Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
File: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft (raw, json)
Hash identifier: k0C2vRok0e64+Jz0elHeCylUmW0hrYlSmbLSuAzgON4=
Subject key identifier: 86:65:5E:64:A6:AD:8C:CB:06:3B:02:11:C1:D4:04:75:3D:4D:C7:F8
Authority key identifier: 87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
Certificate issuer: /CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Certificate serial: 01A06D2749BF01D6B16F3704B7644998FD5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
Manifest number: 17F4
Signing time: Fri 04 Sep 2026 16:01:26 +0000
Manifest this update: Fri 04 Sep 2026 16:01:26 +0000
Manifest next update: Sat 05 Sep 2026 16:01:26 +0000
Files and hashes: 1: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl (hash: ufr7BNyJ/UCUso+cHrqyn3DxRh22VXk3rV3pwDP1/Hs=)
2: pf2F8jqDhpJAuisFDDVK53DtP1c.roa (hash: gUPm9iAsnfZdwPMydWDH2B8Ki6HOxvfT2gKOapzDjp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:27:49:bf:01:d6:b1:6f:37:04:b7:64:49:98:fd:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Validity
Not Before: Sep 4 16:01:26 2026 GMT
Not After : Sep 5 16:01:26 2026 GMT
Subject: CN=86655e64a6ad8ccb063b0211c1d404753d4dc7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:81:72:b8:56:50:ac:d9:aa:8e:d9:f6:57:ab:
16:de:56:e6:69:f4:53:70:d4:b8:a2:8c:ce:7f:b8:
98:ad:5a:0d:66:0f:0a:dd:76:5b:08:17:91:6d:a7:
a1:f1:29:b0:46:af:c1:c6:75:fd:3e:3d:2d:76:29:
58:e7:9e:77:c3:04:76:40:d0:b3:e2:6b:6d:0b:b2:
3d:4c:8e:a9:e0:75:d3:78:ef:1e:ac:08:e8:9f:be:
a0:95:47:00:45:66:c2:d6:06:7e:5e:5e:c8:9e:37:
09:7f:24:0f:e2:83:e2:b9:48:56:41:0c:8b:05:f9:
0f:53:ba:68:42:8b:1e:1b:b5:c4:39:36:17:67:3f:
1c:29:59:26:a9:b7:0f:3a:4d:91:f7:f7:db:02:77:
5d:5f:ae:3e:c2:cf:b7:71:bf:a5:c3:63:4a:72:cd:
23:4c:d6:b2:71:4d:51:cf:41:91:34:ac:66:5f:60:
7b:6f:85:9b:67:94:ba:6e:d6:eb:03:9c:8a:50:30:
79:2e:20:13:c4:3b:22:73:b0:13:be:2d:7f:f3:eb:
be:d2:be:17:1c:e2:d7:ba:f3:b3:70:0a:ed:5f:c1:
05:db:5b:7f:28:3a:12:cc:e2:f3:02:99:c4:53:15:
7d:1b:72:b5:4b:29:1b:f0:69:3b:82:23:9a:66:91:
92:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:65:5E:64:A6:AD:8C:CB:06:3B:02:11:C1:D4:04:75:3D:4D:C7:F8
X509v3 Authority Key Identifier:
keyid:87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:78:5b:a3:b8:87:4a:22:82:4b:4d:32:ed:0c:0d:93:35:92:
56:55:ec:5a:02:ec:bf:1d:bd:62:80:b9:1a:ba:cd:b1:74:e8:
f5:b7:7e:56:f9:50:d3:86:63:30:e5:d9:5c:35:6b:c8:6a:ab:
0c:2f:54:20:66:9c:7b:5b:86:f0:79:eb:fd:dd:c1:db:2e:3c:
7c:8e:c2:e0:23:9e:e2:26:d0:8b:0b:5d:20:fc:48:59:e4:61:
66:65:95:ee:ed:df:5b:a8:de:dd:02:5d:d3:1b:6c:18:cd:ae:
ca:6d:af:f2:56:00:2e:cd:f5:2e:91:e8:0d:0d:6a:b0:f3:01:
cb:60:e1:3f:1e:c9:d6:c4:e1:ad:55:48:0c:c6:48:cb:7f:66:
3e:ef:33:99:a1:fa:c0:db:c7:9a:77:aa:c9:cc:76:e5:9a:79:
e8:2a:a0:1b:3d:7d:a7:09:30:88:5a:52:85:f4:d9:a8:4d:47:
71:e9:f2:30:da:1f:36:83:1b:b2:98:e6:e1:20:a9:de:cf:d8:
38:d0:bb:d8:68:d7:76:92:e7:1a:69:32:f1:c7:1c:63:a2:9b:
bb:2b:67:74:19:60:a0:6a:07:1b:18:60:fb:03:41:6e:e3:12:
40:bf:1b:74:5d:c7:ef:52:65:83:54:b7:5a:e2:14:92:6f:37:
37:b3:fa:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:56:42 2026 by rpki-client