Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
File: H4EMw_0igzjZuWlyXZW7M8TmWkg.mft (raw, json)
Hash identifier: +CcJlaEIIN/xew3LOXJbTKBCqAly06pFWkE34ldvQAc=
Subject key identifier: 5A:91:31:03:05:DB:AF:EB:D5:46:6F:FF:99:5D:7B:A6:B4:49:6F:7D
Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
Certificate issuer: /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Certificate serial: 01A0890C64B9AEABC6E7234C33A1E3DA3EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
Manifest number: 11DB
Signing time: Thu 10 Sep 2026 02:01:25 +0000
Manifest this update: Thu 10 Sep 2026 02:01:25 +0000
Manifest next update: Fri 11 Sep 2026 02:01:25 +0000
Files and hashes: 1: 1Ml0a3GV05dVKgyQm1AT6O8-qig.roa (hash: vDmeyy3WLO0HE90pdx4TXzv29kbhC6H5/Xm0kajhfQI=)
2: CyqM0bKo_ElRFFbv0AT5aDspxj8.roa (hash: QCCpwbYRSMOO3zc+/f/cjc8LG2FdpSD4/2ESkOJ9QkE=)
3: G2UXryvMWYgvdYG8XaPdE7pZyDM.roa (hash: PdqBjdoKDV3gCJFELA3WohXvGinSd8Rgt/NVk+mMS2g=)
4: H4EMw_0igzjZuWlyXZW7M8TmWkg.crl (hash: Xp4NSHT4Zp+PNN03MQCNpLkXE/S5gY8+fii3DwR68f0=)
5: Ix1gtJqQKv2Z_pk2hTiqDc-sy3M.roa (hash: MobBhVq4hyLxQ20aOszGD0QH9pUdXdw1af7wh+y1S9w=)
6: MQdJhE7DJVvNK-iEKOuroe7Wk6U.roa (hash: IDeLEFXV5ONQ6stNDvzS0ZYYqNXXaca6TX0gy7MtJtY=)
7: bR6c5Iui3A2Me6RPgnPPN-v7qhE.roa (hash: KNyqXXbQP8d6nmiYFJtuYs5Cbp0q38PpWcydNq1Wl3E=)
8: e-JA2-bFy7B8BkYmpPYNJ1dxBKc.roa (hash: bcrv+YrD4m4ddUBKigxs47ttA/eUpotZwmXx4eRmeE4=)
9: rM2i7X4i-xTENkByKDGS_394QYY.roa (hash: jSokmetv8aQ+53gcEJLpoqZU+R8uF/gkAzUpvjkIlBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:0c:64:b9:ae:ab:c6:e7:23:4c:33:a1:e3:da:3e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Validity
Not Before: Sep 10 02:01:25 2026 GMT
Not After : Sep 11 02:01:25 2026 GMT
Subject: CN=5a91310305dbafebd5466fff995d7ba6b4496f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0c:31:5e:cb:6e:1e:43:74:96:fb:4a:b7:8c:
d5:f6:8c:97:45:c6:4d:0f:b0:2e:53:24:80:d9:aa:
d9:44:a3:b0:38:82:c5:a0:2d:5e:1c:4d:32:88:56:
e0:81:37:96:17:30:e2:11:ad:2e:ab:c0:49:83:f4:
ae:72:9c:fe:23:3d:b9:57:a1:94:3e:45:85:6b:4b:
71:42:4e:02:ea:6e:c9:33:fe:41:53:c4:29:3e:10:
41:a6:32:f5:f2:07:9f:c7:15:c8:4c:1e:85:54:52:
e9:c3:3e:9f:3b:c9:04:b4:16:64:cf:30:de:4c:cf:
a1:82:bb:fd:2d:74:a4:53:50:15:fd:af:14:ab:2f:
a6:a0:68:ab:84:77:58:9c:be:3e:d2:e9:0a:69:13:
eb:44:9b:69:67:9a:f7:09:7a:d7:0e:0f:7e:8b:19:
4a:d7:64:9d:d6:be:eb:45:e5:c5:a2:9a:03:7d:fb:
02:29:f5:20:4f:9a:26:fb:47:0a:e9:d9:1d:eb:08:
b2:a0:16:93:13:72:90:4a:01:36:6e:05:64:77:89:
ef:8a:ef:06:0f:3f:f6:59:4d:aa:ef:48:b1:93:b9:
f0:8e:00:30:6f:cc:e7:51:e9:41:f6:d0:e6:7f:5f:
2a:d8:01:9a:7f:a6:d7:49:e7:1e:82:25:21:ba:56:
40:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:91:31:03:05:DB:AF:EB:D5:46:6F:FF:99:5D:7B:A6:B4:49:6F:7D
X509v3 Authority Key Identifier:
keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:a0:dd:91:75:c1:1b:56:2f:0d:ec:ca:e8:2f:85:61:8b:86:
d4:e8:cc:33:a1:64:f5:42:78:23:90:ee:e2:24:ca:7a:76:90:
7e:16:48:ad:38:aa:dd:1c:a1:9c:1f:47:2b:df:ad:7a:0c:52:
82:20:19:90:79:a2:8f:fc:9e:4f:d6:b7:bf:a8:77:6a:69:73:
d0:16:3c:e4:d1:3a:b7:ea:43:7f:0a:4d:e0:df:c6:87:16:ac:
44:6c:33:41:a4:d5:e2:30:cd:96:ad:43:b3:a3:2f:00:fa:cd:
8e:f2:1c:b4:1e:b5:09:6b:d5:36:bb:de:36:bd:38:0f:89:2b:
5a:b6:63:9e:ec:f6:8d:96:41:09:fd:b3:08:ff:9e:69:4d:09:
87:91:09:33:68:1f:ac:38:10:82:42:ba:e2:8e:6f:81:d4:75:
ad:7d:6d:10:b9:4e:99:b7:47:06:22:61:a6:b6:a6:f0:c1:81:
f9:53:21:83:5a:30:18:f4:b0:52:0c:5e:ce:ea:04:b0:6b:43:
1c:b5:91:54:03:1e:b6:ed:78:50:57:8e:1a:25:51:98:32:08:
c0:54:9b:29:5d:01:ae:a4:66:de:dd:02:b2:b3:30:aa:59:43:
fd:65:c0:3e:f7:f9:e7:4d:e3:0a:d4:3d:90:72:68:b9:b9:73:
0f:ae:71:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:11:56 2026 by rpki-client