Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
File: h4_WMe8uxzeUN_18dvjiRf8IJLs.mft (raw, json)
Hash identifier: d2JQoGPKBfnUTkYyDHDHWjB0XybamK7hWdG+j1xe4U0=
Subject key identifier: 1E:F6:2C:CA:E9:BC:3B:13:78:0E:9C:3D:75:05:CA:4F:E1:F1:9F:11
Authority key identifier: 87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
Certificate issuer: /CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Certificate serial: 019D2704D65A294A4175CDA2CBAF0C66C1CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 22:02:01 +0000
Manifest this update: Wed 25 Mar 2026 22:02:01 +0000
Manifest next update: Thu 26 Mar 2026 22:02:01 +0000
Files and hashes: 1: h4_WMe8uxzeUN_18dvjiRf8IJLs.crl (hash: ekQWPmBQVFCUILoWFAakr8tS+VXj4nO5aoKSyNqez9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:d6:5a:29:4a:41:75:cd:a2:cb:af:0c:66:c1:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Validity
Not Before: Mar 25 22:02:01 2026 GMT
Not After : Mar 26 22:02:01 2026 GMT
Subject: CN=1ef62ccae9bc3b13780e9c3d7505ca4fe1f19f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d1:2e:c4:69:5f:99:49:10:4a:ae:ed:26:3d:
81:a3:d2:68:0a:df:7f:a8:51:e3:0f:8e:1b:51:eb:
81:36:f4:f5:94:d2:3f:28:91:7a:d8:68:1a:35:8c:
d4:95:5c:e7:46:0c:cc:d0:5b:28:69:0b:44:7c:08:
c7:7e:0d:db:a6:4a:52:32:bc:95:57:ea:a0:f6:93:
1b:2a:1b:8f:f4:f3:a4:0f:2d:3d:58:98:f7:de:8e:
91:2e:42:2e:c2:31:dc:52:1e:d0:29:9e:c0:3e:aa:
0e:3d:3b:86:84:0b:78:8f:48:c0:99:c9:53:b6:59:
50:4d:8e:fb:9f:06:0e:f0:37:aa:bf:c4:b1:fc:79:
18:b8:8d:43:ac:b3:95:0c:bd:36:9e:0d:27:47:53:
27:d3:99:50:f2:b2:c1:64:e4:15:a8:5d:b6:e1:82:
d8:50:5c:cd:26:ac:ea:e3:0b:3c:2d:2b:20:4e:b6:
01:e3:19:24:5c:ee:f5:46:98:6c:ce:fb:45:fd:0c:
62:29:02:7a:5e:d6:75:36:f4:66:25:59:5d:41:b8:
89:bf:fb:0a:e4:1e:d0:8c:c4:a4:fa:f0:25:4b:69:
ca:eb:6c:f9:a4:8e:3c:cb:f9:73:99:00:7c:c9:05:
c5:2f:68:6d:53:ab:22:0f:e1:84:2c:79:40:78:31:
c7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F6:2C:CA:E9:BC:3B:13:78:0E:9C:3D:75:05:CA:4F:E1:F1:9F:11
X509v3 Authority Key Identifier:
keyid:87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:b4:b1:84:68:16:02:82:8c:e7:08:b1:05:9f:6d:40:56:a3:
43:4b:6e:59:e5:8e:7c:53:39:4a:80:1a:d5:3e:7f:24:1b:3a:
49:4d:7d:06:5f:cd:a9:18:e7:b4:1c:37:1e:d2:06:3b:fa:b5:
9a:57:c3:f7:03:a9:d8:98:8b:93:59:cd:76:69:e3:d1:c1:d7:
