Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
File: H4ls09jRoGmdpSEFXftY3Abd3zU.mft (raw, json)
Hash identifier: F+qMyunANMUmVfS9/NTCEc/n6lx/t0X/fOsvIEcVLU8=
Subject key identifier: 3C:61:7C:3A:39:2B:3F:36:FA:ED:DC:DF:33:F7:D0:C8:47:CC:EE:3A
Authority key identifier: 1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
Certificate issuer: /CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Certificate serial: 01A17E85FE6233DB7D0B4F00330F6A585C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
Manifest number: 1AC8
Signing time: Tue 27 Oct 2026 18:01:12 +0000
Manifest this update: Tue 27 Oct 2026 18:01:12 +0000
Manifest next update: Wed 28 Oct 2026 18:01:12 +0000
Files and hashes: 1: COifVGWEFcRhTaZrSeru91euzgs.roa (hash: SkxWqr0s6K7O+f3IrnOYEXDaEsYzawyt1T+GjoB55B8=)
2: H4ls09jRoGmdpSEFXftY3Abd3zU.crl (hash: xtCxEi31cjM1HQSN7+bYeiFCInN0ZqM/d2eJSjvgdlE=)
3: OmGYQq3CiQUfIzH_XwnBKVSMUPQ.roa (hash: 3Ypfgyto+VD8FpA/ATTCpHQtTdUaXQt8NRaO+1mw2dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:85:fe:62:33:db:7d:0b:4f:00:33:0f:6a:58:5c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Validity
Not Before: Oct 27 18:01:12 2026 GMT
Not After : Oct 28 18:01:12 2026 GMT
Subject: CN=3c617c3a392b3f36faeddcdf33f7d0c847ccee3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:21:4e:32:20:94:c4:88:59:11:f0:31:88:
c1:66:93:7c:5e:06:22:ca:fd:09:8e:75:d3:17:ba:
a9:ed:1a:cf:0a:cc:77:24:fd:af:38:7a:5c:e7:4b:
2c:db:74:15:97:f2:0c:d3:60:34:33:9f:ff:5a:75:
ca:7a:0d:54:ec:04:58:71:b6:47:71:ee:4b:dd:b2:
54:34:83:aa:ff:87:00:5d:fe:f8:99:01:d8:8e:92:
6f:8a:63:2d:3d:90:4b:01:26:d4:c8:00:7d:62:31:
51:4b:ab:3a:56:9c:91:84:50:5a:59:17:2e:0c:aa:
08:cc:eb:47:68:be:6c:fb:e9:d0:73:61:96:83:25:
96:a3:e2:74:5b:89:c1:87:22:a3:56:16:fb:5e:18:
c6:9b:3c:70:17:14:fb:c4:a1:0d:45:4d:18:e9:f6:
45:ca:41:a6:25:91:5c:d2:60:f5:d2:f1:fe:34:16:
c6:06:25:82:19:cb:32:90:c5:06:c8:cf:af:43:e1:
ec:fd:da:36:0f:01:2e:45:d6:89:bd:54:92:6d:ac:
d2:be:6f:1f:9a:ed:54:80:b7:5a:0e:17:9a:76:4d:
3d:2c:3a:d1:d7:c0:e6:70:fe:a8:f2:74:fe:b0:08:
7a:64:56:68:a4:db:96:c4:fd:20:2e:33:5b:b1:55:
ff:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:61:7C:3A:39:2B:3F:36:FA:ED:DC:DF:33:F7:D0:C8:47:CC:EE:3A
X509v3 Authority Key Identifier:
keyid:1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:22:a0:93:69:39:f9:17:b6:ee:f1:1b:28:e6:fb:36:7f:24:
