Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
File: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft (raw, json)
Hash identifier: mOraRrgHoJpnPYlUTwZS2dKLFTTW19kp5T0VcxjXxbs=
Subject key identifier: 32:A0:23:FD:2E:9B:C1:75:BF:1B:3C:98:65:C2:79:8E:83:55:14:E6
Authority key identifier: 1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
Certificate issuer: /CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Certificate serial: 01A0219EB524CF84E19E03C4BB712FF920B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
Manifest number: 1A11
Signing time: Fri 21 Aug 2026 00:00:44 +0000
Manifest this update: Fri 21 Aug 2026 00:00:44 +0000
Manifest next update: Sat 22 Aug 2026 00:00:44 +0000
Files and hashes: 1: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl (hash: H9yrkAIvL2sKdYczLVPiqta7BpPUp4CVxpsda8ApmtU=)
2: fA_uTKLLbWG518h0njj_cqP2p6E.roa (hash: 4mY7FOvfpwAUXlFXu+ZK1/hojb4S0OMizyAm+Nun5mU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:21:9e:b5:24:cf:84:e1:9e:03:c4:bb:71:2f:f9:20:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Validity
Not Before: Aug 21 00:00:44 2026 GMT
Not After : Aug 22 00:00:44 2026 GMT
Subject: CN=32a023fd2e9bc175bf1b3c9865c2798e835514e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f0:66:e6:f9:ae:d9:f9:a5:fc:f7:0c:3d:48:
70:e1:27:d7:78:5b:1e:39:87:6b:b9:c6:7a:05:4c:
82:c1:45:3b:e1:2b:16:2d:2c:b1:5d:dd:43:90:00:
17:28:b8:e7:93:88:18:df:51:d1:3e:b6:0b:5d:c8:
ce:5e:33:34:22:3b:a2:3f:6a:92:35:62:64:1b:bb:
5e:8c:96:98:ec:d3:fc:ae:b1:02:00:00:f9:fb:d0:
05:37:0b:48:a0:59:f1:7b:c6:85:9b:a3:37:ef:2e:
e6:e3:2c:fe:93:49:68:65:21:62:eb:89:1f:a8:56:
00:e7:db:5d:38:42:bd:9c:63:a5:97:57:55:de:3c:
38:8a:d0:47:d3:40:a3:7f:68:45:7d:7e:bb:a4:b1:
a1:3f:7b:c8:87:9e:74:6a:9b:2c:56:d6:c0:06:4c:
bd:9b:37:c7:e9:56:a2:e9:b5:16:2f:5d:ae:9f:eb:
08:a0:83:dc:49:17:4a:8a:bc:04:a8:d9:3a:0e:f4:
01:fe:13:a7:06:a6:9d:ba:ee:9c:e0:24:8b:70:7b:
cd:56:8f:21:f5:bd:f9:6e:fb:c7:26:a7:69:d3:b8:
da:4e:4f:d6:53:4b:f9:df:6e:bb:23:91:33:9c:29:
d9:50:42:70:a4:cb:d4:99:67:2a:ec:bc:1a:29:82:
c8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A0:23:FD:2E:9B:C1:75:BF:1B:3C:98:65:C2:79:8E:83:55:14:E6
X509v3 Authority Key Identifier:
keyid:1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:c3:98:19:08:25:51:0c:58:50:f8:df:df:56:74:65:22:69:
f5:8b:86:5b:63:a7:bc:54:d9:77:da:7d:89:cd:a2:a6:f7:03:
3d:44:e2:5d:2b:a6:08:ee:cc:18:21:ff:2b:0f:9b:47:e3:d8:
a6:4a:d7:3b:55:a2:ec:cb:3a:e9:be:6e:8e:7d:ca:66:80:ef:
53:d8:cd:c4:ba:af:1c:0b:02:f6:69:52:91:31:5a:0d:fc:78:
b3:17:df:9c:ab:2f:dc:5a:44:4f:ad:dd:c1:ce:f9:f0:4e:5c:
47:ae:99:60:d2:ce:00:8d:77:ef:8a:f3:41:60:b5:8e:9f:e6:
65:d6:db:99:2a:39:e7:44:e7:2c:4a:4f:e4:3e:10:fb:21:17:
42:26:75:37:58:d7:7c:df:0c:20:8b:4b:7e:69:66:78:3b:a5:
a7:36:c9:e9:7c:30:fb:a2:90:d0:f0:c4:e9:0b:50:6c:75:2c:
cd:77:74:ef:e5:62:bb:c7:c3:3c:98:c3:d8:f6:f3:79:6d:2f:
5c:3f:28:9d:cb:c8:70:7c:29:7b:97:d2:00:32:20:78:b3:bb:
41:54:ca:f2:f8:4e:75:7c:df:c9:ff:bd:cd:06:98:cf:88:03:
b4:08:81:e5:df:a3:6a:4c:1f:92:03:23:05:65:4b:4c:d1:29:
71:41:2d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:24:50 2026 by rpki-client