Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
File: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft (raw, json)
Hash identifier: XyifHHLM4hotxHry8egJQO4AfZMt308+42IKnlew9Is=
Subject key identifier: 0C:18:48:FC:21:25:AC:FB:F9:77:99:5D:FC:CB:E5:B0:7D:8F:0E:4A
Authority key identifier: 1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
Certificate issuer: /CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Certificate serial: 019F92B6B8A2E446995E98911E9AE57639CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 06:01:15 +0000
Manifest this update: Fri 24 Jul 2026 06:01:15 +0000
Manifest next update: Sat 25 Jul 2026 06:01:15 +0000
Files and hashes: 1: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl (hash: qp2zb53S3FPDcnnt7BD8Guq+sn26HAJyxSs/Kmyp/e0=)
2: fA_uTKLLbWG518h0njj_cqP2p6E.roa (hash: 4mY7FOvfpwAUXlFXu+ZK1/hojb4S0OMizyAm+Nun5mU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:b8:a2:e4:46:99:5e:98:91:1e:9a:e5:76:39:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Validity
Not Before: Jul 24 06:01:15 2026 GMT
Not After : Jul 25 06:01:15 2026 GMT
Subject: CN=0c1848fc2125acfbf977995dfccbe5b07d8f0e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:57:76:c6:a3:2a:91:4e:d2:c2:b3:99:f7:ef:
7e:07:00:c4:fc:4b:ee:96:92:fa:b7:fd:6c:59:97:
63:89:cb:49:81:f5:e0:9b:22:11:92:1e:32:63:46:
15:35:51:57:3c:64:db:f8:e0:0f:f3:79:da:0f:63:
66:09:57:84:23:a6:32:0b:7a:87:2a:86:1e:a5:f7:
0c:8f:21:c6:ef:82:46:0c:d4:23:1d:63:86:22:8e:
49:d2:f3:53:d3:68:5e:68:ec:ba:82:8b:94:05:1c:
55:73:be:c7:88:13:3c:c4:66:a9:8e:c7:c4:9f:73:
8e:9e:89:8f:e4:25:69:9a:50:66:9c:96:36:f6:ce:
b0:14:ce:9f:75:74:00:1e:63:3a:d0:3c:77:7d:2c:
68:fc:54:65:c1:53:76:4d:7f:6d:7a:e1:14:8a:03:
69:ff:fc:e0:11:41:0e:c0:9b:60:61:16:39:e9:76:
13:f3:a9:19:ff:f9:e1:c0:0b:3d:b8:29:31:e6:a6:
ff:e2:a9:5e:e7:7b:1a:b3:dc:75:cf:50:8d:0f:15:
cb:e6:c4:b8:85:c5:40:39:4f:21:43:5e:72:d7:cf:
27:eb:8b:38:58:67:20:44:9d:2f:8a:e7:a6:31:ea:
ee:73:69:6a:23:7a:9e:ac:4e:1c:dc:ef:34:4b:cc:
ca:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:18:48:FC:21:25:AC:FB:F9:77:99:5D:FC:CB:E5:B0:7D:8F:0E:4A
X509v3 Authority Key Identifier:
keyid:1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e1:a1:b4:ab:a9:8c:98:81:7e:5b:b0:aa:29:c2:bb:1a:e0:
13:84:75:66:48:c0:23:38:2c:16:21:d0:50:3c:5b:fc:15:32:
d7:ff:f0:6f:38:61:08:1f:48:73:91:48:f1:28:9c:a8:ff:1b:
79:fe:23:90:f0:f7:f7:40:47:64:e2:7d:1a:ba:16:ed:c2:1e:
de:69:c4:c6:14:ce:9e:d8:68:ef:7d:1b:ea:c4:d5:a0:ac:5c:
26:dc:26:a3:ae:e3:d2:9c:90:97:6a:aa:d8:69:f8:d5:8a:46:
1b:10:bd:d4:43:41:6c:b9:d7:b6:5e:fe:84:e5:06:43:a8:03:
7d:73:0d:07:31:de:9a:05:d5:5f:8f:13:4a:6a:98:af:b3:69:
8e:0e:f6:06:87:88:b9:34:b5:48:7c:a6:2c:28:a5:34:3a:8b:
17:fa:74:41:ea:a2:38:f8:1c:7f:2c:c6:23:69:ec:eb:52:7d:
99:6a:1c:7b:3b:0f:0e:12:b2:0c:77:a9:ec:4d:2a:0d:88:40:
70:46:8a:3b:47:44:52:99:83:0f:d6:c0:3e:9a:50:95:6a:aa:
eb:31:12:33:16:b4:f8:3b:1c:8f:02:40:5d:f3:a5:de:48:8c:
aa:09:13:31:11:ec:75:0b:81:78:dc:a4:9e:26:5a:73:c1:52:
09:ca:6c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:42:35 2026 by rpki-client