Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
File: HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft (raw, json)
Hash identifier: osKUscG7IjnRYFfsR7HXt6P1JDGHx8meF9gvoAx9iqA=
Subject key identifier: 05:6E:5E:B3:B8:8B:43:F0:9A:14:7F:3F:0C:C8:AD:39:7E:5B:D3:74
Authority key identifier: 1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
Certificate issuer: /CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Certificate serial: 01A0EB1C8B2053A0BFC003E26DE6D2C7A1B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
Manifest number: 1A79
Signing time: Tue 29 Sep 2026 03:01:51 +0000
Manifest this update: Tue 29 Sep 2026 03:01:51 +0000
Manifest next update: Wed 30 Sep 2026 03:01:51 +0000
Files and hashes: 1: 4t1yiUQVN5Px9-wGHy62XxxqimU.roa (hash: FHoafxoTZhFU/Fxu+bGTDh9a2aT1nhPTACKs/kC0+Jg=)
2: 8jW3c1tdyMykRFAb8cKVIvXYm1o.roa (hash: Q0T2eH3RlaxZhFvfRSxmpGRJmTvjnKlI3xGp5fpQfVU=)
3: HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl (hash: BVW/a5SEXnj7o59mGWsJYTIfZsOxkWcaT0RojgG7X9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 03:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:1c:8b:20:53:a0:bf:c0:03:e2:6d:e6:d2:c7:a1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Validity
Not Before: Sep 29 03:01:51 2026 GMT
Not After : Sep 30 03:01:51 2026 GMT
Subject: CN=056e5eb3b88b43f09a147f3f0cc8ad397e5bd374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:6b:61:3c:81:2d:37:03:af:70:8b:e2:87:
6c:fb:e5:bd:09:81:69:a7:3a:76:43:93:a3:fd:c0:
a7:1e:cd:d4:48:f6:eb:85:ee:bf:02:00:b2:57:0c:
04:fb:9d:06:72:d7:6c:f5:07:fd:40:15:01:07:40:
a0:ed:15:bc:a3:70:ba:d0:18:7d:0a:d3:97:76:f9:
3a:f2:69:dd:96:10:4b:0e:7d:a2:35:41:82:a7:bc:
15:f7:38:75:fa:26:bf:9e:59:c7:ae:e0:7a:1c:48:
50:09:c8:f3:6b:e1:43:00:18:38:59:f9:d0:a8:67:
f3:2e:c2:63:84:99:4b:94:06:3f:7f:39:c1:04:0b:
76:4a:43:d1:24:53:ae:6e:eb:85:94:67:70:f9:e9:
67:36:ea:80:24:19:d0:47:d5:6c:7e:4d:19:61:b5:
48:ae:b2:b6:4e:fa:4d:05:1c:bc:92:29:f4:dc:f2:
1c:33:30:3d:45:e8:a6:fa:7b:8c:a4:ab:71:7c:85:
a7:a2:a9:e9:12:34:68:73:55:b0:68:66:5d:e0:f9:
8b:7f:15:53:d0:3c:53:75:7f:c5:5f:df:e0:d6:a4:
12:04:dd:9c:17:14:4f:71:d2:55:b5:d4:8a:96:fb:
a3:4a:80:f0:25:bc:5c:00:62:e0:bf:e6:3f:4f:6c:
78:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6E:5E:B3:B8:8B:43:F0:9A:14:7F:3F:0C:C8:AD:39:7E:5B:D3:74
X509v3 Authority Key Identifier:
keyid:1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:98:26:43:8f:b7:44:d8:61:c6:97:4d:01:40:64:d4:82:17:
52:f4:5e:ff:cf:b8:77:89:79:dd:64:2b:15:d4:a7:79:8f:d1:
f5:26:c4:a2:cf:9c:5e:7e:bc:1f:95:56:4c:14:6b:ef:fd:b0:
11:d3:cf:d2:98:8b:18:b2:dc:eb:2b:50:53:d5:2c:37:f5:d8:
2a:79:a2:cb:30:3c:67:16:7a:ce:e1:d0:5e:c1:70:82:94:e2:
8d:56:d7:21:dd:ad:99:8d:ae:de:a0:89:48:dc:4e:62:7f:7e:
48:f2:4a:c3:e1:14:3a:7c:99:79:52:a8:a6:0d:5d:da:0d:4c:
85:d2:cd:3d:37:a4:3b:df:24:97:56:63:cf:cd:0b:d7:ad:a9:
9e:e7:a7:99:eb:dd:57:63:01:37:4b:0b:42:35:f9:29:bb:1d:
7c:1d:95:03:52:f0:53:fe:1d:73:68:92:28:90:de:39:f9:50:
41:37:78:0d:58:2c:00:1b:f0:7d:40:fb:fe:cc:2a:22:20:09:
32:56:74:bc:db:09:eb:87:30:aa:f8:95:61:99:57:e0:c1:19:
b4:04:93:6a:d9:4d:27:5a:2c:20:8d:c3:68:81:b5:24:06:79:
58:56:c8:a4:68:0d:a5:fd:3a:28:d0:60:c2:80:40:97:e4:b7:
c0:86:ef:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:27:24 2026 by rpki-client