Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
File: H4ls09jRoGmdpSEFXftY3Abd3zU.mft (raw, json)
Hash identifier: 3650MnSocsCEIlOeF3Q2TWp9pxKq25SctEwCtM/3Kko=
Subject key identifier: 34:75:20:41:D2:0E:75:0D:B7:8F:43:FE:18:CF:65:8A:0D:22:44:E1
Authority key identifier: 1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
Certificate issuer: /CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Certificate serial: 019EC36E24C628C94479D93F982BBE2440DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
Manifest number: 195E
Signing time: Sun 14 Jun 2026 00:00:35 +0000
Manifest this update: Sun 14 Jun 2026 00:00:35 +0000
Manifest next update: Mon 15 Jun 2026 00:00:35 +0000
Files and hashes: 1: COifVGWEFcRhTaZrSeru91euzgs.roa (hash: SkxWqr0s6K7O+f3IrnOYEXDaEsYzawyt1T+GjoB55B8=)
2: H4ls09jRoGmdpSEFXftY3Abd3zU.crl (hash: jzAkJWpFrq+AfiKw9T0+zSX21qwyhFC6I877mb/X2hw=)
3: OmGYQq3CiQUfIzH_XwnBKVSMUPQ.roa (hash: 3Ypfgyto+VD8FpA/ATTCpHQtTdUaXQt8NRaO+1mw2dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:6e:24:c6:28:c9:44:79:d9:3f:98:2b:be:24:40:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Validity
Not Before: Jun 14 00:00:35 2026 GMT
Not After : Jun 15 00:00:35 2026 GMT
Subject: CN=34752041d20e750db78f43fe18cf658a0d2244e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:04:d9:f9:27:2d:ab:69:cd:bb:76:9b:10:9e:
c7:00:25:e7:4e:1a:c6:0f:f4:58:77:22:4a:6b:75:
7c:98:17:77:ef:5a:8b:c5:7e:74:eb:28:fa:8a:d0:
aa:da:95:17:be:a0:a7:06:23:4a:68:37:39:73:fa:
09:ee:43:17:da:3b:ad:1a:77:91:b5:8a:05:b2:46:
94:84:fa:4b:aa:70:c0:8a:f3:a5:1f:4b:b3:ee:25:
24:cd:1a:2a:89:7f:81:41:e9:fb:79:6e:c6:50:05:
a9:86:99:33:09:c1:c1:0a:eb:31:b3:8d:f3:9a:a9:
0b:0f:fe:93:6e:ad:5f:f0:5d:7e:c6:29:65:b4:6f:
80:6b:78:ae:2d:16:a8:d5:ea:d3:2a:c5:ad:c5:a8:
df:f9:30:65:d2:52:28:51:a3:bd:c9:92:7d:cd:f9:
c7:67:aa:d8:8a:f5:ab:99:09:f0:b6:54:26:72:8d:
0c:35:db:78:0e:4a:66:66:2b:f4:11:c9:f1:e0:60:
1c:31:18:52:2d:79:d0:43:5a:f8:2f:82:32:eb:35:
e7:b4:3c:5f:d6:a0:26:86:18:43:02:81:9e:29:0e:
1f:00:66:6a:7b:96:20:fc:c6:03:07:af:ed:2c:a2:
1e:ba:8a:2c:c2:ac:4f:ec:8b:38:59:7a:16:d7:77:
af:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:75:20:41:D2:0E:75:0D:B7:8F:43:FE:18:CF:65:8A:0D:22:44:E1
X509v3 Authority Key Identifier:
keyid:1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:80:86:1d:6b:cc:18:c3:05:fd:7f:16:d0:00:60:a4:e6:85:
71:59:ce:35:d2:dc:39:5b:db:d9:a8:ae:26:d8:c2:81:13:bd:
96:5f:f5:f4:8b:53:26:ab:1b:1c:d6:19:29:d7:df:a0:17:4e:
c6:ec:49:98:22:79:23:78:a4:0a:bd:6d:86:49:a9:7e:fe:ed:
38:db:c2:2a:9a:c9:62:49:67:3f:d9:3c:4e:ae:bb:6e:af:a6:
37:f6:98:b8:31:71:40:74:5f:d9:d7:e2:c6:08:f2:79:7b:a3:
1c:6a:af:3d:9f:6a:89:39:fb:8b:14:1a:6e:0c:86:0d:c5:3d:
50:c2:eb:5d:50:fe:f3:d1:ea:13:c0:b3:a9:7d:67:65:b6:a9:
b3:c1:b5:f9:64:18:f4:bc:e3:d5:d7:37:b2:60:99:8f:21:d6:
07:3e:70:9f:e6:6a:06:6a:96:7a:bb:35:07:65:d7:1e:cb:b1:
27:95:e0:64:bd:a5:1f:6e:01:af:50:3d:60:6b:07:ab:af:b0:
a3:f5:e9:f0:51:67:57:d5:13:5b:5f:38:f2:2e:66:e7:85:5b:
cf:e6:f8:9e:55:87:42:d1:25:f5:84:c7:c7:60:2b:d4:fa:d1:
11:e6:01:fd:60:cb:0a:76:6a:30:ab:a8:33:d0:6c:6d:aa:21:
62:9d:78:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:03:08 2026 by rpki-client