Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
File: H4EMw_0igzjZuWlyXZW7M8TmWkg.mft (raw, json)
Hash identifier: a8X5CFPW7Ic4Dvlw8MpZ9yIItGnBgZHal6dSnBXb3eI=
Subject key identifier: DF:B9:5B:40:FC:12:74:47:92:DE:59:24:C8:66:12:14:22:98:2C:33
Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
Certificate issuer: /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Certificate serial: 019D2AE0AD7A8B50B640F8D3D2DB5006C237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
Manifest number: 101B
Signing time: Thu 26 Mar 2026 16:01:00 +0000
Manifest this update: Thu 26 Mar 2026 16:01:00 +0000
Manifest next update: Fri 27 Mar 2026 16:01:00 +0000
Files and hashes: 1: CyqM0bKo_ElRFFbv0AT5aDspxj8.roa (hash: QCCpwbYRSMOO3zc+/f/cjc8LG2FdpSD4/2ESkOJ9QkE=)
2: G2UXryvMWYgvdYG8XaPdE7pZyDM.roa (hash: PdqBjdoKDV3gCJFELA3WohXvGinSd8Rgt/NVk+mMS2g=)
3: H4EMw_0igzjZuWlyXZW7M8TmWkg.crl (hash: j8nfI33hRo45qJ+09qGyx9NnDXJEEENeC7ciQmxUnFY=)
4: Ix1gtJqQKv2Z_pk2hTiqDc-sy3M.roa (hash: MobBhVq4hyLxQ20aOszGD0QH9pUdXdw1af7wh+y1S9w=)
5: MQdJhE7DJVvNK-iEKOuroe7Wk6U.roa (hash: IDeLEFXV5ONQ6stNDvzS0ZYYqNXXaca6TX0gy7MtJtY=)
6: bR6c5Iui3A2Me6RPgnPPN-v7qhE.roa (hash: KNyqXXbQP8d6nmiYFJtuYs5Cbp0q38PpWcydNq1Wl3E=)
7: dnZtq0bwm61Im0Ni1VeeuAbXXDM.roa (hash: gMOoRKcjYT072cXzuogKtXmAQF95le8qOIdAlIczn4o=)
8: e-JA2-bFy7B8BkYmpPYNJ1dxBKc.roa (hash: bcrv+YrD4m4ddUBKigxs47ttA/eUpotZwmXx4eRmeE4=)
9: rM2i7X4i-xTENkByKDGS_394QYY.roa (hash: jSokmetv8aQ+53gcEJLpoqZU+R8uF/gkAzUpvjkIlBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:ad:7a:8b:50:b6:40:f8:d3:d2:db:50:06:c2:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Validity
Not Before: Mar 26 16:01:00 2026 GMT
Not After : Mar 27 16:01:00 2026 GMT
Subject: CN=dfb95b40fc12744792de5924c866121422982c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5a:0e:14:a7:1e:78:32:70:73:36:6f:c5:5c:
0a:43:00:66:6b:e8:e1:62:14:76:b9:2f:a4:d6:1e:
c0:03:90:6a:02:35:24:7f:c7:7b:99:40:7b:38:7a:
ee:99:fa:f4:43:f1:74:27:1b:f3:66:aa:be:54:6e:
53:e4:ce:ce:15:61:18:6a:fe:b6:4d:ae:f1:8b:80:
f9:55:d9:db:a0:13:b4:ad:92:05:d8:9e:4e:f7:5c:
e8:94:63:10:7e:a5:d2:8b:2f:95:3f:dc:ad:55:03:
9a:bd:06:80:47:e1:23:0d:17:a8:09:b3:e1:21:d6:
75:aa:b4:c6:06:53:93:f8:6c:ab:4f:97:dc:a9:88:
d6:4f:09:a8:69:5c:1c:fc:7b:aa:af:d0:2c:77:0b:
1c:2e:b2:52:39:cf:f0:10:44:91:be:e6:a5:c8:9f:
af:2c:e0:5c:3d:4b:d8:ba:99:fe:f2:b7:7d:8b:13:
03:d0:8b:de:c9:9e:cf:db:77:ea:3e:0e:2a:f6:15:
a8:4a:3a:c2:80:f7:70:33:69:08:44:8e:c3:13:ca:
8b:68:b8:0c:4b:49:e1:d0:39:96:06:3d:78:3b:46:
2b:81:33:2c:52:3f:6a:4a:02:e1:87:76:4c:7f:d7:
