Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
File: H4EMw_0igzjZuWlyXZW7M8TmWkg.mft (raw, json)
Hash identifier: Md6sPF+4duRAxOesPa5AaY/HohjrQ9soc0EMZYZyJ9o=
Subject key identifier: D6:7A:11:68:17:9D:F8:6F:86:88:B0:82:CD:FF:D3:21:4B:50:6C:40
Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
Certificate issuer: /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Certificate serial: 019CAD597585E234235F9B78F4ECF05AC5A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
Manifest number: 0FDA
Signing time: Mon 02 Mar 2026 07:00:47 +0000
Manifest this update: Mon 02 Mar 2026 07:00:47 +0000
Manifest next update: Tue 03 Mar 2026 07:00:47 +0000
Files and hashes: 1: CyqM0bKo_ElRFFbv0AT5aDspxj8.roa (hash: QCCpwbYRSMOO3zc+/f/cjc8LG2FdpSD4/2ESkOJ9QkE=)
2: G2UXryvMWYgvdYG8XaPdE7pZyDM.roa (hash: PdqBjdoKDV3gCJFELA3WohXvGinSd8Rgt/NVk+mMS2g=)
3: H4EMw_0igzjZuWlyXZW7M8TmWkg.crl (hash: gN2NYu1tEeFedsmbINxoQ1EsYJqc61GFVBQYPYku+jo=)
4: Ix1gtJqQKv2Z_pk2hTiqDc-sy3M.roa (hash: MobBhVq4hyLxQ20aOszGD0QH9pUdXdw1af7wh+y1S9w=)
5: MQdJhE7DJVvNK-iEKOuroe7Wk6U.roa (hash: IDeLEFXV5ONQ6stNDvzS0ZYYqNXXaca6TX0gy7MtJtY=)
6: bR6c5Iui3A2Me6RPgnPPN-v7qhE.roa (hash: KNyqXXbQP8d6nmiYFJtuYs5Cbp0q38PpWcydNq1Wl3E=)
7: dnZtq0bwm61Im0Ni1VeeuAbXXDM.roa (hash: gMOoRKcjYT072cXzuogKtXmAQF95le8qOIdAlIczn4o=)
8: e-JA2-bFy7B8BkYmpPYNJ1dxBKc.roa (hash: bcrv+YrD4m4ddUBKigxs47ttA/eUpotZwmXx4eRmeE4=)
9: rM2i7X4i-xTENkByKDGS_394QYY.roa (hash: jSokmetv8aQ+53gcEJLpoqZU+R8uF/gkAzUpvjkIlBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:75:85:e2:34:23:5f:9b:78:f4:ec:f0:5a:c5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Validity
Not Before: Mar 2 07:00:47 2026 GMT
Not After : Mar 3 07:00:47 2026 GMT
Subject: CN=d67a1168179df86f8688b082cdffd3214b506c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fd:b6:d0:12:9b:f5:e1:48:0c:49:73:80:af:
c6:7f:27:2b:78:53:48:60:18:00:69:3a:44:cd:9d:
e5:c7:05:f4:b2:44:ed:fb:b4:4e:18:e2:e8:55:e7:
1a:cf:dc:8f:98:dd:6d:5c:59:ed:c6:9e:a9:13:27:
70:fe:13:0f:a3:4d:af:6d:62:2f:b0:52:6c:5a:ed:
37:e7:62:38:2f:eb:68:f7:a5:52:b4:01:e2:24:72:
84:23:13:52:0a:80:cb:71:ce:be:2b:63:36:a6:1d:
7f:b0:fa:69:da:2c:97:21:4a:43:ae:03:47:8e:1c:
21:d7:91:22:6e:ae:db:d4:fd:19:c9:77:80:b4:9a:
ee:cb:db:d1:4d:49:52:70:01:61:f6:14:40:c1:2d:
d4:77:92:50:53:3f:7c:23:64:82:7d:0d:5e:4b:7d:
35:41:75:00:57:82:f4:80:25:51:51:b3:3b:29:1e:
d9:c7:b5:10:06:67:d1:6c:7e:5c:a1:4c:3c:af:9d:
90:d2:86:85:a9:95:80:45:23:ac:41:57:b6:67:24:
f3:ea:ca:10:28:59:f7:a8:61:0d:84:da:67:29:c2:
19:dc:0d:a4:0e:e5:49:70:4b:1f:a9:c1:39:35:5a:
8d:d8:6f:6f:29:36:e4:b8:17:e2:da:cd:04:18:69:
e5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7A:11:68:17:9D:F8:6F:86:88:B0:82:CD:FF:D3:21:4B:50:6C:40
X509v3 Authority Key Identifier:
keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:06:d6:03:3c:7a:63:70:a9:4f:c2:4c:a7:00:82:31:d4:9c:
00:6f:a3:08:da:10:b4:30:a6:3e:7d:b4:f4:32:17:c3:25:1f:
34:26:07:c4:4b:98:1b:3d:41:de:25:62:dc:60:ef:ff:d7:15:
79:91:82:a0:a7:50:98:f7:44:74:51:7d:a7:55:f5:41:4c:8f:
fe:8b:f1:00:f4:df:e6:68:6e:e7:f5:0c:ab:d6:15:0c:c3:eb:
b1:a0:16:bd:18:67:0c:92:16:92:27:25:5c:4f:56:4e:17:a5:
8b:ae:20:25:7e:a4:7c:61:93:6c:bd:a7:38:ab:14:37:4e:2a:
c6:e4:c5:74:4d:ff:41:c7:ed:0a:be:30:c5:4a:cb:45:4e:8c:
b8:4c:86:1d:c3:f6:c5:3b:36:c3:4d:8e:80:7d:34:08:d0:4f:
7c:8c:a3:d9:eb:84:59:c3:3c:7c:dd:84:bc:97:43:a1:cd:9a:
3b:80:a6:c3:fe:32:1f:64:81:c2:12:27:1a:88:d3:9d:84:4a:
ab:d4:ff:a1:d4:eb:a3:3d:56:70:34:6b:80:5d:4f:7c:5d:c8:
0a:bb:71:91:dc:d0:af:32:c7:f6:e4:f1:72:3f:4f:70:10:6d:
5e:ea:db:14:00:9d:e9:5d:e8:43:b1:c6:07:26:08:2f:87:d7:
4b:8d:3a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:51:18 2026 by rpki-client