Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
File: H4ls09jRoGmdpSEFXftY3Abd3zU.mft (raw, json)
Hash identifier: Gakv8yuuwhh6sNBj+7L/OWM+BrvgB2C7rc6/2AgIMDk=
Subject key identifier: 6E:04:16:40:09:48:16:C8:B3:A2:5E:7C:D5:BF:FE:5F:49:E4:7B:8C
Authority key identifier: 1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
Certificate issuer: /CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Certificate serial: 01A08B3121C1219C9C6467358CC6A367DE92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 12:00:47 +0000
Manifest this update: Thu 10 Sep 2026 12:00:47 +0000
Manifest next update: Fri 11 Sep 2026 12:00:47 +0000
Files and hashes: 1: COifVGWEFcRhTaZrSeru91euzgs.roa (hash: SkxWqr0s6K7O+f3IrnOYEXDaEsYzawyt1T+GjoB55B8=)
2: H4ls09jRoGmdpSEFXftY3Abd3zU.crl (hash: 6BuxSqVS2FMd691kTkkSsJ5Ad9SaUMJ+3d7JFIeX0gY=)
3: OmGYQq3CiQUfIzH_XwnBKVSMUPQ.roa (hash: 3Ypfgyto+VD8FpA/ATTCpHQtTdUaXQt8NRaO+1mw2dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:21:c1:21:9c:9c:64:67:35:8c:c6:a3:67:de:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Validity
Not Before: Sep 10 12:00:47 2026 GMT
Not After : Sep 11 12:00:47 2026 GMT
Subject: CN=6e041640094816c8b3a25e7cd5bffe5f49e47b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e4:94:f4:1d:d4:b3:73:cf:37:56:23:93:57:
ad:03:3b:f6:44:b1:4d:d9:df:01:e1:86:c5:b8:74:
52:02:a0:54:3b:71:2e:d3:04:f9:f2:ea:7b:c1:89:
f8:64:b6:e1:bf:94:21:3f:96:e9:c1:cf:b8:1c:4d:
2d:85:e4:8b:8e:26:66:ce:3a:b0:64:d0:8a:4d:8f:
7e:43:27:8b:b1:55:9b:c9:b5:9b:1a:cf:1c:37:01:
6e:5c:62:5b:ea:9c:00:2c:d7:52:9f:85:62:3c:42:
8a:60:68:c7:98:1b:39:7a:f3:ff:cd:b0:11:35:98:
bf:07:2d:78:68:03:32:35:0d:56:aa:5d:d5:91:c4:
9f:7f:bc:c5:bc:39:78:ef:25:8b:4d:4d:4a:41:c9:
43:23:24:0d:8f:82:a2:d2:78:9d:57:df:9e:1e:ed:
02:46:7a:b0:70:0c:e7:61:44:f2:54:cc:8d:02:e6:
d8:6f:c5:9a:66:bb:dc:a1:08:7c:bc:fc:50:b4:3e:
69:0d:d8:05:14:37:35:09:1c:04:aa:ac:d7:b6:02:
87:e6:bf:27:0c:df:af:e1:38:25:a0:65:b8:ce:d1:
03:24:b8:7c:9c:16:19:6e:66:4a:0b:ee:1b:a0:64:
85:f6:47:20:c3:30:32:a7:09:f5:e2:a5:af:8b:da:
89:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:04:16:40:09:48:16:C8:B3:A2:5E:7C:D5:BF:FE:5F:49:E4:7B:8C
X509v3 Authority Key Identifier:
keyid:1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a2:44:9a:c2:23:ab:79:f4:41:2c:a8:12:5f:22:05:31:ef:
96:a1:3e:b4:73:c9:90:83:de:5f:de:52:43:73:ce:36:32:bd:
33:cd:55:c7:39:6e:a9:63:f8:c0:1a:c5:35:c8:15:47:9e:fd:
31:7b:5d:b3:8a:f5:72:f1:90:f6:0c:0d:46:98:68:80:02:c1:
a6:20:cb:82:50:0d:e3:47:cd:aa:9b:de:02:9d:e2:ee:f4:65:
c3:f2:4b:60:28:19:a1:39:38:7b:39:af:52:b3:9e:5c:c1:f9:
04:90:75:04:b2:99:7a:e8:e1:99:ab:05:ed:48:12:73:01:c0:
61:2a:76:33:84:f3:53:80:53:fe:3c:c0:96:3e:1a:5a:da:35:
d7:13:42:2e:1c:c7:0b:87:24:31:ff:33:f6:89:27:1d:c9:e8:
c6:18:9b:f4:37:da:68:7b:7c:cd:4f:cc:f5:5e:ae:22:1d:f1:
8f:ba:27:47:e5:c8:96:38:16:a1:c0:fc:27:b5:f0:4b:d8:28:
dc:c1:d7:25:a5:a4:7e:08:2a:46:10:54:f2:5a:5d:9a:c1:ec:
b3:1f:4d:ca:cf:f9:9a:88:d1:cb:8e:dc:ba:c9:59:15:68:12:
74:3c:d8:c3:58:64:14:f9:ef:61:b1:74:5a:26:f8:25:52:7b:
c1:49:ff:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:03:34 2026 by rpki-client