Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
File: H4EMw_0igzjZuWlyXZW7M8TmWkg.mft (raw, json)
Hash identifier: B8iUed9BiPHIkL8GDrjJnrxIPsAiHwF26irbMCu0NUQ=
Subject key identifier: 5B:D9:26:74:41:C8:14:23:F7:42:26:A3:A6:51:A4:DD:99:DF:E5:61
Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
Certificate issuer: /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Certificate serial: 019D9CD202D5CDE85049AC59A197E80620A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
Manifest number: 1056
Signing time: Fri 17 Apr 2026 19:01:41 +0000
Manifest this update: Fri 17 Apr 2026 19:01:41 +0000
Manifest next update: Sat 18 Apr 2026 19:01:41 +0000
Files and hashes: 1: CyqM0bKo_ElRFFbv0AT5aDspxj8.roa (hash: QCCpwbYRSMOO3zc+/f/cjc8LG2FdpSD4/2ESkOJ9QkE=)
2: G2UXryvMWYgvdYG8XaPdE7pZyDM.roa (hash: PdqBjdoKDV3gCJFELA3WohXvGinSd8Rgt/NVk+mMS2g=)
3: H4EMw_0igzjZuWlyXZW7M8TmWkg.crl (hash: eZLSANwZEtO4jFBbHXiSCFLSLFn435g066zP82QDTvw=)
4: Ix1gtJqQKv2Z_pk2hTiqDc-sy3M.roa (hash: MobBhVq4hyLxQ20aOszGD0QH9pUdXdw1af7wh+y1S9w=)
5: MQdJhE7DJVvNK-iEKOuroe7Wk6U.roa (hash: IDeLEFXV5ONQ6stNDvzS0ZYYqNXXaca6TX0gy7MtJtY=)
6: bR6c5Iui3A2Me6RPgnPPN-v7qhE.roa (hash: KNyqXXbQP8d6nmiYFJtuYs5Cbp0q38PpWcydNq1Wl3E=)
7: dnZtq0bwm61Im0Ni1VeeuAbXXDM.roa (hash: gMOoRKcjYT072cXzuogKtXmAQF95le8qOIdAlIczn4o=)
8: e-JA2-bFy7B8BkYmpPYNJ1dxBKc.roa (hash: bcrv+YrD4m4ddUBKigxs47ttA/eUpotZwmXx4eRmeE4=)
9: rM2i7X4i-xTENkByKDGS_394QYY.roa (hash: jSokmetv8aQ+53gcEJLpoqZU+R8uF/gkAzUpvjkIlBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d2:02:d5:cd:e8:50:49:ac:59:a1:97:e8:06:20:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Validity
Not Before: Apr 17 19:01:41 2026 GMT
Not After : Apr 18 19:01:41 2026 GMT
Subject: CN=5bd9267441c81423f74226a3a651a4dd99dfe561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c3:fe:81:f7:73:00:0d:02:bb:48:c6:ad:a1:
d0:e3:70:da:37:e1:29:3b:92:1a:bb:b0:b5:0d:7a:
5f:35:24:66:b4:51:dc:02:c3:61:a7:29:ef:a0:41:
98:c4:b5:59:e1:03:c5:0b:7e:46:34:82:43:05:62:
08:33:c2:40:cc:7b:e5:f0:9f:21:0a:cf:74:1e:59:
df:74:76:b3:ec:6e:10:2e:ea:09:65:7e:90:86:43:
49:b0:a7:22:b7:a5:07:b9:26:f7:13:5a:5f:ec:56:
92:d2:04:74:7b:99:a1:7b:50:c8:d1:83:03:e7:41:
9d:37:ee:60:72:af:7e:e9:16:89:34:9f:e0:34:f9:
6f:54:0e:1d:24:41:ad:44:cc:b4:a0:ba:00:e9:fe:
5e:6a:45:be:e1:58:4e:cd:e4:91:31:a8:16:cf:45:
a6:e3:07:fb:8e:71:9b:cd:94:e0:44:e7:27:66:18:
26:aa:a3:d6:c1:94:08:2d:4b:6a:36:8f:b5:6a:c2:
61:69:42:2f:55:0a:65:f9:db:ec:5f:df:ec:3c:f7:
74:73:53:d0:13:0c:43:0f:a3:ee:13:c7:a5:05:ef:
5e:6d:ef:7a:17:9a:3d:f8:24:7e:d4:2f:7d:ee:04:
1a:27:ca:4e:6b:a4:60:16:77:46:db:86:92:a6:85:
9d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D9:26:74:41:C8:14:23:F7:42:26:A3:A6:51:A4:DD:99:DF:E5:61
X509v3 Authority Key Identifier:
keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:af:ba:2a:f8:d4:53:03:1f:f9:af:ef:8f:b9:f0:72:aa:a9:
30:de:91:02:bf:7a:03:3f:2f:99:97:62:54:70:8f:67:69:67:
1b:6a:61:7c:53:86:20:12:77:45:87:65:10:bf:c2:5b:85:8d:
a1:bb:f2:e8:04:08:8a:9e:f6:23:bb:47:e1:d1:ec:24:4d:c7:
7a:b4:0e:e4:61:72:a9:c8:6d:8b:4e:bd:0c:1c:78:d8:e1:ac:
e9:c4:a6:66:dc:2d:ea:48:ae:5c:f4:b3:c3:20:f4:77:d1:74:
50:95:f5:cd:f9:e7:53:e3:0f:d9:2e:43:bd:af:94:21:28:7c:
b3:a5:29:7c:10:8a:b5:f6:7d:3d:d2:18:0a:32:bd:93:b7:20:
c2:7d:2e:8c:bb:17:e6:54:c1:84:ec:a3:d7:ba:7d:90:35:8c:
24:eb:bd:99:7d:1b:4d:8c:53:f0:13:95:9a:cd:f9:12:02:4b:
2e:ee:c0:4e:84:2d:a8:f7:b7:bf:44:9c:b7:47:9f:35:71:17:
03:af:b4:c1:46:59:7f:53:6a:4a:b8:fa:21:a4:3d:b6:dd:e1:
65:05:f8:7d:dd:28:bf:b7:71:aa:05:24:6a:60:93:7f:ff:bf:
56:27:cc:97:12:55:5f:e8:89:3c:f5:12:ca:95:f8:58:08:de:
5d:e8:70:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2c0gLVzehQSaxZoZfoBiCpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmODEwY2MzZmQyMjgzMzhkOWI5Njk3MjVkOTViYjMzYzRl
NjVhNDgwHhcNMjYwNDE3MTkwMTQxWhcNMjYwNDE4MTkwMTQxWjAzMTEwLwYDVQQD
Eyg1YmQ5MjY3NDQxYzgxNDIzZjc0MjI2YTNhNjUxYTRkZDk5ZGZlNTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78P+gfdzAA0Cu0jGraHQ43DaN+Ep
O5Iau7C1DXpfNSRmtFHcAsNhpynvoEGYxLVZ4QPFC35GNIJDBWIIM8JAzHvl8J8h
Cs90HlnfdHaz7G4QLuoJZX6QhkNJsKcit6UHuSb3E1pf7FaS0gR0e5mhe1DI0YMD
50GdN+5gcq9+6RaJNJ/gNPlvVA4dJEGtRMy0oLoA6f5eakW+4VhOzeSRMagWz0Wm
4wf7jnGbzZTgROcnZhgmqqPWwZQILUtqNo+1asJhaUIvVQpl+dvsX9/sPPd0c1PQ
EwxDD6PuE8elBe9ebe96F5o9+CR+1C997gQaJ8pOa6RgFndG24aSpoWdiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvZJnRByBQj90Imo6ZRpN2Z3+VhMB8GA1UdIwQY
MBaAFB+BDMP9IoM42blpcl2VuzPE5lpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8wZjA5MjctYzI5Yi00Njk4LTg1OWUt
ZjljMTgwYmE0ODAxLzEvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8wZjA5MjctYzI5Yi00Njk4LTg1OWUtZjljMTgwYmE0ODAx
LzEvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFa+6KvjU
UwMf+a/vj7nwcqqpMN6RAr96Az8vmZdiVHCPZ2lnG2phfFOGIBJ3RYdlEL/CW4WN
obvy6AQIip72I7tH4dHsJE3HerQO5GFyqchti069DBx42OGs6cSmZtwt6kiuXPSz
wyD0d9F0UJX1zfnnU+MP2S5Dva+UISh8s6UpfBCKtfZ9PdIYCjK9k7cgwn0ujLsX
5lTBhOyj17p9kDWMJOu9mX0bTYxT8BOVms35EgJLLu7AToQtqPe3v0Sct0efNXEX
A6+0wUZZf1NqSrj6IaQ9tt3hZQX4fd0ov7dxqgUkamCTf/+/VifMlxJVX+iJPPUS
ypX4WAjeXehwIw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:01:44 2026 by rpki-client