Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
File: HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft (raw, json)
Hash identifier: TUdb/ms5RKwsQtaYLuvv6ezeyXwljdpXI+yxeAR/TAI=
Subject key identifier: 9D:24:FB:01:E6:18:79:5D:4A:0B:43:F2:1F:CF:A5:28:C0:E8:C5:2A
Authority key identifier: 1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
Certificate issuer: /CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Certificate serial: 01A0E1741933DE8E4EC66E29691AE34466AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
Manifest number: 1A74
Signing time: Sun 27 Sep 2026 06:01:17 +0000
Manifest this update: Sun 27 Sep 2026 06:01:17 +0000
Manifest next update: Mon 28 Sep 2026 06:01:17 +0000
Files and hashes: 1: 4t1yiUQVN5Px9-wGHy62XxxqimU.roa (hash: FHoafxoTZhFU/Fxu+bGTDh9a2aT1nhPTACKs/kC0+Jg=)
2: 8jW3c1tdyMykRFAb8cKVIvXYm1o.roa (hash: Q0T2eH3RlaxZhFvfRSxmpGRJmTvjnKlI3xGp5fpQfVU=)
3: HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl (hash: a5DQdPIQAwEIUcAG/LIinSsrSnwGcB0dWQbT0BSHTfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:19:33:de:8e:4e:c6:6e:29:69:1a:e3:44:66:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Validity
Not Before: Sep 27 06:01:17 2026 GMT
Not After : Sep 28 06:01:17 2026 GMT
Subject: CN=9d24fb01e618795d4a0b43f21fcfa528c0e8c52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:32:d3:56:55:6a:9e:ba:e5:06:c9:13:07:f6:
85:7f:74:1e:ca:d9:a3:9d:25:de:c1:f9:6c:43:f2:
fa:af:72:3a:9e:88:8f:7e:65:eb:a1:30:63:9e:0a:
89:66:39:7b:fd:73:74:71:0a:42:42:0d:94:00:bc:
56:43:bb:82:8b:d3:41:12:3c:a2:4e:27:d7:d3:87:
e0:f8:b5:eb:66:9e:c4:38:ea:73:12:f6:36:ef:5d:
f0:e7:8d:88:56:71:b7:02:45:ef:f1:10:18:78:02:
b9:82:23:2d:26:60:15:fd:72:33:76:53:fe:2c:36:
d3:cd:a6:b8:3e:00:64:14:09:4b:16:15:23:fe:d9:
b8:23:5f:25:dc:de:c5:71:40:30:1c:de:23:42:6a:
65:cd:5d:e4:7b:4e:87:e3:cb:f6:f1:a1:8f:01:3c:
cb:1e:18:53:b0:4c:25:ec:0e:d3:8e:b0:54:86:f9:
07:8a:b1:b1:3b:cd:2d:10:fe:f2:1f:b9:f6:19:05:
11:2b:c3:6a:7a:03:4c:94:db:9e:f2:a2:03:e2:77:
d2:99:42:e0:62:f0:19:35:cf:92:f9:c4:b7:60:5b:
46:11:ea:08:b8:55:fb:89:97:b0:b2:88:66:59:f4:
a7:d8:83:a6:8c:c1:e5:ee:ff:c4:1e:76:d3:c7:bb:
66:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:24:FB:01:E6:18:79:5D:4A:0B:43:F2:1F:CF:A5:28:C0:E8:C5:2A
X509v3 Authority Key Identifier:
keyid:1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e7:43:d5:d8:00:d2:f2:f1:50:ac:20:44:96:28:f3:88:4e:
75:81:45:35:01:b9:6b:5e:06:c5:d4:eb:93:56:78:27:c0:86:
af:02:32:b1:24:db:83:21:39:78:af:b4:8c:5a:78:9d:da:c9:
fc:d1:1e:29:be:1a:4f:0e:92:6c:4d:6e:05:3f:55:4f:df:02:
7f:44:70:d4:7e:37:e6:37:aa:e8:c0:a4:1a:51:6d:04:e9:82:
99:6f:cc:2d:3d:04:56:f6:b9:de:48:ff:17:18:7a:0b:ec:ad:
5b:d2:66:89:c0:94:4a:89:d9:a3:dd:73:e7:5a:59:c0:24:22:
30:5e:84:58:e6:91:ed:db:0e:a7:4e:78:97:32:12:01:2c:c5:
cf:bb:03:26:5f:98:4f:b8:49:81:5b:15:cb:03:12:79:55:8d:
ee:b9:c8:5b:c6:b2:19:e5:d3:b2:e8:62:b7:e9:2b:95:34:bb:
d6:f7:1c:61:9c:1b:75:a7:ee:e8:ba:d7:e8:a2:60:dc:42:20:
8d:59:9b:bb:26:cc:43:23:e0:95:2e:22:0c:30:b8:91:23:f1:
be:81:ef:e1:79:6d:a6:3a:2a:33:42:c6:5c:92:72:a0:46:5b:
b9:16:89:a6:5b:ab:31:44:6b:7f:6b:29:6e:e8:5c:24:34:37:
d6:3b:d6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 18:51:00 2026 by rpki-client