Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
File: H4ls09jRoGmdpSEFXftY3Abd3zU.mft (raw, json)
Hash identifier: txn4BH+EK1fdavho1sJd6ctmPRDqPKCDisarcJBISDA=
Subject key identifier: C4:44:2D:52:5B:41:E2:3D:D7:11:0E:78:B2:8E:E6:0C:DE:36:C7:39
Authority key identifier: 1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
Certificate issuer: /CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Certificate serial: 019D9A0718F9806FC54945C288B5C16F7C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 06:00:49 +0000
Manifest this update: Fri 17 Apr 2026 06:00:49 +0000
Manifest next update: Sat 18 Apr 2026 06:00:49 +0000
Files and hashes: 1: COifVGWEFcRhTaZrSeru91euzgs.roa (hash: SkxWqr0s6K7O+f3IrnOYEXDaEsYzawyt1T+GjoB55B8=)
2: H4ls09jRoGmdpSEFXftY3Abd3zU.crl (hash: SgGCMXlETgH8tmaUz+UIiu4N2wabfMUwXfXuvT7bVBI=)
3: OmGYQq3CiQUfIzH_XwnBKVSMUPQ.roa (hash: 3Ypfgyto+VD8FpA/ATTCpHQtTdUaXQt8NRaO+1mw2dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:18:f9:80:6f:c5:49:45:c2:88:b5:c1:6f:7c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Validity
Not Before: Apr 17 06:00:49 2026 GMT
Not After : Apr 18 06:00:49 2026 GMT
Subject: CN=c4442d525b41e23dd7110e78b28ee60cde36c739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e8:47:1e:cc:00:78:cb:0e:b9:b6:e2:47:cc:
e7:7b:5a:eb:1a:1c:c3:ac:02:59:ed:dd:6a:21:f1:
aa:08:4c:8e:fd:21:fc:1c:21:b3:1a:22:e4:7e:9d:
7b:ff:1e:be:43:f3:d8:7b:2d:73:b1:ee:c4:c6:cb:
87:29:21:97:b8:58:e5:ba:f1:10:cc:c9:9d:dd:ac:
ea:ae:73:dc:1b:23:99:05:98:1a:97:60:60:63:9f:
25:3e:2e:80:79:fc:6e:26:f7:a3:fa:05:77:8e:91:
fc:41:11:bc:90:c7:fc:6f:43:80:c0:7e:0c:f4:fb:
86:78:e8:ac:72:7b:57:83:5e:2c:3c:c7:d3:57:6b:
f6:40:7d:d3:75:58:81:82:64:86:fa:a8:80:c9:6b:
7e:26:2a:7f:32:f2:a2:d7:a8:e5:93:5b:93:47:76:
f0:a6:88:19:8f:9b:32:c7:03:a9:62:cd:24:15:87:
a8:03:f0:10:d2:7d:f9:18:a9:c0:56:66:32:72:43:
f7:e2:ea:17:4e:97:e1:1c:71:0a:aa:94:68:d6:48:
37:35:a0:fb:a7:57:ed:f9:96:12:b8:0a:42:69:3a:
e6:fd:b5:71:cf:52:7c:bf:5a:37:a0:07:3b:d2:0e:
e3:04:f1:c8:54:02:64:ff:ec:9f:50:55:40:75:e1:
9f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:44:2D:52:5B:41:E2:3D:D7:11:0E:78:B2:8E:E6:0C:DE:36:C7:39
X509v3 Authority Key Identifier:
keyid:1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:79:4b:83:a6:23:95:82:4e:34:1e:3f:c6:b3:63:94:ca:57:
b1:8f:2f:ee:d4:d4:08:13:0b:1e:c5:61:34:53:6b:1b:e7:40:
83:fc:b0:d8:64:9d:6e:de:ce:46:77:b1:20:f0:6d:ac:12:23:
8a:fc:18:0b:73:4e:f4:0f:c2:fe:f9:a6:fc:ed:5a:f4:eb:8a:
c7:95:2f:ce:a7:8d:60:05:27:c9:a5:3d:82:2b:78:a2:fb:56:
38:d7:99:90:79:9f:9f:b3:7d:34:17:72:c8:c3:0c:9c:d0:44:
5e:38:69:db:c8:65:92:cb:f6:ee:d1:af:c1:f7:e5:ba:17:60:
02:47:d3:c3:3f:9d:e5:f7:84:3d:63:4a:b2:22:da:a5:e4:ed:
8b:98:d4:14:d1:29:70:ef:e6:f6:2d:81:aa:03:78:f7:66:f9:
f7:ed:7f:36:be:11:72:f7:72:13:9c:9a:a0:b8:d4:f9:47:51:
cf:2f:80:4a:d5:4d:61:3a:42:7b:08:75:a1:a1:9e:ca:76:c2:
1a:25:a3:b9:8f:89:3d:48:9d:b3:27:b0:53:b7:2b:a7:26:b6:
91:ef:31:4d:82:e7:96:83:e4:1a:88:26:61:20:7b:d6:82:c2:
a5:bb:74:6f:5f:3c:ec:a9:4e:b4:74:96:15:64:d8:a0:62:f2:
db:3a:09:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:38:58 2026 by rpki-client