Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft
File: HSXQyIRbeYhsGZNFuJD16KzVFtg.mft (raw, json)
Hash identifier: 7/FzZzdRivGPvGn2DlbqNDa4h/zKErUsSOTYXtTs/BQ=
Subject key identifier: 33:D5:2B:51:F8:C9:37:84:E0:43:3C:D1:5A:FD:F9:F1:07:01:38:27
Authority key identifier: 1D:25:D0:C8:84:5B:79:88:6C:19:93:45:B8:90:F5:E8:AC:D5:16:D8
Certificate issuer: /CN=1d25d0c8845b79886c199345b890f5e8acd516d8
Certificate serial: 019F927FA29BF9CDCAE1F8C431FCBFF454B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HSXQyIRbeYhsGZNFuJD16KzVFtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft
Manifest number: 19C4
Signing time: Fri 24 Jul 2026 05:01:05 +0000
Manifest this update: Fri 24 Jul 2026 05:01:05 +0000
Manifest next update: Sat 25 Jul 2026 05:01:05 +0000
Files and hashes: 1: ACAlli7g0O4SaAuBMEG33oqVDNg.roa (hash: LR3cThLmPZU74WiY2Hs/Bqsbtxc4sKTKodU0FrsSnhI=)
2: HSXQyIRbeYhsGZNFuJD16KzVFtg.crl (hash: YIUMGomYAFkryeDIyVhdaN4ntGXp7HTD6FMrkYkTAaU=)
3: fn4zzf2P7WlF_T3nuMRC7T2bgIM.roa (hash: 7qSjgY4PIPvMkUzYF/SCHnCfOJSbqzIxeuFxHsWJbOo=)
4: rGcSVw4JD2TsggxvzCf49t06ktI.roa (hash: N2TX307/s4VGRh8knONcDQ4y4hYb3c4Kd8kYYSngeNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HSXQyIRbeYhsGZNFuJD16KzVFtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:a2:9b:f9:cd:ca:e1:f8:c4:31:fc:bf:f4:54:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d25d0c8845b79886c199345b890f5e8acd516d8
Validity
Not Before: Jul 24 05:01:05 2026 GMT
Not After : Jul 25 05:01:05 2026 GMT
Subject: CN=33d52b51f8c93784e0433cd15afdf9f107013827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6e:05:dc:53:f1:08:2d:77:1f:88:57:c8:2b:
aa:7d:46:9f:c0:e5:17:43:53:25:3d:b9:a7:b0:07:
ba:cc:4c:7b:c5:37:de:4d:5c:74:01:6e:bc:50:cf:
37:0c:25:43:6f:5f:3a:9b:a8:8b:de:cc:03:60:b3:
12:e3:7e:1e:a5:8d:c4:ab:3c:28:02:54:dc:fc:4f:
26:1a:51:47:d3:86:a2:fa:25:a6:69:4c:3e:ad:66:
1c:be:e2:f9:51:e0:41:5b:97:b6:f9:ea:ad:8c:6b:
50:5e:38:48:ca:70:f6:74:5e:97:4e:e8:1a:5a:5a:
f3:43:b2:d7:4c:a2:37:c1:36:b8:13:ef:8e:50:2e:
8e:ea:fa:84:f5:bd:c2:2a:a7:75:6a:3d:06:db:8a:
65:db:b7:ff:1f:fd:f6:99:ff:20:2b:77:a8:3b:24:
41:7f:a5:ae:44:57:c7:ff:f7:c9:9e:d0:e9:f9:0c:
9e:00:f9:f8:56:32:4d:af:2e:df:08:13:60:d5:c0:
4f:80:d6:be:a9:71:9a:92:d8:a3:8d:fe:de:1e:79:
00:ac:c9:83:91:66:2e:1f:52:e0:f6:76:09:0f:50:
c6:7d:7b:1a:55:ac:f9:71:e3:f2:4f:f7:2c:e2:03:
ea:0f:b5:6f:7d:70:f8:d4:0a:4e:e6:06:ce:c6:e3:
66:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D5:2B:51:F8:C9:37:84:E0:43:3C:D1:5A:FD:F9:F1:07:01:38:27
X509v3 Authority Key Identifier:
keyid:1D:25:D0:C8:84:5B:79:88:6C:19:93:45:B8:90:F5:E8:AC:D5:16:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSXQyIRbeYhsGZNFuJD16KzVFtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/557524-297d-4849-b4be-c52eb56bfa5b/1/HSXQyIRbeYhsGZNFuJD16KzVFtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e2:bb:b9:76:a0:ba:69:65:70:ba:a9:18:50:cf:c2:26:42:
df:f5:d7:42:b4:0e:82:03:76:2e:68:f1:d8:5a:8b:8d:97:0a:
e2:3b:a3:7b:94:b2:f2:5e:2d:ce:58:f8:ab:2c:4f:f8:db:f8:
ed:d1:d5:0c:e9:87:6b:d3:cc:59:6d:9d:7f:b9:48:6d:9d:74:
4d:f0:b0:df:92:1c:de:f1:72:ea:95:84:7b:53:31:a6:57:cc:
5d:2f:d2:cd:a4:15:1d:18:56:f6:40:6e:c1:ed:a9:3a:8a:6e:
0d:d5:a5:e0:d4:ce:a9:4e:b3:42:83:08:7e:27:2b:62:d6:28:
b8:7b:c9:b4:4e:5c:88:6f:83:64:5b:ec:7f:0d:a7:e9:e0:7a:
74:9c:5b:4f:6f:9a:a2:71:18:31:0a:12:96:c2:5f:8e:32:f3:
d8:5a:46:83:fc:bc:46:3f:03:5a:91:1d:54:06:3b:42:2c:1e:
ec:f3:f2:12:06:82:6b:40:cf:4c:ce:7e:87:79:00:9a:08:47:
28:92:25:49:cb:e9:ea:c1:95:a0:fb:41:ec:1c:e8:cf:72:63:
50:09:cc:43:ba:4b:0a:89:96:6b:f1:0e:3a:d3:78:a8:30:b6:
9f:0f:b3:27:db:f7:8d:cc:02:b1:a1:67:1a:cb:c7:48:8e:d0:
2a:27:cf:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:07:51 2026 by rpki-client