Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
File: h4q7KZd6ZbFAystucqskzt3U6MU.mft (raw, json)
Hash identifier: lWXL3RjylAV8ITcPbod3O1lxfK81nJniMLnuadAlPBE=
Subject key identifier: 6F:D9:B5:D6:CE:3C:9E:F8:9F:D4:35:CC:59:75:5E:25:99:D8:5D:3F
Authority key identifier: 87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
Certificate issuer: /CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Certificate serial: 019DFB71D24D183BF90BFFD86F25B42C31CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
Manifest number: 05A8
Signing time: Wed 06 May 2026 04:00:33 +0000
Manifest this update: Wed 06 May 2026 04:00:33 +0000
Manifest next update: Thu 07 May 2026 04:00:33 +0000
Files and hashes: 1: DEFfBNh248XHDVu-BwTd6VMfFV8.roa (hash: 1e5rZ3fBzGEwRGyr2Q3kLvg86EH9L/cUWkBLg+rj2hY=)
2: h4q7KZd6ZbFAystucqskzt3U6MU.crl (hash: 14JUR1VEEQKNhngVRefPwUfBPGN5UZDYDQ3aM0YIPsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fb:71:d2:4d:18:3b:f9:0b:ff:d8:6f:25:b4:2c:31:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Validity
Not Before: May 6 04:00:33 2026 GMT
Not After : May 7 04:00:33 2026 GMT
Subject: CN=6fd9b5d6ce3c9ef89fd435cc59755e2599d85d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a0:22:c3:e7:8c:5f:ab:ff:be:32:68:a1:81:
87:e6:63:fd:b4:cf:32:7b:e2:31:88:02:f3:c6:a1:
43:cb:e4:59:dd:66:f0:56:38:5b:85:f9:32:8c:56:
5e:b8:6f:b2:9b:fa:e6:68:c3:9a:1f:77:82:d0:08:
c2:fc:67:71:f4:ea:30:09:49:9c:c1:1f:14:e8:0d:
3c:1a:ed:79:2b:68:4b:d7:06:53:47:10:a1:6e:62:
d5:88:2a:b1:7d:12:6e:e3:18:f1:8a:b5:97:9e:e5:
96:87:37:42:d2:20:fe:ea:eb:49:c1:31:05:78:14:
88:5b:48:bb:2f:b9:6c:bf:dc:54:25:60:e4:81:7e:
77:9b:3f:36:60:a6:f5:39:32:83:dd:09:74:21:5f:
65:ec:3c:99:23:17:14:5b:69:03:66:53:94:84:94:
a3:4a:99:0f:d1:b9:a4:25:d4:fb:a4:96:29:cf:36:
35:9e:25:ef:3c:d4:58:c2:eb:e9:2e:29:93:5a:4c:
24:e6:bf:68:ca:6d:dd:d6:56:b6:f6:c8:92:98:d3:
6b:2a:20:23:e4:23:bc:2d:a6:84:5b:2b:67:fd:11:
ea:84:88:48:91:77:3d:41:32:c6:e8:81:1b:7a:24:
81:c2:a3:a7:a6:ca:2f:db:4c:19:81:e1:e7:ca:d5:
1d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D9:B5:D6:CE:3C:9E:F8:9F:D4:35:CC:59:75:5E:25:99:D8:5D:3F
X509v3 Authority Key Identifier:
keyid:87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a4:4f:24:0a:f0:2e:ab:18:a8:2e:d9:8d:6c:37:e0:ff:14:
90:f7:57:d2:f1:bf:42:b4:39:93:b5:4f:73:fa:53:5e:11:b2:
ae:ce:b7:b9:b2:6f:a5:1e:01:08:36:a8:2f:34:00:48:fb:cc:
50:f6:b9:17:27:79:82:f5:d2:06:16:d1:e6:f3:4d:12:af:32:
d2:4a:10:f4:53:e7:22:29:48:69:1d:ed:94:4c:c5:51:e7:88:
9b:48:0b:1e:e7:27:9e:f5:6b:5e:57:57:f0:c4:a0:0d:96:60:
55:3a:ad:2e:58:6a:a6:ef:6f:aa:98:ed:3b:03:87:0e:c7:60:
bf:d9:ef:b8:0f:a4:2d:b2:ce:2e:dd:71:36:68:17:b0:80:fd:
95:27:73:80:d3:e3:f5:8e:5c:f8:56:1e:49:05:3f:0d:4a:9e:
29:09:82:d7:ec:64:64:7c:26:8f:de:36:fe:4f:6c:6e:f4:12:
f4:3d:fc:dd:a2:cd:0a:44:45:16:ba:86:48:57:07:57:92:6d:
78:9f:04:d6:82:fc:54:e7:35:63:7d:ac:e3:e9:7b:49:3a:c3:
3e:04:4d:47:6b:74:5e:a2:75:22:96:b7:a6:c6:62:36:87:ca:
be:36:18:e8:f0:75:f7:40:f1:10:2b:68:93:b1:65:ce:d5:41:
9a:a0:26:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 06:02:02 2026 by rpki-client