Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
File: H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft (raw, json)
Hash identifier: fbngslQHaQFRb6qVXCcb26MfM9BGn1/ImYEyF0v+qKs=
Subject key identifier: CC:38:71:E3:B8:29:A0:F2:FC:ED:1D:00:4D:86:43:B7:36:A5:C6:44
Authority key identifier: 1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
Certificate issuer: /CN=1f88b5e93522b898e76f45f478443c348f57b916
Certificate serial: 019D394183BA1F851D6D110F38D106342F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
Manifest number: 089E
Signing time: Sun 29 Mar 2026 11:01:27 +0000
Manifest this update: Sun 29 Mar 2026 11:01:27 +0000
Manifest next update: Mon 30 Mar 2026 11:01:27 +0000
Files and hashes: 1: 8qURvhbURFqQhTipEQhvqic1Rjg.roa (hash: ApBgxUKn6ILqzgArNYuAOilqc1LglRrQeJhEVrK//8s=)
2: H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl (hash: OxUNJtJcXDEVCKG2wX5WAJwCXTQwSkU9nxGb/T8sq6k=)
3: Yc842nPawebZwJ_3vPInht2PhWc.roa (hash: pK4l4MkPAVEDkDlaUNSdspt7kS5pkyjEEEGIn1qkNvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:83:ba:1f:85:1d:6d:11:0f:38:d1:06:34:2f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f88b5e93522b898e76f45f478443c348f57b916
Validity
Not Before: Mar 29 11:01:27 2026 GMT
Not After : Mar 30 11:01:27 2026 GMT
Subject: CN=cc3871e3b829a0f2fced1d004d8643b736a5c644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d5:90:6c:e2:0b:4b:4c:9f:0a:81:0c:da:4f:
31:f3:97:94:93:38:62:66:7d:53:a6:c6:d8:cb:2f:
39:2c:d1:7c:ce:83:37:65:b2:86:bc:60:e5:0b:b4:
a9:a9:2e:60:76:14:31:5b:fa:a6:ce:35:5f:b8:d0:
5e:f0:69:d8:82:ea:c0:8b:70:85:73:30:21:a4:19:
29:c5:50:b5:6a:f0:a4:42:60:ef:63:a9:f1:45:c6:
89:2d:02:4c:84:12:7d:4d:e3:36:7c:d3:b5:2d:cd:
e6:7c:d0:36:a6:30:bc:23:2b:61:cd:61:94:43:44:
f7:fe:94:82:8d:64:77:56:39:bf:80:4b:ab:a5:3c:
18:57:a1:b0:9e:92:89:98:9b:05:4c:84:2d:87:ee:
c9:be:40:0e:06:72:b6:4a:2c:19:6d:76:c5:11:e8:
e3:be:87:f1:74:68:c6:7f:61:9c:2d:17:25:fe:4c:
cc:dd:fc:17:c1:e0:73:1b:b7:cb:07:29:0d:f3:b8:
5b:f3:4f:b1:ce:ae:ba:94:28:55:0d:1f:d6:1e:bf:
0e:c6:da:96:b5:75:f4:d7:46:a9:51:70:99:12:7c:
14:9a:ae:30:4d:52:5e:c2:3e:1d:d7:52:96:76:44:
83:8e:03:34:e3:82:8a:97:37:c3:83:e5:f3:40:f2:
14:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:38:71:E3:B8:29:A0:F2:FC:ED:1D:00:4D:86:43:B7:36:A5:C6:44
X509v3 Authority Key Identifier:
keyid:1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a1:c4:ee:4b:d4:66:5c:17:2d:46:b5:b9:2d:6f:f3:0a:83:
