Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
File: h4_WMe8uxzeUN_18dvjiRf8IJLs.mft (raw, json)
Hash identifier: FtUDTE6hbJ9EPIv28pqlstRQMyOqsA1ownF/rVN2UIk=
Subject key identifier: 11:DA:DE:DF:98:4F:76:3C:48:90:75:FA:6C:3D:91:AE:65:10:C9:9A
Authority key identifier: 87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
Certificate issuer: /CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Certificate serial: 019D3865F8509C00F54ABBFB56B41E3E17EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:39 +0000
Manifest this update: Sun 29 Mar 2026 07:01:39 +0000
Manifest next update: Mon 30 Mar 2026 07:01:39 +0000
Files and hashes: 1: h4_WMe8uxzeUN_18dvjiRf8IJLs.crl (hash: wGv5VbDiGJ78Y2sTY2MlNub8qvfOOYtcUkN9kKDdxW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f8:50:9c:00:f5:4a:bb:fb:56:b4:1e:3e:17:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Validity
Not Before: Mar 29 07:01:39 2026 GMT
Not After : Mar 30 07:01:39 2026 GMT
Subject: CN=11dadedf984f763c489075fa6c3d91ae6510c99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3a:c2:48:29:55:68:fd:35:2a:83:6b:d1:71:
34:7d:a6:53:a5:22:ab:9d:1f:bf:1b:ae:b9:a7:b9:
cb:7b:a6:e8:d1:bf:5e:86:14:b7:0d:55:02:db:7d:
75:37:17:18:2a:3a:81:52:cd:4f:bf:00:37:d1:12:
42:14:91:ed:97:53:98:2e:9c:f7:52:7a:0c:e2:86:
bc:ea:a0:d0:0d:ff:a1:5b:66:75:a1:e8:28:b2:88:
81:b1:af:f5:2c:0f:9e:b3:4c:9f:f1:e8:11:fa:e8:
cc:f9:ae:d4:ea:33:bf:85:76:94:95:e4:e4:3a:84:
26:7a:19:ba:42:74:26:90:23:07:48:e3:47:43:77:
cb:0e:11:2e:07:65:bd:da:91:7c:aa:94:74:6c:ef:
44:66:22:b3:7f:ef:64:4f:0e:3e:92:f3:c1:6d:68:
e6:7d:8e:6a:ea:bb:7f:aa:b6:9b:76:ad:3b:6c:9f:
f1:25:ff:bc:80:e6:88:ed:f1:a9:14:f2:1c:84:6f:
40:c9:2b:60:d6:16:eb:ad:be:db:96:70:ee:23:ad:
2e:ae:06:f8:ce:b2:e1:ad:6f:58:10:6f:f7:c3:66:
6c:c2:3c:c0:75:07:17:0b:8e:72:f1:54:e8:d9:d2:
28:6a:ee:bc:60:87:09:01:a0:6d:b6:73:9a:0e:09:
66:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DA:DE:DF:98:4F:76:3C:48:90:75:FA:6C:3D:91:AE:65:10:C9:9A
X509v3 Authority Key Identifier:
keyid:87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0e:25:6e:6e:c3:81:7b:9e:eb:02:de:bb:b4:31:b2:eb:ca:
8b:d8:ed:b5:6b:22:bd:da:64:97:8b:53:95:27:a6:a4:f3:86:
5d:c8:2c:a2:55:5d:1e:e4:f9:c5:bc:89:e0:2c:9b:75:d5:bc:
66:bf:f6:eb:03:72:9f:08:c4:4a:cf:90:ae:70:98:3d:13:f1:
a8:6d:3c:97:3a:4a:d7:68:6c:85:08:d6:bc:5d:45:f6:3b:da:
23:fe:c4:46:82:6e:f9:99:ac:c6:a6:e7:1e:eb:ae:14:b2:03:
d6:db:8a:86:6c:c5:fa:0f:20:d9:70:d2:c2:8e:5d:d9:1d:bb:
f7:ac:ac:a8:a3:1f:01:aa:02:15:78:f3:e4:2d:0c:5d:0f:50:
7b:16:ba:c3:c5:7d:a3:82:d8:f9:12:8b:a7:8b:78:3f:04:e6:
ee:8b:a3:c9:d4:ae:38:95:19:94:f5:8d:8f:0e:57:80:81:7c:
c1:bb:a5:bc:ac:a1:47:ab:46:58:f5:9b:27:d9:c8:ad:92:2a:
c2:9a:e9:24:73:da:cc:f5:e8:f9:71:9d:d0:b8:a8:a9:bc:99:
d4:d0:c9:48:a2:f0:d0:39:82:c4:18:3c:d0:4f:0d:1a:46:4f:
b6:fd:32:24:da:a3:4a:12:40:2e:16:9c:c3:00:f7:17:03:b9:
a9:7c:e4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:35 2026 by rpki-client