Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
File: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft (raw, json)
Hash identifier: QujVYLVhLvzWnugE8oAD6siIDQ9vPPreLRvPaIlRJoY=
Subject key identifier: CA:BA:4D:C8:03:74:22:7C:ED:8B:83:29:5C:66:7B:FF:1E:F2:A7:94
Authority key identifier: 87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
Certificate issuer: /CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Certificate serial: 01A1833EA8D03221B9105D2E50305EB0371B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
Manifest number: 1884
Signing time: Wed 28 Oct 2026 16:01:23 +0000
Manifest this update: Wed 28 Oct 2026 16:01:23 +0000
Manifest next update: Thu 29 Oct 2026 16:01:23 +0000
Files and hashes: 1: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl (hash: IPslD3VZkiTyXZLRgreV0C46zfCk7KH5s3dwnH37fRQ=)
2: pf2F8jqDhpJAuisFDDVK53DtP1c.roa (hash: gUPm9iAsnfZdwPMydWDH2B8Ki6HOxvfT2gKOapzDjp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:3e:a8:d0:32:21:b9:10:5d:2e:50:30:5e:b0:37:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Validity
Not Before: Oct 28 16:01:23 2026 GMT
Not After : Oct 29 16:01:23 2026 GMT
Subject: CN=caba4dc80374227ced8b83295c667bff1ef2a794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bb:bd:0f:34:ff:39:b0:08:5a:ef:38:8f:76:
52:44:02:00:87:b5:36:c7:33:30:5f:48:c2:56:9e:
9b:5b:01:04:df:94:3f:f7:7c:61:d5:74:0c:29:fa:
9b:dc:2b:23:12:fb:f3:d6:63:ed:d6:1c:23:ea:a0:
e7:e6:ac:9d:df:85:eb:12:77:3b:19:19:ee:f7:1b:
bc:f1:bd:5d:0e:16:8a:9f:b4:d3:cf:74:b1:55:a8:
c8:1a:3d:06:1a:f2:e5:d0:b7:96:3a:8a:6c:85:b7:
c3:c8:d2:cb:f5:24:c0:f6:3c:96:26:d0:8a:69:d9:
49:5b:98:3f:d0:be:80:ec:90:03:90:f6:c0:f5:88:
ac:76:39:81:b9:4d:96:07:48:e8:a5:3e:61:55:2e:
c9:31:f0:cd:b5:cb:1c:9a:f2:1e:ee:2b:c7:ba:ae:
99:d2:30:1d:97:1d:0f:18:19:32:76:fe:51:01:c1:
b1:a4:a9:73:eb:bd:b2:3d:2d:ad:c4:33:fa:3a:f9:
a7:6a:e2:5e:15:5d:ea:bc:89:3c:bb:3f:96:d8:4e:
9b:c0:2c:f9:9d:08:b7:d9:86:eb:2a:09:33:a9:f9:
03:68:f7:f3:e7:e5:50:6e:df:8e:f1:fe:08:3b:53:
ab:11:59:88:ca:9d:9b:e8:a4:11:bc:f1:99:ca:e9:
48:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BA:4D:C8:03:74:22:7C:ED:8B:83:29:5C:66:7B:FF:1E:F2:A7:94
X509v3 Authority Key Identifier:
keyid:87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c6:bb:e3:ef:a2:e8:1a:67:24:60:d9:69:1e:de:9b:3e:57:
5f:53:68:b7:d4:aa:3c:0b:2a:34:e2:52:10:35:8c:85:3e:bc:
f7:dc:f0:f8:5d:a3:06:f1:01:e4:34:fe:67:3f:52:35:5b:3b:
8a:1f:00:4a:c4:c2:3e:67:6d:76:4d:57:5e:a0:3d:e0:6d:9b:
9d:e2:01:31:04:94:56:1d:99:87:64:be:ee:da:b0:9b:33:a2:
03:a7:4b:33:02:05:66:ae:8f:c0:7f:cd:09:34:f1:d9:39:59:
b0:60:3a:d7:0e:0b:53:28:b6:e2:e4:bb:07:f1:fc:89:43:23:
ef:0f:14:87:7d:d8:a8:29:3b:d6:79:e2:0a:7f:ec:4d:73:e7:
67:30:a3:dc:a0:d0:1d:7e:e3:40:d0:bb:5b:84:8f:fc:79:55:
8a:d4:94:e7:3a:f2:68:be:90:d3:7f:95:79:1a:dd:6d:bc:64:
25:9f:7f:08:f1:ad:1c:97:51:67:86:51:8c:8e:35:7a:27:a7:
84:4e:08:76:59:d8:84:fd:d7:f0:6c:40:c8:81:42:f4:04:76:
99:09:06:e6:d9:6b:e5:e8:6f:8f:8f:c9:6c:ab:d6:cf:eb:25:
87:41:1f:63:41:eb:e0:ce:73:c9:d8:97:85:c3:2c:45:d3:fa:
ed:38:62:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGDPqjQMiG5EF0uUDBesDcbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ODUxNTQ0YTY0MjdkMmM4ZTI3OWU0Yjk0YjkyYWFmMDAw
OWVkMjcwHhcNMjYxMDI4MTYwMTIzWhcNMjYxMDI5MTYwMTIzWjAzMTEwLwYDVQQD
EyhjYWJhNGRjODAzNzQyMjdjZWQ4YjgzMjk1YzY2N2JmZjFlZjJhNzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bu9DzT/ObAIWu84j3ZSRAIAh7U2
xzMwX0jCVp6bWwEE35Q/93xh1XQMKfqb3CsjEvvz1mPt1hwj6qDn5qyd34XrEnc7
GRnu9xu88b1dDhaKn7TTz3SxVajIGj0GGvLl0LeWOopshbfDyNLL9STA9jyWJtCK
adlJW5g/0L6A7JADkPbA9YisdjmBuU2WB0jopT5hVS7JMfDNtcscmvIe7ivHuq6Z
0jAdlx0PGBkydv5RAcGxpKlz672yPS2txDP6OvmnauJeFV3qvIk8uz+W2E6bwCz5
nQi32YbrKgkzqfkDaPfz5+VQbt+O8f4IO1OrEVmIyp2b6KQRvPGZyulIhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMq6TcgDdCJ87YuDKVxme/8e8qeUMB8GA1UdIwQY
MBaAFIeFFUSmQn0sjieeS5S5Kq8ACe0nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC80N2IxZmQtMzRiNi00MTk1LTg0OWYt
ODU0MzRmNjE2OWYxLzEvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC80N2IxZmQtMzRiNi00MTk1LTg0OWYtODU0MzRmNjE2OWYx
LzEvaDRVVlJLWkNmU3lPSjU1TGxMa3Fyd0FKN1NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbca74++i
6BpnJGDZaR7emz5XX1Not9SqPAsqNOJSEDWMhT6899zw+F2jBvEB5DT+Zz9SNVs7
ih8ASsTCPmdtdk1XXqA94G2bneIBMQSUVh2Zh2S+7tqwmzOiA6dLMwIFZq6PwH/N
CTTx2TlZsGA61w4LUyi24uS7B/H8iUMj7w8Uh33YqCk71nniCn/sTXPnZzCj3KDQ
HX7jQNC7W4SP/HlVitSU5zryaL6Q03+VeRrdbbxkJZ9/CPGtHJdRZ4ZRjI41eien
hE4IdlnYhP3X8GxAyIFC9AR2mQkG5tlr5ehvj4/JbKvWz+slh0EfY0Hr4M5zydiX
hcMsRdP67Thijg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 19:42:05 2026 by rpki-client