Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
File: H4ls09jRoGmdpSEFXftY3Abd3zU.mft (raw, json)
Hash identifier: q43bbtnUQFeStcjJfwWyRzvhEJeWNjZHqrl+QMY9Fmw=
Subject key identifier: A3:CA:F6:93:27:29:BF:30:69:4C:38:5A:FE:81:9B:5B:92:37:22:F8
Authority key identifier: 1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
Certificate issuer: /CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Certificate serial: 019D37895D537CD434F0FDE7E98CD0B67749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 03:00:42 +0000
Manifest this update: Sun 29 Mar 2026 03:00:42 +0000
Manifest next update: Mon 30 Mar 2026 03:00:42 +0000
Files and hashes: 1: COifVGWEFcRhTaZrSeru91euzgs.roa (hash: SkxWqr0s6K7O+f3IrnOYEXDaEsYzawyt1T+GjoB55B8=)
2: H4ls09jRoGmdpSEFXftY3Abd3zU.crl (hash: H7K4d9Kh7j83vd+DpOFGo23jbuF5ouipzG+agfIolP0=)
3: OmGYQq3CiQUfIzH_XwnBKVSMUPQ.roa (hash: 3Ypfgyto+VD8FpA/ATTCpHQtTdUaXQt8NRaO+1mw2dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:5d:53:7c:d4:34:f0:fd:e7:e9:8c:d0:b6:77:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Validity
Not Before: Mar 29 03:00:42 2026 GMT
Not After : Mar 30 03:00:42 2026 GMT
Subject: CN=a3caf6932729bf30694c385afe819b5b923722f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ef:fc:9f:66:71:d0:76:4f:d7:a3:81:d0:8e:
17:7c:68:6a:26:3c:b3:1c:62:e6:bc:e5:a4:4a:61:
9b:8d:ef:10:17:8f:a8:08:02:9d:c8:ea:ab:e5:ee:
ab:31:55:78:bb:1e:ae:a8:a5:61:a0:45:6b:ba:8f:
be:07:44:3d:e9:1d:a2:3c:74:5e:d8:12:a3:bb:74:
6a:9e:02:ed:5e:81:78:b6:2d:97:fd:15:c8:5f:a1:
d4:e3:7e:9c:58:95:dd:00:9f:f2:f6:29:58:28:a3:
3f:38:70:09:6d:69:e7:de:c4:87:0e:07:cb:7d:f5:
6d:1e:71:cc:81:ad:13:d4:e4:90:ef:99:d2:a7:93:
a9:e3:62:2c:60:75:a9:40:28:98:42:3d:b2:a6:cb:
83:f8:50:4f:d7:ad:09:f5:ec:03:78:21:fe:95:e4:
38:e4:ad:d0:30:79:22:f8:1f:bc:14:4c:16:67:af:
d2:ff:3c:21:35:5b:bf:35:83:80:ee:aa:d8:ac:f7:
28:ca:84:7c:0b:e9:d4:dd:19:06:78:5d:ff:b3:8e:
64:1e:51:4b:62:38:7a:2b:a3:fd:84:d1:b9:36:de:
ee:d8:e2:9d:da:68:57:9e:74:a5:16:83:64:13:5f:
36:33:0e:7f:a6:8a:62:6b:34:fa:7a:9c:27:4a:84:
49:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CA:F6:93:27:29:BF:30:69:4C:38:5A:FE:81:9B:5B:92:37:22:F8
X509v3 Authority Key Identifier:
keyid:1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:63:75:c0:6d:e5:de:9c:43:1a:49:a6:7f:45:bf:a7:9e:bb:
68:be:11:94:e9:0a:28:e4:26:cd:cf:a9:be:12:91:04:14:ea:
