Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
File: H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft (raw, json)
Hash identifier: 3KB83FAtUn+QChz+DKwKmzv/u+macxuEVQBjtG12+Rk=
Subject key identifier: 37:86:5F:F0:CA:86:9E:DB:0A:5D:E4:69:65:A9:8C:8F:0E:9C:F3:1D
Authority key identifier: 1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
Certificate issuer: /CN=1f88b5e93522b898e76f45f478443c348f57b916
Certificate serial: 019D99D0976B6D0B473D8EE6D1DABDB555E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
Manifest number: 08D0
Signing time: Fri 17 Apr 2026 05:01:17 +0000
Manifest this update: Fri 17 Apr 2026 05:01:17 +0000
Manifest next update: Sat 18 Apr 2026 05:01:17 +0000
Files and hashes: 1: 8qURvhbURFqQhTipEQhvqic1Rjg.roa (hash: ApBgxUKn6ILqzgArNYuAOilqc1LglRrQeJhEVrK//8s=)
2: H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl (hash: NPp1Y2bBDqWsKHTBT7G7Mi2VtB/MRbqzv681/8RWgRQ=)
3: Yc842nPawebZwJ_3vPInht2PhWc.roa (hash: pK4l4MkPAVEDkDlaUNSdspt7kS5pkyjEEEGIn1qkNvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:97:6b:6d:0b:47:3d:8e:e6:d1:da:bd:b5:55:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f88b5e93522b898e76f45f478443c348f57b916
Validity
Not Before: Apr 17 05:01:17 2026 GMT
Not After : Apr 18 05:01:17 2026 GMT
Subject: CN=37865ff0ca869edb0a5de46965a98c8f0e9cf31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:08:58:d0:af:51:ec:45:3e:2c:5e:25:37:
92:16:61:04:ae:e6:d0:3a:23:8f:a1:49:99:91:ee:
a6:b9:5c:54:51:4b:fe:0a:fc:34:d0:d7:3c:fc:67:
3e:cb:4e:6d:0a:b3:c6:92:eb:f6:4e:f7:22:ac:4b:
d1:1e:64:9b:5c:62:db:cb:d4:c6:80:f8:e5:7c:59:
e3:48:5e:af:7e:33:b6:82:0f:2e:a1:97:63:9a:84:
c6:3b:81:26:7c:1c:c6:a3:2f:cc:4b:a3:15:f5:0d:
d3:b3:bd:4d:21:95:6b:eb:63:12:a3:66:14:64:fc:
04:e1:b1:d9:d2:7a:f3:0a:21:0f:44:55:bc:64:59:
d4:71:92:b1:92:99:b5:5a:d4:11:59:80:43:7d:46:
e0:d6:7c:9b:35:93:70:6c:eb:a9:62:1b:5a:14:33:
4d:25:b9:e5:fd:77:ad:a2:3a:d4:eb:7d:37:f7:e0:
ab:bf:3b:23:be:d7:1c:ea:b5:04:b5:9d:90:c5:b9:
98:6f:35:aa:e2:e5:bd:a1:fb:1d:4d:b9:63:95:fe:
31:ce:6b:14:f6:19:8f:66:50:8f:12:96:20:7f:a7:
0f:00:1b:a3:de:c2:e9:63:e4:8a:3b:95:26:fb:a7:
80:93:3a:39:d6:74:13:64:42:05:8c:78:dc:47:8d:
b0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:86:5F:F0:CA:86:9E:DB:0A:5D:E4:69:65:A9:8C:8F:0E:9C:F3:1D
X509v3 Authority Key Identifier:
keyid:1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e3:53:d8:cd:08:8f:eb:50:b4:7c:59:97:e1:1d:b6:e1:7d:
18:6a:8f:21:e1:9f:f5:93:7a:32:dc:1e:db:82:39:60:e5:5c:
4c:5e:e9:c6:be:59:6a:e6:07:98:48:9b:7a:01:52:be:75:f1:
ff:68:cb:4f:e3:c1:16:93:1b:12:c6:cc:7d:ca:98:79:dd:22:
5c:37:43:8a:06:bf:9e:95:e8:05:be:29:eb:f9:ae:7d:6d:ec:
8f:02:15:0b:a3:35:6b:2a:fa:5d:0d:0a:d5:09:c5:7e:1d:f5:
f5:aa:3b:09:fc:38:36:29:e1:51:1d:25:9f:4e:d2:42:11:66:
29:39:71:7f:80:4f:cc:03:c9:eb:4c:9c:9d:ad:95:97:27:ac:
6e:14:86:81:09:8b:69:22:d2:cb:8e:e8:9f:8e:8c:e3:48:3c:
cf:e7:76:49:32:1f:2a:07:74:32:a7:68:18:10:1a:73:fd:a5:
51:a3:f6:c4:fd:75:3f:5e:be:36:00:7d:95:0c:f1:c6:91:73:
78:ab:1f:3c:8d:76:2e:0b:26:0c:8f:ea:53:e7:9d:0b:21:7d:
71:3b:27:a1:5a:99:15:c3:7a:ef:bf:3c:82:29:ce:35:8c:a3:
e6:79:cd:e6:89:5d:fd:43:f4:40:ec:55:68:3d:f0:f3:bb:45:
7e:2c:99:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:00:56 2026 by rpki-client