a6:6b:0a:6b:bb:f0:40:dc:de:d6:91:70:d2:6b:b9:
04:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B9:5B:40:FC:12:74:47:92:DE:59:24:C8:66:12:14:22:98:2C:33
X509v3 Authority Key Identifier:
keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:8e:03:ea:ba:5d:39:d9:ad:20:5d:31:f3:47:7c:e3:c5:71:
24:78:76:14:37:55:e8:41:09:ad:00:1c:8b:a2:a6:5f:ca:9f:
d2:37:d6:7f:b1:b7:53:96:64:22:9a:87:ce:7c:ba:13:11:d1:
a8:3f:38:8e:02:3f:07:fa:08:84:02:ea:24:13:0d:ee:18:3d:
cf:6b:76:a6:4b:e9:a5:4e:d5:87:cf:70:70:cb:3c:b8:79:91:
cc:56:5e:72:cf:e6:d5:3e:1d:f5:6f:28:14:12:64:6f:6e:74:
72:03:e4:ef:9e:13:85:99:91:27:7f:de:f3:fd:1d:b9:96:36:
c1:ca:6f:29:5b:42:f7:5f:8e:53:9c:a7:28:7f:cb:35:14:c6:
d7:5f:37:fc:4c:d4:40:89:78:08:d7:38:af:25:5c:e9:38:2d:
ac:aa:30:eb:32:61:bf:b7:65:66:5b:62:7c:9f:c8:4a:5a:62:
55:c0:c6:8a:c4:8b:9a:fd:00:a1:bd:a2:73:49:e8:09:6c:af:
8e:81:37:70:bd:30:50:4a:46:3e:ed:ce:38:1d:b9:45:f0:ec:
0d:88:b2:bd:e5:65:9f:c8:58:39:f8:43:01:12:b5:80:e7:92:
2b:57:b1:e3:69:77:34:c6:15:07:de:97:bb:dd:b1:6e:e1:15:
17:7b:4d:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4K16i1C2QPjT0ttQBsI3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmODEwY2MzZmQyMjgzMzhkOWI5Njk3MjVkOTViYjMzYzRl
NjVhNDgwHhcNMjYwMzI2MTYwMTAwWhcNMjYwMzI3MTYwMTAwWjAzMTEwLwYDVQQD
EyhkZmI5NWI0MGZjMTI3NDQ3OTJkZTU5MjRjODY2MTIxNDIyOTgyYzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVoOFKceeDJwczZvxVwKQwBma+jh
YhR2uS+k1h7AA5BqAjUkf8d7mUB7OHrumfr0Q/F0JxvzZqq+VG5T5M7OFWEYav62
Ta7xi4D5VdnboBO0rZIF2J5O91zolGMQfqXSiy+VP9ytVQOavQaAR+EjDReoCbPh
IdZ1qrTGBlOT+GyrT5fcqYjWTwmoaVwc/Huqr9AsdwscLrJSOc/wEESRvualyJ+v
LOBcPUvYupn+8rd9ixMD0IveyZ7P23fqPg4q9hWoSjrCgPdwM2kIRI7DE8qLaLgM
S0nh0DmWBj14O0YrgTMsUj9qSgLhh3ZMf9emawpru/BA3N7WkXDSa7kElQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+5W0D8EnRHkt5ZJMhmEhQimCwzMB8GA1UdIwQY
MBaAFB+BDMP9IoM42blpcl2VuzPE5lpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8wZjA5MjctYzI5Yi00Njk4LTg1OWUt
ZjljMTgwYmE0ODAxLzEvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8wZjA5MjctYzI5Yi00Njk4LTg1OWUtZjljMTgwYmE0ODAx
LzEvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAto4D6rpd
OdmtIF0x80d848VxJHh2FDdV6EEJrQAci6KmX8qf0jfWf7G3U5ZkIpqHzny6ExHR
qD84jgI/B/oIhALqJBMN7hg9z2t2pkvppU7Vh89wcMs8uHmRzFZecs/m1T4d9W8o
FBJkb250cgPk754ThZmRJ3/e8/0duZY2wcpvKVtC91+OU5ynKH/LNRTG1183/EzU
QIl4CNc4ryVc6TgtrKow6zJhv7dlZltifJ/ISlpiVcDGisSLmv0Aob2ic0noCWyv
joE3cL0wUEpGPu3OOB25RfDsDYiyveVln8hYOfhDARK1gOeSK1ex42l3NMYVB96X
u92xbuEVF3tNTQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:58:24 2026 by rpki-client