Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
File: H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft (raw, json)
Hash identifier: W2Mw+EZ3mMnWYziBYytP8jVKgB9tqmEHzZyACmG6yew=
Subject key identifier: 1A:79:61:80:A3:32:42:AF:7C:ED:C6:28:74:BC:12:2D:17:08:6D:CB
Authority key identifier: 1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
Certificate issuer: /CN=1f88b5e93522b898e76f45f478443c348f57b916
Certificate serial: 01A18419F99FBFF6718D810020B9CC8FCD3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
Manifest number: 0AD7
Signing time: Wed 28 Oct 2026 20:00:57 +0000
Manifest this update: Wed 28 Oct 2026 20:00:57 +0000
Manifest next update: Thu 29 Oct 2026 20:00:57 +0000
Files and hashes: 1: 8qURvhbURFqQhTipEQhvqic1Rjg.roa (hash: ApBgxUKn6ILqzgArNYuAOilqc1LglRrQeJhEVrK//8s=)
2: H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl (hash: kKqLbhjlbbxFFsEVGnoWnvVdYRAzkuzyRo77MgVcH2c=)
3: Yc842nPawebZwJ_3vPInht2PhWc.roa (hash: pK4l4MkPAVEDkDlaUNSdspt7kS5pkyjEEEGIn1qkNvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:19:f9:9f:bf:f6:71:8d:81:00:20:b9:cc:8f:cd:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f88b5e93522b898e76f45f478443c348f57b916
Validity
Not Before: Oct 28 20:00:57 2026 GMT
Not After : Oct 29 20:00:57 2026 GMT
Subject: CN=1a796180a33242af7cedc62874bc122d17086dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c0:40:6d:6e:ac:92:31:58:0f:ae:c1:e1:51:
59:eb:9b:d0:3b:f2:98:cd:5c:cd:5f:17:26:f8:1e:
bf:1e:c3:bd:4f:38:39:4e:c8:8f:cd:8a:5a:8a:fa:
35:a6:36:b3:79:2c:cd:c0:5b:3b:ae:7d:8c:33:1f:
7a:6d:42:1e:82:68:08:f2:01:5f:b3:f1:f5:b8:97:
ea:28:7b:99:0f:c0:7f:d0:39:7d:6f:30:e4:aa:c6:
a7:e1:5a:c3:1f:d2:6b:95:04:29:7b:80:8e:ba:32:
41:33:2c:91:47:74:70:3b:6e:47:81:99:c2:63:60:
42:a0:43:0e:86:26:26:a7:40:4f:bb:b1:01:bf:b8:
78:81:e2:51:ef:2f:a7:5b:5a:75:71:e8:4d:bf:bd:
14:6c:97:47:31:05:38:73:65:f2:67:75:c5:4b:43:
82:a6:68:58:49:62:ee:cf:cf:67:41:23:6d:d1:4c:
f8:07:66:ca:0b:8a:87:56:6c:96:31:c4:ea:09:bb:
e6:ee:a5:56:e3:7d:97:ad:a9:60:ee:57:2e:01:0d:
ac:22:6a:bc:6a:bc:4b:84:82:f3:33:e0:5b:5c:8b:
50:c3:e2:3d:4c:c3:7e:51:ec:fc:68:02:1e:63:3b:
5e:02:05:5b:9e:26:18:2a:78:18:e7:43:eb:27:82:
95:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:79:61:80:A3:32:42:AF:7C:ED:C6:28:74:BC:12:2D:17:08:6D:CB
X509v3 Authority Key Identifier:
keyid:1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:29:72:9c:28:fd:0e:cf:e0:cb:1b:3b:bb:6e:35:c7:23:01:
1b:10:c9:3c:70:8c:e8:36:31:bb:f0:3d:4f:37:39:d1:b4:4c:
be:c9:a8:9d:ce:18:b2:80:9c:f7:82:5d:48:11:95:ac:36:b4:
72:a3:a6:c5:53:aa:ee:37:7e:04:62:8e:d2:4e:63:01:07:eb:
19:43:cc:c7:42:d9:0e:ca:7f:5a:95:8e:1c:5c:ff:c7:c1:e2:
02:03:3e:63:ab:75:f6:49:34:a8:05:f0:c2:e4:24:8e:96:61:
e8:a9:b7:ed:8d:c1:77:80:d5:1d:f1:25:62:49:f3:b4:39:c2:
87:a6:01:90:43:e6:94:f2:0e:86:3a:9e:1e:c9:ad:b5:6b:39:
7d:d5:86:21:45:7d:41:f7:ef:05:5b:2b:8b:f6:96:46:9c:87:
0c:f4:f5:a5:e0:31:4b:c3:90:77:2f:30:39:9e:83:27:15:ca:
85:7c:4f:0a:8e:a4:bd:d5:ca:b5:e1:7c:69:79:90:fb:b3:2d:
00:63:53:9d:fd:c5:fd:0f:5c:94:56:b8:45:6f:3b:e8:65:66:
bf:8a:3e:36:b4:f3:e7:ed:5e:7a:60:4b:51:d2:a2:f4:52:fb:
5b:0e:1c:1f:9b:88:a2:37:c4:93:c6:3b:e6:04:ae:24:ac:24:
2e:ca:49:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 01:51:19 2026 by rpki-client