Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
File: h4q7KZd6ZbFAystucqskzt3U6MU.mft (raw, json)
Hash identifier: 6nhnUyDap6OPr8yf6PkSnfSIdIVrFkD/waiTePntcwg=
Subject key identifier: 94:89:EF:42:79:AE:6F:64:DC:49:FE:0C:C1:84:D4:EF:FE:C7:90:C6
Authority key identifier: 87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
Certificate issuer: /CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Certificate serial: 01A11718015C77B15DFA5DEA3591F61CB243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
Manifest number: 0747
Signing time: Wed 07 Oct 2026 16:00:11 +0000
Manifest this update: Wed 07 Oct 2026 16:00:11 +0000
Manifest next update: Thu 08 Oct 2026 16:00:11 +0000
Files and hashes: 1: 5Edac9IUnILOtTlQImHIQXzm3FY.roa (hash: 0g3UdCMMmFcn185Anm2pj6+F5hE2ZCb92bl/1tjcAgw=)
2: h4q7KZd6ZbFAystucqskzt3U6MU.crl (hash: nWTkjLQMRDcIlXO0Z+klV/9astFnIoa5nU+aHRQkcZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:18:01:5c:77:b1:5d:fa:5d:ea:35:91:f6:1c:b2:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Validity
Not Before: Oct 7 16:00:11 2026 GMT
Not After : Oct 8 16:00:11 2026 GMT
Subject: CN=9489ef4279ae6f64dc49fe0cc184d4effec790c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7c:35:6c:ca:1e:26:4c:09:47:6c:06:33:e7:
89:b9:fb:8f:0b:d7:92:29:a5:7a:b8:64:81:7b:ae:
f8:aa:61:2b:ee:e6:7d:b0:b1:23:14:b2:97:4c:97:
af:9e:da:6a:24:7e:99:6a:cb:6c:0b:79:fa:04:c7:
5a:e0:bf:5d:36:07:43:8b:2b:e6:38:3a:71:8c:8f:
59:68:60:93:2b:a1:14:5c:18:c4:56:3a:33:c6:b2:
97:1e:e6:67:5e:1e:8b:9f:88:30:97:b5:da:40:69:
f4:77:a7:51:ed:03:d4:eb:5d:cb:95:a4:d9:68:a6:
47:4a:2c:87:2b:ef:50:b7:0f:41:de:3c:f8:aa:b0:
e6:5d:b9:57:ef:b0:62:58:f8:b8:2f:d2:a5:23:09:
79:be:f9:c8:9d:de:7e:59:88:81:df:e2:30:9d:0d:
68:fd:56:45:8a:3a:3b:f9:2e:47:d7:e1:15:6f:4b:
18:2e:bb:53:ad:5b:9a:c0:39:22:d4:28:7e:7f:39:
71:d3:3a:02:d8:9c:75:3e:60:0f:b4:a0:a5:a3:c2:
c0:3b:5c:1d:7a:aa:2e:b8:69:72:a8:65:51:45:6f:
9d:d4:a6:39:25:0e:1a:38:3e:e9:8c:84:3c:ef:b0:
d9:83:7b:12:cc:ff:27:c3:fa:04:ff:ab:5a:a6:d4:
69:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:89:EF:42:79:AE:6F:64:DC:49:FE:0C:C1:84:D4:EF:FE:C7:90:C6
X509v3 Authority Key Identifier:
keyid:87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:91:83:22:b3:48:bb:95:3f:9f:01:21:9a:e8:42:28:20:69:
31:d2:94:a2:7d:a9:79:d6:04:b5:f5:eb:05:8e:bc:15:c7:ca:
f3:e7:83:6e:5c:7e:e3:e7:5f:85:a7:26:f1:3a:84:58:77:4a:
e8:aa:a7:e7:9c:57:0b:2c:14:c6:40:ef:3d:d6:4d:51:77:35:
d1:30:e8:c8:06:98:82:7e:7b:35:f8:8a:21:9f:0a:1f:b5:58:
07:b9:d6:f4:ac:2d:f7:fb:d1:d4:5b:76:4e:6d:49:26:06:e9:
73:ba:6c:a9:dd:45:e3:2f:47:62:f2:c7:45:c2:3d:41:e4:45:
56:62:fc:43:68:2d:65:43:aa:5b:2a:8a:3d:c6:04:ed:01:64:
58:24:47:c5:92:7d:c4:e2:86:01:38:75:5c:e5:83:5e:35:08:
1d:59:81:36:1f:91:0f:9f:e0:02:be:c9:ed:70:b2:30:ca:df:
ad:f0:f2:a0:0a:7e:aa:c3:e9:45:8b:44:fb:f6:39:5e:e9:bb:
32:54:70:8c:d5:7d:d6:12:bd:70:cb:73:de:c8:71:f7:5a:6f:
c0:ed:93:1b:87:e0:4e:c4:4a:74:0c:ff:56:54:4f:ca:60:17:
1d:24:49:08:7e:4d:a5:6a:d8:b1:be:53:3e:d8:5a:18:d6:39:
6e:5c:ed:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 22:41:59 2026 by rpki-client