84:9f:ed:96:d9:f7:d7:61:af:19:b7:06:2f:63:f5:d8:52:df:
79:f1:d0:9b:46:3d:ca:0b:ec:4e:88:ab:7c:fa:ca:54:9f:b9:
41:f3:9a:8b:0a:30:f4:9e:a1:4b:19:76:be:e6:2d:aa:d1:72:
fe:1f:72:31:dd:3c:42:7a:3b:4e:a2:4e:b0:47:20:a3:18:0b:
48:6f:ca:31:9a:9b:dd:3b:fd:2f:df:35:f1:15:6e:ea:de:f7:
8b:c7:6e:f0:4e:d2:2b:a4:db:52:25:8c:be:4d:9a:2e:3f:b1:
1e:12:cf:c1:d9:aa:b7:67:25:ab:23:79:ae:7c:4f:f3:fb:17:
91:5d:c3:75:e7:92:60:e7:ee:85:e8:64:66:a0:8f:83:31:2e:
04:6c:26:87:2b:c5:4e:d5:85:e1:70:fc:ba:12:90:b7:fb:be:
d6:0c:ed:e9:2b:af:8d:30:53:4f:7d:f5:e2:c0:e5:a1:f9:ad:
ec:16:43:66:57:e7:09:b9:3a:ae:b4:0b:57:05:b7:83:59:85:
95:e0:9d:37:86:97:31:a7:f8:b5:39:b1:5a:f4:84:78:e5:1e:
22:da:24:45:66:8a:54:00:85:1c:a0:ca:77:2c:54:8a:7a:71:
ac:8d:13:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QYO6H4UdbREPONEGNC+bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmODhiNWU5MzUyMmI4OThlNzZmNDVmNDc4NDQzYzM0OGY1
N2I5MTYwHhcNMjYwMzI5MTEwMTI3WhcNMjYwMzMwMTEwMTI3WjAzMTEwLwYDVQQD
EyhjYzM4NzFlM2I4MjlhMGYyZmNlZDFkMDA0ZDg2NDNiNzM2YTVjNjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNWQbOILS0yfCoEM2k8x85eUkzhi
Zn1TpsbYyy85LNF8zoM3ZbKGvGDlC7SpqS5gdhQxW/qmzjVfuNBe8GnYgurAi3CF
czAhpBkpxVC1avCkQmDvY6nxRcaJLQJMhBJ9TeM2fNO1Lc3mfNA2pjC8IythzWGU
Q0T3/pSCjWR3Vjm/gEurpTwYV6GwnpKJmJsFTIQth+7JvkAOBnK2SiwZbXbFEejj
vofxdGjGf2GcLRcl/kzM3fwXweBzG7fLBykN87hb80+xzq66lChVDR/WHr8OxtqW
tXX010apUXCZEnwUmq4wTVJewj4d11KWdkSDjgM044KKlzfDg+XzQPIUxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMw4ceO4KaDy/O0dAE2GQ7c2pcZEMB8GA1UdIwQY
MBaAFB+Itek1IriY529F9HhEPDSPV7kWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDRpMTZUVWl1SmpuYjBYMGVFUThOSTlYdVJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82YTAxYjctYTRlZC00YjcxLTgwYjYt
Y2QzOTJiMGRlZGNmLzEvSDRpMTZUVWl1SmpuYjBYMGVFUThOSTlYdVJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC82YTAxYjctYTRlZC00YjcxLTgwYjYtY2QzOTJiMGRlZGNm
LzEvSDRpMTZUVWl1SmpuYjBYMGVFUThOSTlYdVJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqHE7kvU
ZlwXLUa1uS1v8wqDhJ/tltn312GvGbcGL2P12FLfefHQm0Y9ygvsToirfPrKVJ+5
QfOaiwow9J6hSxl2vuYtqtFy/h9yMd08Qno7TqJOsEcgoxgLSG/KMZqb3Tv9L981
8RVu6t73i8du8E7SK6TbUiWMvk2aLj+xHhLPwdmqt2clqyN5rnxP8/sXkV3DdeeS
YOfuhehkZqCPgzEuBGwmhyvFTtWF4XD8uhKQt/u+1gzt6SuvjTBTT3314sDlofmt
7BZDZlfnCbk6rrQLVwW3g1mFleCdN4aXMaf4tTmxWvSEeOUeItokRWaKVACFHKDK
dyxUinpxrI0TLg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:38 2026 by rpki-client