Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
File: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft (raw, json)
Hash identifier: d1UkXiCA+ab6p7gP52VBNNBEd98zEBYoMP6Z+yJIK0Q=
Subject key identifier: 64:72:AE:75:C6:55:B2:A5:BC:A9:7C:A1:03:2F:97:6C:A1:C8:F5:36
Authority key identifier: 1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
Certificate issuer: /CN=1daf46a40c246d6540d992c321b1cc3623d65995
Certificate serial: 019F9624DE1BD4EDAED469720FBDAEEFE876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
Manifest number: 19D8
Signing time: Fri 24 Jul 2026 22:00:26 +0000
Manifest this update: Fri 24 Jul 2026 22:00:26 +0000
Manifest next update: Sat 25 Jul 2026 22:00:26 +0000
Files and hashes: 1: 0z1v-iMgN-IiCcFz7KgyRD_9W5o.roa (hash: BFX8flEMTYsLMbzmmvgL8prvL0RkcLfro9e2dMsJhWI=)
2: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl (hash: YcqadENhS/RoAqC6j+0dH+NKulgHo0eQLpIpw4FyoLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:24:de:1b:d4:ed:ae:d4:69:72:0f:bd:ae:ef:e8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1daf46a40c246d6540d992c321b1cc3623d65995
Validity
Not Before: Jul 24 22:00:26 2026 GMT
Not After : Jul 25 22:00:26 2026 GMT
Subject: CN=6472ae75c655b2a5bca97ca1032f976ca1c8f536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:84:36:b6:05:90:94:3c:fc:c8:95:d7:e6:ed:
53:10:0f:18:81:c5:e7:63:c6:27:55:59:30:bf:3c:
0e:2d:37:37:a7:dc:28:fe:e2:74:94:ee:f7:3b:69:
d7:0c:b4:03:74:c7:89:28:6b:99:ae:0b:77:e2:6c:
fa:b4:c9:96:a9:b2:6c:8d:2c:a2:a9:39:39:04:54:
17:50:cb:ca:58:39:a8:b2:ab:26:8b:d9:29:69:a1:
28:e7:43:f6:bf:11:06:b7:29:29:37:db:00:e8:e5:
14:41:c6:c6:46:0d:7f:02:f0:c8:65:61:b2:a0:1e:
f2:41:b9:78:5e:8c:4a:51:c2:4a:b7:6a:80:1b:66:
5f:2c:17:6b:14:94:86:85:ec:4d:c6:45:78:76:ba:
0e:aa:d2:45:c6:bc:f9:90:7f:a7:b5:c6:ca:00:4f:
9e:57:f2:ed:13:2a:fc:7e:ac:38:a1:73:08:64:ed:
97:95:b0:4b:09:bb:27:4a:05:98:60:8a:22:a0:73:
6d:9b:1b:39:fd:8c:45:23:1e:d1:ef:a8:5a:43:fe:
eb:87:fe:04:22:e9:85:ac:2c:c0:f9:43:eb:85:62:
fb:93:15:ca:13:0d:80:9f:48:33:07:9d:1e:db:1f:
de:cf:70:40:33:e7:f4:93:ae:60:97:7f:5b:df:5d:
4d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:72:AE:75:C6:55:B2:A5:BC:A9:7C:A1:03:2F:97:6C:A1:C8:F5:36
X509v3 Authority Key Identifier:
keyid:1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:88:ff:82:89:e0:a8:3a:f2:7c:79:89:bd:81:9d:fe:ca:40:
b2:fd:c8:b7:29:f1:6c:15:44:d4:d5:6b:f8:3f:58:03:3b:37:
