Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
File: H4mVTcWspw-Dcs96YrWry4oXwrc.mft (raw, json)
Hash identifier: 80IxGS2Rhrjs8aL1A848F0DXwqAaJJQ3jz3zyIUP2fY=
Subject key identifier: 71:A5:32:E2:9B:A6:F2:11:29:FA:B2:50:3F:8E:9A:6E:C1:69:5C:C9
Authority key identifier: 1F:89:95:4D:C5:AC:A7:0F:83:72:CF:7A:62:B5:AB:CB:8A:17:C2:B7
Certificate issuer: /CN=1f89954dc5aca70f8372cf7a62b5abcb8a17c2b7
Certificate serial: 019D382E3D2260A31F9C04629212CFAEE343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:47 +0000
Manifest this update: Sun 29 Mar 2026 06:00:47 +0000
Manifest next update: Mon 30 Mar 2026 06:00:47 +0000
Files and hashes: 1: H4mVTcWspw-Dcs96YrWry4oXwrc.crl (hash: cfkhytvsWPyKKcsQQvTvgaVLY7/iZ5a0hTX6K6C+wf8=)
2: i7zxXmP3XzYJwJEU_15zW59SCTc.roa (hash: yrt7UH4SWPcCzRagghuKP9FdTtwWfWz6NVniBPL/djQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:3d:22:60:a3:1f:9c:04:62:92:12:cf:ae:e3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f89954dc5aca70f8372cf7a62b5abcb8a17c2b7
Validity
Not Before: Mar 29 06:00:47 2026 GMT
Not After : Mar 30 06:00:47 2026 GMT
Subject: CN=71a532e29ba6f21129fab2503f8e9a6ec1695cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:71:46:86:95:e6:0e:d7:ef:a0:96:c9:b2:20:
43:d8:3f:dd:9f:ea:de:67:0a:c9:36:22:8f:69:de:
8a:01:66:95:a4:3b:9d:97:a4:06:15:68:63:55:4d:
33:11:23:05:83:3e:41:d1:45:fb:6b:2a:7a:7e:92:
91:dd:fc:fe:df:f7:06:b3:60:fc:bc:0f:59:c8:a9:
97:1c:7f:bc:5f:bf:a5:ee:be:cc:d8:8a:23:9b:30:
8c:33:69:37:95:df:c1:72:fe:5f:15:df:8f:c0:86:
97:46:6c:5d:7b:63:24:7a:02:ec:79:f0:de:b8:56:
eb:fb:84:da:0f:19:58:b6:bd:43:16:f1:f0:21:a8:
bf:78:fb:d9:f7:67:ac:3c:20:65:bd:b6:6a:12:b7:
cd:b4:30:20:4c:ab:ed:bf:25:66:64:8b:2d:49:de:
85:49:0f:8e:d2:64:34:b8:2d:60:65:f8:21:5b:65:
08:61:86:2a:0e:3d:ce:5c:18:46:fc:99:3e:99:73:
cd:d5:45:4f:d1:5d:cc:f9:95:8f:44:24:98:8e:3c:
c0:17:3d:60:ca:4d:f2:ca:f1:a7:9c:e7:2d:16:a7:
6d:86:74:d9:f5:cd:13:c6:96:75:0b:f9:73:fd:16:
10:05:52:54:e4:40:cc:ed:42:86:2c:f3:4f:8e:05:
4b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A5:32:E2:9B:A6:F2:11:29:FA:B2:50:3F:8E:9A:6E:C1:69:5C:C9
X509v3 Authority Key Identifier:
keyid:1F:89:95:4D:C5:AC:A7:0F:83:72:CF:7A:62:B5:AB:CB:8A:17:C2:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:c2:2e:1f:7b:93:fc:cc:2e:0b:fb:ed:27:3f:ec:7c:c6:22:
54:57:04:f1:e9:4c:6c:bb:7b:0e:a6:b9:81:01:43:66:bc:cf:
d2:0b:df:61:5e:57:63:28:bf:9e:40:bf:61:99:bd:94:a9:fe:
f4:11:46:20:f5:7a:9a:25:c0:bc:7b:2a:ab:96:6c:9c:94:ca:
44:5c:51:c6:b5:1d:c8:97:dd:ff:13:1e:8d:c7:c6:7a:c7:d5:
f7:cb:41:71:0b:e0:cb:d2:1b:a5:18:d6:93:24:4a:e6:14:63:
66:bf:cf:a3:c1:26:90:e1:75:09:66:f9:22:9c:3c:2b:e0:ae:
b0:72:f5:84:98:c0:10:8b:28:02:f5:7e:9d:a0:59:ff:6d:fb:
6b:ac:e9:0b:ed:48:ed:97:e3:1a:fc:6c:20:e0:ea:9f:a1:80:
0f:b3:65:71:24:c7:e2:84:a7:97:73:98:57:9b:08:67:8f:a6:
c2:b5:80:6b:0d:50:b7:18:29:9e:6c:0d:58:83:00:81:f5:84:
f0:a0:04:d2:28:74:2f:5c:8c:9b:1c:a7:55:ec:78:b3:13:48:
d2:05:5a:73:26:82:2c:ba:47:3f:8d:c6:1d:4d:5c:79:1d:90:
40:66:02:10:bf:63:29:a3:84:ce:f8:4a:ce:a2:5c:32:b3:43:
6c:c0:c3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:15 2026 by rpki-client