Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
File: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft (raw, json)
Hash identifier: 8oKJu+mYrkD7W+AeZ8Mb0v0aMzsLGwXE5iiXgRFvsUc=
Subject key identifier: 3A:AF:FE:A6:F3:D7:C5:C7:2F:E1:81:FC:F5:ED:9C:F0:5A:0C:40:A2
Authority key identifier: 84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
Certificate issuer: /CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Certificate serial: 019F951208566D58778C03316B80F77EC4A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 17:00:14 +0000
Manifest this update: Fri 24 Jul 2026 17:00:14 +0000
Manifest next update: Sat 25 Jul 2026 17:00:14 +0000
Files and hashes: 1: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl (hash: FMQEMfkoFMq8JbVOVfIBOc/JxeH99YrPMKUWXnNpR+c=)
2: lFgdap73IKN-x6XHvGiMEA7qWxg.roa (hash: Cy3+NfE+G8o591s23SgJa1A+OW1ox1rr66Hm02Ee6OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:08:56:6d:58:77:8c:03:31:6b:80:f7:7e:c4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Validity
Not Before: Jul 24 17:00:14 2026 GMT
Not After : Jul 25 17:00:14 2026 GMT
Subject: CN=3aaffea6f3d7c5c72fe181fcf5ed9cf05a0c40a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d4:94:21:7a:3f:f0:ff:af:77:2e:ea:ca:c4:
34:22:37:71:bb:2f:3d:ce:ee:f9:7e:5e:44:d5:46:
e5:dc:9d:e5:6e:1c:b5:56:f4:56:13:7d:53:c6:58:
81:fc:f0:14:fe:11:46:6d:5e:c2:c1:2b:b2:8e:d2:
36:a2:0d:d9:d9:f5:cf:8b:79:be:d4:d3:f1:8e:be:
2c:67:75:68:38:56:b2:1e:8e:11:02:24:1b:07:21:
7a:69:af:f4:2d:b6:03:75:52:d1:d5:93:9a:1a:2e:
ec:62:fb:04:4d:5f:43:17:56:53:86:a7:84:99:a4:
f8:dd:17:a7:3d:c1:28:73:9f:ec:99:8f:80:84:e6:
b6:bf:d8:28:f3:be:07:33:15:61:aa:e2:b5:bd:8d:
86:46:39:f4:bb:97:fa:52:2d:ae:f7:8c:58:81:83:
fb:c7:22:83:fe:d4:58:b2:47:80:81:cb:6a:a5:ba:
c8:8d:40:7f:67:b0:42:d8:ed:06:50:d4:6a:3c:92:
05:05:5b:7b:3b:7b:1f:ca:f5:00:55:c1:d4:9e:cd:
19:5c:b3:9a:4d:08:78:67:e3:ab:85:65:3d:1c:9a:
76:cf:b6:ba:bc:be:a7:03:e3:2a:ad:1b:3f:93:1e:
e7:56:e3:67:41:83:24:6f:a8:c3:04:49:d0:74:98:
70:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AF:FE:A6:F3:D7:C5:C7:2F:E1:81:FC:F5:ED:9C:F0:5A:0C:40:A2
X509v3 Authority Key Identifier:
keyid:84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c3:d8:7a:f2:69:26:e8:d8:87:75:24:e8:3b:87:79:3e:59:
f5:de:2b:51:6d:bb:4e:68:21:f7:e0:f7:4c:3d:d8:71:4a:84:
