Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
File: Has2Xsw1BFitorCUnuZ--djG9Nw.mft (raw, json)
Hash identifier: +wDVeLMBrVUSupWtMOGXx17064M0hLExzH4wYphOpqs=
Subject key identifier: 32:C0:BE:3F:40:80:30:57:81:76:BE:58:B6:A3:BD:1D:85:4E:95:89
Authority key identifier: 1D:AB:36:5E:CC:35:04:58:AD:A2:B0:94:9E:E6:7E:F9:D8:C6:F4:DC
Certificate issuer: /CN=1dab365ecc350458ada2b0949ee67ef9d8c6f4dc
Certificate serial: 019DB0C6534F8D423E60E3483D3D5B47992E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
Manifest number: 01D6
Signing time: Tue 21 Apr 2026 16:01:20 +0000
Manifest this update: Tue 21 Apr 2026 16:01:20 +0000
Manifest next update: Wed 22 Apr 2026 16:01:20 +0000
Files and hashes: 1: 2GIqOre8aovyQcr1e-R8g-dbRi4.roa (hash: 4xC7s77noCbz+G4tY4JMBYQVDuhDu5K8B/uxESDNLmE=)
2: GJ9jq1utAOnfB6vGzK5aQugyYRo.roa (hash: 4LC584iGEYWuEuibcnVRjFRB3sB/Gg71VV3hzTlGieE=)
3: Has2Xsw1BFitorCUnuZ--djG9Nw.crl (hash: lTTIq0comigjG5e19UPdWnMhXFIvoVt7cNfhmkZgp6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:c6:53:4f:8d:42:3e:60:e3:48:3d:3d:5b:47:99:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dab365ecc350458ada2b0949ee67ef9d8c6f4dc
Validity
Not Before: Apr 21 16:01:20 2026 GMT
Not After : Apr 22 16:01:20 2026 GMT
Subject: CN=32c0be3f408030578176be58b6a3bd1d854e9589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:8b:d6:42:38:67:67:55:98:48:c7:3a:2f:
22:60:da:f0:a7:36:64:34:46:91:de:56:c8:89:ac:
bc:bd:d8:89:b9:65:17:04:48:c6:32:d1:dd:ab:a7:
28:15:ba:73:cd:fe:c1:52:d3:44:24:18:af:c7:d7:
8f:9f:f0:f4:ed:86:9b:a1:cf:ff:05:8e:2f:fe:27:
c8:d5:61:ad:10:23:b1:21:9a:d4:1a:68:98:e5:ba:
dd:d3:f6:be:f8:6e:dd:9b:c9:2c:39:b1:c3:65:79:
93:26:35:f8:d1:62:33:9b:31:fa:ab:7b:14:ee:85:
59:f0:b1:90:1c:a1:c5:33:ea:d3:43:04:09:11:0f:
25:68:ad:48:b8:04:f4:41:14:2e:8e:ae:4f:90:28:
3e:ba:c1:ff:0b:06:d3:3e:f4:ab:a8:3f:0a:2c:2c:
bb:8a:a3:a9:11:ce:5d:84:3b:b9:30:ac:0c:4d:6c:
cb:32:06:3c:d5:0b:46:93:7d:29:af:f5:f9:b9:b4:
05:49:97:4d:54:9d:24:f0:5b:99:89:7a:c4:79:f9:
4f:41:f9:a2:ad:6a:8d:5a:a6:2b:76:c9:03:1b:52:
74:c5:40:9c:0a:e4:72:61:5c:a7:2e:f6:b8:d1:2f:
7b:2a:42:9b:50:c3:cb:5a:52:29:21:40:4c:e9:10:
40:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C0:BE:3F:40:80:30:57:81:76:BE:58:B6:A3:BD:1D:85:4E:95:89
X509v3 Authority Key Identifier:
keyid:1D:AB:36:5E:CC:35:04:58:AD:A2:B0:94:9E:E6:7E:F9:D8:C6:F4:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:87:19:47:fb:f9:9f:68:d0:9e:ac:83:16:df:77:5b:93:0e:
a0:02:11:36:d2:91:b1:e7:3d:14:3f:b8:56:17:18:5c:7c:36:
e5:11:e4:49:c5:63:15:0e:5d:f3:6c:c4:a7:fb:fd:d6:13:82:
94:79:54:14:85:dc:ea:da:94:bc:a9:9c:fd:9b:e7:e8:8a:8b:
64:a6:f1:45:6b:03:5e:98:4a:c1:59:01:ee:89:0e:0b:e5:0e:
49:5d:1c:d3:6e:09:be:ff:12:68:af:c5:a9:cc:d4:11:ec:73:
65:a3:15:f1:c0:91:3c:6c:02:f4:33:db:80:bb:3b:09:5b:e7:
10:a5:f1:bd:d0:77:57:45:ff:bf:77:ac:75:9b:5c:2d:b0:87:
30:53:e7:db:4c:fd:ce:a4:03:36:aa:00:9c:3a:95:5f:f6:39:
1f:f8:52:af:a4:ad:36:49:3e:b5:af:38:34:e2:a2:3e:df:6b:
4a:1b:96:4f:d9:9a:6c:eb:2c:d5:6a:35:fc:67:bc:5e:d8:e8:
80:f0:81:55:e0:92:84:57:66:eb:62:4c:61:57:2a:6a:2c:ab:
88:46:2d:20:a5:31:98:65:59:a5:4e:08:f6:58:71:72:9f:d6:
8b:ba:64:64:16:51:4f:8e:50:f0:9e:87:6c:84:30:4b:d9:89:
c8:05:42:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 21:03:22 2026 by rpki-client