Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
File: H4EMw_0igzjZuWlyXZW7M8TmWkg.mft (raw, json)
Hash identifier: PfwUTzmiHdEQgj9A4ur34Up/iHNWA/y5OzR1Wjh5HVA=
Subject key identifier: FF:7D:64:9F:33:5A:55:CD:8E:2C:C2:24:69:FE:7A:B7:04:D3:51:C4
Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
Certificate issuer: /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Certificate serial: 019CE36C3112FA44DAFF4095A8B6E1A2C61F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
Manifest number: 0FF6
Signing time: Thu 12 Mar 2026 19:00:44 +0000
Manifest this update: Thu 12 Mar 2026 19:00:44 +0000
Manifest next update: Fri 13 Mar 2026 19:00:44 +0000
Files and hashes: 1: CyqM0bKo_ElRFFbv0AT5aDspxj8.roa (hash: QCCpwbYRSMOO3zc+/f/cjc8LG2FdpSD4/2ESkOJ9QkE=)
2: G2UXryvMWYgvdYG8XaPdE7pZyDM.roa (hash: PdqBjdoKDV3gCJFELA3WohXvGinSd8Rgt/NVk+mMS2g=)
3: H4EMw_0igzjZuWlyXZW7M8TmWkg.crl (hash: CVNv4WW+qK/d86RoafqCpe51nHnEms3GEYI7z1zS2bo=)
4: Ix1gtJqQKv2Z_pk2hTiqDc-sy3M.roa (hash: MobBhVq4hyLxQ20aOszGD0QH9pUdXdw1af7wh+y1S9w=)
5: MQdJhE7DJVvNK-iEKOuroe7Wk6U.roa (hash: IDeLEFXV5ONQ6stNDvzS0ZYYqNXXaca6TX0gy7MtJtY=)
6: bR6c5Iui3A2Me6RPgnPPN-v7qhE.roa (hash: KNyqXXbQP8d6nmiYFJtuYs5Cbp0q38PpWcydNq1Wl3E=)
7: dnZtq0bwm61Im0Ni1VeeuAbXXDM.roa (hash: gMOoRKcjYT072cXzuogKtXmAQF95le8qOIdAlIczn4o=)
8: e-JA2-bFy7B8BkYmpPYNJ1dxBKc.roa (hash: bcrv+YrD4m4ddUBKigxs47ttA/eUpotZwmXx4eRmeE4=)
9: rM2i7X4i-xTENkByKDGS_394QYY.roa (hash: jSokmetv8aQ+53gcEJLpoqZU+R8uF/gkAzUpvjkIlBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:6c:31:12:fa:44:da:ff:40:95:a8:b6:e1:a2:c6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Validity
Not Before: Mar 12 19:00:44 2026 GMT
Not After : Mar 13 19:00:44 2026 GMT
Subject: CN=ff7d649f335a55cd8e2cc22469fe7ab704d351c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7c:cd:18:a4:70:8b:c7:27:d3:d7:51:49:33:
54:79:ad:fc:29:b2:f6:97:54:d3:f2:1c:d0:28:5f:
bb:24:6c:c9:78:53:71:ad:86:b5:9d:a9:d6:85:33:
d8:71:a9:6a:0e:4e:b9:76:2c:8a:5a:f8:fe:57:b7:
92:6e:42:01:24:21:83:92:39:89:21:77:94:39:3e:
f2:2e:48:33:29:7b:27:67:4c:be:df:c2:25:bf:89:
22:31:c6:ac:a8:35:1e:ed:51:b3:26:77:f0:e6:05:
5e:ed:09:24:de:17:04:ca:4a:46:63:b5:3e:cb:ef:
9f:64:f7:59:35:5f:af:8e:77:87:95:77:e2:39:46:
88:e9:68:d7:1c:93:eb:95:5b:bf:e9:50:06:84:f9:
82:bd:2a:65:73:8f:ff:b5:77:04:3e:7d:a7:d8:17:
b0:62:19:80:69:df:8c:d3:01:d5:52:a4:03:cf:0c:
f4:d7:71:09:4b:0a:02:ec:34:c6:01:09:86:14:7f:
9a:7f:ac:aa:0a:f8:e5:64:15:f1:3c:a6:50:3e:4a:
16:50:a5:23:6b:e8:a0:64:ee:8f:0c:f4:fc:6e:8d:
2d:93:95:ca:c8:eb:cd:27:59:7e:1c:73:0b:7e:46:
14:d4:ce:83:85:5e:b4:06:64:20:43:ff:86:42:10:
3f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7D:64:9F:33:5A:55:CD:8E:2C:C2:24:69:FE:7A:B7:04:D3:51:C4
X509v3 Authority Key Identifier:
keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:2e:db:79:f8:52:6e:b2:d3:a0:0f:cd:ba:5a:c7:a5:21:63:
0f:61:d0:bc:2d:f4:b3:2a:3f:07:02:b3:62:85:52:52:24:91:
7f:85:ea:34:b5:93:c2:ea:4f:06:19:c7:7a:60:8d:5c:5e:9f:
2f:82:3b:a6:8e:df:96:9c:84:6b:6a:8b:e5:f0:04:9b:61:fb:
6f:af:9b:43:0b:04:51:01:a6:8d:40:d6:c2:e5:03:1c:00:4e:
67:75:1d:d8:1b:2e:f3:e1:0d:27:ea:f0:46:84:9c:6b:58:6e:
19:b1:72:33:89:89:5c:3f:78:11:de:ac:bc:d2:49:21:06:24:
25:ea:19:27:49:a7:63:75:37:57:b7:14:0f:9f:5d:86:81:44:
72:09:7a:9e:c8:33:e9:aa:25:12:a7:cf:41:eb:56:7c:d9:73:
b9:7d:c5:76:2b:2e:0d:8c:b6:8d:26:3b:c2:92:4e:43:94:a2:
0e:63:d2:b1:41:eb:f2:97:3b:4c:6d:e6:4f:ac:95:0a:b1:50:
01:e2:78:56:22:83:2f:c0:e4:ba:d0:f2:eb:05:13:24:9f:be:
b8:af:82:b2:77:48:ee:a3:7c:ac:55:bc:4f:37:29:ed:09:b0:
7e:6c:70:b6:b2:ee:15:90:a0:44:b4:e2:f4:fc:60:6c:9d:55:
7d:ad:bf:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:56:44 2026 by rpki-client