Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
File: HI4XQR4BAMkUsEDVFMKOHX02mR4.mft (raw, json)
Hash identifier: 6GC2jQaUCmxue9hSevUM2ZSUyonuQ07SkOx/80H3pv0=
Subject key identifier: B4:9C:22:B8:A1:9B:D3:ED:38:9E:4F:22:E3:AD:1E:7C:AB:65:55:57
Authority key identifier: 1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E
Certificate issuer: /CN=1c8e17411e0100c914b040d514c28e1d7d36991e
Certificate serial: 019D2A72BB3A9B44E1840ABB038494ECCC7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
Manifest number: 1599
Signing time: Thu 26 Mar 2026 14:00:55 +0000
Manifest this update: Thu 26 Mar 2026 14:00:55 +0000
Manifest next update: Fri 27 Mar 2026 14:00:55 +0000
Files and hashes: 1: HI4XQR4BAMkUsEDVFMKOHX02mR4.crl (hash: xliAm805eZO/IXc5b+o8O9ZENAvERNYaFF7jb5bQtKU=)
2: O-KPpaLxX3zxTTMaSxOHxWMjPwA.roa (hash: 0pQ2h4z2SL8hjYjPnGVnHeMv5KcEmo0XbgSaP9LFvxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:bb:3a:9b:44:e1:84:0a:bb:03:84:94:ec:cc:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c8e17411e0100c914b040d514c28e1d7d36991e
Validity
Not Before: Mar 26 14:00:55 2026 GMT
Not After : Mar 27 14:00:55 2026 GMT
Subject: CN=b49c22b8a19bd3ed389e4f22e3ad1e7cab655557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b3:e4:7e:4c:e9:21:df:87:eb:ab:c2:04:d0:
fc:2f:3f:bb:84:b2:01:9c:68:74:c5:be:e6:88:4c:
e6:4e:68:f9:90:be:47:78:64:56:44:f7:bb:a0:33:
ad:b5:1a:78:fd:9c:a7:e1:f3:f7:fb:89:f3:a6:a4:
10:5e:c1:73:0b:70:ae:30:ea:5f:c6:c3:4f:46:c5:
2e:6d:2a:77:22:fc:61:50:5e:e4:b1:d9:bf:03:ec:
e0:78:f7:da:11:dc:d5:b9:a5:f8:5a:93:09:5b:2f:
0f:ac:83:5b:2e:ec:b1:78:10:b5:40:b1:87:3f:1c:
09:a9:af:b8:ef:a1:87:fe:3e:89:94:00:12:3d:db:
b3:5a:3f:d5:7e:4e:c2:1a:10:2b:5c:36:04:90:10:
f5:0d:a3:29:07:84:6f:b1:2a:25:3d:a5:63:f4:ac:
d1:6d:77:1b:b8:e1:0a:b5:c2:f6:85:66:e0:33:c1:
31:4c:bf:f5:c3:59:08:52:30:4f:ab:3c:bd:12:f8:
86:51:49:a1:d2:21:15:27:17:7f:63:5b:b0:75:85:
59:56:44:2e:df:39:83:86:e8:b9:9e:7b:ff:9c:ee:
96:a4:22:3c:75:3e:3e:25:fd:21:d9:b6:94:2b:1e:
d6:c0:bc:c4:ee:00:d2:8c:10:78:31:61:8e:a4:6e:
7a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9C:22:B8:A1:9B:D3:ED:38:9E:4F:22:E3:AD:1E:7C:AB:65:55:57
X509v3 Authority Key Identifier:
keyid:1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:43:35:b5:da:f6:d2:db:54:7a:fa:c8:31:c4:bd:97:e2:cc:
78:30:6b:34:ee:1b:51:6a:6c:be:2c:0e:bf:a1:fb:a5:76:9c:
