Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
File: h4_WMe8uxzeUN_18dvjiRf8IJLs.mft (raw, json)
Hash identifier: aKgJCWlmT9qIi70mzYK+CyBjjkWun0G82H1Vk8679rg=
Subject key identifier: E6:81:22:59:BD:F8:69:1B:E1:27:9F:09:49:F7:80:34:20:9F:69:3D
Authority key identifier: 87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
Certificate issuer: /CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Certificate serial: 019CAB6BA22E845F42D2B88B7DFE0FCE781E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 22:01:23 +0000
Manifest this update: Sun 01 Mar 2026 22:01:23 +0000
Manifest next update: Mon 02 Mar 2026 22:01:23 +0000
Files and hashes: 1: h4_WMe8uxzeUN_18dvjiRf8IJLs.crl (hash: vOkzWuys3rEcP821Uw54OC6geBZuPSsZSiTYh12qcXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:a2:2e:84:5f:42:d2:b8:8b:7d:fe:0f:ce:78:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Validity
Not Before: Mar 1 22:01:23 2026 GMT
Not After : Mar 2 22:01:23 2026 GMT
Subject: CN=e6812259bdf8691be1279f0949f78034209f693d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5d:46:94:45:0d:b0:94:14:d0:b3:1a:2a:82:
38:89:a7:89:39:da:5f:a3:aa:9c:28:0d:9d:bf:a7:
db:4c:4b:60:fc:05:5b:b9:a5:6d:69:d6:d7:af:a4:
cc:48:94:30:3e:95:2e:4f:d6:e1:94:83:5a:3f:c3:
39:35:97:a9:19:a9:e6:1e:53:14:62:fd:6d:8d:dd:
d4:5b:81:bc:0b:51:16:15:09:ac:71:7d:5e:be:f2:
08:7e:65:b7:d2:af:2c:23:f6:70:18:17:b1:92:56:
0f:9e:ce:34:28:8b:25:b4:f4:56:f3:17:99:e2:1f:
12:ef:7b:71:1a:c0:c3:65:58:30:6e:57:7c:4c:e1:
31:e9:3f:a1:b8:dc:cb:d5:89:71:a9:08:0c:db:15:
47:da:3b:6d:ba:14:f0:77:c7:92:f2:89:e6:d5:b9:
4e:27:c5:60:69:6e:54:11:38:b5:13:31:74:9e:9c:
20:6e:c8:54:d8:00:a2:7f:20:71:fc:7f:f4:6e:7f:
35:1e:b3:3a:f4:b3:47:b2:a1:a6:95:a3:3f:83:23:
3c:70:d7:39:fe:73:a4:a1:f9:9e:73:81:9d:aa:c1:
f0:68:18:67:da:25:b7:a9:32:7e:bf:d6:bd:50:0a:
27:ca:19:6c:f1:8d:55:90:e2:ba:23:46:53:fc:9e:
19:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:81:22:59:BD:F8:69:1B:E1:27:9F:09:49:F7:80:34:20:9F:69:3D
X509v3 Authority Key Identifier:
keyid:87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:af:25:fe:f2:c4:5d:31:1c:33:c7:1d:5b:1e:86:bb:f8:ce:
1b:bf:65:c8:03:7f:e6:7c:40:91:f4:cc:93:b7:bc:43:be:10:
d8:7b:5b:76:e7:1a:26:c4:d0:95:0c:cc:76:56:b6:e1:c5:1f:
de:aa:20:2d:6f:ef:5f:af:03:a0:8f:25:98:74:14:6d:a7:2f:
cf:e6:ef:f9:e2:99:c5:3a:95:97:84:1d:3b:8b:c1:c2:90:0e:
10:f2:38:46:82:5c:b6:67:af:5d:71:e7:60:bd:bf:90:79:1e:
2d:8b:f3:11:bd:f9:8e:22:aa:87:45:8a:07:7c:dd:c3:06:86:
bb:15:c6:72:ed:af:11:25:a8:2d:0b:a8:7c:35:b8:a0:04:f0:
56:bf:c8:99:62:eb:b4:16:a5:eb:87:3d:b0:fe:0b:d1:8b:d3:
56:98:1d:7e:d4:dc:39:50:04:7c:94:68:9c:9a:94:4b:68:4e:
83:c4:8d:40:c5:e6:9f:24:b5:78:6a:54:4c:c3:1b:2f:63:3e:
86:e5:44:6e:29:f4:05:fb:82:0e:b3:b0:c3:14:27:48:9c:fc:
f8:03:2a:b0:25:b5:c5:45:d0:a2:e0:dd:2f:07:9d:34:b9:4f:
10:5d:ad:0b:47:e2:96:ee:15:0d:d6:19:e6:3e:db:67:45:c8:
0b:ac:d7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:25:34 2026 by rpki-client