Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
File: Hal8rn3msp5W8CWa9TyVkmA0pQI.mft (raw, json)
Hash identifier: fK49yM+GGDnbYWY87KTehR9I3SdhkC5ewRknuYMumy8=
Subject key identifier: 5A:95:2C:CC:31:B4:02:6B:D1:E4:68:B9:BD:6A:B4:94:57:07:B6:59
Authority key identifier: 1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
Certificate issuer: /CN=1da97cae7de6b29e56f0259af53c95926034a502
Certificate serial: 01A08B68D73C08A3D930AA100DF4BB4241B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
Manifest number: 1A4F
Signing time: Thu 10 Sep 2026 13:01:38 +0000
Manifest this update: Thu 10 Sep 2026 13:01:38 +0000
Manifest next update: Fri 11 Sep 2026 13:01:38 +0000
Files and hashes: 1: Hal8rn3msp5W8CWa9TyVkmA0pQI.crl (hash: Xp7P7z26/tzDLRwBd2So8vEUpIGcEHM7V/Sod6LtX34=)
2: JhmZ_DzVJE8577BFE3vDvK9OMd0.roa (hash: z7gGITh/3gzv8G0JyKWvKpwEUXXNZ5dN/ko+JOVacoE=)
3: WCOH2ijRWITUQhmT6F4yfxrnSS4.roa (hash: 2qWBhToAV4o84zS0ph5XP7s0uUrVjIEKx5W2Lfxk5UQ=)
4: hx13qeZvMZ7CkgtNj_PPPv78xFY.roa (hash: CRsLACP7NSVDuxBm9D3SK9UIt5ALRDRxl1uvehhLfs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:d7:3c:08:a3:d9:30:aa:10:0d:f4:bb:42:41:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da97cae7de6b29e56f0259af53c95926034a502
Validity
Not Before: Sep 10 13:01:38 2026 GMT
Not After : Sep 11 13:01:38 2026 GMT
Subject: CN=5a952ccc31b4026bd1e468b9bd6ab4945707b659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d1:c2:47:2d:fc:4c:34:e3:de:be:b9:71:7c:
e6:ab:96:23:75:ef:9b:ca:4b:45:4c:f7:0d:dc:38:
bf:23:d2:87:60:33:e3:d8:6d:23:75:92:3d:68:0a:
ed:67:ed:36:f3:d0:db:34:9a:95:a3:4c:b8:28:47:
ff:25:05:c6:67:40:f3:e4:ab:1b:c9:24:2d:5c:9d:
c2:63:b1:4f:99:36:8c:cf:b5:11:39:68:85:92:07:
95:d8:d9:75:7e:2d:22:06:21:80:3a:4e:de:fd:6d:
ee:a2:38:d5:f4:c5:7f:19:af:bc:a2:cc:94:a8:e8:
77:c0:c4:04:03:7c:98:9b:20:77:3c:20:f2:d4:e3:
bd:f6:36:94:2a:bc:02:9b:71:dc:fa:a5:b9:30:5b:
e7:59:4b:2d:7c:92:cb:3d:d5:9c:9c:cd:8f:d0:28:
7c:97:a7:75:a8:12:42:33:e3:0d:ea:67:6e:7b:de:
ca:ac:e6:65:ea:aa:d9:15:e4:b7:97:1a:4d:32:3f:
ef:a8:55:07:81:25:18:aa:6e:03:d5:aa:02:0f:38:
53:d8:33:8a:3a:4a:f5:e5:5f:c5:bf:1f:66:7c:a3:
d6:a6:b5:a6:6e:70:ac:83:5f:a6:09:5c:f7:4d:05:
9d:ac:3a:72:f7:e0:30:0e:3d:76:e5:bb:44:75:49:
af:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:95:2C:CC:31:B4:02:6B:D1:E4:68:B9:BD:6A:B4:94:57:07:B6:59
X509v3 Authority Key Identifier:
keyid:1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e8:a1:fa:3a:af:9c:61:d1:d9:a1:33:6b:e4:bc:d4:e8:68:
06:df:c0:e7:19:c1:a1:5c:7e:d0:34:58:4f:13:63:d8:bb:b9:
63:33:e3:c0:ee:27:3e:78:e6:88:67:59:61:f0:af:12:ed:59:
ea:74:8d:74:77:fc:10:31:42:71:1c:f6:0d:25:be:74:88:5c:
f2:1d:3e:82:85:44:9e:1e:d5:d7:72:47:e1:b9:c0:9f:b9:11:
01:1e:7d:48:2c:40:bb:63:36:a3:a9:b1:08:87:26:9a:47:3f:
49:fb:46:78:9f:dd:b0:62:7f:23:4d:d9:72:b1:fd:f0:ee:44:
d9:52:cc:a8:96:06:2d:d5:04:a9:0f:5a:e2:34:2c:f2:72:d7:
82:2d:ab:37:f9:fd:12:6a:3e:d7:4a:fc:6a:fc:7a:d6:99:21:
dc:09:f0:a0:1e:0c:27:a9:9e:f9:e9:21:34:e9:5c:5a:a4:49:
a4:f1:03:f4:74:23:51:a6:d1:b2:05:6f:72:66:e6:5a:67:8c:
df:17:ff:91:f8:6a:0f:15:98:16:b9:76:64:20:4d:26:b7:03:
db:10:61:2a:94:a3:41:d4:a1:79:5b:f3:5a:77:30:3f:e7:d2:
99:6e:dd:d1:00:f1:ef:57:f2:68:e9:c8:c3:f1:5c:a7:2e:44:
e7:09:fa:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:13:02 2026 by rpki-client