Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
File: H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft (raw, json)
Hash identifier: Ixp2GLRp/3sYMxNJfNPFX90tHjBPzq6aanENmspJqCo=
Subject key identifier: 47:59:D6:07:06:FD:45:B3:02:8E:41:CA:32:76:80:68:10:92:98:2B
Authority key identifier: 1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
Certificate issuer: /CN=1f88b5e93522b898e76f45f478443c348f57b916
Certificate serial: 019EB98FF5C3AB096F43BFCFBA682C7C4768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
Manifest number: 0965
Signing time: Fri 12 Jun 2026 02:01:19 +0000
Manifest this update: Fri 12 Jun 2026 02:01:19 +0000
Manifest next update: Sat 13 Jun 2026 02:01:19 +0000
Files and hashes: 1: 8qURvhbURFqQhTipEQhvqic1Rjg.roa (hash: ApBgxUKn6ILqzgArNYuAOilqc1LglRrQeJhEVrK//8s=)
2: H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl (hash: YEEdfgr0DPJImOitnasjqEXpOw5uzQs9UodHOXsVb3o=)
3: Yc842nPawebZwJ_3vPInht2PhWc.roa (hash: pK4l4MkPAVEDkDlaUNSdspt7kS5pkyjEEEGIn1qkNvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:f5:c3:ab:09:6f:43:bf:cf:ba:68:2c:7c:47:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f88b5e93522b898e76f45f478443c348f57b916
Validity
Not Before: Jun 12 02:01:19 2026 GMT
Not After : Jun 13 02:01:19 2026 GMT
Subject: CN=4759d60706fd45b3028e41ca327680681092982b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:54:a3:5f:34:7d:00:4d:19:4c:08:f4:7d:40:
c3:5a:24:7a:91:4a:b9:57:a5:50:c3:ce:ea:a3:7d:
5d:b7:06:33:2b:48:b6:54:2e:b4:e5:0a:d3:1c:da:
f3:7b:a9:d1:55:48:0e:03:94:ca:61:b5:a9:10:d8:
30:d2:c0:9f:97:90:7d:55:ff:cc:1d:70:f4:32:f9:
ac:fe:44:6c:ad:b3:66:76:d0:79:e1:83:25:56:7c:
59:11:b3:c9:50:f1:60:02:46:df:36:c7:17:15:4e:
f0:2b:4d:0f:83:83:41:93:98:cd:eb:eb:9a:ea:83:
35:a1:a4:0c:da:63:42:5d:c4:83:b7:fa:14:85:c5:
91:33:c1:de:eb:a5:8c:43:8d:c9:a3:b5:f7:dd:79:
4c:07:6b:29:65:9d:9d:b2:26:f9:1d:97:2c:0e:11:
d7:b7:32:58:ce:5f:63:74:08:1a:08:d1:62:8c:7a:
5e:ea:00:2f:de:ce:d0:b9:56:c0:8f:0b:be:f4:fb:
b4:97:66:f0:43:4d:e2:93:06:0d:1f:87:c8:d7:a1:
c2:88:31:5c:fa:00:f8:ff:11:f3:1a:46:3e:10:5f:
cc:7e:95:b6:57:3d:9a:0e:ad:15:5e:3c:12:d9:e4:
45:dc:57:7c:12:c6:be:eb:fc:c7:85:f5:84:8b:a1:
3c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:59:D6:07:06:FD:45:B3:02:8E:41:CA:32:76:80:68:10:92:98:2B
X509v3 Authority Key Identifier:
keyid:1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:10:69:7c:43:63:84:c1:69:39:2e:f2:45:0a:a5:70:33:ff:
18:39:fe:c9:6b:2d:42:9a:4c:9d:23:aa:96:3b:b1:bb:2b:0d:
2e:04:da:21:99:ed:d1:d5:a9:55:1a:72:65:24:57:3c:1e:cb:
7d:b9:fc:16:8d:28:c6:28:2e:88:2d:62:78:7f:d0:c8:81:5b:
d3:42:8e:de:1e:84:ac:21:14:23:59:84:ff:d3:9c:d9:14:8a:
f2:e9:61:5b:36:32:fc:9b:61:00:58:c9:d9:df:f0:06:4d:56:
53:59:b2:8c:50:8f:e4:fa:06:41:af:c4:82:19:09:ec:b2:6c:
33:51:ce:d4:7e:c3:4d:df:80:08:13:4e:ae:96:d2:73:7c:9c:
8c:a4:b2:f2:f0:d6:04:b6:51:fb:63:0e:a4:fc:44:bf:22:c2:
f9:20:59:ba:98:be:0e:97:ec:e3:b7:1a:ec:98:c7:bc:32:20:
d0:75:f4:86:30:49:aa:c7:0c:ea:cf:96:83:cf:7d:ee:a4:ad:
4c:0a:40:da:45:71:7e:14:60:d8:b4:29:7d:86:02:f6:e7:77:
4e:ea:93:28:be:cf:cb:13:75:0d:f9:a9:48:cf:3f:ff:24:c6:
10:82:c1:fa:e6:ca:65:cd:70:06:5b:be:42:3f:88:7b:03:46:
0e:e9:7d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:10:51 2026 by rpki-client