:02:19:
be:9a:14:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8kruPVF1aoqCyLaxXiy2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ODUxNTQ0YTY0MjdkMmM4ZTI3OWU0Yjk0YjkyYWFmMDAw
OWVkMjcwHhcNMjYwMzI2MDcwMTAwWhcNMjYwMzI3MDcwMTAwWjAzMTEwLwYDVQQD
EygyM2RmODMxNTg2ZWQyZTczMTc4MmJjOGU5MTI5NWI2NDI5NDY3NmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2U8aEulHjcyho3/2MIvdYk4Ji+0F
QuDC+hnlbbim4MIOQFLyMZiCsLkZPc8D9AuxzxH5496YkI8PDyF3B4KOGWxG34w+
ej576ShHzQkyISm/F1bXDx9iXKjjTs9gInzrpQgDk7Qj4TLDJSoP+TntBW5Z+Seb
vKVfR/MdFYHLosV0MqTq5XGMD81+OhFnlMnTasm0jacAPxmFSZcDD44LCw791VaD
NbL+YrnK6r3x9UNx3PTKrkf7Ti+ZCAbojojm9IOccHf7bA4NEHCX2b31emwC/Bqb
+GtWtDe/itJzbEadmhEJNAKlLGpkXG8LO4zyChio1s6PZBXMgMsVYjzKaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPfgxWG7S5zF4K8jpEpW2QpRnapMB8GA1UdIwQY
MBaAFIeFFUSmQn0sjieeS5S5Kq8ACe0nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC80N2IxZmQtMzRiNi00MTk1LTg0OWYt
ODU0MzRmNjE2OWYxLzEvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC80N2IxZmQtMzRiNi00MTk1LTg0OWYtODU0MzRmNjE2OWYx
LzEvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVpu6K29A
OI+4MKDZRdiSsHCfKMBtupC6TNqGfqeZHJjXWk+nKgMuKOcMBRADUeyUkRz+3F+V
wxs4Vheq6WOcXhwRdMQt+lYySHo6+po7NmqG0atjSMLqYm35vwarJ54RcZnqeYU0
iQ4Dm9w1X2GZVaV/0jUo6MW8cwjYjYsvchXkWo1ppjbXUu1mHiyxtwY5+aFDcHPx
duT7MH8D3wsRLsjl2J3sBOb8RRd6F2W9EE9eaQeaZ3rYmFGrOeOLxTMrohLmhD/z
63V3/EOkcu9K42rm2pyUd73YKM4swpAqjJ3FzcSz7Td0HHA5/2huQ9qRi4WuzGrN
/gyHFgIZvpoUug==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:07:13 2026 by rpki-client