Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
File: h4q7KZd6ZbFAystucqskzt3U6MU.mft (raw, json)
Hash identifier: ZE+GQgHRG0G4SooZTbN5fUYG90Cok8SmuGut4EWj19k=
Subject key identifier: 81:D2:07:4A:08:A2:C0:69:18:F6:42:D5:E0:71:C6:77:70:97:42:85
Authority key identifier: 87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
Certificate issuer: /CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Certificate serial: 019CDF8F411534C464FE97495D87308E8DEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
Manifest number: 0504
Signing time: Thu 12 Mar 2026 01:00:33 +0000
Manifest this update: Thu 12 Mar 2026 01:00:33 +0000
Manifest next update: Fri 13 Mar 2026 01:00:33 +0000
Files and hashes: 1: 2FxreVqUv_iXTp_gEHHtX_RyDvE.roa (hash: 6tKnUYnu6mjtenIrBJhX9fiu65PwuGcfSqr4GAWWO5o=)
2: RKI3XSz6XZy96Ol-18QcP9FlH4c.roa (hash: g/j02qL/fofi4lQDzUhm/wqo/x+TAc1YiiXTTjZy7lA=)
3: h4q7KZd6ZbFAystucqskzt3U6MU.crl (hash: NNXtOQg0yo484X1h6ezggVExk0oiEk0CVmpIs177Gvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:df:8f:41:15:34:c4:64:fe:97:49:5d:87:30:8e:8d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Validity
Not Before: Mar 12 01:00:33 2026 GMT
Not After : Mar 13 01:00:33 2026 GMT
Subject: CN=81d2074a08a2c06918f642d5e071c67770974285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:08:43:d2:40:0a:0d:90:fe:6c:42:e4:23:
b9:10:6f:23:cc:7b:a6:6c:de:05:20:c8:be:54:67:
61:86:0a:af:76:94:da:6d:fa:49:6f:e6:ce:c2:19:
92:7c:8e:78:88:80:df:3f:06:55:4f:15:3c:52:98:
a3:51:90:7b:4e:92:53:69:d3:8a:1d:ba:48:a4:a2:
8d:65:c8:f5:7d:2c:a0:e7:1e:0a:10:47:d8:f7:bb:
7e:c9:f1:88:23:1d:a6:13:e2:ec:13:1e:78:89:57:
8f:b4:6a:7a:b1:98:46:36:b0:c8:38:3b:02:d5:5f:
10:63:41:b3:98:1a:10:84:db:90:9b:0a:81:0a:87:
ca:a2:77:41:45:4a:c6:5d:fd:0b:48:1b:60:bf:be:
c1:fa:52:e1:a1:2d:6d:4c:59:4b:08:d4:0f:70:25:
7f:83:63:b4:3f:4d:6f:97:22:fe:27:04:8e:19:f7:
4d:65:7a:a7:60:66:3f:39:b1:84:e6:c9:4e:2d:bc:
f3:3c:17:d3:d9:ca:b0:db:d3:d0:ad:2a:39:48:e6:
92:3e:01:e3:e5:8c:fe:f3:5f:c8:47:f3:be:84:9f:
38:7a:3c:3c:1f:53:7f:49:e1:a8:88:bb:84:83:d8:
a6:80:ff:0b:63:ca:ae:3b:e0:75:a2:a5:13:fb:67:
e3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D2:07:4A:08:A2:C0:69:18:F6:42:D5:E0:71:C6:77:70:97:42:85
X509v3 Authority Key Identifier:
keyid:87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1e:dd:df:d5:a1:c0:59:2b:af:86:73:64:e7:23:d9:59:50:
6d:48:d7:e5:22:b1:e3:90:ed:4e:61:83:82:78:19:78:1d:dc:
e8:54:b1:42:ef:74:ae:2b:f7:ee:8b:9d:65:0b:aa:3c:2c:f4:
0b:e7:c0:17:7a:de:02:f4:96:a6:09:9f:6b:ba:e3:a8:52:94:
b3:f9:66:00:5a:e0:01:d5:1d:75:17:46:58:1a:15:3f:b9:d9:
ed:70:06:2e:37:37:91:03:bc:3c:b5:0d:c7:a9:78:24:cc:97:
b9:a0:a9:3a:c6:41:0b:c0:12:99:09:44:04:95:9c:32:e4:01:
b9:0d:94:f2:bd:4f:2e:91:fc:e1:9d:95:b9:5e:03:18:06:4f:
71:32:0b:13:20:02:5f:8e:f5:89:7a:ec:54:bf:e7:a2:3b:ad:
61:80:b5:25:ae:75:4d:bb:d3:de:c4:8e:5d:1b:b1:c0:28:dd:
80:64:f5:99:14:b9:4c:64:d7:88:da:d6:98:82:7c:3a:56:2d:
9d:e6:7f:0d:81:bb:ef:25:2e:be:61:34:20:7c:7c:e3:7d:0b:
ca:24:fc:c2:79:e5:73:bb:da:aa:28:18:bc:03:60:6c:bc:5c:
b0:d2:2b:28:4f:9d:1a:0b:eb:5a:bb:4b:a3:ef:30:f3:b9:8b:
aa:b8:b9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 09:32:18 2026 by rpki-client