Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
File: Hal8rn3msp5W8CWa9TyVkmA0pQI.mft (raw, json)
Hash identifier: RFs05FNKEa3meKF+B4+w5YxSp+3i/bC1zpbVk4e6r34=
Subject key identifier: E5:3E:7A:11:CB:3E:B0:D6:50:61:6E:1D:9C:BB:54:06:F8:5E:D1:CA
Authority key identifier: 1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
Certificate issuer: /CN=1da97cae7de6b29e56f0259af53c95926034a502
Certificate serial: 019F935BB82A7CE6BA9BEFE4DA9A62962BE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
Manifest number: 19CE
Signing time: Fri 24 Jul 2026 09:01:29 +0000
Manifest this update: Fri 24 Jul 2026 09:01:29 +0000
Manifest next update: Sat 25 Jul 2026 09:01:29 +0000
Files and hashes: 1: Hal8rn3msp5W8CWa9TyVkmA0pQI.crl (hash: Jq+HjO74+5A08oxX+Up4SYv0cQc0noDTIbkmZHe2/JA=)
2: JhmZ_DzVJE8577BFE3vDvK9OMd0.roa (hash: z7gGITh/3gzv8G0JyKWvKpwEUXXNZ5dN/ko+JOVacoE=)
3: WCOH2ijRWITUQhmT6F4yfxrnSS4.roa (hash: 2qWBhToAV4o84zS0ph5XP7s0uUrVjIEKx5W2Lfxk5UQ=)
4: qEPeih-d-b5ejLQMGiGo36Qnv5w.roa (hash: 29cMx+RjFTGtIezVTC2prGXPBgmOX8SjbmN1gmtAbFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:b8:2a:7c:e6:ba:9b:ef:e4:da:9a:62:96:2b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da97cae7de6b29e56f0259af53c95926034a502
Validity
Not Before: Jul 24 09:01:29 2026 GMT
Not After : Jul 25 09:01:29 2026 GMT
Subject: CN=e53e7a11cb3eb0d650616e1d9cbb5406f85ed1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:87:af:d0:9c:2d:75:15:e4:ec:39:a0:25:19:
2a:fc:05:9a:a9:78:07:4d:37:44:c8:37:45:3d:8c:
84:78:c6:3e:43:03:a2:31:51:02:3f:1e:66:a7:ae:
ef:e0:c5:3a:ef:bc:a2:bd:6b:54:5b:6e:0f:7a:28:
d4:bd:07:75:a5:95:3e:a0:c0:50:c2:58:0c:92:ce:
96:90:b6:e8:e0:97:38:cc:f7:70:5a:aa:04:a9:63:
2f:d1:49:ed:c3:c0:3f:dc:2a:ec:59:45:a1:53:35:
d5:e4:80:45:61:34:21:f4:b2:59:b5:c2:8a:14:64:
26:e1:04:6b:b4:fc:fd:48:38:33:62:95:5b:08:35:
34:a1:4b:25:c8:99:c7:e7:79:5a:be:78:f6:dd:67:
2d:a7:80:51:f0:df:e6:b7:11:72:13:c5:3c:ae:45:
e7:b1:a5:35:2a:a2:69:c8:57:b3:88:57:1b:02:5a:
89:9c:51:e0:99:c7:87:47:ba:8e:2f:65:d2:0f:46:
17:cc:d4:aa:f7:b4:b9:33:0e:2b:79:ff:91:27:59:
5f:9d:94:71:53:b8:9e:77:9d:96:49:e9:bb:dc:be:
b5:bc:f5:46:41:25:d9:a3:33:98:1a:5a:e6:c1:73:
b0:84:86:06:7f:41:3b:df:60:c5:8b:d3:49:77:74:
b1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3E:7A:11:CB:3E:B0:D6:50:61:6E:1D:9C:BB:54:06:F8:5E:D1:CA
X509v3 Authority Key Identifier:
keyid:1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:be:5a:18:36:50:15:35:30:fd:f0:3d:af:25:c7:02:c2:7b:
0a:86:ce:3a:10:d3:9f:10:d0:4a:ff:42:11:d7:66:da:99:07:
27:44:2e:e0:ae:b4:7a:90:97:dd:fd:02:83:e9:c6:f1:58:1d:
60:b9:d0:12:8c:2b:39:4d:f2:0d:47:06:d3:ad:34:50:09:a2:
69:2e:5f:85:8d:8f:cf:58:48:bb:b0:01:ae:f6:04:bd:40:98:
4e:ac:b6:aa:8b:ce:c2:74:ba:4f:66:9b:a9:9e:34:92:81:99:
1f:9c:46:1f:c6:fd:be:93:4a:15:b5:6f:fb:58:43:71:7e:cd:
7e:94:91:5d:67:25:aa:9d:cd:f4:02:74:c0:05:ec:2a:ca:ac:
d5:47:e3:19:dd:68:56:3a:87:c5:b4:ff:43:a6:25:69:f2:87:
65:b4:56:18:b6:cc:42:7b:c5:a7:b2:ca:c3:eb:d0:94:8f:5b:
d1:01:db:63:bb:c7:02:f7:c5:a3:10:4f:4b:b1:fc:aa:28:99:
89:f8:ef:a1:5b:48:55:94:99:ee:00:14:48:3e:b0:38:0b:09:
c1:2f:be:3f:a3:42:fb:6d:4c:6e:d9:64:90:e4:b2:92:53:e5:
c7:e9:90:4b:85:16:86:a1:f7:67:e7:c8:ae:bd:76:a1:78:a1:
c2:02:b2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:16:16 2026 by rpki-client