Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.mft
File: h4R32LYtCfmui_29gSpT-X7UxXY.mft (raw, json)
Hash identifier: /GMBa/lbR/CKUlvRN/FRuL+FjPk+yo1Xjfs2Qn620fE=
Subject key identifier: D4:04:EF:57:C5:16:01:E3:1E:0B:C5:3D:DC:09:DA:DA:58:E7:66:38
Authority key identifier: 87:84:77:D8:B6:2D:09:F9:AE:8B:FD:BD:81:2A:53:F9:7E:D4:C5:76
Certificate issuer: /CN=878477d8b62d09f9ae8bfdbd812a53f97ed4c576
Certificate serial: 019D31BEEC394DD3291E53CD326E82F24188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4R32LYtCfmui_29gSpT-X7UxXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.mft
Manifest number: 06B4
Signing time: Sat 28 Mar 2026 00:01:28 +0000
Manifest this update: Sat 28 Mar 2026 00:01:28 +0000
Manifest next update: Sun 29 Mar 2026 00:01:28 +0000
Files and hashes: 1: VK_z4Ar4ArJujXib0iTDaTWfTUo.roa (hash: 7jC4P8FePKMkGfygUtuv427FEEIelby1i3hhTi94LOw=)
2: h4R32LYtCfmui_29gSpT-X7UxXY.crl (hash: GPHdEfHKukxHpjHyZ0kUeymwEuUI7+jPPIXQOwBhMJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4R32LYtCfmui_29gSpT-X7UxXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:be:ec:39:4d:d3:29:1e:53:cd:32:6e:82:f2:41:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878477d8b62d09f9ae8bfdbd812a53f97ed4c576
Validity
Not Before: Mar 28 00:01:28 2026 GMT
Not After : Mar 29 00:01:28 2026 GMT
Subject: CN=d404ef57c51601e31e0bc53ddc09dada58e76638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5e:46:75:13:ad:6f:a2:ab:77:17:3d:e8:09:
1d:76:90:d0:14:6b:ed:fe:41:9e:d4:07:59:5f:6c:
9e:d8:a7:49:e1:b9:d5:3b:e9:d8:a0:bc:15:52:63:
1d:a0:2f:65:d1:e2:93:63:5e:94:ba:c1:81:4e:ba:
81:24:76:c0:87:46:a4:db:c4:b3:92:c3:91:83:d0:
47:c8:90:36:cc:44:88:e9:0f:c8:28:8e:e9:89:b8:
a9:56:b3:d8:c2:2b:18:89:22:6b:72:9b:28:fe:fb:
92:82:2a:95:d5:3b:e9:66:d0:58:9a:df:45:1b:59:
d3:ee:fe:68:e0:e3:9c:c5:0c:75:82:7b:1c:58:6b:
3d:b8:51:0b:28:28:5c:9a:9a:b3:9d:32:c6:66:1b:
86:c2:df:0a:de:ff:13:9f:90:2b:7d:ea:fa:83:54:
20:1e:b7:02:25:7e:a1:b5:76:cb:50:cf:f0:1d:98:
b4:c0:d0:77:91:bf:82:c9:47:c9:93:e4:b6:22:e5:
b7:75:89:f6:b5:b9:98:e1:43:3a:2b:ab:13:5c:be:
69:a0:aa:50:d1:87:d9:80:83:22:b7:19:d2:5a:48:
42:6e:06:7c:30:6d:f8:a4:42:11:d4:91:0e:7d:fa:
9a:c1:2c:26:3b:81:4f:a7:6a:0e:d8:a0:88:d7:f2:
0b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:04:EF:57:C5:16:01:E3:1E:0B:C5:3D:DC:09:DA:DA:58:E7:66:38
X509v3 Authority Key Identifier:
keyid:87:84:77:D8:B6:2D:09:F9:AE:8B:FD:BD:81:2A:53:F9:7E:D4:C5:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4R32LYtCfmui_29gSpT-X7UxXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:17:a3:c1:f1:c2:fe:90:e3:34:11:45:51:2d:bf:59:e5:d8:
44:a7:f9:bc:09:c5:90:e2:6f:fe:90:73:ff:7a:72:d7:ec:d6:
a0:a3:d8:ca:5b:04:d9:fa:2b:f5:3f:9f:05:c5:d4:fb:b6:83:
51:cf:6e:c2:82:31:af:b3:00:6a:75:cb:e1:49:00:b4:5e:07:
71:22:dd:83:08:11:1b:26:26:bd:32:8f:1c:e7:5a:73:ed:f2:
02:f8:f8:94:ad:1f:fb:ff:c2:b2:b0:95:05:02:38:ec:53:77:
a0:93:1b:42:2f:8d:5f:48:ac:81:6b:81:f1:64:e0:05:01:af:
07:d9:56:77:db:74:34:a6:a2:da:c4:81:cc:08:ba:99:42:5f:
6e:dc:44:ba:b5:4e:a0:1d:14:2c:70:71:88:9f:78:a4:1d:36:
4a:95:b2:59:f5:22:da:93:bc:db:78:32:83:8d:72:84:17:f2:
c3:8a:f1:88:d0:2d:4c:bf:e8:44:46:3b:b6:fe:b0:84:65:53:
47:dd:78:80:fe:1f:20:1f:c9:e0:3a:27:f6:f4:7b:af:b7:41:
97:cf:2e:40:c1:bf:f2:4c:2b:57:93:c5:55:38:a3:18:5b:6e:
4d:01:6e:30:74:42:f0:83:e0:b4:f7:ca:f8:1b:79:10:83:9d:
c9:8e:b4:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0xvuw5TdMpHlPNMm6C8kGIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ODQ3N2Q4YjYyZDA5ZjlhZThiZmRiZDgxMmE1M2Y5N2Vk
NGM1NzYwHhcNMjYwMzI4MDAwMTI4WhcNMjYwMzI5MDAwMTI4WjAzMTEwLwYDVQQD
EyhkNDA0ZWY1N2M1MTYwMWUzMWUwYmM1M2RkYzA5ZGFkYTU4ZTc2NjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF5GdROtb6Krdxc96AkddpDQFGvt
/kGe1AdZX2ye2KdJ4bnVO+nYoLwVUmMdoC9l0eKTY16UusGBTrqBJHbAh0ak28Sz
ksORg9BHyJA2zESI6Q/IKI7pibipVrPYwisYiSJrcpso/vuSgiqV1TvpZtBYmt9F
G1nT7v5o4OOcxQx1gnscWGs9uFELKChcmpqznTLGZhuGwt8K3v8Tn5Arfer6g1Qg
HrcCJX6htXbLUM/wHZi0wNB3kb+CyUfJk+S2IuW3dYn2tbmY4UM6K6sTXL5poKpQ
0YfZgIMitxnSWkhCbgZ8MG34pEIR1JEOffqawSwmO4FPp2oO2KCI1/ILoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQE71fFFgHjHgvFPdwJ2tpY52Y4MB8GA1UdIwQY
MBaAFIeEd9i2LQn5rov9vYEqU/l+1MV2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDRSMzJMWXRDZm11aV8yOWdTcFQtWDdVeFhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lODNhYzUtNDQ4Yi00ZTQ5LThlYmYt
ODg0MmU1ZWRjZTAyLzEvaDRSMzJMWXRDZm11aV8yOWdTcFQtWDdVeFhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lODNhYzUtNDQ4Yi00ZTQ5LThlYmYtODg0MmU1ZWRjZTAy
LzEvaDRSMzJMWXRDZm11aV8yOWdTcFQtWDdVeFhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbxejwfHC
/pDjNBFFUS2/WeXYRKf5vAnFkOJv/pBz/3py1+zWoKPYylsE2for9T+fBcXU+7aD
Uc9uwoIxr7MAanXL4UkAtF4HcSLdgwgRGyYmvTKPHOdac+3yAvj4lK0f+//CsrCV
BQI47FN3oJMbQi+NX0isgWuB8WTgBQGvB9lWd9t0NKai2sSBzAi6mUJfbtxEurVO
oB0ULHBxiJ94pB02SpWyWfUi2pO823gyg41yhBfyw4rxiNAtTL/oREY7tv6whGVT
R914gP4fIB/J4Don9vR7r7dBl88uQMG/8kwrV5PFVTijGFtuTQFuMHRC8IPgtPfK
+Bt5EIOdyY60Fw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:07:27 2026 by rpki-client