Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
File: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft (raw, json)
Hash identifier: BDFBwE0Ecs08VfsNVKj7A3SQo7CDT9fJZuV9UOpp3FE=
Subject key identifier: A1:A9:C7:01:FC:AC:C3:0E:F3:EB:65:C4:CE:07:2B:AF:B0:10:FC:5E
Authority key identifier: 1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
Certificate issuer: /CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Certificate serial: 019D26CCDABC39592A8A4D706D11585F9547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 21:00:52 +0000
Manifest this update: Wed 25 Mar 2026 21:00:52 +0000
Manifest next update: Thu 26 Mar 2026 21:00:52 +0000
Files and hashes: 1: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl (hash: E6nB4Q8Y2ffZQkrbHBFZQwEc7sUfgux0JO7MR78UkJo=)
2: fA_uTKLLbWG518h0njj_cqP2p6E.roa (hash: 4mY7FOvfpwAUXlFXu+ZK1/hojb4S0OMizyAm+Nun5mU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:da:bc:39:59:2a:8a:4d:70:6d:11:58:5f:95:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Validity
Not Before: Mar 25 21:00:52 2026 GMT
Not After : Mar 26 21:00:52 2026 GMT
Subject: CN=a1a9c701fcacc30ef3eb65c4ce072bafb010fc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9c:18:94:3b:0f:e8:c8:de:a6:4a:70:af:bc:
2a:40:35:eb:b6:f5:43:c3:fa:4e:a9:6a:86:a9:8f:
f8:f9:0f:0a:42:25:10:3b:c6:bc:cf:bc:e1:aa:37:
a2:f7:d2:e9:23:8f:06:2a:e2:43:6b:55:0f:b1:5a:
ab:b5:f9:f1:01:dc:eb:17:ff:7d:08:62:66:bb:85:
ff:12:40:e7:45:a9:b6:68:c3:7e:75:e0:0a:8c:62:
45:37:90:38:5c:6e:3a:3e:f9:7d:51:2e:88:0a:13:
8c:a0:95:e4:28:62:c4:d5:13:27:1d:b1:cb:7c:e7:
b3:f9:fb:f0:b9:1a:eb:ff:cd:b3:fd:8d:b8:20:1c:
80:7c:19:fb:7a:09:8a:bb:53:06:12:12:3f:1f:24:
c4:b3:73:24:25:c3:df:28:3b:aa:01:23:47:55:1d:
fc:ee:c7:79:61:7b:64:db:15:11:2e:86:77:c2:5c:
20:c2:1a:21:40:20:47:66:34:2f:8a:19:f0:e8:4f:
56:21:a6:0c:3f:c4:37:ec:98:15:e4:71:82:36:f7:
fa:35:54:61:ba:4c:1b:4f:97:4f:8e:8a:69:bd:57:
bc:b8:51:15:0c:12:32:c0:4b:c3:c7:15:d6:68:c3:
b8:2a:e8:be:7a:52:34:26:43:4a:19:2a:c6:c6:07:
9a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A9:C7:01:FC:AC:C3:0E:F3:EB:65:C4:CE:07:2B:AF:B0:10:FC:5E
X509v3 Authority Key Identifier:
keyid:1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:77:4a:35:2e:7d:31:96:4e:e1:d8:05:c6:53:a0:5f:e7:3b:
39:88:45:49:d5:82:21:c4:0e:fc:3a:db:91:19:10:91:89:b9:
97:e8:f3:27:1b:c6:8b:0d:91:f4:27:52:25:4f:84:49:ee:ba:
14:11:d4:f4:02:bf:8e:c5:d2:c2:43:b5:2b:e8:ab:64:b3:d2:
44:cd:5b:e7:59:f5:44:81:50:22:af:19:fe:e2:31:cf:9c:1b:
d9:0e:b7:ba:d2:a4:37:d8:83:b9:b5:b4:e7:71:5a:5f:35:3f:
c3:dc:d3:35:ef:33:4d:ee:57:0b:36:ce:3d:4c:85:28:e5:87:
23:a9:20:e8:26:1f:d6:90:98:0b:99:05:cf:47:58:0a:fc:62:
6e:8a:0d:68:c1:e2:54:67:97:9c:16:57:c6:56:a7:0b:ae:fe:
8f:ca:9a:42:ca:6e:7a:94:ea:63:34:13:63:7d:6a:c6:f6:86:
57:2b:a5:0a:68:ae:72:3a:6f:71:38:a9:62:42:37:4f:5a:35:
fe:7f:6a:be:23:6b:e6:da:f8:34:ef:2f:a7:1b:e0:52:32:a4:
f8:03:47:8d:de:46:b3:3a:18:2d:d5:a1:19:5c:2d:fe:e5:f4:
40:c0:25:6b:c5:96:b0:e2:aa:b1:86:a0:ec:e9:fb:c1:03:0e:
14:c5:4a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:11 2026 by rpki-client