
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
File: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft (raw, json)
Hash identifier: XnJkjpj2tDkH6mk+CLgSiBVvg0k7/Yud8CtIuAqnXQE=
Subject key identifier: 74:C9:77:6D:1B:5C:D4:E7:51:B4:0C:10:CB:13:25:A9:13:D4:43:D5
Authority key identifier: 1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
Certificate issuer: /CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Certificate serial: 019F1CE963D97FA9965C41E74A131BCD362F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
Manifest number: 198A
Signing time: Wed 01 Jul 2026 09:01:24 +0000
Manifest this update: Wed 01 Jul 2026 09:01:24 +0000
Manifest next update: Thu 02 Jul 2026 09:01:24 +0000
Files and hashes: 1: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl (hash: cj1mItkDy4a4zckXqRE3d8aI1GkZSunKsVAJjdqZmcE=)
2: fA_uTKLLbWG518h0njj_cqP2p6E.roa (hash: 4mY7FOvfpwAUXlFXu+ZK1/hojb4S0OMizyAm+Nun5mU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 Jul 2026 09:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:e9:63:d9:7f:a9:96:5c:41:e7:4a:13:1b:cd:36:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Validity
Not Before: Jul 1 09:01:24 2026 GMT
Not After : Jul 2 09:01:24 2026 GMT
Subject: CN=74c9776d1b5cd4e751b40c10cb1325a913d443d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:55:76:01:57:0a:c8:ac:08:cc:02:08:b2:f8:
03:29:0b:dd:d9:96:cf:09:79:3c:45:67:fe:b8:10:
e4:98:3c:0f:3a:26:cc:ac:5c:6f:ee:f8:06:13:1e:
8a:29:69:97:6d:77:8c:d7:1e:61:32:30:40:ef:86:
1a:95:b9:34:fa:d4:d4:a3:59:8c:bf:f5:47:c1:74:
1f:10:9d:a5:15:91:0a:8e:b4:44:07:d9:8c:51:d3:
70:f2:e0:ef:5d:9b:43:0f:a5:85:fd:c7:43:ba:b8:
5e:9f:c4:fd:f7:84:98:af:1c:4c:5a:91:1d:b3:e1:
79:5b:70:0e:4f:82:0c:d4:b4:58:94:25:0a:53:9a:
46:89:f5:52:7e:cf:8e:1b:cb:d0:de:00:4d:45:48:
46:c5:da:4e:97:ee:a4:24:c2:5d:2e:18:dc:ae:6d:
83:f3:41:d2:d5:ee:4f:1f:0e:34:cd:cd:aa:4c:45:
b3:eb:73:e1:e2:8a:fd:56:6b:00:93:4d:ae:ba:9a:
b9:9d:f7:ea:88:49:96:3c:64:ac:98:92:c4:27:32:
59:c6:44:49:1d:80:9d:a7:66:fa:89:44:09:16:e5:
20:9b:24:55:59:35:12:25:ce:8a:4a:ee:80:b5:05:
3d:89:8e:69:68:06:05:9f:99:f7:b2:f0:54:df:b3:
12:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C9:77:6D:1B:5C:D4:E7:51:B4:0C:10:CB:13:25:A9:13:D4:43:D5
X509v3 Authority Key Identifier:
keyid:1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:18:bc:48:f1:55:da:23:1e:ee:4a:09:c3:7a:f1:12:fe:c2:
e4:a8:c7:33:84:be:76:4c:ee:3a:1c:fc:86:85:db:25:60:91:
5a:6e:8c:06:71:50:57:86:cb:57:61:8a:60:30:5c:66:50:08:
4d:ec:e9:3a:33:88:b7:57:a9:b3:19:5a:e9:10:72:39:74:3b:
9c:a4:5e:f0:8d:5d:b5:f5:61:34:26:1f:e3:e4:57:e0:53:3c:
18:18:9f:5c:60:c4:d9:22:9c:47:cc:c8:a4:24:26:71:7d:71:
cd:01:a4:e1:b0:cc:cd:11:9a:31:da:9c:6d:2a:94:26:56:be:
dc:ab:69:33:29:26:aa:cb:16:b2:62:aa:b0:55:7f:49:0b:d0:
6e:58:6c:6b:7f:d3:cb:a2:15:6a:20:75:5c:74:c8:8c:7f:8e:
1f:77:48:fc:fc:17:c7:87:84:57:f7:45:c9:af:c5:3f:85:cd:
f9:99:41:13:4a:1e:aa:79:f0:25:b7:aa:36:a8:da:27:62:19:
af:ca:1e:2d:bc:9a:d9:d2:cd:6d:a7:ea:7b:d4:a9:44:ce:8b:
ee:94:0e:0f:fb:fd:44:68:17:80:3a:ca:a2:de:ed:86:c7:76:
48:9d:da:cf:34:ce:41:35:22:2e:56:03:0a:4d:15:99:0a:45:
68:e6:5b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 18:41:42 2026 by rpki-client