Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
File: H4ls09jRoGmdpSEFXftY3Abd3zU.mft (raw, json)
Hash identifier: AzgvuGkgB4gnC31t33HahcrLtQoN8jByr9e7g4kfMhE=
Subject key identifier: C3:42:C9:6F:CD:95:F6:AE:BB:9B:A0:1B:7B:86:0F:AB:18:B2:C7:35
Authority key identifier: 1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
Certificate issuer: /CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Certificate serial: 019EB9C6920BDFB99DDFA4E7B06E2D757A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
Manifest number: 1959
Signing time: Fri 12 Jun 2026 03:00:58 +0000
Manifest this update: Fri 12 Jun 2026 03:00:58 +0000
Manifest next update: Sat 13 Jun 2026 03:00:58 +0000
Files and hashes: 1: COifVGWEFcRhTaZrSeru91euzgs.roa (hash: SkxWqr0s6K7O+f3IrnOYEXDaEsYzawyt1T+GjoB55B8=)
2: H4ls09jRoGmdpSEFXftY3Abd3zU.crl (hash: K9UJIS9HeFjfjEGRLCD6Ge7XyAV2ku2duKl1bvGPOZI=)
3: OmGYQq3CiQUfIzH_XwnBKVSMUPQ.roa (hash: 3Ypfgyto+VD8FpA/ATTCpHQtTdUaXQt8NRaO+1mw2dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:c6:92:0b:df:b9:9d:df:a4:e7:b0:6e:2d:75:7a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Validity
Not Before: Jun 12 03:00:58 2026 GMT
Not After : Jun 13 03:00:58 2026 GMT
Subject: CN=c342c96fcd95f6aebb9ba01b7b860fab18b2c735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d9:06:a6:ee:f7:2f:e9:88:0c:9f:b0:45:7a:
37:00:17:7a:eb:c2:b5:fe:b0:c8:20:f6:98:e9:86:
ad:64:47:f2:ed:4f:03:68:05:65:94:d3:61:35:a9:
70:c9:77:71:64:31:41:e0:90:d9:be:af:19:2f:8a:
9c:d9:c5:71:e0:e3:54:51:68:c9:3b:0b:b6:6f:01:
bc:49:7f:e0:f8:aa:35:f7:55:9b:5e:ff:7c:70:48:
6d:15:b6:10:7d:27:72:4d:99:0f:5a:bb:16:12:31:
75:a2:ab:18:c9:15:b7:f2:9a:e7:72:5f:9a:ad:5d:
8f:e9:34:96:d8:ae:7c:a5:ab:82:13:05:c9:9c:c7:
59:42:9e:01:3d:f2:c0:ae:4f:e8:4f:f0:fe:fa:55:
6c:e1:a7:ab:ce:53:2a:a7:43:0d:ea:e5:6c:6a:e9:
62:08:07:ab:d2:1e:53:9c:41:b0:88:07:63:bd:1e:
9f:79:6b:47:70:cd:46:32:d3:6e:73:b2:9a:b1:a4:
c5:5f:be:c7:19:f8:1e:83:fb:96:57:9f:33:7c:66:
c6:10:3c:bf:a0:99:59:ac:bf:75:dd:d1:ea:81:ce:
1c:4a:ad:a0:82:bc:01:07:5e:04:46:f0:8c:c8:bb:
5e:f1:f1:97:e9:dd:49:cb:b3:01:ed:f7:7e:92:24:
24:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:42:C9:6F:CD:95:F6:AE:BB:9B:A0:1B:7B:86:0F:AB:18:B2:C7:35
X509v3 Authority Key Identifier:
keyid:1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:29:53:4a:82:17:05:56:a0:ff:fe:fd:cc:92:31:a2:95:8c:
69:09:f2:98:cc:6c:e2:43:aa:66:f1:de:88:2d:a1:1a:b2:6c:
49:01:d2:5b:92:9c:a6:da:0f:c0:ca:4b:3e:13:66:99:74:a6:
36:52:4c:0e:6e:29:22:bc:82:42:de:5b:ba:23:3b:e7:87:dd:
1b:af:c9:37:26:32:ee:0e:1f:6b:89:79:c0:b7:2f:56:24:a0:
21:56:50:5c:66:59:e6:a7:f8:45:9d:07:98:09:2c:cb:bf:85:
92:84:b7:41:07:46:b2:20:6b:9d:5e:c9:a6:63:f6:87:42:a7:
fc:7f:2d:7b:2b:a9:bf:dc:5f:41:a5:4a:07:c2:7d:4c:5d:89:
6f:d7:f6:5a:df:cf:11:a6:95:d1:6c:9d:c8:47:42:58:da:1b:
1c:8b:ab:9a:e7:2d:6c:b4:83:ab:35:17:3c:d3:2c:98:30:84:
31:d7:31:32:af:3b:59:d2:3d:58:3d:0a:e5:a8:85:8a:0a:ee:
ea:ed:6d:fb:e6:4d:89:1d:a2:7c:dc:73:96:bf:7d:85:b5:ec:
49:bf:76:34:09:19:a6:cf:99:2f:6d:bb:37:87:f6:cd:0d:32:
a8:f2:4a:53:f4:ba:1e:12:9e:eb:2e:72:0d:83:61:26:d6:32:
67:7f:73:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:02:57 2026 by rpki-client