Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
File: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft (raw, json)
Hash identifier: 6zsq0ym+QDn9irAnyH7mE+UPCfXZwR+r9CFtRd40rp4=
Subject key identifier: 35:98:02:D7:DF:4F:1B:C6:D4:67:97:4C:0E:BA:A7:C3:99:0C:DF:E8
Authority key identifier: 1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
Certificate issuer: /CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Certificate serial: 019E1DFE4E6DA28A5C36F49162DEF27ABA0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 21:01:05 +0000
Manifest this update: Tue 12 May 2026 21:01:05 +0000
Manifest next update: Wed 13 May 2026 21:01:05 +0000
Files and hashes: 1: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl (hash: IbWZLdQVbCrl/cKxMGpBQVqRSETSVx8Ve+u9m15DHpg=)
2: fA_uTKLLbWG518h0njj_cqP2p6E.roa (hash: 4mY7FOvfpwAUXlFXu+ZK1/hojb4S0OMizyAm+Nun5mU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:4e:6d:a2:8a:5c:36:f4:91:62:de:f2:7a:ba:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Validity
Not Before: May 12 21:01:05 2026 GMT
Not After : May 13 21:01:05 2026 GMT
Subject: CN=359802d7df4f1bc6d467974c0ebaa7c3990cdfe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cf:84:f6:23:d6:68:0c:6f:42:81:47:60:a4:
ac:61:28:f5:17:ca:23:19:17:c3:66:16:97:eb:c7:
f4:6c:2a:2a:bd:bd:9d:e7:c3:5d:6f:26:f4:10:d3:
a3:fe:b8:f8:de:f4:25:b1:0c:de:ef:21:cf:15:6a:
90:30:d7:b2:7a:63:eb:2c:b2:80:f1:a1:42:44:b7:
3b:f4:7c:05:63:92:34:59:e9:f9:95:c7:96:62:c7:
9b:5c:3e:8f:9f:b4:86:ad:5b:5b:4d:a0:77:b2:c3:
75:fb:28:f3:d0:f1:b5:06:55:8b:eb:6a:f8:64:dc:
68:73:63:86:f8:f8:6f:47:2d:f4:c9:f7:51:61:d1:
9e:d8:48:84:4b:ee:ee:b2:88:5b:af:58:08:00:6f:
67:7d:ee:b3:c9:1f:fa:ff:32:d6:c0:28:a0:74:0f:
ca:8d:db:bc:e1:ff:a8:b6:27:9e:4f:4a:4d:e5:b9:
66:1a:11:d2:f4:d2:ee:65:52:49:53:78:ad:e0:28:
cc:d0:9f:32:2e:44:df:aa:14:4d:13:22:2f:c6:ca:
3e:d2:10:a2:b1:3b:14:03:4c:34:c3:30:2a:b8:67:
1b:e6:02:b3:50:87:8b:91:be:0b:52:1c:59:85:e5:
56:4a:96:f0:8e:e9:be:b3:e8:6b:6d:c5:b0:3b:41:
95:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:98:02:D7:DF:4F:1B:C6:D4:67:97:4C:0E:BA:A7:C3:99:0C:DF:E8
X509v3 Authority Key Identifier:
keyid:1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3f:0d:8c:cf:d9:62:97:5f:25:6f:14:d4:b1:be:07:d1:a6:
75:2b:a7:da:70:8d:18:40:70:50:69:45:29:da:cf:6e:b0:2a:
dd:a4:97:6a:f7:f1:ab:41:26:76:a1:2e:95:97:04:05:b0:34:
c5:d8:0d:21:14:c1:4c:be:b8:21:bc:d2:17:04:0e:d2:d5:8a:
01:2c:fe:3c:45:46:99:e3:c4:b5:b8:29:29:19:1f:7a:60:f1:
e0:20:71:a3:cd:0d:d8:c1:bd:83:54:93:f7:4e:c7:55:d0:bc:
cf:56:7d:cb:04:f6:74:b6:57:da:e0:69:e3:6c:a4:66:56:26:
8b:22:62:51:6a:59:1f:e7:f5:e0:6a:2c:3b:5f:3b:93:4a:d6:
82:ae:7b:de:40:c2:b0:d5:66:d4:e5:d3:15:fe:fc:e4:50:f9:
6c:f7:a6:18:3b:e1:fa:f1:24:d9:e6:de:82:00:fe:dd:a6:3c:
d8:7d:ec:c9:cf:db:7f:f4:ba:8d:c7:1d:3d:10:73:76:b4:66:
31:9f:de:bd:61:11:f4:51:91:76:a2:87:1b:ec:6e:5e:2e:3a:
5f:d2:06:cf:8e:c8:e5:4e:30:8a:5a:1c:c1:a3:03:d3:b0:26:
34:e7:8d:f8:09:05:a4:72:da:da:76:c5:82:3e:66:c2:c1:20:
b1:28:b3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:57:00 2026 by rpki-client