Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
File: HApvbzqa4dpeW-h1L6sY3rKLphQ.mft (raw, json)
Hash identifier: K9ZQeOAshMT2z6GfKqyXt1Ff/LbC0zmmuF8TC1cY2CE=
Subject key identifier: 74:C6:3E:75:F9:0D:7B:3A:4F:6C:B2:8F:06:50:CD:DE:6D:90:E7:50
Authority key identifier: 1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14
Certificate issuer: /CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
Certificate serial: 019EE631987412C619C8E9B46C8B8B75CD04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
Manifest number: 0425
Signing time: Sat 20 Jun 2026 18:01:10 +0000
Manifest this update: Sat 20 Jun 2026 18:01:10 +0000
Manifest next update: Sun 21 Jun 2026 18:01:10 +0000
Files and hashes: 1: HApvbzqa4dpeW-h1L6sY3rKLphQ.crl (hash: U38NdEEJ4KRkw4nNFEz911C62GO5L6+UwMeJ7dLGAF8=)
2: fxHBsVKaXsttW_zXOj8FZqtqL7U.roa (hash: J1BSTHyqQv5WDh3XQtbmLEWduZkd0l1Wk4UUhPLMUhY=)
3: sIfcqsxg3WW57k2COZeb4Iarq9c.roa (hash: wIaOvcTZtG+qCBDexHsWNsZh+YEPmUdduOIOWtQaX0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e6:31:98:74:12:c6:19:c8:e9:b4:6c:8b:8b:75:cd:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
Validity
Not Before: Jun 20 18:01:10 2026 GMT
Not After : Jun 21 18:01:10 2026 GMT
Subject: CN=74c63e75f90d7b3a4f6cb28f0650cdde6d90e750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:cf:1b:76:de:92:78:db:5c:1a:d9:85:0d:
06:5c:5a:fe:42:1a:0c:86:96:42:63:c5:c8:e5:35:
61:52:1e:da:b0:16:80:dc:65:42:6d:fb:31:e9:6f:
32:5e:48:af:02:af:e6:f9:d1:3c:ab:18:a2:e8:48:
c2:58:68:05:85:22:ae:e8:28:d4:7b:5c:9b:11:ba:
38:21:0c:20:30:4e:05:22:43:68:15:b8:81:e3:1c:
08:81:2a:2b:ca:e6:24:3e:07:c5:1c:ed:c2:bb:cc:
d8:f3:c0:0d:a3:eb:c5:68:43:98:f7:7e:d8:89:b9:
6b:33:6f:c2:e2:06:a1:29:94:f3:ba:a8:98:27:40:
eb:71:c9:7a:ab:5b:1c:df:3b:07:d8:de:df:a8:15:
26:52:3b:2f:c7:7e:ab:0a:13:4f:3d:0e:36:b4:7f:
9f:18:69:e6:94:78:d8:71:83:61:45:0c:01:f8:8f:
0a:c7:14:3e:37:d4:8c:22:9a:1a:5e:68:4f:35:dd:
0a:cf:c4:f5:42:af:6f:7f:1f:58:0e:e2:c8:79:7a:
e1:44:dc:e1:f3:cc:9a:a8:dc:40:03:6c:e9:c3:85:
87:6f:54:e2:89:16:bc:87:8b:6d:81:0a:37:07:d8:
37:90:a1:d8:11:43:df:e7:6c:81:ef:92:23:65:07:
34:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C6:3E:75:F9:0D:7B:3A:4F:6C:B2:8F:06:50:CD:DE:6D:90:E7:50
X509v3 Authority Key Identifier:
keyid:1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9e:59:39:b3:73:b0:fa:43:d1:f6:b6:a1:f4:b8:b7:88:5e:
59:7e:9f:ce:d9:ba:f2:00:cd:b1:84:2f:d1:b2:5b:e9:f9:2a:
79:b5:ed:4b:0c:54:46:bd:ab:82:1b:81:ad:b2:b5:b3:2d:05:
b5:4a:53:8a:e5:eb:31:19:e9:fc:e2:58:21:40:d3:b5:9a:42:
d5:53:27:34:9d:9a:24:8f:8f:58:44:ff:c6:49:9d:f5:81:29:
ef:96:1d:67:ff:c9:21:5e:e2:3f:b2:95:e4:94:8f:7a:fd:04:
53:8d:e2:89:1b:d1:19:5c:e6:36:a4:6d:4d:60:bc:ed:76:62:
fa:7e:2a:a3:f6:36:58:18:84:aa:47:c8:2e:50:aa:e6:34:e3:
88:c7:88:48:c8:e5:b7:af:b1:3b:c5:f8:df:c3:b1:da:58:49:
6a:75:d2:d4:d2:a5:f6:a3:12:34:d6:63:b7:5f:28:57:28:ee:
f5:5d:c0:4b:e5:c5:2d:6c:23:a1:e4:41:f9:1d:e3:b0:eb:2c:
28:57:80:be:bd:fc:f7:83:bb:fe:48:9f:6b:3d:7e:79:1b:26:
c8:66:a9:c7:88:75:41:32:f9:d9:25:95:10:52:e5:a4:ea:b5:
2f:33:da:8e:7b:79:78:23:20:3a:72:f4:44:3d:23:06:66:ed:
5c:6f:29:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 00:44:10 2026 by rpki-client