Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
File: H4ls09jRoGmdpSEFXftY3Abd3zU.mft (raw, json)
Hash identifier: hOrK1KUPDhyyLpskeZPVBuEl9fM6PCmiFhJlAjQ2E/4=
Subject key identifier: AD:E3:19:0A:E8:7E:CE:4C:E5:4F:A6:FB:29:92:5F:32:D4:32:3E:91
Authority key identifier: 1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
Certificate issuer: /CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Certificate serial: 01A14A614E74EB1CBB502EF3732EC550B389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
Manifest number: 1AAD
Signing time: Sat 17 Oct 2026 15:00:53 +0000
Manifest this update: Sat 17 Oct 2026 15:00:53 +0000
Manifest next update: Sun 18 Oct 2026 15:00:53 +0000
Files and hashes: 1: COifVGWEFcRhTaZrSeru91euzgs.roa (hash: SkxWqr0s6K7O+f3IrnOYEXDaEsYzawyt1T+GjoB55B8=)
2: H4ls09jRoGmdpSEFXftY3Abd3zU.crl (hash: Htxlcz2yuqIpInvLb03bGMtqCYUTzSOt4IJWR4CKino=)
3: OmGYQq3CiQUfIzH_XwnBKVSMUPQ.roa (hash: 3Ypfgyto+VD8FpA/ATTCpHQtTdUaXQt8NRaO+1mw2dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:61:4e:74:eb:1c:bb:50:2e:f3:73:2e:c5:50:b3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Validity
Not Before: Oct 17 15:00:53 2026 GMT
Not After : Oct 18 15:00:53 2026 GMT
Subject: CN=ade3190ae87ece4ce54fa6fb29925f32d4323e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d5:c7:9f:80:34:4a:28:ca:bc:eb:27:bc:95:
c0:be:ef:b7:24:d1:b6:9c:f2:f4:29:8e:b9:0f:63:
5f:8c:9f:00:99:66:da:b4:1a:da:16:11:d9:25:3f:
22:de:86:c7:e0:f5:40:3d:a3:0a:b1:79:89:7c:0a:
59:85:7b:c5:36:7e:d9:e5:5c:e7:ce:bf:6a:91:0f:
60:d0:df:41:8b:fd:14:7d:86:92:f0:fe:78:33:bb:
a3:dc:05:3d:72:f3:d7:b1:f5:35:7c:44:4f:9e:87:
3d:64:dc:f5:53:f1:85:5e:b0:6f:18:4a:20:dd:94:
45:e9:cc:3b:d4:54:9c:bd:eb:98:1a:51:3f:3c:5c:
e8:42:21:51:aa:16:2d:b5:67:ef:0a:bc:e3:75:26:
a3:9b:a8:40:3d:d0:47:82:ae:c3:45:4b:e6:73:b9:
46:80:51:5e:a6:3e:59:cb:f9:09:69:b8:c8:8b:6b:
2a:78:42:f1:30:d0:ee:37:76:46:e0:04:95:80:1e:
87:90:9d:41:b3:ca:13:4e:95:27:86:17:1e:43:6c:
3c:7a:00:2a:48:92:4b:07:3d:bf:93:5c:81:2d:af:
80:41:f7:e9:ca:4f:6c:45:c3:34:68:e9:a5:a9:c2:
04:b5:a6:7d:b6:96:11:5c:4d:18:99:37:e8:9e:fd:
de:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E3:19:0A:E8:7E:CE:4C:E5:4F:A6:FB:29:92:5F:32:D4:32:3E:91
X509v3 Authority Key Identifier:
keyid:1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:19:c3:3f:cf:61:cf:a3:a1:7d:e3:a0:d9:67:18:90:de:b5:
c9:86:f4:e2:a2:1f:61:45:fa:85:44:94:cd:91:79:be:73:7a:
e2:50:98:da:1a:d4:b9:26:f8:ca:47:30:3b:7f:18:a3:d8:bc:
d5:e0:6d:7f:57:c0:09:18:d4:e6:bd:ed:5b:4d:1a:f8:45:5a:
83:ca:a5:b6:21:9e:a2:04:8a:c7:a9:b4:4b:1f:b0:6c:30:fc:
b5:8a:96:e0:02:e7:ba:d3:50:85:64:89:2b:c9:b5:5f:6b:d3:
0a:ea:62:8c:d8:b8:50:79:71:6c:dd:35:b3:d3:ed:a7:f0:b1:
de:5d:41:6d:32:20:eb:97:c8:92:f8:b3:f4:68:27:f6:6c:07:
d4:26:3c:6a:e6:d5:a8:81:d1:6e:8a:7d:fe:c8:94:5b:48:3e:
ac:1b:7c:73:c7:7a:45:3c:c5:1b:1b:d4:e2:36:b8:ac:85:df:
43:18:d0:bd:08:4f:26:fc:3d:0f:99:2d:90:3e:ad:f5:c4:6c:
2c:a0:35:09:38:dc:a8:20:90:ee:c1:c9:59:e1:81:d6:f2:25:
a6:fe:a5:6e:ce:cb:56:5a:8f:3b:c5:2a:63:ad:35:fc:56:64:
8f:14:db:a1:d0:e1:09:d1:8e:8c:b1:ea:9a:87:e1:5d:51:f0:
b0:40:2e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 20:50:59 2026 by rpki-client