Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
File: H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft (raw, json)
Hash identifier: /5fEpjXlndnu/rz98uKMWUvR976Xxf7ip3IS8GKhrBc=
Subject key identifier: CA:6E:9F:1D:1E:36:9C:A2:A7:95:B6:67:55:B6:6F:FA:95:51:FB:40
Authority key identifier: 1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
Certificate issuer: /CN=1f88b5e93522b898e76f45f478443c348f57b916
Certificate serial: 019CAA593A079EE66AC80B76D40C54958B52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
Manifest number: 0854
Signing time: Sun 01 Mar 2026 17:01:40 +0000
Manifest this update: Sun 01 Mar 2026 17:01:40 +0000
Manifest next update: Mon 02 Mar 2026 17:01:40 +0000
Files and hashes: 1: 8qURvhbURFqQhTipEQhvqic1Rjg.roa (hash: ApBgxUKn6ILqzgArNYuAOilqc1LglRrQeJhEVrK//8s=)
2: H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl (hash: vBi0XLi9eobKMoKBGllYSgC+gEufVevrg1T92TgVlmg=)
3: Yc842nPawebZwJ_3vPInht2PhWc.roa (hash: pK4l4MkPAVEDkDlaUNSdspt7kS5pkyjEEEGIn1qkNvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:3a:07:9e:e6:6a:c8:0b:76:d4:0c:54:95:8b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f88b5e93522b898e76f45f478443c348f57b916
Validity
Not Before: Mar 1 17:01:40 2026 GMT
Not After : Mar 2 17:01:40 2026 GMT
Subject: CN=ca6e9f1d1e369ca2a795b66755b66ffa9551fb40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6b:38:29:93:99:1f:23:23:c1:ce:5b:34:a9:
fc:0c:4d:e2:27:5b:70:d0:1f:b1:cd:d0:81:ac:1a:
9f:2b:a0:6a:d3:59:23:ff:a4:93:80:ff:3c:4a:a0:
09:40:28:7e:c3:4a:23:a3:34:93:fe:63:0e:86:b5:
74:e4:e9:a2:f4:62:e2:f3:93:26:2a:d3:dc:67:87:
45:77:33:da:c9:f1:5e:28:db:d5:40:f3:9f:a4:96:
92:38:66:18:e4:8a:86:66:23:cc:00:30:d7:28:b3:
62:89:48:d7:6c:7b:83:e8:2d:d1:cf:d3:4c:07:b5:
3b:fa:87:82:f3:cc:c6:06:77:f4:24:56:b9:4e:c7:
01:3d:f8:4d:76:78:d7:30:a2:99:f2:48:9e:9a:0f:
14:55:4a:03:23:a3:63:6f:0c:36:68:1e:67:b4:a0:
ce:30:0f:b5:5c:08:c0:a5:37:0a:82:d4:4b:3e:b1:
7c:f2:29:fa:20:a0:d3:9a:d0:d8:9f:1a:a6:e5:f7:
8c:f8:b0:bc:68:21:af:57:6d:3b:63:36:1d:3c:99:
f8:27:6f:e7:ee:dd:01:42:16:c5:a8:e6:e8:6c:51:
72:49:6d:e9:06:1e:a6:64:e7:75:c4:83:01:d9:8f:
59:6d:81:1e:c8:3d:f9:6e:13:d6:fc:72:3e:1a:38:
aa:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6E:9F:1D:1E:36:9C:A2:A7:95:B6:67:55:B6:6F:FA:95:51:FB:40
X509v3 Authority Key Identifier:
keyid:1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:46:04:b7:28:c5:cf:ae:60:da:d1:f9:06:94:7a:22:49:e3:
f6:93:e4:7a:20:31:5d:8b:bc:0e:61:bb:f3:5f:46:37:df:bc:
a2:3b:5b:e9:1c:43:82:e8:15:76:fa:fa:99:31:99:9a:02:5c:
39:70:de:64:b8:21:70:21:9a:95:bc:9a:e8:fe:8a:0c:4a:56:
88:c7:e5:54:cf:f5:0d:54:70:18:9a:00:8f:f0:6f:54:4c:f2:
b1:10:c1:30:89:e9:e4:27:df:5e:1f:71:da:59:4d:6b:d2:db:
cc:85:17:ec:b9:6e:09:a5:16:cd:c5:f1:63:f1:3f:9e:f7:6f:
23:60:ee:50:78:68:9b:ab:b3:64:46:6a:1d:1f:ae:41:02:93:
b5:3f:68:a4:47:7f:be:7c:01:0f:ef:7f:21:46:ec:ef:9d:b3:
dd:8c:57:57:27:2a:2e:80:10:26:fc:18:c5:7a:d2:6b:3f:0e:
18:73:0b:bd:ae:e3:61:04:19:ee:35:b2:e0:82:35:af:45:5e:
e2:df:f6:30:f5:4c:6c:8b:52:cd:56:bb:b9:57:e4:27:8a:ad:
1b:a7:6d:d0:2c:0d:3b:47:12:4b:c1:d3:7b:07:7c:2b:bd:a3:
de:21:ec:1e:48:18:00:c1:4a:fa:8a:72:ff:80:16:0a:41:84:
3a:1f:db:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:11:49 2026 by rpki-client