30:98:c3:83:9b:40:ad:64:19:f0:05:a1:b3:4e:46:67:63:88:
3d:f2:e8:84:4d:b2:65:69:9f:a1:f3:71:1b:f6:e2:99:46:78:
f5:28:2d:a5:d4:b1:94:41:c9:3d:ba:17:48:8c:85:8a:77:17:
cb:74:e6:a1:8f:00:ea:b7:84:e7:c8:2d:bd:df:29:c6:5f:52:
51:67:fa:3d:f2:e6:22:df:1d:b8:cd:16:f7:60:73:5d:f1:9a:
c7:7f:b6:43:f8:1b:24:f9:56:57:61:d9:ff:98:ff:8d:87:36:
d2:89:88:fa:45:7c:b9:bc:2d:7a:5c:36:60:a8:f4:77:c9:04:
6c:ce:c5:ad:89:c5:8b:e9:4e:e0:da:bd:e1:0c:15:bc:aa:ca:
b3:a0:72:45:6f:42:84:7b:45:1b:35:56:59:0f:44:14:6d:bf:
63:e4:e0:67:68:2e:b7:da:31:8f:96:63:4f:7e:f5:50:37:91:
5e:74:00:68:1e:39:6f:0c:b8:2a:02:1f:06:ef:f4:53:fc:19:
8a:b4:6b:e0:65:8c:e2:2f:0e:30:2a:49:0e:10:0c:23:56:d7:
f5:f7:77:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iV1TfNQ08P3n6YzQtndJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmODk2Y2QzZDhkMWEwNjk5ZGE1MjEwNTVkZmI1OGRjMDZk
ZGRmMzUwHhcNMjYwMzI5MDMwMDQyWhcNMjYwMzMwMDMwMDQyWjAzMTEwLwYDVQQD
EyhhM2NhZjY5MzI3MjliZjMwNjk0YzM4NWFmZTgxOWI1YjkyMzcyMmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+/8n2Zx0HZP16OB0I4XfGhqJjyz
HGLmvOWkSmGbje8QF4+oCAKdyOqr5e6rMVV4ux6uqKVhoEVruo++B0Q96R2iPHRe
2BKju3RqngLtXoF4ti2X/RXIX6HU436cWJXdAJ/y9ilYKKM/OHAJbWnn3sSHDgfL
ffVtHnHMga0T1OSQ75nSp5Op42IsYHWpQCiYQj2ypsuD+FBP160J9ewDeCH+leQ4
5K3QMHki+B+8FEwWZ6/S/zwhNVu/NYOA7qrYrPcoyoR8C+nU3RkGeF3/s45kHlFL
Yjh6K6P9hNG5Nt7u2OKd2mhXnnSlFoNkE182Mw5/popiazT6epwnSoRJEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPK9pMnKb8waUw4Wv6Bm1uSNyL4MB8GA1UdIwQY
MBaAFB+JbNPY0aBpnaUhBV37WNwG3d81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDRsczA5alJvR21kcFNFRlhmdFkzQWJkM3pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mYWI0OWEtOTFmNC00NjBjLTgyN2It
YzMzMjc4MjJhMTM4LzEvSDRsczA5alJvR21kcFNFRlhmdFkzQWJkM3pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9mYWI0OWEtOTFmNC00NjBjLTgyN2ItYzMzMjc4MjJhMTM4
LzEvSDRsczA5alJvR21kcFNFRlhmdFkzQWJkM3pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMWN1wG3l
3pxDGkmmf0W/p567aL4RlOkKKOQmzc+pvhKRBBTqMJjDg5tArWQZ8AWhs05GZ2OI
PfLohE2yZWmfofNxG/bimUZ49SgtpdSxlEHJPboXSIyFincXy3TmoY8A6reE58gt
vd8pxl9SUWf6PfLmIt8duM0W92BzXfGax3+2Q/gbJPlWV2HZ/5j/jYc20omI+kV8
ubwtelw2YKj0d8kEbM7FrYnFi+lO4Nq94QwVvKrKs6ByRW9ChHtFGzVWWQ9EFG2/
Y+TgZ2gut9oxj5ZjT371UDeRXnQAaB45bwy4KgIfBu/0U/wZirRr4GWM4i8OMCpJ
DhAMI1bX9fd36w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:13 2026 by rpki-client