Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
File: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft (raw, json)
Hash identifier: t0i0s0dcV58wdEjdV/4KoSBqqcR3GdBZlbzAj+GKvsY=
Subject key identifier: DC:A1:F3:DF:11:23:37:28:91:97:44:76:BF:12:11:39:68:08:09:71
Authority key identifier: 87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
Certificate issuer: /CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Certificate serial: 019CAB6B2D07AE91C94BC8CC5DE464679899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
Manifest number: 1602
Signing time: Sun 01 Mar 2026 22:00:53 +0000
Manifest this update: Sun 01 Mar 2026 22:00:53 +0000
Manifest next update: Mon 02 Mar 2026 22:00:53 +0000
Files and hashes: 1: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl (hash: rSr1o/PR8IgtSImB44KidK8ryBspVwsQrsnqGM6UWFk=)
2: pf2F8jqDhpJAuisFDDVK53DtP1c.roa (hash: gUPm9iAsnfZdwPMydWDH2B8Ki6HOxvfT2gKOapzDjp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:2d:07:ae:91:c9:4b:c8:cc:5d:e4:64:67:98:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Validity
Not Before: Mar 1 22:00:53 2026 GMT
Not After : Mar 2 22:00:53 2026 GMT
Subject: CN=dca1f3df1123372891974476bf12113968080971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:36:85:78:d3:38:04:c2:9f:e8:34:72:8d:
00:e2:a2:d8:22:a0:e8:8d:53:60:2f:e3:7d:df:8b:
ae:39:5d:58:2e:03:25:23:2a:73:02:1c:3a:b6:07:
4e:a1:0b:38:46:16:fa:cf:85:a6:94:e5:0c:13:44:
ee:e3:5d:b9:c4:0f:64:a3:b6:5e:11:a4:25:fe:10:
6f:38:5a:b1:a3:88:fc:d7:72:53:63:b6:d3:d5:3c:
aa:af:ac:65:ab:c2:55:e6:4c:69:41:b7:0b:43:9c:
26:6a:04:09:26:e9:88:73:a1:71:61:57:26:98:ae:
d0:02:38:df:a9:fb:5d:88:8e:04:6b:24:9d:e0:40:
fb:f1:fc:8c:0a:e7:b3:dd:92:94:d9:76:74:a9:90:
7c:7d:8f:18:35:03:19:7f:fa:3a:30:64:fa:3d:e5:
5e:97:45:3c:53:fb:b1:5e:a4:ed:e9:af:6b:e6:b4:
25:72:17:ca:ba:5d:5b:c3:02:b3:ad:5e:3a:fd:68:
1b:23:76:db:be:b4:ff:ac:fe:e5:b0:aa:c1:d2:c7:
12:fe:01:0f:1c:0e:06:c4:7d:7e:09:58:65:93:58:
88:d8:35:f0:ae:44:18:19:49:c9:2a:09:03:cc:84:
e1:b3:be:1c:51:73:72:b9:b1:0c:d2:7d:9b:b3:dc:
59:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A1:F3:DF:11:23:37:28:91:97:44:76:BF:12:11:39:68:08:09:71
X509v3 Authority Key Identifier:
keyid:87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:96:c1:a3:60:40:09:86:a4:ac:42:23:98:73:11:98:a8:1e:
ab:af:b8:95:ca:79:c2:86:c2:6c:8b:6f:6f:2d:c5:50:18:a9:
28:7b:d3:d4:c3:99:89:90:cc:a1:2f:86:63:b3:7c:79:c2:54:
de:d0:9a:0b:ec:10:6a:79:69:00:9d:d2:75:6a:4d:ed:f6:a2:
6d:2d:79:e4:5a:b4:ef:a6:1e:1e:e6:22:a2:be:6b:49:3a:d9:
11:2b:f6:99:da:b7:c1:c7:c7:e5:16:1a:1c:80:a0:b1:df:b2:
a7:ee:2e:39:53:85:1b:99:e9:21:df:47:74:70:15:7e:bb:1f:
55:67:6a:72:e7:e0:b9:31:de:b8:dd:c8:0b:da:2c:ad:21:62:
52:b9:d2:ab:a9:2f:a2:51:4d:51:c5:6b:f0:13:3e:78:1c:90:
57:e0:57:20:32:d0:bc:6e:03:00:4a:99:84:13:74:8c:1c:8d:
63:34:ab:52:ee:1c:02:d4:05:f9:91:2f:16:34:f6:ee:63:b6:
f6:77:bd:e6:c7:8f:76:58:bf:51:58:66:69:ee:9c:e1:0e:d6:
d1:a2:3d:9d:12:85:12:59:21:39:82:80:fa:96:ef:26:6d:0c:
c0:d4:9b:54:53:bf:35:ee:3f:6e:55:41:6d:ad:8c:d5:19:35:
31:64:d7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:03:58 2026 by rpki-client