Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
File: HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft (raw, json)
Hash identifier: AXb84bl05oFTUw3KN+Vchi3YrP7vVzKWvPxZAyFjGhk=
Subject key identifier: BD:BF:82:15:8C:8F:D2:D3:0A:40:6E:9F:3E:29:77:46:5A:FE:30:9F
Authority key identifier: 1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
Certificate issuer: /CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Certificate serial: 019E1EA38F808EBDC6C4D28C4400197F75D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
Manifest number: 1906
Signing time: Wed 13 May 2026 00:01:35 +0000
Manifest this update: Wed 13 May 2026 00:01:35 +0000
Manifest next update: Thu 14 May 2026 00:01:35 +0000
Files and hashes: 1: 4t1yiUQVN5Px9-wGHy62XxxqimU.roa (hash: FHoafxoTZhFU/Fxu+bGTDh9a2aT1nhPTACKs/kC0+Jg=)
2: 8jW3c1tdyMykRFAb8cKVIvXYm1o.roa (hash: Q0T2eH3RlaxZhFvfRSxmpGRJmTvjnKlI3xGp5fpQfVU=)
3: HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl (hash: GSxkJ40A0ZEWpafM7lfM8UvBz9YrjHZeZGxQNjrG2X8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:8f:80:8e:bd:c6:c4:d2:8c:44:00:19:7f:75:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Validity
Not Before: May 13 00:01:35 2026 GMT
Not After : May 14 00:01:35 2026 GMT
Subject: CN=bdbf82158c8fd2d30a406e9f3e2977465afe309f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:eb:71:9d:6e:19:86:51:01:05:56:d7:b6:eb:
d1:b9:65:2e:e0:f7:d0:2d:ae:84:ed:b3:43:69:e6:
98:09:4a:52:0d:9b:c5:04:96:65:fb:07:4e:81:8d:
40:c1:ec:95:42:7b:2c:4f:62:b9:c1:57:c7:dc:9f:
b8:86:ac:e7:d4:22:7d:fb:45:e7:58:be:65:41:7b:
8a:57:c4:b6:0e:69:6f:56:cf:6b:44:83:b1:76:21:
16:f9:ba:67:75:ff:ec:f4:08:9b:27:8e:60:5b:98:
a7:2b:17:87:f8:8d:4b:e7:4e:f2:bf:f9:b8:d5:f4:
2c:b3:e5:dc:fa:7a:59:80:e7:6e:ac:60:dd:0d:ea:
55:54:1f:ef:17:8c:fc:3a:b1:7b:cb:3c:91:36:61:
2f:32:f6:aa:38:ea:84:ee:16:6e:11:42:6a:1e:ca:
b8:5d:8f:0d:46:4e:07:01:d0:1c:50:0f:58:96:4f:
30:68:27:6f:02:f9:e2:bb:88:f8:96:e3:6a:3c:c2:
f6:a2:5d:7c:cf:f5:05:cb:a9:21:3e:eb:ef:27:38:
df:a4:65:c9:4d:af:9b:c4:50:f8:0e:6a:bd:ce:1e:
d1:e0:d2:7e:fe:c1:e1:f4:f6:3c:41:88:1c:13:53:
0e:bb:18:f1:4e:78:28:60:62:34:b9:c3:8e:5b:b5:
b5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BF:82:15:8C:8F:D2:D3:0A:40:6E:9F:3E:29:77:46:5A:FE:30:9F
X509v3 Authority Key Identifier:
keyid:1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:83:7c:3b:1f:03:ca:da:92:90:12:4d:02:38:4e:86:eb:fd:
cf:26:6c:e8:12:bd:55:57:37:62:58:1f:12:22:00:4b:42:89:
e9:a6:e6:26:ca:5d:a1:12:4c:9e:be:05:fa:15:11:97:24:59:
9e:ed:13:c5:79:07:e3:c6:1f:cf:c3:da:86:7e:8a:69:2c:1e:
d8:07:1b:74:f1:86:b0:30:85:3c:e7:3c:ae:51:20:2b:71:81:
09:ed:51:33:8f:03:c4:bc:c6:41:91:8d:f5:06:ea:ce:8c:79:
6e:31:8f:cb:ad:b0:cc:58:c8:47:50:13:52:2b:bf:94:63:67:
cb:6d:1e:0a:68:c1:bf:dd:da:34:fa:cc:8d:c5:9c:78:9c:e0:
23:f3:42:23:0e:36:ee:49:24:28:94:e1:55:9d:43:a1:4f:d5:
c0:54:ac:35:32:76:29:50:10:b5:c7:3f:3f:b1:84:73:b3:46:
46:0c:9a:03:30:74:af:0e:a1:89:db:60:63:bc:64:e2:34:11:
95:15:09:b3:50:50:9c:4f:9c:c8:89:f3:41:50:41:0a:9a:20:
c3:8c:c3:16:dd:b8:84:3e:4c:fb:e8:27:aa:21:7b:91:8d:34:
e5:c3:52:d6:ed:76:5c:54:30:ad:b9:45:95:b0:6c:e2:0e:fd:
08:aa:9a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:23:15 2026 by rpki-client