Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
File: D_HA6RHM5MRT_sKxaPbBPTbg34U.mft (raw, json)
Hash identifier: Z2kYcClPaw0absfP05KlTDLMurmkox+vLJHQReN3kzk=
Subject key identifier: 96:B9:13:B3:80:FF:6C:D3:43:3E:9A:B7:BB:6D:38:FF:27:51:F8:60
Authority key identifier: 0F:F1:C0:E9:11:CC:E4:C4:53:FE:C2:B1:68:F6:C1:3D:36:E0:DF:85
Certificate issuer: /CN=0ff1c0e911cce4c453fec2b168f6c13d36e0df85
Certificate serial: 019F954A858D417B33F5091ADA98DC92A13C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
Manifest number: 01E0
Signing time: Fri 24 Jul 2026 18:01:56 +0000
Manifest this update: Fri 24 Jul 2026 18:01:56 +0000
Manifest next update: Sat 25 Jul 2026 18:01:56 +0000
Files and hashes: 1: A2gg-MX124Lpmk4q6amGH364pI8.roa (hash: vW20LJAGKrZU5294D/w3GbyCDoxlRHd2AtS8gCcCOJ4=)
2: D_HA6RHM5MRT_sKxaPbBPTbg34U.crl (hash: 4xg88sin4uMCkTNT0VTHGfAOtJ/QN9r943Q4D8mdSOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:85:8d:41:7b:33:f5:09:1a:da:98:dc:92:a1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff1c0e911cce4c453fec2b168f6c13d36e0df85
Validity
Not Before: Jul 24 18:01:56 2026 GMT
Not After : Jul 25 18:01:56 2026 GMT
Subject: CN=96b913b380ff6cd3433e9ab7bb6d38ff2751f860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:56:3f:10:8a:39:75:e2:ae:94:45:42:ea:70:
3e:04:64:9d:c8:31:1e:ef:b5:fc:63:f8:b9:97:21:
29:ca:39:3d:67:09:1b:52:69:d2:c7:d9:7b:5f:1d:
3a:43:c8:75:b8:f5:6a:ad:a2:02:d6:7a:c6:88:91:
e6:fc:64:2c:2c:f4:93:b4:42:df:df:aa:dd:1f:df:
37:57:0d:fc:95:0d:a1:7f:6a:1b:df:c7:06:5c:91:
71:f3:ee:a8:72:11:a9:04:db:88:95:02:fe:56:0a:
5c:7b:1d:20:34:10:e3:d3:61:d4:d5:e4:c7:3c:d1:
e5:8b:13:af:5a:ff:70:33:ee:09:50:94:a1:d0:c9:
fe:60:2d:61:c3:79:1a:f5:75:80:31:b8:05:a7:a7:
b9:64:80:fe:d2:de:7b:a2:26:9a:7c:f6:08:75:96:
6b:df:92:bf:31:2a:57:49:ab:4c:fa:15:cd:ba:b7:
37:65:52:fd:0d:68:e7:d1:12:aa:0f:f8:63:0c:3f:
04:1a:d6:15:2b:dc:df:80:db:5d:83:96:a0:05:d3:
b0:71:a6:0c:c7:69:cb:2e:48:d9:c6:ca:47:2c:b9:
81:bf:d5:5e:6a:31:d5:00:79:2f:f1:d3:e4:6b:6f:
f3:ad:7d:c5:7c:ac:5c:cb:bf:41:6a:14:88:1f:d4:
dc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B9:13:B3:80:FF:6C:D3:43:3E:9A:B7:BB:6D:38:FF:27:51:F8:60
X509v3 Authority Key Identifier:
keyid:0F:F1:C0:E9:11:CC:E4:C4:53:FE:C2:B1:68:F6:C1:3D:36:E0:DF:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:7b:73:40:44:f6:75:5d:54:6d:18:4e:05:5a:b1:ed:f8:9b:
9b:0a:3c:1e:58:9e:7f:35:5b:a9:b0:ec:72:33:c9:0a:c4:45:
f1:19:e3:c4:dd:a2:7a:50:bd:b9:bd:5b:16:67:e8:18:6d:fa:
a1:14:93:18:82:f4:4d:3b:7e:86:59:a2:b3:a2:0e:15:fa:47:
f5:2b:09:25:92:af:16:35:52:b5:3f:19:7a:33:52:ee:f1:99:
c1:94:1d:06:6c:d4:cb:6d:33:25:f4:3a:c0:e6:1f:05:24:9f:
a0:b6:b9:1f:9d:c8:84:86:99:19:f6:9c:8c:93:07:19:c7:ec:
27:cf:82:c9:09:9b:22:f3:ad:0d:29:8b:70:9f:4b:fd:09:9d:
b1:b5:d0:1a:2a:25:81:6f:31:55:de:7e:4f:d1:a9:82:b7:63:
20:5d:f6:3e:af:b3:36:2d:66:76:52:46:7e:37:a9:eb:61:7b:
3e:5c:5b:b8:7a:e2:b8:78:47:4d:7d:e4:9c:4d:2f:67:80:5a:
ff:9b:66:b5:12:b6:eb:b8:2f:b8:e6:d4:07:58:45:ac:99:b6:
9a:eb:eb:23:e1:c2:3f:cc:48:4b:2f:d0:02:27:a1:8b:3d:7c:
b7:2f:01:d6:f7:7a:e6:94:9b:d6:ba:ee:ac:7b:ee:b8:0d:c3:
bd:ac:ed:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:03:15 2026 by rpki-client