Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
File: Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft (raw, json)
Hash identifier: gBWERQLxpKQlKbIXSdfW9l3V0360/IMxCB6NPEbnBn0=
Subject key identifier: 2C:3C:0F:07:02:9D:1B:7D:30:E6:D6:76:75:A5:99:DA:B3:AD:C4:2E
Authority key identifier: 1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
Certificate issuer: /CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Certificate serial: 019F91A3B11482CA2EF4CD6DD9DD95D47BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 01:00:51 +0000
Manifest this update: Fri 24 Jul 2026 01:00:51 +0000
Manifest next update: Sat 25 Jul 2026 01:00:51 +0000
Files and hashes: 1: Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl (hash: msMTJTt34GVZgO9IEkyYlUBo24jdWfxjkPdDL4q98Oo=)
2: LpF7hzS-_Bqq_u0GKSkOq_jaXmU.roa (hash: pIhXh24IzpIa3o8LFBdn/va5JW8n7fuKIIlkGDvBzts=)
3: TlSVX0-vba4I-NSKL89Ngm4tw7c.roa (hash: o/YwPV35MkVtWefJ+k8c31/h+x9nhWf+AtSwL8HvxrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:b1:14:82:ca:2e:f4:cd:6d:d9:dd:95:d4:7b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Validity
Not Before: Jul 24 01:00:51 2026 GMT
Not After : Jul 25 01:00:51 2026 GMT
Subject: CN=2c3c0f07029d1b7d30e6d67675a599dab3adc42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1a:74:72:1d:51:4c:70:19:6a:94:70:0e:9b:
89:b2:68:64:99:94:0d:37:35:21:2c:c1:f3:d6:7c:
40:ab:ce:7f:23:6f:b8:94:fd:76:00:67:f1:6b:1e:
55:73:3d:a3:a9:49:e7:b4:63:e3:d1:b3:98:da:e8:
43:56:c2:a7:ab:f2:d5:b5:dc:f1:df:5f:40:80:16:
4c:83:1e:10:4a:c3:f2:26:b8:ba:d7:67:bf:b8:40:
90:30:12:6a:81:bf:de:2b:ef:53:23:88:cf:92:fe:
40:c7:e4:3e:e2:c6:07:33:a2:bc:74:18:e0:6c:e5:
c0:56:73:64:46:03:92:30:be:d3:d1:2f:a0:f9:fd:
a9:dc:d5:e1:19:85:0a:dd:ef:eb:8d:09:b8:06:24:
92:78:20:78:90:9a:13:7c:dc:ee:de:42:44:b1:09:
d5:b6:a8:c1:c8:e0:cb:e9:db:cd:9e:93:61:85:7d:
d4:24:bc:3a:be:c2:cb:57:67:f5:5a:d5:08:a7:96:
e1:40:d3:f1:b8:3b:67:6c:ee:f3:1f:0d:7d:7a:9a:
25:33:6b:6d:39:4d:19:11:1d:62:da:bc:ff:a2:c5:
97:26:93:45:44:c7:25:a9:d6:f1:55:04:5b:22:44:
7b:d7:56:15:27:8c:5c:d4:fc:55:6d:ba:b1:9e:b8:
08:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3C:0F:07:02:9D:1B:7D:30:E6:D6:76:75:A5:99:DA:B3:AD:C4:2E
X509v3 Authority Key Identifier:
keyid:1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:8c:11:33:46:72:3f:6b:37:c3:b8:13:55:f8:4c:d4:8c:c3:
dc:86:be:9b:2b:ab:10:48:f6:d4:ff:e9:18:8f:bc:17:53:08:
93:ea:6e:72:84:af:e2:0e:56:d7:89:2f:35:f9:77:78:0e:c0:
1a:25:7f:48:5d:2a:1d:83:e8:df:15:51:30:53:91:d9:65:a6:
9e:85:9b:a2:80:bd:2e:0f:83:64:4e:98:38:22:9d:1f:df:5b:
1e:a6:35:d5:60:50:eb:c2:57:9d:47:29:a0:11:1d:ea:35:b7:
89:b3:ac:4c:82:e3:d8:19:76:61:2f:f8:92:1c:1c:b5:bc:58:
c5:9e:80:e5:33:3c:60:ea:92:4b:d5:f1:76:24:19:06:2f:1f:
ae:b4:6f:ee:85:bd:14:f1:7c:8b:88:2e:70:e4:71:01:d7:65:
36:a8:2f:36:ae:d3:84:75:c8:8e:52:5e:91:e4:03:43:00:b2:
74:aa:8f:41:9c:c9:3d:33:c7:59:e7:b3:45:e4:70:dc:e6:a3:
bc:9d:ab:b8:f1:b9:ee:38:4c:2b:6a:8e:ef:40:19:73:ee:a0:
10:51:37:38:57:8e:e4:8a:04:f9:c2:23:d1:bd:c3:a0:71:6e:
1b:8d:b9:9b:da:3c:8a:36:0b:79:8a:d0:4f:64:e2:b8:d8:52:
0d:df:e1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:18:06 2026 by rpki-client