Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
File: H4EMw_0igzjZuWlyXZW7M8TmWkg.mft (raw, json)
Hash identifier: F8VIi8NjF3DjSokpZlVzLvdqHKZwApMgdHTxQaVM/wQ=
Subject key identifier: 76:E0:C0:96:61:91:30:03:FD:21:10:82:16:D9:B2:FF:4D:43:89:40
Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
Certificate issuer: /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Certificate serial: 019DCD19266174A613585FB1D5779DCE8F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
Manifest number: 106F
Signing time: Mon 27 Apr 2026 04:01:10 +0000
Manifest this update: Mon 27 Apr 2026 04:01:10 +0000
Manifest next update: Tue 28 Apr 2026 04:01:10 +0000
Files and hashes: 1: CyqM0bKo_ElRFFbv0AT5aDspxj8.roa (hash: QCCpwbYRSMOO3zc+/f/cjc8LG2FdpSD4/2ESkOJ9QkE=)
2: G2UXryvMWYgvdYG8XaPdE7pZyDM.roa (hash: PdqBjdoKDV3gCJFELA3WohXvGinSd8Rgt/NVk+mMS2g=)
3: H4EMw_0igzjZuWlyXZW7M8TmWkg.crl (hash: XEWa/3nCUmhykFMHtOO85jDJ8XTTFfM7/ejfyD2xWh4=)
4: Ix1gtJqQKv2Z_pk2hTiqDc-sy3M.roa (hash: MobBhVq4hyLxQ20aOszGD0QH9pUdXdw1af7wh+y1S9w=)
5: MQdJhE7DJVvNK-iEKOuroe7Wk6U.roa (hash: IDeLEFXV5ONQ6stNDvzS0ZYYqNXXaca6TX0gy7MtJtY=)
6: bR6c5Iui3A2Me6RPgnPPN-v7qhE.roa (hash: KNyqXXbQP8d6nmiYFJtuYs5Cbp0q38PpWcydNq1Wl3E=)
7: dnZtq0bwm61Im0Ni1VeeuAbXXDM.roa (hash: gMOoRKcjYT072cXzuogKtXmAQF95le8qOIdAlIczn4o=)
8: e-JA2-bFy7B8BkYmpPYNJ1dxBKc.roa (hash: bcrv+YrD4m4ddUBKigxs47ttA/eUpotZwmXx4eRmeE4=)
9: rM2i7X4i-xTENkByKDGS_394QYY.roa (hash: jSokmetv8aQ+53gcEJLpoqZU+R8uF/gkAzUpvjkIlBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:19:26:61:74:a6:13:58:5f:b1:d5:77:9d:ce:8f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Validity
Not Before: Apr 27 04:01:10 2026 GMT
Not After : Apr 28 04:01:10 2026 GMT
Subject: CN=76e0c09661913003fd21108216d9b2ff4d438940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:02:d6:65:24:c7:34:5c:6f:ae:5d:17:7f:5e:
16:17:0a:c2:a8:2a:a5:c6:b1:4b:a6:66:5d:2a:5b:
55:df:60:cb:97:d9:66:b2:9e:f2:64:0a:7e:0e:88:
8a:e5:9c:0d:5b:69:bb:99:66:ca:33:d0:4b:87:ae:
52:5c:6e:c8:ec:d7:c1:75:49:17:00:81:42:1f:b5:
b5:e2:ef:aa:49:dc:ba:59:20:fd:3c:5f:11:3d:54:
63:4c:76:18:72:0c:c6:08:76:4f:e0:c6:03:4c:57:
db:58:1e:46:ad:74:06:4a:23:ce:7b:2b:b2:87:8f:
62:f9:54:2c:86:a1:6c:b2:a5:da:53:b4:37:68:83:
95:1a:38:11:ba:bc:9e:d8:8e:11:c3:60:d2:89:10:
e2:1b:d5:86:0e:3e:18:f5:1a:ca:f6:25:f7:42:09:
8e:6b:cf:91:9e:c6:8c:91:3f:ad:48:02:0a:c1:74:
84:70:b6:bd:89:6a:6d:b6:e2:fa:7f:c5:d5:13:56:
37:94:c7:21:23:2e:44:7f:72:64:d5:3a:98:2e:f8:
bb:e0:57:af:6e:42:ef:b4:5f:6b:62:e2:6a:19:03:
e8:4d:31:72:e5:8c:a3:7e:74:77:1e:df:5d:da:51:
27:32:ec:13:64:02:c8:bd:e4:b9:3c:25:95:ae:6c:
2f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E0:C0:96:61:91:30:03:FD:21:10:82:16:D9:B2:FF:4D:43:89:40
X509v3 Authority Key Identifier:
keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:a1:9f:d0:61:d4:e0:dc:45:02:42:73:14:72:f7:24:b5:b9:
b2:54:34:eb:bd:13:98:13:2f:f1:9a:ad:98:90:f9:cd:65:6a:
02:51:6b:3b:04:7b:5c:9a:50:20:5d:8c:d0:00:71:93:4a:8d:
3b:7e:de:43:0c:57:47:8b:c9:0b:67:0f:51:f4:4c:71:32:88:
d2:33:39:00:64:7f:1d:05:78:d0:a9:99:57:08:c8:af:28:2e:
3b:34:70:2b:a6:3e:45:25:ae:f4:ee:84:de:ca:46:d0:1b:5a:
07:b0:8c:d1:1a:ba:3c:68:82:49:46:a5:9c:09:79:87:aa:ed:
25:2c:82:01:54:bc:a3:0e:1f:c7:a0:8f:f9:1b:cc:b0:b1:4b:
92:14:95:14:ce:09:ea:9d:7e:cd:78:de:c0:63:b1:5e:cd:90:
11:01:c9:1d:f1:f4:46:43:41:72:04:b9:24:3c:3c:41:2f:66:
e6:3e:50:79:81:52:7c:d7:94:5a:40:75:96:2e:b3:a3:28:ee:
95:51:11:71:09:4f:92:7e:f0:59:4f:f8:f4:f3:e7:6e:fd:21:
f7:f0:3a:0f:54:9b:38:b8:13:14:0d:ef:5a:66:3e:e8:d6:64:
4a:72:94:f3:9d:75:e7:38:43:83:fe:e0:c8:93:b7:be:9f:67:
15:06:ce:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:46:29 2026 by rpki-client