69:8a:9d:43:f9:ae:c4:fc:54:41:1a:f4:5a:a9:6d:f6:59:93:
f2:14:77:1f:1b:2e:2f:55:4c:be:55:1e:07:7e:eb:96:60:9a:
a4:9b:4d:7e:8a:b0:d7:5d:fa:25:ba:f2:d5:5e:8d:b5:de:47:
0d:bd:85:d8:59:b6:79:52:27:91:af:f7:30:d3:7a:82:f1:1c:
6b:79:79:ce:03:f9:2c:2d:93:f2:e5:67:03:3a:aa:ad:b1:94:
36:8f:21:94:0c:50:95:93:68:f9:4d:37:d4:09:95:41:fb:31:
54:c9:85:02:b2:73:8e:62:71:9e:ba:af:ab:a1:01:84:7f:4a:
f1:59:04:31:b2:59:3d:c4:1c:36:2c:ed:90:cc:97:cc:08:d7:
a6:44:d9:ea:58:a5:1d:89:3b:58:ba:8c:15:57:37:d9:fc:64:
87:b2:60:e0:2e:18:7c:63:5a:47:93:26:10:b0:9a:81:ea:81:
dd:8d:af:97:85:2e:84:b3:6c:ed:13:40:38:bb:7b:87:e3:b9:
fa:92:4d:c4:33:d8:38:a3:df:4c:d5:c1:38:1d:2b:52:21:5a:
54:66:2e:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qcrs6m0ThhAq7A4SU7Mx6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOGUxNzQxMWUwMTAwYzkxNGIwNDBkNTE0YzI4ZTFkN2Qz
Njk5MWUwHhcNMjYwMzI2MTQwMDU1WhcNMjYwMzI3MTQwMDU1WjAzMTEwLwYDVQQD
EyhiNDljMjJiOGExOWJkM2VkMzg5ZTRmMjJlM2FkMWU3Y2FiNjU1NTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirPkfkzpId+H66vCBND8Lz+7hLIB
nGh0xb7miEzmTmj5kL5HeGRWRPe7oDOttRp4/Zyn4fP3+4nzpqQQXsFzC3CuMOpf
xsNPRsUubSp3IvxhUF7ksdm/A+zgePfaEdzVuaX4WpMJWy8PrINbLuyxeBC1QLGH
PxwJqa+476GH/j6JlAASPduzWj/Vfk7CGhArXDYEkBD1DaMpB4RvsSolPaVj9KzR
bXcbuOEKtcL2hWbgM8ExTL/1w1kIUjBPqzy9EviGUUmh0iEVJxd/Y1uwdYVZVkQu
3zmDhui5nnv/nO6WpCI8dT4+Jf0h2baUKx7WwLzE7gDSjBB4MWGOpG56KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLScIrihm9PtOJ5PIuOtHnyrZVVXMB8GA1UdIwQY
MBaAFByOF0EeAQDJFLBA1RTCjh19NpkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEk0WFFSNEJBTWtVc0VEVkZNS09IWDAybVI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hNmM3ZWItYjcyZi00ODMzLWE1Mjgt
NmI0OWEzODkzYzc5LzEvSEk0WFFSNEJBTWtVc0VEVkZNS09IWDAybVI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9hNmM3ZWItYjcyZi00ODMzLWE1MjgtNmI0OWEzODkzYzc5
LzEvSEk0WFFSNEJBTWtVc0VEVkZNS09IWDAybVI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnEM1tdr2
0ttUevrIMcS9l+LMeDBrNO4bUWpsviwOv6H7pXacaYqdQ/muxPxUQRr0Wqlt9lmT
8hR3HxsuL1VMvlUeB37rlmCapJtNfoqw1136Jbry1V6Ntd5HDb2F2Fm2eVInka/3
MNN6gvEca3l5zgP5LC2T8uVnAzqqrbGUNo8hlAxQlZNo+U031AmVQfsxVMmFArJz
jmJxnrqvq6EBhH9K8VkEMbJZPcQcNiztkMyXzAjXpkTZ6lilHYk7WLqMFVc32fxk
h7Jg4C4YfGNaR5MmELCageqB3Y2vl4UuhLNs7RNAOLt7h+O5+pJNxDPYOKPfTNXB
OB0rUiFaVGYuvQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:16 2026 by rpki-client