Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
File: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft (raw, json)
Hash identifier: to1wGjfUd7WipxYRt9CMzD/c+GCHfvwMGxbmj+0irz8=
Subject key identifier: 67:66:E7:D0:BF:1A:E9:7F:D5:DF:59:31:D4:8A:EC:69:D9:A8:CF:21
Authority key identifier: 1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
Certificate issuer: /CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Certificate serial: 01A0F60DC549E4C61C3D426DB345A914DBCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
Manifest number: 1A7F
Signing time: Thu 01 Oct 2026 06:01:32 +0000
Manifest this update: Thu 01 Oct 2026 06:01:32 +0000
Manifest next update: Fri 02 Oct 2026 06:01:32 +0000
Files and hashes: 1: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl (hash: yGktGIksdXZRRwmXlLAWd+zofstoXGZoXo936Mk6OEo=)
2: fA_uTKLLbWG518h0njj_cqP2p6E.roa (hash: 4mY7FOvfpwAUXlFXu+ZK1/hojb4S0OMizyAm+Nun5mU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:0d:c5:49:e4:c6:1c:3d:42:6d:b3:45:a9:14:db:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Validity
Not Before: Oct 1 06:01:32 2026 GMT
Not After : Oct 2 06:01:32 2026 GMT
Subject: CN=6766e7d0bf1ae97fd5df5931d48aec69d9a8cf21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a6:72:ef:ab:f9:48:f9:4b:6f:85:2c:cf:13:
66:44:2c:ab:3d:55:bc:8f:dc:8d:37:77:31:e7:2c:
9e:61:4c:29:8a:d8:78:72:41:e1:ee:c9:a8:4f:2a:
41:40:21:09:a0:57:00:32:f0:6f:df:f3:2d:65:bb:
80:37:c9:e5:0d:8b:f0:d9:62:41:12:97:49:c9:27:
fd:23:aa:3b:72:3e:43:25:68:9b:40:ac:76:0e:42:
71:a3:2e:a2:a2:dd:f4:5d:2a:73:49:01:28:9c:67:
6d:34:a1:45:e4:82:60:ec:d4:2c:75:cd:2f:13:2a:
19:37:e0:9b:9c:46:c6:39:28:42:c8:6f:7c:12:bc:
eb:60:a2:b5:e7:b6:c9:97:cf:28:93:38:e4:2b:09:
ff:03:7c:8f:0c:7c:29:fa:60:be:23:46:0c:61:2e:
fd:a9:fd:92:a4:58:db:1b:52:18:02:25:28:68:34:
b4:60:ad:37:a7:3b:e6:9e:76:66:86:d8:46:1e:fa:
55:cd:88:10:58:b1:4c:0d:20:7c:51:59:b1:57:f0:
be:59:ed:ee:e9:ca:74:a6:3d:13:6a:7d:d0:8b:8a:
7e:93:3a:2f:c5:ef:e4:6a:b0:90:aa:47:4d:7d:3b:
77:c9:0a:27:88:4a:46:6d:75:f3:a0:cf:af:43:21:
42:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:66:E7:D0:BF:1A:E9:7F:D5:DF:59:31:D4:8A:EC:69:D9:A8:CF:21
X509v3 Authority Key Identifier:
keyid:1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:63:7d:1b:fe:69:48:9f:97:11:9e:95:ee:6f:4f:a0:19:a6:
e1:35:2e:72:f6:ae:11:59:41:08:50:ec:08:01:e5:6a:bd:23:
0b:86:44:23:07:c9:e5:30:38:df:55:b6:c0:98:5b:3a:0e:ca:
fd:51:5e:ca:07:c3:a7:83:b9:7c:f6:a0:c3:cf:27:6e:84:de:
b1:05:82:39:1a:b6:3a:d0:4e:4a:03:02:9c:01:1d:a9:cd:0c:
ef:22:af:13:1d:d7:a8:54:77:d3:a8:d9:e1:4b:18:27:fe:1a:
1e:cd:3c:1f:9b:f8:e3:9d:06:7a:3b:4f:a4:5d:7b:c8:f3:45:
1a:f8:d7:6f:04:3e:6e:dc:f8:41:6f:b5:f9:c5:2d:2e:34:d1:
f6:60:2e:ec:b5:c9:8d:db:3a:44:a0:0d:c6:89:0c:f6:e6:69:
80:6d:7b:c2:ce:a3:5f:40:24:11:6d:a9:d3:c0:f0:79:9d:af:
91:06:94:1b:20:93:54:b1:fb:73:1a:18:fc:b5:dd:fe:59:0a:
c8:5f:c8:f2:a3:58:2e:d0:14:f5:d9:dd:97:2a:09:60:3e:60:
9a:e7:da:e7:15:39:ff:dc:b8:1c:4d:c4:ac:b2:7c:fe:b8:7e:
e5:ab:79:94:f7:e8:ee:2e:db:d5:f6:f9:d8:8c:6a:57:0f:fe:
aa:5c:fe:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 16:36:59 2026 by rpki-client