Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
File: HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft (raw, json)
Hash identifier: dcT8Jgay9zErz47+SdIP1ZjUdkFpK9RuJvCQvbooD+c=
Subject key identifier: B0:3C:0A:02:97:C8:10:5F:40:DB:95:A1:CB:E3:AF:3A:A4:56:64:41
Authority key identifier: 1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
Certificate issuer: /CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Certificate serial: 019F9391D365684AED43E2A3D0C4335B3634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 10:00:35 +0000
Manifest this update: Fri 24 Jul 2026 10:00:35 +0000
Manifest next update: Sat 25 Jul 2026 10:00:35 +0000
Files and hashes: 1: 2KPFTLeDrSm9M4_XVjKhQsAeW5w.roa (hash: oiy5/t8+xoYRfuAXJZSTJK9AhNzpLlj1CftKpmctdeM=)
2: HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl (hash: 2xLeSNuB8lUbc8chpwJpDpWq9yWViL8LupHp2xgq590=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:d3:65:68:4a:ed:43:e2:a3:d0:c4:33:5b:36:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Validity
Not Before: Jul 24 10:00:35 2026 GMT
Not After : Jul 25 10:00:35 2026 GMT
Subject: CN=b03c0a0297c8105f40db95a1cbe3af3aa4566441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:88:82:2d:b3:83:65:a2:15:68:4c:f2:19:39:
57:b8:62:9e:b4:11:ee:7c:98:ac:94:b2:1c:06:52:
0d:38:99:d9:7a:70:a7:e8:38:60:0e:95:6d:8c:3b:
f7:35:1a:80:2e:3f:d4:10:d2:09:9c:f2:ed:5e:55:
98:ec:0a:36:72:f7:aa:b8:77:51:67:40:e4:fd:f9:
69:fb:52:46:e5:94:dd:f0:ae:e8:21:12:47:84:de:
e4:74:9c:28:6a:0f:9b:e9:a7:a0:ac:f2:91:9f:7e:
bb:08:4d:1e:20:77:f9:23:ee:66:2d:3a:bf:58:1d:
cb:39:45:df:0b:57:ac:6d:7f:bf:b5:e6:55:d4:c7:
35:c1:ad:ff:61:fa:70:95:95:41:0c:5d:d7:dc:53:
37:70:5e:81:de:8c:21:2b:1f:4e:90:90:7b:b6:d2:
61:87:33:ce:c3:67:4f:d1:09:5a:cc:e6:78:1b:b1:
09:ae:4b:49:ac:3e:bb:8f:f1:8a:08:12:67:2d:07:
d5:b8:82:23:15:03:67:65:3e:e2:f4:7f:59:f8:f8:
21:dd:33:9b:f5:9b:21:f3:b7:ce:ae:1a:9c:ed:30:
59:99:41:5b:a2:ca:b6:65:ec:40:72:90:ad:62:a5:
61:e6:d3:5e:62:f7:9b:ec:37:3b:be:b7:37:dd:8e:
5f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3C:0A:02:97:C8:10:5F:40:DB:95:A1:CB:E3:AF:3A:A4:56:64:41
X509v3 Authority Key Identifier:
keyid:1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:01:3e:42:6a:58:e6:28:67:ac:1c:71:6f:37:78:f3:72:73:
d4:fc:54:d8:8f:8f:66:01:93:1e:b8:5c:03:2a:ce:92:2d:96:
71:d0:60:30:fc:78:ba:e7:0b:ab:9b:cf:43:59:34:b5:d2:47:
87:69:87:66:7e:6d:17:b8:60:76:a6:a4:a5:93:62:43:aa:5e:
24:5a:4b:aa:09:4b:f1:9a:80:72:e6:41:bb:10:7a:a0:4a:9f:
73:21:ef:d9:07:33:01:db:d7:3a:81:f9:0b:03:ad:da:72:0d:
ea:f4:03:81:d2:27:6f:5f:c5:c2:3a:d3:df:04:75:d8:13:bb:
77:34:dd:c2:01:6e:ae:2d:37:f7:ba:68:e3:b1:a4:85:46:f1:
83:54:ac:88:69:e0:b8:64:f8:e9:bd:10:9a:f4:7c:4b:bd:a1:
f9:42:3e:95:1b:08:cc:e3:75:1f:4f:8c:3d:fa:d9:0c:82:4e:
15:9a:58:80:95:01:3c:c0:18:a1:d7:b9:72:c7:e4:4f:6b:70:
6d:ae:cc:d8:59:50:f7:3e:33:07:15:79:f7:bf:f9:02:28:ac:
e8:5a:8e:ff:fe:48:51:00:22:d7:d1:96:21:9d:27:78:55:56:
be:52:e6:2f:26:18:1d:fc:bc:c5:39:4a:dd:da:e0:d1:f0:e1:
ae:e3:53:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:17:24 2026 by rpki-client