Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
File: HA4hbleR4bAdohvK8zAEGtcqfmw.mft (raw, json)
Hash identifier: Di128JbH59FbTBwV+qKM+hgcFDwevJzNczzBzPtyvvs=
Subject key identifier: 41:F2:60:D3:C7:E1:A0:C7:26:1B:8B:A5:07:B5:47:97:FD:71:10:AA
Authority key identifier: 1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
Certificate issuer: /CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Certificate serial: 019F95802B0B7F6F6B1DD752B57D92DF7906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 19:00:32 +0000
Manifest this update: Fri 24 Jul 2026 19:00:32 +0000
Manifest next update: Sat 25 Jul 2026 19:00:32 +0000
Files and hashes: 1: HA4hbleR4bAdohvK8zAEGtcqfmw.crl (hash: PaWCdAb5MNJ5ImMIFcyMOQXDEvmQJPpK7j1d1R0S/4o=)
2: Qq92xrncKE3gNgTmvbBvBWPB6qI.roa (hash: /9Dleb0yfYmR0zXREW6ew7jssIDQZBndb1NlB/cFqO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:2b:0b:7f:6f:6b:1d:d7:52:b5:7d:92:df:79:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Validity
Not Before: Jul 24 19:00:32 2026 GMT
Not After : Jul 25 19:00:32 2026 GMT
Subject: CN=41f260d3c7e1a0c7261b8ba507b54797fd7110aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:84:94:81:b9:90:00:e2:00:4d:d8:be:17:3a:
ff:5d:7a:bb:76:74:4b:8c:f5:cf:17:b6:ab:d5:e9:
77:53:9e:7a:8f:9f:9f:de:87:6d:e7:81:c7:0b:25:
9c:56:f6:19:ba:20:17:df:ac:4c:01:5e:2a:6b:13:
49:70:ed:44:9e:a1:b6:d2:4c:82:e3:1d:d0:bc:95:
da:2c:f9:51:95:90:62:63:cd:a1:06:b2:20:10:9b:
ce:54:fb:a5:db:a0:71:59:2b:a7:15:29:7f:05:38:
d7:1d:3c:25:41:e1:a7:d3:ff:d5:cd:07:11:11:2d:
f0:e9:3a:eb:5e:28:6b:4a:ec:af:59:7c:ad:b9:27:
c9:9d:23:c9:e9:4a:9e:73:b7:12:39:23:c7:43:2f:
e2:b1:6c:52:53:0b:e9:d8:83:f3:42:9c:df:aa:ca:
08:b6:54:12:1c:c5:28:83:fa:28:c0:e8:86:de:65:
2d:29:20:9b:23:b0:39:cb:c4:54:33:3d:be:e4:9d:
c0:b6:96:28:85:02:58:90:c7:53:a8:68:97:f0:91:
33:b6:a0:e9:64:3d:d9:19:a8:97:55:98:eb:e5:48:
2d:ca:f3:b3:4c:88:18:99:93:e7:c7:08:bf:74:76:
69:4f:0c:7b:0f:c0:89:ac:64:aa:c3:4c:db:6f:f7:
79:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F2:60:D3:C7:E1:A0:C7:26:1B:8B:A5:07:B5:47:97:FD:71:10:AA
X509v3 Authority Key Identifier:
keyid:1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ad:09:23:c4:ab:d4:89:ae:75:66:28:9a:f4:fa:06:26:4b:
f4:b8:10:99:13:44:55:3e:12:9a:1d:d6:fe:26:8a:47:df:63:
e9:d6:05:4f:d0:3e:f2:dd:53:91:fe:90:63:35:87:a0:12:e6:
da:f0:cb:62:ed:64:c8:28:e6:7a:06:b5:28:0a:36:f4:43:07:
07:4b:2c:bd:9b:55:6d:b6:3a:3d:58:e5:55:87:2a:56:da:39:
86:7f:5f:5b:65:6d:ce:fc:ff:28:a7:b2:e3:79:20:d0:ec:e7:
ba:74:e9:24:eb:13:81:2c:28:12:ca:e0:4c:62:ab:eb:d9:16:
a0:cc:78:1c:2b:7f:ba:7f:f5:5e:c0:14:34:04:5d:97:46:ca:
6f:d0:84:8b:21:7a:80:03:15:38:36:bd:0a:16:ff:19:d4:44:
63:c6:d9:d9:52:b6:37:f4:c6:34:44:bf:ab:68:0f:8f:91:4c:
be:e5:7e:65:9c:74:0f:81:ec:17:a7:c8:7e:53:5a:4c:9f:c4:
39:1f:40:f2:3c:5e:e2:ce:e5:f4:52:c6:ed:6b:2b:13:e4:32:
98:bd:9d:97:f3:3a:a5:c1:a1:99:c8:8c:67:9f:a2:ff:60:cc:
b2:20:9e:69:3e:b0:f8:db:ed:37:0f:47:c4:bc:29:e3:0d:ac:
2f:c0:63:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:40:48 2026 by rpki-client