Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
File: H4ls09jRoGmdpSEFXftY3Abd3zU.mft (raw, json)
Hash identifier: znqVAJvASE9OycG7Q/+qM20y5Qs0NlNQVLaaxLEPWJs=
Subject key identifier: A7:B1:1B:3F:C4:FC:87:47:D4:90:A2:6A:15:B1:FF:BE:DC:56:24:66
Authority key identifier: 1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
Certificate issuer: /CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Certificate serial: 019E2135FDBB0BD2EFA6D14E16FA98DFCD64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
Manifest number: 190A
Signing time: Wed 13 May 2026 12:00:46 +0000
Manifest this update: Wed 13 May 2026 12:00:46 +0000
Manifest next update: Thu 14 May 2026 12:00:46 +0000
Files and hashes: 1: COifVGWEFcRhTaZrSeru91euzgs.roa (hash: SkxWqr0s6K7O+f3IrnOYEXDaEsYzawyt1T+GjoB55B8=)
2: H4ls09jRoGmdpSEFXftY3Abd3zU.crl (hash: JnbwoousiMQhXDgJnsFBNdFGYhRi/0UctmhkAA4Bif4=)
3: OmGYQq3CiQUfIzH_XwnBKVSMUPQ.roa (hash: 3Ypfgyto+VD8FpA/ATTCpHQtTdUaXQt8NRaO+1mw2dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:35:fd:bb:0b:d2:ef:a6:d1:4e:16:fa:98:df:cd:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Validity
Not Before: May 13 12:00:46 2026 GMT
Not After : May 14 12:00:46 2026 GMT
Subject: CN=a7b11b3fc4fc8747d490a26a15b1ffbedc562466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2d:0c:e0:6a:9b:ab:39:c8:67:2f:6c:e1:01:
a8:d9:38:d7:8a:b7:e7:ca:af:18:25:39:08:89:0f:
eb:8e:86:98:82:e5:a8:56:74:dc:35:a3:09:bd:e1:
0d:9e:1d:ed:11:26:04:8e:73:60:90:76:b3:ab:46:
3e:4f:9d:c2:66:72:88:50:fb:52:82:e8:dd:ee:f3:
80:e4:64:c7:2d:cb:13:9f:a4:27:23:e5:1e:bd:4e:
1a:0f:32:80:08:51:d8:e9:ff:57:a5:f8:ec:53:48:
5d:54:8a:dc:d4:72:0f:e1:54:bd:da:76:14:04:1d:
60:a3:33:f4:ac:bb:ee:ba:c3:fd:3e:12:0d:22:60:
a2:2c:53:4f:5b:ee:10:01:a7:58:07:c0:fe:ae:a1:
5d:be:ff:b6:03:10:6f:25:36:95:c3:5a:ce:ad:f0:
36:21:9f:1b:fb:74:16:71:76:4c:6e:d5:8b:75:eb:
32:d1:76:a3:65:1f:c7:49:08:bd:ce:58:da:d2:96:
81:ac:1d:47:5c:04:f2:1a:e2:8b:65:e5:67:92:72:
45:f8:10:df:0a:cb:68:26:8a:b7:df:3f:a3:d0:dd:
3c:b0:a3:4b:c9:1c:c6:b1:0c:ef:5d:c1:dc:d7:f5:
1e:cc:b6:f0:0e:ff:82:d8:5f:4c:e5:80:51:29:22:
8e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B1:1B:3F:C4:FC:87:47:D4:90:A2:6A:15:B1:FF:BE:DC:56:24:66
X509v3 Authority Key Identifier:
keyid:1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:0f:41:76:48:76:c7:9a:28:c5:ca:e3:16:89:4b:b9:97:0f:
6a:5a:62:c1:f4:cf:5b:ff:d5:b4:19:2f:e6:c8:91:53:4e:52:
1f:ad:09:ae:d0:40:9a:6b:6e:26:f9:92:e4:09:94:39:17:95:
9a:2c:b3:05:30:03:2f:7c:c3:4a:d6:8f:ed:ef:9b:62:17:75:
d1:c7:ba:49:64:08:1f:05:b4:e5:72:68:2d:52:98:26:d6:5b:
68:54:62:74:58:b5:12:7c:de:c5:53:e1:54:a9:6f:cd:e3:a4:
b5:f0:0d:e2:1b:1d:5f:a7:d9:85:a9:e5:5a:ce:ad:c6:50:25:
b9:50:a2:d6:69:25:86:22:c2:c0:b3:5c:1d:bc:50:61:7e:70:
86:33:98:6f:80:3e:c5:51:d1:5a:d0:d3:69:a3:59:a8:87:6e:
ee:ee:c2:00:f1:79:97:11:7e:50:24:e6:1c:d1:2e:f9:c1:24:
a4:79:0f:cb:fc:c3:41:a7:31:61:c6:5c:97:6b:5f:cb:e8:28:
6c:85:18:07:ed:a7:5e:61:90:c7:c0:1b:c3:07:ba:56:81:66:
bd:40:f3:5e:1d:36:2a:46:14:2f:65:65:2c:65:eb:bd:3f:14:
db:61:09:2c:81:cd:05:82:fe:a6:91:3b:21:0a:e1:be:cc:22:
84:c3:23:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:53:54 2026 by rpki-client