08:71:92:35:58:bc:84:3f:d6:c7:b3:67:7a:b1:ca:d7:c4:03:
eb:5a:bb:f3:be:93:2e:38:f4:72:f1:36:05:6a:3b:8f:52:20:
8a:85:62:ba:0b:99:90:3a:30:84:00:20:f7:f6:87:7a:26:8e:
5d:fc:0d:e9:69:f0:ce:e9:58:e8:88:be:f8:51:ea:7d:f6:8a:
18:cb:e2:79:b4:ae:e7:df:d2:09:33:fb:95:96:30:73:85:2f:
e3:23:20:6d:f3:22:fd:58:d2:93:3e:a9:71:8b:2b:9e:5b:45:
e7:1a:10:e1:ce:a1:b4:c6:02:89:d7:6e:ae:01:d3:4d:17:ef:
42:d8:e6:bf:ba:79:b4:c9:32:83:48:08:a9:fc:fe:17:dd:73:
4b:0b:2a:50:c5:cf:fe:7a:51:c1:b7:21:b2:89:37:02:51:0a:
41:b2:d5:83:1b:57:04:92:2c:d1:e5:87:c7:f4:e0:af:9f:19:
df:3a:82:43:54:a9:db:5d:3d:57:49:bd:7a:77:63:fc:07:77:
26:35:a8:ef:98:7f:88:fe:2e:39:f5:71:23:2d:d0:8e:8f:f8:
13:9a:b4:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VEghWbVh3jAMxa4D3fsSpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0OWQ1YzFjYTg2NWIwNGI2ZjJiM2NjZDkwMTZlOTJkZGFk
OTlhYWIwHhcNMjYwNzI0MTcwMDE0WhcNMjYwNzI1MTcwMDE0WjAzMTEwLwYDVQQD
EygzYWFmZmVhNmYzZDdjNWM3MmZlMTgxZmNmNWVkOWNmMDVhMGM0MGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49SUIXo/8P+vdy7qysQ0Ijdxuy89
zu75fl5E1Ubl3J3lbhy1VvRWE31TxliB/PAU/hFGbV7CwSuyjtI2og3Z2fXPi3m+
1NPxjr4sZ3VoOFayHo4RAiQbByF6aa/0LbYDdVLR1ZOaGi7sYvsETV9DF1ZThqeE
maT43RenPcEoc5/smY+AhOa2v9go874HMxVhquK1vY2GRjn0u5f6Ui2u94xYgYP7
xyKD/tRYskeAgctqpbrIjUB/Z7BC2O0GUNRqPJIFBVt7O3sfyvUAVcHUns0ZXLOa
TQh4Z+OrhWU9HJp2z7a6vL6nA+MqrRs/kx7nVuNnQYMkb6jDBEnQdJhw7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqv/qbz18XHL+GB/PXtnPBaDECiMB8GA1UdIwQY
MBaAFISdXByoZbBLbys8zZAW6S3a2ZqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEoxY0hLaGxzRXR2S3p6TmtCYnBMZHJabXFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzQxOGItZWM3ZC00NmQyLTk5ZDUt
ZGRlMGQxMjczNWM2LzEvaEoxY0hLaGxzRXR2S3p6TmtCYnBMZHJabXFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8xYzQxOGItZWM3ZC00NmQyLTk5ZDUtZGRlMGQxMjczNWM2
LzEvaEoxY0hLaGxzRXR2S3p6TmtCYnBMZHJabXFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAosPYevJp
JujYh3Uk6DuHeT5Z9d4rUW27Tmgh9+D3TD3YcUqECHGSNVi8hD/Wx7NnerHK18QD
61q7876TLjj0cvE2BWo7j1IgioViuguZkDowhAAg9/aHeiaOXfwN6WnwzulY6Ii+
+FHqffaKGMviebSu59/SCTP7lZYwc4Uv4yMgbfMi/VjSkz6pcYsrnltF5xoQ4c6h
tMYCiddurgHTTRfvQtjmv7p5tMkyg0gIqfz+F91zSwsqUMXP/npRwbchsok3AlEK
QbLVgxtXBJIs0eWHx/Tgr58Z3zqCQ1Sp2109V0m9endj/Ad3JjWo75h/iP4uOfVx
Iy3Qjo/4E5q0Xg==
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:50:08 2026 by rpki-client