Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
File: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft (raw, json)
Hash identifier: 69DCGu9ufuOwfoBohhn9Dg0r64AgBaoORzo293m6o/M=
Subject key identifier: A1:24:5B:2A:B8:4B:42:54:5B:C5:E9:A8:1F:F1:AA:BB:E7:F0:3F:66
Authority key identifier: 87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
Certificate issuer: /CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Certificate serial: 01A109942A7755010F030A8F461BA3DFD954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
Manifest number: 1845
Signing time: Mon 05 Oct 2026 01:01:07 +0000
Manifest this update: Mon 05 Oct 2026 01:01:07 +0000
Manifest next update: Tue 06 Oct 2026 01:01:07 +0000
Files and hashes: 1: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl (hash: NPHDyrI+6yOP1kDQPFGtSSPky9MD42Dtr1hk33POKOs=)
2: pf2F8jqDhpJAuisFDDVK53DtP1c.roa (hash: gUPm9iAsnfZdwPMydWDH2B8Ki6HOxvfT2gKOapzDjp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:09:94:2a:77:55:01:0f:03:0a:8f:46:1b:a3:df:d9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Validity
Not Before: Oct 5 01:01:07 2026 GMT
Not After : Oct 6 01:01:07 2026 GMT
Subject: CN=a1245b2ab84b42545bc5e9a81ff1aabbe7f03f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e0:ef:aa:72:1f:74:bc:10:25:ac:73:a4:2a:
ef:47:2b:68:10:96:cc:aa:68:2a:52:80:e6:bc:40:
17:c7:02:ed:9a:13:b9:69:cb:20:eb:d3:2c:f7:50:
ed:bb:c9:da:f9:20:10:44:d9:e7:81:9e:2b:44:72:
7e:d0:fc:57:99:28:8e:89:3f:ce:70:a7:aa:a0:c9:
af:65:4b:28:d8:fa:9c:e3:54:1b:38:d9:78:47:62:
20:46:cf:75:4b:19:54:13:85:2e:d3:42:8f:7c:5c:
59:a5:3d:d6:6b:e4:ab:09:bb:b1:b8:1f:80:2d:af:
47:e0:81:1b:21:b9:f8:e7:98:f0:53:01:4e:34:65:
3e:49:48:e9:6a:4f:af:c6:0e:2b:f0:59:38:a2:57:
7f:74:e1:37:06:5a:1c:c1:32:4c:01:af:8b:62:ad:
58:03:66:4f:7b:ca:f4:0e:02:ac:a1:2d:f1:88:b3:
52:d1:ed:e3:29:77:50:50:c2:d5:35:93:70:c2:14:
89:f4:2f:bf:b8:62:7a:28:28:47:bb:e0:5e:39:13:
5b:e0:43:eb:2d:d6:53:4c:a3:7b:43:67:6d:62:87:
31:50:66:66:1d:84:6a:e4:7c:2d:89:32:a6:f5:c0:
4c:62:62:f9:ca:6f:57:ae:4b:8b:93:90:23:26:15:
d0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:24:5B:2A:B8:4B:42:54:5B:C5:E9:A8:1F:F1:AA:BB:E7:F0:3F:66
X509v3 Authority Key Identifier:
keyid:87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e4:1b:8e:50:d9:db:34:ec:04:1c:f5:bb:ee:ca:0a:47:ff:
88:a7:17:a2:8c:77:5b:c8:fb:3f:97:2c:2f:d2:5f:3d:9e:44:
34:f0:68:ee:44:18:6a:56:4a:0f:83:a0:50:dd:63:98:8a:73:
c2:9d:2f:7c:72:bc:47:c3:5e:7a:79:4a:df:ac:9f:98:9c:3b:
8a:05:50:2e:01:f2:f2:87:d8:29:a4:0a:eb:72:b9:8e:e8:73:
9b:c9:53:24:09:86:be:7f:8d:67:b6:6c:3a:d4:7b:70:af:5d:
48:c6:29:98:33:17:f6:f4:64:3b:98:ca:e3:72:58:f8:06:69:
52:5c:61:83:1d:5d:6a:a6:f6:ea:7c:ef:34:4c:07:f1:ed:b0:
f3:e5:57:c4:5a:d6:c2:c6:f4:79:d3:70:ca:4b:05:a1:28:a7:
50:6f:90:68:30:f1:63:73:8c:1c:b2:5b:03:1e:31:70:43:f8:
3f:2b:91:65:f0:89:77:fa:14:c1:8c:35:47:da:75:09:f4:43:
73:01:2c:8d:45:61:d0:21:6a:8a:76:26:80:67:68:c2:85:bf:
37:9f:d4:fa:47:d3:25:82:57:b8:fd:5c:d0:47:56:9e:ba:ce:
95:78:ba:dd:c6:09:81:fd:12:5e:56:1e:d9:c3:43:80:1d:d7:
39:72:cd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 09:48:26 2026 by rpki-client