Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
File: Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft (raw, json)
Hash identifier: D7ZA76J9yDHdEGzvMkLGxxKUpqRnWG0U+thD+M/m49c=
Subject key identifier: 1D:53:4B:2B:0C:C3:0F:11:B9:3D:A1:3D:9C:B2:5B:CA:2B:47:E8:53
Authority key identifier: 1E:BE:3E:52:14:07:F5:97:F2:55:F3:FB:4E:0B:56:9C:32:08:35:52
Certificate issuer: /CN=1ebe3e521407f597f255f3fb4e0b569c32083552
Certificate serial: 019D9B8735470689637869790453F57069A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
Manifest number: 1828
Signing time: Fri 17 Apr 2026 13:00:22 +0000
Manifest this update: Fri 17 Apr 2026 13:00:22 +0000
Manifest next update: Sat 18 Apr 2026 13:00:22 +0000
Files and hashes: 1: Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl (hash: 9ghSB8Ne7D+dsQ7fhH/7dhnUT+Z3z4CWZ5Cc7y9w73U=)
2: MaG66KPENn9bx0eAYChp8R8dAs4.roa (hash: 593eGOu2FOVFWhkjJjWzF/kjBgyQkqsd6b/vqPJ4bN4=)
3: st6PpxNzc658VtFlT-Zn2lQC-m4.roa (hash: W95r/R+SgURS888l3lfH6YKShbzwq5+KfmT/KdREE+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:35:47:06:89:63:78:69:79:04:53:f5:70:69:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ebe3e521407f597f255f3fb4e0b569c32083552
Validity
Not Before: Apr 17 13:00:22 2026 GMT
Not After : Apr 18 13:00:22 2026 GMT
Subject: CN=1d534b2b0cc30f11b93da13d9cb25bca2b47e853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d1:27:1d:44:c2:58:19:d7:eb:65:20:11:05:
46:1e:59:44:ba:f2:17:12:8a:53:cf:9b:39:40:2a:
a9:09:ba:1d:01:f2:7f:45:c1:1b:35:ff:82:38:7e:
77:7a:e9:bf:66:02:6a:82:50:35:52:5c:c9:85:34:
a9:b8:b9:c1:57:14:6c:84:63:60:43:0d:3f:81:8c:
c0:ad:e0:e6:92:ef:f6:ea:34:70:fa:7d:94:df:39:
b9:86:d0:f6:36:f0:c7:45:eb:12:3f:90:fd:0c:06:
d2:75:1f:b7:94:3e:11:cc:1f:8a:73:46:ee:5f:d5:
69:12:c9:72:76:47:a5:3a:13:b3:67:36:2f:f4:e2:
cb:d3:67:d3:d3:d6:05:0a:39:1a:05:92:a2:fb:f2:
4c:16:aa:ad:d6:fd:84:89:33:f6:a4:3f:e9:ee:1e:
d4:6d:9f:9b:08:c2:9c:f3:28:4b:a0:f9:24:82:6f:
55:47:42:4d:eb:e9:02:76:10:8c:4e:e1:2e:9b:81:
d8:9e:ae:6f:b8:ac:9b:ff:bd:b7:1f:dd:d4:fc:13:
a0:97:70:6b:9c:9e:d7:62:54:0b:d0:62:76:36:f5:
45:9d:63:d6:2c:ac:42:de:35:85:3a:e1:24:32:cc:
76:c2:71:b9:de:b5:c4:cf:ce:52:a2:44:18:9e:28:
1d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:53:4B:2B:0C:C3:0F:11:B9:3D:A1:3D:9C:B2:5B:CA:2B:47:E8:53
X509v3 Authority Key Identifier:
keyid:1E:BE:3E:52:14:07:F5:97:F2:55:F3:FB:4E:0B:56:9C:32:08:35:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/124ac8-fa93-4c23-bd62-5b4aff7a6398/1/Hr4-UhQH9ZfyVfP7TgtWnDIINVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4d:1c:15:8f:6b:b9:ee:bc:4b:8b:bf:8f:3b:9a:8d:aa:e4:
c4:07:98:c9:42:a3:8e:34:d7:32:82:38:1e:a7:5f:a5:f7:95:
c9:a5:77:3f:09:ce:72:2d:4b:88:73:03:87:76:a7:26:0f:82:
6e:e6:45:32:f2:c1:c5:78:98:cd:e0:6b:a2:9b:a6:b5:06:1b:
d0:20:99:d3:dc:97:3f:8d:5b:d2:ec:44:12:56:09:82:df:8c:
1a:08:39:38:ca:e3:ce:ad:56:05:25:ec:2f:cd:9f:b6:e8:03:
b2:14:75:98:c8:2b:4d:62:5a:e2:ad:cf:95:0f:f9:85:d4:15:
8e:5e:d6:8a:3b:93:9f:2b:85:b5:bc:5b:ed:f3:20:5a:b3:f8:
8b:81:dd:5f:f5:98:9e:a7:25:b4:01:4e:4f:ba:83:f2:9b:05:
28:9c:1d:b9:2c:c4:63:98:89:08:3d:28:79:e9:61:54:2e:01:
e4:b2:b0:b5:e6:24:e3:9d:61:fd:63:30:4e:e1:26:6d:b2:89:
fe:62:78:4c:a0:f6:bb:a4:f5:e3:b9:f6:bb:ca:ab:4b:73:32:
7b:e1:72:a4:1e:5a:d3:44:41:d8:88:5c:62:37:13:31:4c:ca:
3a:dd:e6:11:fe:31:ef:af:99:6d:57:2f:08:4f:f4:0a:17:65:
9f:9f:2b:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bhzVHBoljeGl5BFP1cGmgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYmUzZTUyMTQwN2Y1OTdmMjU1ZjNmYjRlMGI1NjljMzIw
ODM1NTIwHhcNMjYwNDE3MTMwMDIyWhcNMjYwNDE4MTMwMDIyWjAzMTEwLwYDVQQD
EygxZDUzNGIyYjBjYzMwZjExYjkzZGExM2Q5Y2IyNWJjYTJiNDdlODUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstEnHUTCWBnX62UgEQVGHllEuvIX
EopTz5s5QCqpCbodAfJ/RcEbNf+COH53eum/ZgJqglA1UlzJhTSpuLnBVxRshGNg
Qw0/gYzAreDmku/26jRw+n2U3zm5htD2NvDHResSP5D9DAbSdR+3lD4RzB+Kc0bu
X9VpEslydkelOhOzZzYv9OLL02fT09YFCjkaBZKi+/JMFqqt1v2EiTP2pD/p7h7U
bZ+bCMKc8yhLoPkkgm9VR0JN6+kCdhCMTuEum4HYnq5vuKyb/723H93U/BOgl3Br
nJ7XYlQL0GJ2NvVFnWPWLKxC3jWFOuEkMsx2wnG53rXEz85SokQYnigdBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1TSysMww8RuT2hPZyyW8orR+hTMB8GA1UdIwQY
MBaAFB6+PlIUB/WX8lXz+04LVpwyCDVSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHI0LVVoUUg5WmZ5VmZQN1RndFduRElJTlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xMjRhYzgtZmE5My00YzIzLWJkNjIt
NWI0YWZmN2E2Mzk4LzEvSHI0LVVoUUg5WmZ5VmZQN1RndFduRElJTlZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8xMjRhYzgtZmE5My00YzIzLWJkNjItNWI0YWZmN2E2Mzk4
LzEvSHI0LVVoUUg5WmZ5VmZQN1RndFduRElJTlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFk0cFY9r
ue68S4u/jzuajarkxAeYyUKjjjTXMoI4HqdfpfeVyaV3PwnOci1LiHMDh3anJg+C
buZFMvLBxXiYzeBropumtQYb0CCZ09yXP41b0uxEElYJgt+MGgg5OMrjzq1WBSXs
L82ftugDshR1mMgrTWJa4q3PlQ/5hdQVjl7WijuTnyuFtbxb7fMgWrP4i4HdX/WY
nqcltAFOT7qD8psFKJwduSzEY5iJCD0oeelhVC4B5LKwteYk451h/WMwTuEmbbKJ
/mJ4TKD2u6T147n2u8qrS3Mye+FypB5a00RB2IhcYjcTMUzKOt3mEf4x76+ZbVcv
CE/0Chdln58rng==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:18:48 2026 by rpki-client