Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
File: H8SSerGUrhI3_eLTvvaQOIk_DcU.mft (raw, json)
Hash identifier: KRL4V0XLI1rRxWrlm15puAiQaAadMFdlEZWSc3M/NrQ=
Subject key identifier: 4C:9E:30:D0:D1:AA:68:9B:62:59:48:BA:C1:5C:D3:2F:A4:05:50:2C
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial: 019DCF74E16E5ACB3AC952300B154CA4FD61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
Manifest number: 1367
Signing time: Mon 27 Apr 2026 15:00:36 +0000
Manifest this update: Mon 27 Apr 2026 15:00:36 +0000
Manifest next update: Tue 28 Apr 2026 15:00:36 +0000
Files and hashes: 1: 2sAFd_2T-QSzjwb2W27Kt8rE6fU.roa (hash: dj9SKHwvFkDv++RY82DTGyA13Fg+Qhu+MtqHoiJGTCM=)
2: BKvtDw_ImhwxFNI1ekkbNYkUXwk.roa (hash: /VZVAuv74zBcHkw4LlrMbR/O9CrhLBCzyGy9tiiwFV8=)
3: H8SSerGUrhI3_eLTvvaQOIk_DcU.crl (hash: zc8AIeVqqUuD37n6ENcheu8GavBqSD8jUTV2eMBHrsc=)
4: L-HaZX9usmOHR6Pjk5otTPA1E78.roa (hash: /WFLFbwadanJe6aEYwFifcAD7b8Cq5KJxqbQIlZqM3E=)
5: UNn5xwOI4pjWBM6seGSkeIWT0Nc.roa (hash: t97vMIzTWrcDPs3sy3oo5iwIaLusws7qeRkc875GNOM=)
6: ftINbgTGX7o6dou2oYKs0I7El3k.roa (hash: jNNcSKLkF+5io94CcEYFYhsKdZJ9Jwyes5nzKJmJiP8=)
7: iyhjc5phndkfHPAS-mJffX2oKQ8.roa (hash: An3uftXXHdR16RwQ6iTIEtnf1eCcuaLyKpysOrsvtMU=)
8: rCmOJaiPm10i_Ntu2MdzaI9ze6U.roa (hash: swhB5WKc0D5wVrqnsiWG0FRIgd/l0/nxiZL6cviDAgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:74:e1:6e:5a:cb:3a:c9:52:30:0b:15:4c:a4:fd:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Validity
Not Before: Apr 27 15:00:36 2026 GMT
Not After : Apr 28 15:00:36 2026 GMT
Subject: CN=4c9e30d0d1aa689b625948bac15cd32fa405502c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:85:94:93:74:d0:ef:e9:f7:75:e3:89:2f:cf:
08:20:67:20:77:5c:be:81:e9:ab:71:0c:da:2e:eb:
a3:f2:9d:bb:97:2f:ca:c2:2e:a7:0d:ba:9a:69:b5:
c2:44:04:c7:5c:06:66:95:d4:ad:8b:2f:8e:c7:68:
70:e0:f4:f9:a9:32:d9:5c:75:02:73:ac:95:2f:4c:
54:c0:81:64:a5:94:b6:90:94:a6:22:a1:ec:6f:aa:
56:03:9d:a7:b2:8b:d6:af:95:0b:64:47:af:42:79:
9e:5d:8a:dd:fa:fe:82:6c:5a:07:f1:13:85:68:40:
d1:b2:10:3c:a7:eb:f1:88:75:c2:d7:7e:f2:a2:2d:
75:c7:3a:3e:86:1a:3c:96:c3:f0:48:0a:0f:0e:1e:
0f:13:1c:c0:95:53:0a:b8:b0:f6:f2:b3:ed:3e:97:
4e:8a:e5:7b:17:31:19:36:21:3b:71:ef:3d:3e:1c:
7b:ed:72:77:fa:8d:9b:b1:21:0b:f4:60:b6:9a:f9:
b3:db:28:f6:fe:7f:b2:8f:1c:5a:cf:22:3d:84:57:
21:ac:e0:48:bb:12:72:2e:61:a2:e9:7f:f9:03:f1:
8a:c4:37:82:5a:7e:fe:18:d3:6b:04:89:7a:f6:fd:
5c:6d:e0:a0:27:42:e5:4e:c1:19:2b:d9:d2:86:89:
0f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9E:30:D0:D1:AA:68:9B:62:59:48:BA:C1:5C:D3:2F:A4:05:50:2C
X509v3 Authority Key Identifier:
keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c6:8c:04:d7:64:37:ef:81:22:7e:87:93:03:df:15:1b:eb:
06:83:41:18:09:12:8e:a2:73:16:c1:0c:96:d0:ef:ee:7e:f7:
58:a2:4c:c7:67:a8:f3:ac:84:6c:5a:9b:3e:28:cd:45:41:67:
60:b7:af:75:c5:46:a8:7c:19:ab:98:c5:26:b7:bd:e8:24:a6:
19:64:ff:50:5d:94:72:2f:71:f8:7f:b2:77:54:61:59:d1:31:
84:67:3f:a8:4f:fe:ec:5e:00:5c:14:fb:b3:bf:d7:b8:ec:59:
9b:80:b7:30:a1:74:98:5b:36:77:24:b9:54:ed:f2:d8:6f:93:
38:cb:2f:9c:c5:e6:47:1f:60:ee:38:d4:e2:4c:a8:64:3b:be:
a2:f3:07:b7:8b:d1:2b:71:37:43:10:84:4d:9b:48:44:6f:f9:
19:2a:a5:c4:b0:c7:e2:18:6a:2f:46:2b:6c:ea:99:d4:5e:aa:
2c:a2:41:b0:03:ef:2e:35:71:b1:a2:e3:31:54:ba:c9:e3:9f:
bb:8e:ea:bb:b6:f1:d3:84:28:21:cf:43:d6:22:fe:de:23:33:
ff:b0:37:3f:22:90:7c:84:c9:0c:d4:ed:f7:34:ee:c9:cc:5f:
94:80:08:ab:1d:17:92:71:9c:6d:08:9e:34:f1:cf:62:71:b4:
4b:cc:79:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:07:27 2026 by rpki-client