Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
File: Hal8rn3msp5W8CWa9TyVkmA0pQI.mft (raw, json)
Hash identifier: rnyw5SSpwPJm+0wV7u7jPEWddrUD8+x+M3E39b9H8Hs=
Subject key identifier: F7:8D:96:5D:E3:48:D6:92:E9:FA:E1:23:12:CB:86:D9:43:98:FD:D5
Authority key identifier: 1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
Certificate issuer: /CN=1da97cae7de6b29e56f0259af53c95926034a502
Certificate serial: 019FA0E066FBF5AC60E1F953EB1CF40FF269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
Manifest number: 19D5
Signing time: Mon 27 Jul 2026 00:01:28 +0000
Manifest this update: Mon 27 Jul 2026 00:01:28 +0000
Manifest next update: Tue 28 Jul 2026 00:01:28 +0000
Files and hashes: 1: Hal8rn3msp5W8CWa9TyVkmA0pQI.crl (hash: 8ovPebBTRLMZtQpHBZw7s3mSmpFBS+qr4b75KLJCPis=)
2: JhmZ_DzVJE8577BFE3vDvK9OMd0.roa (hash: z7gGITh/3gzv8G0JyKWvKpwEUXXNZ5dN/ko+JOVacoE=)
3: WCOH2ijRWITUQhmT6F4yfxrnSS4.roa (hash: 2qWBhToAV4o84zS0ph5XP7s0uUrVjIEKx5W2Lfxk5UQ=)
4: qEPeih-d-b5ejLQMGiGo36Qnv5w.roa (hash: 29cMx+RjFTGtIezVTC2prGXPBgmOX8SjbmN1gmtAbFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:66:fb:f5:ac:60:e1:f9:53:eb:1c:f4:0f:f2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da97cae7de6b29e56f0259af53c95926034a502
Validity
Not Before: Jul 27 00:01:28 2026 GMT
Not After : Jul 28 00:01:28 2026 GMT
Subject: CN=f78d965de348d692e9fae12312cb86d94398fdd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:b0:ba:b1:b6:93:2e:8c:c7:54:a1:c8:f8:
30:92:58:b5:41:a5:d9:6b:79:04:e3:15:bc:2b:f2:
41:c1:3b:3f:e8:b0:ec:16:6a:77:68:f8:37:ca:16:
8c:8b:2b:20:bf:6d:19:63:c7:14:6b:e3:f2:df:59:
a6:ce:51:e6:2d:87:6d:fd:60:a1:c2:d7:97:d4:69:
f1:1a:4e:7d:f3:36:03:2a:aa:b8:cb:01:a1:be:fc:
35:3d:16:b0:c3:06:f3:b6:8f:43:a3:54:66:2e:ba:
31:d9:82:b8:30:68:b4:4a:74:c0:af:5e:6a:bd:2a:
78:96:6b:f2:52:e2:1e:a3:1c:8a:dc:b2:97:c4:8c:
7b:97:19:db:8d:8f:88:a5:68:90:4a:27:09:2b:a3:
25:27:8a:ce:81:a4:d4:bb:a7:db:ac:1e:6c:e3:24:
c7:1e:2f:0e:9e:00:c5:66:89:4d:0f:0d:2a:d7:97:
2e:0a:17:c3:82:f1:f3:aa:2b:a2:a4:2e:7a:d0:a3:
72:26:e5:7a:14:ca:d6:98:d8:32:a0:31:b1:70:e7:
37:c2:0b:6c:b4:ce:da:df:8e:e3:8a:89:42:f5:9f:
ae:4c:dc:bf:8a:dc:2f:aa:4e:ca:c6:6e:22:99:ce:
04:be:63:50:a9:76:f6:54:e6:29:e5:02:a8:d8:6e:
f5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8D:96:5D:E3:48:D6:92:E9:FA:E1:23:12:CB:86:D9:43:98:FD:D5
X509v3 Authority Key Identifier:
keyid:1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:06:b4:1e:d5:76:e1:91:a4:45:9b:22:60:77:0b:4b:15:c5:
f2:25:a7:e4:51:77:a5:da:00:d7:32:a7:21:59:79:40:0b:5a:
85:f5:50:cc:9d:f0:64:40:66:f2:20:08:dd:22:d3:70:34:b9:
53:61:6d:91:db:b7:b6:b3:e6:c9:a7:f1:cf:39:e6:55:1f:b5:
c9:a2:e4:ec:5b:be:14:63:75:f6:98:d8:b0:c1:a1:ae:72:93:
f7:92:21:68:0b:5b:4b:fc:13:bf:ed:04:cc:4b:c3:ac:90:0b:
8e:1d:3f:14:b9:ef:ee:6a:8a:e7:fe:ff:56:65:a5:60:5f:42:
5b:6f:f6:a0:20:00:d8:95:e8:6d:dd:9b:9a:41:07:30:9e:8a:
4c:56:ed:73:4e:81:48:1d:0b:f9:a7:00:f0:f4:07:e0:f7:1b:
6c:85:a9:b4:58:54:44:e9:f1:58:73:78:2d:f9:3c:8a:df:8b:
c5:5d:78:48:54:09:c8:78:f0:f2:b2:c0:16:9a:40:b6:40:be:
98:2d:37:39:f3:fe:de:0c:98:7a:bf:d9:35:5f:06:d8:1e:5c:
d4:35:12:4d:7c:f3:ff:1f:c8:aa:f8:6b:69:b8:ea:8a:d8:55:
03:bd:0e:f9:98:7c:45:8d:ba:36:5f:76:78:ff:be:8f:90:d4:
e6:b2:92:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 01:22:10 2026 by rpki-client