Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
File: H4ls09jRoGmdpSEFXftY3Abd3zU.mft (raw, json)
Hash identifier: 7ihpmTdTxXm6ajDfPfLuYYV+wVYyA2dOHDjC0XGhHmU=
Subject key identifier: 78:5B:5A:78:7F:5B:2F:E8:8B:79:E1:BA:60:DC:51:85:A3:B6:A8:1D
Authority key identifier: 1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
Certificate issuer: /CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Certificate serial: 01A12B7B13676098CB0450CA79C698281833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
Manifest number: 1A9D
Signing time: Sun 11 Oct 2026 15:00:48 +0000
Manifest this update: Sun 11 Oct 2026 15:00:48 +0000
Manifest next update: Mon 12 Oct 2026 15:00:48 +0000
Files and hashes: 1: COifVGWEFcRhTaZrSeru91euzgs.roa (hash: SkxWqr0s6K7O+f3IrnOYEXDaEsYzawyt1T+GjoB55B8=)
2: H4ls09jRoGmdpSEFXftY3Abd3zU.crl (hash: LOhUmAFyHo2rUdYVL1r/9dqygefb5q/dTb/sDx1f8H8=)
3: OmGYQq3CiQUfIzH_XwnBKVSMUPQ.roa (hash: 3Ypfgyto+VD8FpA/ATTCpHQtTdUaXQt8NRaO+1mw2dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:7b:13:67:60:98:cb:04:50:ca:79:c6:98:28:18:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Validity
Not Before: Oct 11 15:00:48 2026 GMT
Not After : Oct 12 15:00:48 2026 GMT
Subject: CN=785b5a787f5b2fe88b79e1ba60dc5185a3b6a81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:43:a9:46:f5:35:7f:9d:14:1b:f7:e7:63:74:
51:62:12:06:91:5f:d1:26:69:f2:74:ea:2a:fb:b3:
14:fd:7b:f7:f6:5e:18:1b:cc:3d:8f:8d:5f:01:ed:
7a:81:f4:53:d8:d1:92:a4:e8:15:9d:77:c6:7e:bf:
3d:b7:d3:f0:9c:b6:c0:95:37:fd:7e:b1:9b:41:d0:
a2:60:78:18:95:3c:85:7d:d1:6e:7e:81:fa:db:79:
d0:9d:ab:b3:80:9f:8a:76:88:0e:fc:05:fc:a1:40:
85:56:d2:3d:ff:9a:f2:5f:f7:f9:eb:95:18:c8:23:
64:6d:c4:5f:79:d2:6e:c3:3c:27:33:9a:47:e0:e4:
67:a0:d0:05:48:48:77:4f:90:87:ff:c5:96:6c:79:
ab:53:22:f9:20:39:6f:e7:f2:88:94:b3:3f:64:c0:
34:f5:dc:8a:af:36:95:ba:01:bd:e0:20:f6:ac:66:
f8:9b:04:10:5c:7b:0f:06:55:a8:ff:f4:81:a1:a7:
18:84:d7:2b:02:08:76:2c:78:43:0b:20:0a:bd:6e:
f4:f4:73:e7:d6:b4:93:a8:d2:6f:a4:cb:78:64:d2:
ca:f6:3e:1a:83:1b:70:2b:6e:d4:59:32:08:fb:86:
c2:38:0b:8e:ad:b8:cd:b7:f3:6a:d7:90:fb:3b:74:
27:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5B:5A:78:7F:5B:2F:E8:8B:79:E1:BA:60:DC:51:85:A3:B6:A8:1D
X509v3 Authority Key Identifier:
keyid:1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:62:41:87:da:f1:7c:b8:b8:d9:ff:c3:4e:18:ce:76:01:46:
27:76:b9:71:7e:22:ee:ef:04:f9:87:21:08:93:7b:7f:ea:62:
e5:34:ca:54:a9:e7:05:32:5b:d5:5e:1f:c7:c0:1f:c6:00:a1:
cf:18:47:7b:98:53:09:ac:2b:e0:d8:bf:22:aa:ea:9d:5c:2c:
53:f3:5f:b7:7c:d1:16:40:31:5a:da:15:32:e1:75:cd:85:a4:
43:0d:a3:54:ec:2c:7a:bc:b4:14:bf:98:8e:a9:b8:72:66:d6:
14:f8:e0:df:42:07:95:15:f2:9e:00:97:b6:b1:92:d0:b7:dc:
6e:b7:e7:15:56:b6:46:d3:58:1a:8e:74:f7:27:d6:56:db:6b:
39:6a:49:26:f8:5f:e3:33:b9:6a:d6:9a:0d:31:e5:76:79:90:
f1:b3:86:30:d9:c8:6c:a7:08:83:b0:b4:0f:ee:bd:74:2a:f4:
de:fb:28:e9:f8:35:0e:ba:62:7f:f3:8c:ae:c5:dc:87:51:84:
02:5f:03:13:63:72:32:b6:24:6c:6d:3a:13:e7:47:5b:73:ab:
f4:d3:42:71:d9:cd:9c:81:45:dd:23:f5:7b:7d:7e:b3:58:2f:
a4:09:37:ef:c9:36:b8:8f:62:da:ec:2f:fb:ff:dc:ca:85:b1:
25:fe:fa:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 01:58:34 2026 by rpki-client