Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
File: H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft (raw, json)
Hash identifier: Nyc+leHQGUxDENQ6jDUcSHpHAOSB3nN9XswSlyRy7uo=
Subject key identifier: 2D:F3:14:4A:B9:30:69:67:93:11:9D:26:EA:13:91:35:C9:DA:B7:BA
Authority key identifier: 1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
Certificate issuer: /CN=1f88b5e93522b898e76f45f478443c348f57b916
Certificate serial: 019D27E02847269AF3E76C9E67FCB70DABCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
Manifest number: 0895
Signing time: Thu 26 Mar 2026 02:01:34 +0000
Manifest this update: Thu 26 Mar 2026 02:01:34 +0000
Manifest next update: Fri 27 Mar 2026 02:01:34 +0000
Files and hashes: 1: 8qURvhbURFqQhTipEQhvqic1Rjg.roa (hash: ApBgxUKn6ILqzgArNYuAOilqc1LglRrQeJhEVrK//8s=)
2: H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl (hash: IvDB4k2Z2lpOWGW/xTr+iPihqtkGI35ZeBpMdi/EWMM=)
3: Yc842nPawebZwJ_3vPInht2PhWc.roa (hash: pK4l4MkPAVEDkDlaUNSdspt7kS5pkyjEEEGIn1qkNvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:28:47:26:9a:f3:e7:6c:9e:67:fc:b7:0d:ab:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f88b5e93522b898e76f45f478443c348f57b916
Validity
Not Before: Mar 26 02:01:34 2026 GMT
Not After : Mar 27 02:01:34 2026 GMT
Subject: CN=2df3144ab930696793119d26ea139135c9dab7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0f:70:66:8b:d0:73:c9:71:12:18:6a:76:14:
e2:80:9f:60:45:de:b3:76:57:8d:20:74:e0:58:50:
b1:5f:28:65:5b:53:75:7c:86:89:62:93:43:30:73:
93:c8:ab:e6:6b:0e:09:3c:22:97:6e:76:ea:10:a8:
f2:6d:08:a2:d4:fc:f4:63:86:f9:32:ff:93:24:ec:
56:10:13:55:e8:dd:cb:42:48:ca:56:00:f0:7c:0c:
27:93:26:6f:1a:98:85:c0:9a:66:dd:d4:be:91:28:
db:a9:1c:d9:90:dd:3d:59:14:35:9a:44:6c:d0:99:
53:56:ab:cd:27:16:e8:ed:af:d0:c7:ec:b1:e1:e0:
32:60:f4:eb:31:8b:91:c5:c1:c8:fc:21:94:da:6b:
5e:ee:24:7e:8a:3a:ff:0f:b6:85:a6:6c:4a:a2:a5:
a1:8b:aa:21:9e:9e:b0:ab:81:dc:9d:94:e6:01:24:
74:74:97:c1:37:fe:f8:ba:5f:3c:68:65:99:c3:68:
b0:a6:e0:5f:12:78:04:5f:3c:b0:9d:af:75:b2:35:
cb:10:cf:f1:c8:b3:ba:30:38:41:ab:d2:51:8c:ec:
69:3b:28:9b:16:2a:15:43:69:48:bc:7b:f7:b2:01:
ec:2d:74:34:51:61:80:c2:2d:c7:fa:85:a4:42:67:
58:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F3:14:4A:B9:30:69:67:93:11:9D:26:EA:13:91:35:C9:DA:B7:BA
X509v3 Authority Key Identifier:
keyid:1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:5a:d5:0a:4a:ab:50:f0:ea:37:58:c7:d3:70:07:e2:7b:fd:
44:a0:8d:c6:c2:a3:d5:d9:28:52:48:33:99:2b:cd:4d:8e:49:
ed:cd:27:5e:00:c3:3a:6d:61:46:6f:9c:19:68:cb:99:b2:cd:
84:95:74:be:53:84:75:3a:a0:e5:b5:12:30:83:fc:b1:ff:d3:
1e:6e:cf:1c:fd:7e:b3:ef:90:86:89:f5:a4:93:06:33:ff:52:
dd:49:7f:ee:eb:7f:c4:6d:5b:20:4b:f6:aa:98:54:50:e4:b2:
f1:08:53:12:55:e5:a5:58:38:fe:2f:39:d2:ff:8d:e4:26:56:
be:2f:b3:51:f7:ee:56:f0:95:96:6c:64:98:02:bc:4b:b6:49:
5c:1c:20:68:44:bb:e2:f5:7f:01:4b:6d:cd:29:11:5a:4e:0b:
64:8c:71:d7:f1:8f:90:f1:d3:a8:48:21:b3:07:65:59:eb:17:
17:32:33:25:c6:b1:8f:22:4e:87:84:58:25:d6:4e:a5:cb:1d:
4c:1b:6d:a9:4d:1c:37:7d:ed:1c:37:81:50:f4:c9:a0:69:10:
bd:39:18:91:1c:2f:45:ae:a2:cb:60:98:97:23:b3:4a:bf:20:
97:d7:73:57:3f:01:d3:12:8d:18:0c:d7:76:b8:80:90:44:fa:
29:db:2b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:54 2026 by rpki-client