
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
File: h4_WMe8uxzeUN_18dvjiRf8IJLs.mft (raw, json)
Hash identifier: 9xaN0QPlAOqdWsYS32Z6GcIDFFkUXWhJ1+Sd1vUOyJ4=
Subject key identifier: 9F:E8:80:CA:15:7A:A1:E0:54:0A:93:E6:12:52:9F:95:A6:67:D0:7C
Authority key identifier: 87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
Certificate issuer: /CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Certificate serial: 019D98F4428385CB5915E9684BB0B6670B49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 01:00:37 +0000
Manifest this update: Fri 17 Apr 2026 01:00:37 +0000
Manifest next update: Sat 18 Apr 2026 01:00:37 +0000
Files and hashes: 1: h4_WMe8uxzeUN_18dvjiRf8IJLs.crl (hash: vt9Ohh3Jv17+vytMWMTCTZPoN/aJZFLydUTMysIZ2fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:42:83:85:cb:59:15:e9:68:4b:b0:b6:67:0b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Validity
Not Before: Apr 17 01:00:37 2026 GMT
Not After : Apr 18 01:00:37 2026 GMT
Subject: CN=9fe880ca157aa1e0540a93e612529f95a667d07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f3:10:88:8a:c6:f0:8c:05:34:1e:f5:19:97:
06:b1:76:f2:35:da:ec:36:24:c8:74:bf:da:b8:12:
0e:a7:85:3e:98:13:7c:59:e0:e9:85:79:31:28:aa:
ad:71:dd:0e:d2:3e:64:47:c8:58:ac:30:55:a2:94:
83:26:eb:b2:b9:93:45:02:1f:19:7c:c1:b1:2e:89:
0d:57:c1:80:69:a4:96:70:4e:16:15:b9:78:0f:83:
06:05:a5:49:41:5b:79:6f:f0:7b:29:b0:18:97:05:
0a:26:0f:0e:cd:f3:da:1b:32:58:c7:b5:21:ed:03:
26:07:a5:48:17:68:91:75:5a:7d:00:da:00:76:5a:
4a:be:9c:32:bc:5d:0f:d3:a4:59:8d:68:66:1e:f7:
01:6d:16:10:b4:a2:47:84:f7:55:c7:19:b6:59:a6:
fe:be:85:59:fb:24:64:e0:c3:82:ca:e9:15:78:8b:
44:24:27:a9:57:4d:06:ef:88:07:fc:17:bf:e9:a4:
0d:9e:9f:6e:23:96:16:13:d4:0e:64:e8:c4:81:d0:
9e:3d:fc:4a:bd:d4:08:cb:9f:e2:bd:08:61:42:75:
11:12:a5:57:0c:5d:f4:8b:74:fc:28:34:ca:f5:3b:
0f:11:b1:c5:e9:8d:29:36:22:b8:ae:06:09:a0:4c:
7d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E8:80:CA:15:7A:A1:E0:54:0A:93:E6:12:52:9F:95:A6:67:D0:7C
X509v3 Authority Key Identifier:
keyid:87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:83:8f:91:0f:ff:04:60:91:45:79:ab:b8:8d:24:de:8d:69:
ee:14:8a:cd:4d:73:00:ab:8a:20:f6:aa:f7:5e:ac:54:a1:b2:
b6:80:36:24:ed:e2:3e:80:48:66:2e:4e:c1:08:6e:d7:04:d5:
95:6a:4a:e1:76:10:8a:ad:72:93:2b:86:f4:f8:7c:c6:0e:ea:
d5:74:c0:a1:03:6b:20:31:fc:af:0d:4b:22:59:67:6a:4c:58:
f9:6c:63:ff:54:5d:ef:dd:a6:03:29:8f:1c:cd:63:59:f4:24:
cd:8f:14:0e:0e:f9:a7:1d:d6:a5:40:ac:41:16:4a:bc:22:81:
28:8f:11:67:73:a7:08:ce:08:b6:a3:bc:f1:9c:8e:70:5c:a0:
83:4a:6a:f3:fd:cb:d0:9a:d5:4e:e2:23:4c:4e:01:6a:a2:bf:
81:30:b7:66:bf:bb:db:af:0b:d4:14:d4:a5:e4:89:26:c0:b6:
f9:15:17:f5:64:b5:37:ae:39:41:54:c4:e3:c8:13:37:40:96:
6b:12:23:70:bf:80:8a:d4:b4:fc:04:94:8d:ca:2e:5e:df:f7:
0b:3e:b8:4c:98:47:61:cd:e2:c7:db:93:47:58:c4:3c:06:67:
d7:0b:b5:92:ca:5a:a4:51:4b:5a:41:12:fe:db:e5:af:80:b2:
c5:9a:6b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:44:25 2026 by rpki-client