59:79:49:9e:dc:28:b3:e7:d2:60:e1:a2:4b:4c:0e:0b:02:5b:
cb:fd:6d:65:e9:99:cf:cf:83:ff:cf:3a:29:33:6d:c3:1f:4a:
d6:cb:b6:8e:4d:1c:ea:bd:5a:1a:11:f8:c3:ba:e9:53:00:78:
98:10:4a:4e:90:72:49:2f:ed:c6:43:e4:d4:64:cc:a1:ac:c4:
ee:85:e0:d4:23:09:40:84:08:48:ed:3a:c1:e9:e6:c4:81:2e:
fa:af:30:84:a2:11:e0:38:cf:07:ca:68:ba:80:0a:7c:0f:49:
b3:c0:a3:a8:77:df:02:50:d6:2b:03:2a:e5:0e:d5:14:95:9e:
7f:f2:99:19:5b:f2:31:b1:ae:0b:a7:21:3b:3d:a7:c1:d1:3f:
7f:64:5e:4d:8d:52:12:49:17:cd:6d:a3:48:b8:ef:b0:bc:15:
16:0a:b9:5c:db:44:c2:d6:da:dd:8d:66:6d:d0:9c:b5:df:d5:
c4:c0:d9:c2:94:35:20:bc:00:a5:02:19:8d:6a:7d:c6:cd:ed:
04:d8:38:32:27:77:3e:39:34:72:14:6b:d4:8f:99:b1:c6:9b:
e6:5c:e8:2c:01:12:85:cf:13:1b:10:ea:c2:88:64:e6:1d:d5:
04:ac:3a:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+hf5iM9t9C08AMw9qWFw1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmODk2Y2QzZDhkMWEwNjk5ZGE1MjEwNTVkZmI1OGRjMDZk
ZGRmMzUwHhcNMjYxMDI3MTgwMTEyWhcNMjYxMDI4MTgwMTEyWjAzMTEwLwYDVQQD
EygzYzYxN2MzYTM5MmIzZjM2ZmFlZGRjZGYzM2Y3ZDBjODQ3Y2NlZTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny0hTjIglMSIWRHwMYjBZpN8XgYi
yv0JjnXTF7qp7RrPCsx3JP2vOHpc50ss23QVl/IM02A0M5//WnXKeg1U7ARYcbZH
ce5L3bJUNIOq/4cAXf74mQHYjpJvimMtPZBLASbUyAB9YjFRS6s6VpyRhFBaWRcu
DKoIzOtHaL5s++nQc2GWgyWWo+J0W4nBhyKjVhb7XhjGmzxwFxT7xKENRU0Y6fZF
ykGmJZFc0mD10vH+NBbGBiWCGcsykMUGyM+vQ+Hs/do2DwEuRdaJvVSSbazSvm8f
mu1UgLdaDheadk09LDrR18DmcP6o8nT+sAh6ZFZopNuWxP0gLjNbsVX/7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxhfDo5Kz82+u3c3zP30MhHzO46MB8GA1UdIwQY
MBaAFB+JbNPY0aBpnaUhBV37WNwG3d81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDRsczA5alJvR21kcFNFRlhmdFkzQWJkM3pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mYWI0OWEtOTFmNC00NjBjLTgyN2It
YzMzMjc4MjJhMTM4LzEvSDRsczA5alJvR21kcFNFRlhmdFkzQWJkM3pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9mYWI0OWEtOTFmNC00NjBjLTgyN2ItYzMzMjc4MjJhMTM4
LzEvSDRsczA5alJvR21kcFNFRlhmdFkzQWJkM3pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyKgk2k5
+Re27vEbKOb7Nn8kWXlJntwos+fSYOGiS0wOCwJby/1tZemZz8+D/886KTNtwx9K
1su2jk0c6r1aGhH4w7rpUwB4mBBKTpBySS/txkPk1GTMoazE7oXg1CMJQIQISO06
wenmxIEu+q8whKIR4DjPB8pouoAKfA9Js8CjqHffAlDWKwMq5Q7VFJWef/KZGVvy
MbGuC6chOz2nwdE/f2ReTY1SEkkXzW2jSLjvsLwVFgq5XNtEwtba3Y1mbdCctd/V
xMDZwpQ1ILwApQIZjWp9xs3tBNg4Mid3Pjk0chRr1I+Zscab5lzoLAEShc8TGxDq
wohk5h3VBKw6VQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 05:26:38 2026 by rpki-client