Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
File: Has2Xsw1BFitorCUnuZ--djG9Nw.mft (raw, json)
Hash identifier: IvuxNlY6OckZjCEJ0THHysivtGx1nKh4JJ7qtqFeVxs=
Subject key identifier: 9A:CE:07:33:42:7A:25:82:10:D6:01:CE:FB:23:51:F6:5B:79:ED:E3
Authority key identifier: 1D:AB:36:5E:CC:35:04:58:AD:A2:B0:94:9E:E6:7E:F9:D8:C6:F4:DC
Certificate issuer: /CN=1dab365ecc350458ada2b0949ee67ef9d8c6f4dc
Certificate serial: 019E1F4781D6A9F5B92F5268F77EAEDF5C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
Manifest number: 0210
Signing time: Wed 13 May 2026 03:00:40 +0000
Manifest this update: Wed 13 May 2026 03:00:40 +0000
Manifest next update: Thu 14 May 2026 03:00:40 +0000
Files and hashes: 1: GJ9jq1utAOnfB6vGzK5aQugyYRo.roa (hash: 4LC584iGEYWuEuibcnVRjFRB3sB/Gg71VV3hzTlGieE=)
2: Has2Xsw1BFitorCUnuZ--djG9Nw.crl (hash: 0QuXZVVl3RdEZ72C+sMhtmZqpFMHgzx4Uu+seB0poiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:81:d6:a9:f5:b9:2f:52:68:f7:7e:ae:df:5c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dab365ecc350458ada2b0949ee67ef9d8c6f4dc
Validity
Not Before: May 13 03:00:40 2026 GMT
Not After : May 14 03:00:40 2026 GMT
Subject: CN=9ace0733427a258210d601cefb2351f65b79ede3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:92:f9:37:1b:e0:07:16:2e:75:24:25:61:1c:
99:76:a1:7a:ab:84:52:29:f1:65:f9:63:aa:5e:12:
0d:f9:68:dc:1c:94:c3:b7:eb:f5:10:88:08:e1:3f:
73:4d:74:ce:28:b9:53:37:14:cc:9d:75:58:62:cd:
f5:c8:98:15:2f:4c:c3:c3:ef:76:80:31:84:0f:cd:
be:41:71:0b:6e:1e:5b:19:c0:30:cb:cd:ea:c2:0f:
38:72:0a:a8:ab:80:d9:bd:13:99:83:74:92:84:ea:
32:e4:0d:a6:07:ef:ba:f1:72:9d:59:d0:5e:e5:6f:
7a:aa:75:38:d6:68:94:29:f1:c3:ed:73:4d:81:87:
e8:5f:23:91:f5:04:16:88:fb:8f:b5:f6:34:b2:45:
ed:95:49:54:ac:34:af:60:da:16:ce:de:0d:db:dc:
c7:49:7a:10:4a:1a:4a:52:d2:f1:0f:e4:57:c6:cd:
e0:b8:e3:f7:af:e8:cd:a0:2a:32:df:8c:75:cd:31:
a6:16:4d:a7:08:da:71:7f:d4:d7:ff:20:4b:a6:88:
48:83:5b:0d:3a:e6:26:c7:e0:4f:32:94:35:b0:62:
b5:b4:d6:48:b1:4a:ef:59:9f:c2:50:cd:63:59:fd:
5b:20:92:94:df:fa:fb:f5:5e:c9:c3:a1:ae:8c:73:
97:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CE:07:33:42:7A:25:82:10:D6:01:CE:FB:23:51:F6:5B:79:ED:E3
X509v3 Authority Key Identifier:
keyid:1D:AB:36:5E:CC:35:04:58:AD:A2:B0:94:9E:E6:7E:F9:D8:C6:F4:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:7b:c7:3d:e1:7c:e3:9d:af:d9:e4:0e:6f:95:82:2b:f1:a0:
3d:e7:d2:92:65:20:b9:f2:c4:5d:1c:e5:c2:44:47:7e:f9:71:
ea:20:c7:51:98:bd:2b:eb:21:5a:2f:85:c4:a3:f4:1b:b0:df:
39:12:4c:39:08:53:9f:9a:e7:24:f0:14:90:de:6e:2d:e7:c4:
52:3a:16:ab:ef:4d:0c:b1:51:3b:c5:78:e2:78:1a:f1:64:f2:
71:ae:7c:02:f4:b7:8b:9b:e6:25:9a:4a:de:83:08:d9:1e:af:
88:c1:6c:57:34:c6:2f:83:ab:08:78:a2:66:fe:fa:57:a8:14:
1f:d3:dc:3d:64:ba:6f:50:34:fe:c6:69:2a:4a:53:95:bd:41:
5f:bb:6a:73:58:67:7c:b2:30:b4:ed:f5:d3:d4:d4:eb:fd:8a:
7a:26:6d:42:31:36:4e:70:55:e0:fa:a3:47:9a:88:ab:03:a1:
ba:66:71:a2:61:55:cf:c2:22:b3:78:49:1e:74:b9:0d:11:17:
d9:81:f9:20:78:ce:1d:8f:da:65:e7:c2:3c:76:f7:c1:e7:75:
65:f4:f3:4d:25:14:5e:38:11:c1:9d:71:47:05:ad:9a:ff:da:
a9:56:c9:0e:f2:a9:46:2a:ea:60:80:fe:c0:ac:e9:1d:f1:38:
a0:e3:ec:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:18 2026 by rpki-client