81:11:8b:98:03:d5:05:1b:14:65:a5:e5:39:c5:e7:8d:90:77:
35:33:b9:13:2f:5d:7f:c9:74:93:f9:33:68:70:d3:b2:df:fe:
d8:9d:18:91:89:86:69:49:a2:9e:07:47:35:fc:9c:6c:9d:ac:
86:5e:02:3f:da:a7:b4:a8:4a:47:e4:b3:46:21:c2:9f:b9:0e:
d7:07:78:61:2d:af:f1:bb:11:61:7c:bd:f7:c2:52:89:78:b0:
81:1b:b4:d2:ed:07:59:03:28:15:d7:2b:9a:47:87:be:c2:e9:
fe:fc:2c:69:98:b8:98:09:6e:e9:15:13:ab:bc:c0:93:2a:96:
1a:06:5e:2b:39:f3:9b:0b:20:ca:4c:65:3c:c4:bd:da:f4:d5:
13:89:c0:12:6f:b9:90:89:13:93:5e:eb:28:8a:b8:64:3c:b3:
f1:61:9f:b9:e3:e8:a7:7f:ca:13:d3:00:1f:92:d6:28:fc:18:
0a:f3:b9:fb:87:35:46:16:79:c4:88:f4:69:8e:84:da:72:05:
a2:18:c6:e9:bc:5a:64:7d:0c:74:93:5c:fe:d9:c4:2e:ae:a4:
24:54:82:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+WJN4b1O2u1GlyD72u7+h2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYWY0NmE0MGMyNDZkNjU0MGQ5OTJjMzIxYjFjYzM2MjNk
NjU5OTUwHhcNMjYwNzI0MjIwMDI2WhcNMjYwNzI1MjIwMDI2WjAzMTEwLwYDVQQD
Eyg2NDcyYWU3NWM2NTViMmE1YmNhOTdjYTEwMzJmOTc2Y2ExYzhmNTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoQ2tgWQlDz8yJXX5u1TEA8YgcXn
Y8YnVVkwvzwOLTc3p9wo/uJ0lO73O2nXDLQDdMeJKGuZrgt34mz6tMmWqbJsjSyi
qTk5BFQXUMvKWDmosqsmi9kpaaEo50P2vxEGtykpN9sA6OUUQcbGRg1/AvDIZWGy
oB7yQbl4XoxKUcJKt2qAG2ZfLBdrFJSGhexNxkV4droOqtJFxrz5kH+ntcbKAE+e
V/LtEyr8fqw4oXMIZO2XlbBLCbsnSgWYYIoioHNtmxs5/YxFIx7R76haQ/7rh/4E
IumFrCzA+UPrhWL7kxXKEw2An0gzB50e2x/ez3BAM+f0k65gl39b311N3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRyrnXGVbKlvKl8oQMvl2yhyPU2MB8GA1UdIwQY
MBaAFB2vRqQMJG1lQNmSwyGxzDYj1lmVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGE5R3BBd2tiV1ZBMlpMREliSE1OaVBXV1pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80NGMwZWYtNWRhNi00ZmYyLWI1ZWYt
NzlmMDQ4YmQyYTdhLzEvSGE5R3BBd2tiV1ZBMlpMREliSE1OaVBXV1pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS80NGMwZWYtNWRhNi00ZmYyLWI1ZWYtNzlmMDQ4YmQyYTdh
LzEvSGE5R3BBd2tiV1ZBMlpMREliSE1OaVBXV1pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIj/gong
qDryfHmJvYGd/spAsv3ItynxbBVE1NVr+D9YAzs3gRGLmAPVBRsUZaXlOcXnjZB3
NTO5Ey9df8l0k/kzaHDTst/+2J0YkYmGaUmingdHNfycbJ2shl4CP9qntKhKR+Sz
RiHCn7kO1wd4YS2v8bsRYXy998JSiXiwgRu00u0HWQMoFdcrmkeHvsLp/vwsaZi4
mAlu6RUTq7zAkyqWGgZeKznzmwsgykxlPMS92vTVE4nAEm+5kIkTk17rKIq4ZDyz
8WGfuePop3/KE9MAH5LWKPwYCvO5+4c1RhZ5xIj0aY6E2nIFohjG6bxaZH0MdJNc
/tnELq6kJFSCKw==
-----END CERTIFICATE-----
Generated at Sat Jul 25 03:09:09 2026 by rpki-client