Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
File: H4ls09jRoGmdpSEFXftY3Abd3zU.mft (raw, json)
Hash identifier: 8B+nETaO1newym2vj9QQZlLFR3u6rcyLwurvsKCyI0A=
Subject key identifier: AB:15:4A:68:A5:32:AA:6D:A6:3E:BE:C5:71:A2:4B:79:F0:55:27:66
Authority key identifier: 1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
Certificate issuer: /CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Certificate serial: 019FA1841E2423F17174DD0F3C237B9A2F69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 03:00:17 +0000
Manifest this update: Mon 27 Jul 2026 03:00:17 +0000
Manifest next update: Tue 28 Jul 2026 03:00:17 +0000
Files and hashes: 1: COifVGWEFcRhTaZrSeru91euzgs.roa (hash: SkxWqr0s6K7O+f3IrnOYEXDaEsYzawyt1T+GjoB55B8=)
2: H4ls09jRoGmdpSEFXftY3Abd3zU.crl (hash: WuPthpbHfrLy2ya4sNhJRFhkTioi6ddp5wmE4/b5ir4=)
3: OmGYQq3CiQUfIzH_XwnBKVSMUPQ.roa (hash: 3Ypfgyto+VD8FpA/ATTCpHQtTdUaXQt8NRaO+1mw2dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:1e:24:23:f1:71:74:dd:0f:3c:23:7b:9a:2f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Validity
Not Before: Jul 27 03:00:17 2026 GMT
Not After : Jul 28 03:00:17 2026 GMT
Subject: CN=ab154a68a532aa6da63ebec571a24b79f0552766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:75:01:72:98:66:5c:6f:f8:db:b4:b8:21:6f:
5f:dd:b4:75:b1:20:3e:c3:5b:8d:38:ca:4b:a4:b1:
20:2d:37:b5:b6:cb:1e:88:bc:79:37:36:ff:ce:73:
d4:9a:01:12:38:57:fa:d8:a2:21:56:fa:7a:98:29:
31:10:01:43:a5:1c:cf:17:77:90:ae:6b:1f:9e:16:
13:99:ca:07:60:23:99:c0:ee:4a:ab:e4:84:99:2d:
e4:ef:95:57:15:a4:47:e5:d9:c4:9a:60:69:42:14:
75:91:38:fd:0d:10:7c:1c:d1:4a:92:0f:dc:15:58:
7b:91:6f:e8:bf:ed:8e:06:40:a4:f1:d0:85:11:6e:
74:7a:a0:ab:7b:09:dd:82:d8:4e:53:c1:88:5c:0f:
ea:af:e7:f6:d0:d6:9c:7f:e5:a0:28:56:d7:6e:7a:
ae:ea:c7:f8:92:da:80:d1:93:26:55:a7:80:b0:a3:
44:1c:78:f0:c8:6f:1c:ee:15:59:d8:7c:36:e4:62:
46:e8:41:4f:0a:e8:fc:15:03:da:36:f9:4c:83:7e:
6d:f5:57:18:75:ef:04:6e:43:89:44:d9:fb:f6:5e:
44:da:37:32:47:10:5d:82:da:d9:8e:17:9c:e3:51:
17:7f:a0:d5:b3:9f:0f:0b:03:ae:ff:95:42:02:dd:
5a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:15:4A:68:A5:32:AA:6D:A6:3E:BE:C5:71:A2:4B:79:F0:55:27:66
X509v3 Authority Key Identifier:
keyid:1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:de:85:5d:a6:ca:5b:bd:9e:b3:e2:85:80:93:07:99:c7:b2:
7c:7d:aa:df:47:2a:d5:06:33:16:93:51:97:71:62:37:f1:56:
4e:cd:7f:44:1b:3b:93:fa:53:c3:65:bb:e2:e6:dc:f8:b5:29:
e4:6b:35:12:27:68:da:aa:44:89:b4:66:e0:35:83:4d:f8:5e:
4e:3b:55:3a:81:91:c5:76:2f:3a:21:d7:08:22:6f:6b:82:be:
99:82:08:ca:12:67:92:0a:31:fb:27:cc:77:57:67:59:ce:8b:
0a:36:68:2d:d6:47:22:34:c1:22:36:d0:a3:35:58:1c:a2:34:
35:94:17:ea:e3:8c:ed:3b:d1:7b:9a:fb:df:04:90:f8:82:33:
4a:7d:ae:d3:03:c1:09:61:57:eb:8a:70:6b:4b:1a:65:40:d7:
4c:1f:88:59:2b:0e:e9:57:fe:0f:db:a9:e7:f2:ad:5b:a8:19:
00:9d:1b:b1:d2:66:dc:dc:bb:a1:54:c8:39:29:a6:77:8d:32:
10:a7:1d:cd:ea:3a:62:bf:bd:87:59:9b:e4:53:1c:b2:0e:62:
47:8a:f3:76:29:d7:af:38:02:fe:f4:2a:b9:bb:a9:6d:34:c3:
4b:a1:e6:7e:2a:49:65:bb:75:fb:3e:ed:b4:57:b2:5f:50:b6:
a8:a8:95:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:47:02 2026 by rpki-client