e9:04:a1:50:9a:f9:42:2b:c3:d5:75:73:96:99:ce:fc:b7:1c:
3c:34:d5:c2:6e:15:b3:78:7b:3e:91:de:f4:6b:ac:70:3d:6f:
01:3d:1b:47:36:92:4e:61:65:26:8b:2f:24:61:ab:9c:eb:cc:
2b:37:46:66:b0:cd:04:81:8c:fe:85:95:28:4f:ea:73:bb:e9:
7b:70:ea:55:bb:04:cd:17:66:f6:5f:7f:e3:ff:8a:e8:d1:28:
93:2c:cb:d2:f9:6d:41:cc:ce:c9:2a:da:ef:3a:da:c7:67:0c:
67:4f:aa:ec:c4:6f:aa:d9:24:48:1d:36:cf:9f:1c:9e:f8:17:
51:e3:97:93:d5:37:f7:50:dd:b9:8b:66:59:7c:e5:ee:6c:46:
40:a6:c3:03:cb:d8:b9:b1:7c:7b:7a:a3:29:92:20:64:7d:12:
6c:1e:dc:cb:b3:d3:0f:0c:73:47:b3:d3:77:8d:cf:09:ec:14:
26:d6:8d:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBNZaKUpBdc2iy68MZsHNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OGZkNjMxZWYyZWM3Mzc5NDM3ZmQ3Yzc2ZjhlMjQ1ZmYw
ODI0YmIwHhcNMjYwMzI1MjIwMjAxWhcNMjYwMzI2MjIwMjAxWjAzMTEwLwYDVQQD
EygxZWY2MmNjYWU5YmMzYjEzNzgwZTljM2Q3NTA1Y2E0ZmUxZjE5ZjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNEuxGlfmUkQSq7tJj2Bo9JoCt9/
qFHjD44bUeuBNvT1lNI/KJF62GgaNYzUlVznRgzM0FsoaQtEfAjHfg3bpkpSMryV
V+qg9pMbKhuP9POkDy09WJj33o6RLkIuwjHcUh7QKZ7APqoOPTuGhAt4j0jAmclT
tllQTY77nwYO8Deqv8Sx/HkYuI1DrLOVDL02ng0nR1Mn05lQ8rLBZOQVqF224YLY
UFzNJqzq4ws8LSsgTrYB4xkkXO71RphszvtF/QxiKQJ6XtZ1NvRmJVldQbiJv/sK
5B7QjMSk+vAlS2nK62z5pI48y/lzmQB8yQXFL2htU6siD+GELHlAeDHHjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB72LMrpvDsTeA6cPXUFyk/h8Z8RMB8GA1UdIwQY
MBaAFIeP1jHvLsc3lDf9fHb44kX/CCS7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDRfV01lOHV4emVVTl8xOGR2amlSZjhJSkxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9hYTNkY2ItZGE2NC00OWM4LTk4ZWQt
YmE2Y2I0MjUyZmQ3LzEvaDRfV01lOHV4emVVTl8xOGR2amlSZjhJSkxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9hYTNkY2ItZGE2NC00OWM4LTk4ZWQtYmE2Y2I0MjUyZmQ3
LzEvaDRfV01lOHV4emVVTl8xOGR2amlSZjhJSkxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAybSxhGgW
AoKM5wixBZ9tQFajQ0tuWeWOfFM5SoAa1T5/JBs6SU19Bl/NqRjntBw3HtIGO/q1
mlfD9wOp2JiLk1nNdmnj0cHX6QShUJr5QivD1XVzlpnO/LccPDTVwm4Vs3h7PpHe
9GuscD1vAT0bRzaSTmFlJosvJGGrnOvMKzdGZrDNBIGM/oWVKE/qc7vpe3DqVbsE
zRdm9l9/4/+K6NEokyzL0vltQczOySra7zrax2cMZ0+q7MRvqtkkSB02z58cnvgX
UeOXk9U391DduYtmWXzl7mxGQKbDA8vYubF8e3qjKZIgZH0SbB7cy7PTDwxzR7PT
d43PCewUJtaNHQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:29:57 2026 by rpki-client