Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
File: HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft (raw, json)
Hash identifier: mp8xGdK9CTRTNSQ5CGZPYHBwO48pMqHtHgS36xzq7qM=
Subject key identifier: 9F:EB:35:55:60:D5:BE:3D:4E:81:54:CA:06:01:70:1F:D8:98:B0:49
Authority key identifier: 1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
Certificate issuer: /CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Certificate serial: 019F935B0DE36B940ADB622D638D263EE422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 09:00:45 +0000
Manifest this update: Fri 24 Jul 2026 09:00:45 +0000
Manifest next update: Sat 25 Jul 2026 09:00:45 +0000
Files and hashes: 1: 4t1yiUQVN5Px9-wGHy62XxxqimU.roa (hash: FHoafxoTZhFU/Fxu+bGTDh9a2aT1nhPTACKs/kC0+Jg=)
2: 8jW3c1tdyMykRFAb8cKVIvXYm1o.roa (hash: Q0T2eH3RlaxZhFvfRSxmpGRJmTvjnKlI3xGp5fpQfVU=)
3: HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl (hash: 8jPMn006YJMYR8V5mwQ3uHOrwHBvX7JbGvYUzmIl4zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:0d:e3:6b:94:0a:db:62:2d:63:8d:26:3e:e4:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Validity
Not Before: Jul 24 09:00:45 2026 GMT
Not After : Jul 25 09:00:45 2026 GMT
Subject: CN=9feb355560d5be3d4e8154ca0601701fd898b049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ed:c0:67:b7:47:fe:f6:81:52:5c:db:79:74:
63:8e:72:f8:6c:d2:07:ef:f7:24:a1:1c:54:cb:a9:
63:5e:7c:67:14:e2:e2:67:1a:53:27:6a:d3:a9:7e:
2b:34:b4:85:a4:79:b4:61:1a:e3:68:90:1b:0c:69:
cf:83:cb:2b:12:ed:d4:d5:6e:e6:58:00:b6:e6:8a:
7f:cb:bb:1b:d0:5b:07:34:e5:74:41:c5:5a:36:4b:
c1:24:98:18:8d:54:d5:f8:8c:c7:9b:a7:e2:cb:d6:
ed:df:a9:27:8b:db:1c:a3:2f:aa:18:78:82:ec:5b:
1f:44:47:4f:cf:12:2e:10:e7:67:35:04:8a:ea:73:
68:97:c5:4c:3e:ad:40:c3:c3:95:99:d2:d0:68:b1:
9f:d3:1d:1b:33:c5:40:e9:86:5e:13:a8:19:55:c2:
e4:ba:bb:b1:c1:ed:94:76:d6:44:6e:5c:8d:1c:2d:
91:bf:a4:a3:b2:7e:96:37:b6:00:73:f7:ba:0c:e9:
1d:9c:58:a3:2c:9d:d9:d5:bf:f6:ae:1f:f6:33:bf:
3d:8f:f3:67:2b:f4:55:e7:14:7e:5f:cd:f0:8a:3e:
48:15:d5:69:a4:3b:17:44:8a:4d:6e:76:c9:2a:3a:
31:c7:c7:02:aa:4b:36:6f:8b:2e:00:75:75:2f:93:
42:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EB:35:55:60:D5:BE:3D:4E:81:54:CA:06:01:70:1F:D8:98:B0:49
X509v3 Authority Key Identifier:
keyid:1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:86:23:5b:74:e6:61:a5:80:2a:d3:2d:b5:27:0b:1f:e2:a6:
63:3a:30:bf:5f:8f:09:1a:57:da:ee:fa:1a:61:55:6e:d0:d0:
14:34:7a:2d:e4:9d:16:f4:0b:3e:7e:42:2a:cd:1b:9c:45:e1:
d4:8f:4b:93:4c:63:1d:52:a6:af:04:ac:77:a8:d8:6c:be:b6:
e7:13:ee:df:da:70:f7:b9:e3:4f:8c:8a:db:5d:99:06:d6:96:
95:92:b3:a6:07:8f:8e:ec:61:de:58:54:cf:af:3d:b7:92:df:
bf:79:e5:b7:24:15:6a:02:6b:14:1a:01:09:83:19:aa:10:42:
8e:77:eb:51:f6:0e:9b:1f:d0:5f:46:42:21:2b:f3:e9:0b:7d:
ff:24:99:cf:dc:95:f7:d9:33:fd:4b:3c:c6:26:89:fa:64:40:
5e:b4:e6:c4:71:61:4c:c9:90:e7:a3:3a:82:a3:01:1e:7d:d3:
ca:6d:15:3d:16:e3:46:1b:99:66:d1:c0:0b:0d:17:e3:8a:ed:
e0:1d:1c:96:94:84:af:61:73:95:d9:10:2d:c2:54:cb:19:3a:
5f:85:73:3e:1f:80:1e:cb:d8:8d:a6:54:18:e1:71:70:72:d2:
1a:99:f5:db:a6:1b:3d:6e:46:f1:8d:9b:36:e0:b4:26:bd:2e:
cf:89:9f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:35:04 2026 by rpki-client