Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
File: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft (raw, json)
Hash identifier: CyfeiVNF4ZG07OmH/taSaTfoVwR3fMa7MZJABQWINpw=
Subject key identifier: 31:35:C1:E9:C3:86:13:3B:E7:66:0C:96:7F:0A:E3:66:75:2F:36:7F
Authority key identifier: 1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
Certificate issuer: /CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Certificate serial: 019D382E5F75AA98C642A54445F4EBFBDD4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:00:56 +0000
Manifest this update: Sun 29 Mar 2026 06:00:56 +0000
Manifest next update: Mon 30 Mar 2026 06:00:56 +0000
Files and hashes: 1: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl (hash: 60h+aBLySTUxaR9n7YroXqkYUH8UmCv9RmcyTs2cRTs=)
2: fA_uTKLLbWG518h0njj_cqP2p6E.roa (hash: 4mY7FOvfpwAUXlFXu+ZK1/hojb4S0OMizyAm+Nun5mU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:5f:75:aa:98:c6:42:a5:44:45:f4:eb:fb:dd:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Validity
Not Before: Mar 29 06:00:56 2026 GMT
Not After : Mar 30 06:00:56 2026 GMT
Subject: CN=3135c1e9c386133be7660c967f0ae366752f367f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:99:2d:78:f2:9c:39:71:ad:b6:d1:da:53:11:
62:f8:2c:c6:3e:b0:72:1b:13:8c:ad:ca:0d:c7:13:
aa:b5:fc:84:68:dd:f7:de:4d:ec:5f:f5:73:d2:7c:
9b:2a:20:34:5a:45:33:3d:de:65:0a:5b:2a:40:5e:
4e:4c:08:a9:4b:95:75:03:93:06:4e:2f:1e:52:db:
0c:fd:75:64:6f:c9:48:89:0e:00:03:cc:2a:02:2a:
a3:f0:67:bd:58:1b:50:d4:34:27:a0:6c:38:f0:25:
f4:8d:c8:d8:cb:1b:2f:32:8f:04:f1:6b:1d:b9:a7:
69:93:06:fc:ac:55:4b:70:95:60:7a:c6:52:8c:39:
e8:d1:e0:cd:ef:2c:c3:9a:9a:5e:40:a5:68:97:f8:
5f:17:28:b9:c0:1f:cc:b6:54:92:e0:6c:93:cf:0f:
1a:33:f2:8b:86:52:e9:3e:fa:27:83:96:3c:0a:94:
b5:2c:f3:3c:40:96:62:bd:8a:cd:ae:21:d5:95:1e:
07:77:6f:43:b0:07:e3:33:98:d2:fc:15:94:1d:15:
3d:ed:f3:a3:3d:29:d8:d0:6c:e1:c6:79:5e:08:58:
4d:af:13:92:49:e2:c0:a5:24:a3:5b:24:15:be:0c:
59:6d:a3:30:a4:b6:ea:31:07:43:d8:30:4f:65:42:
1e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:35:C1:E9:C3:86:13:3B:E7:66:0C:96:7F:0A:E3:66:75:2F:36:7F
X509v3 Authority Key Identifier:
keyid:1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:20:17:93:6d:5d:6d:91:d0:52:55:b6:cd:a9:4b:3e:59:67:
f0:d8:04:89:9d:95:ba:ba:8d:b8:62:5e:aa:91:b4:23:2a:83:
ac:63:1f:4a:58:8d:e5:8b:b2:7a:9c:bc:2f:bf:c0:87:4a:7b:
b5:e1:cd:7e:d7:2c:e1:92:c3:d9:06:da:ef:f7:18:69:3c:fa:
3a:62:ff:9f:4d:e3:a3:b8:60:a7:56:f6:1d:52:af:4d:1d:aa:
35:08:71:dd:37:51:e5:b6:5f:6f:d1:bc:b5:70:3c:c5:72:12:
b0:bb:90:4c:76:20:e1:41:34:3b:f6:fc:80:20:78:c5:65:4e:
c8:d3:c5:9c:e5:4b:28:55:b6:93:20:a5:59:16:f8:79:f4:98:
c6:ee:1b:e0:12:41:aa:2e:ca:62:eb:28:08:2b:31:ff:05:e4:
7f:48:7d:d6:c6:ab:6e:be:0a:31:53:bc:59:3f:87:0d:08:e3:
18:a1:fb:d3:96:30:ab:db:2f:63:01:57:2a:95:eb:ce:af:00:
78:7e:fc:11:0d:6b:81:9c:7d:7a:98:40:fb:6c:4d:34:29:2d:
5f:f7:f1:d7:e2:a4:3d:2f:c9:38:ce:3f:d2:c0:be:8a:e0:33:
c2:69:9f:b7:19:4a:da:ef:11:5c:52:01:8e:75:ba:8e:24:f8:
94:78:26:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:48 2026 by rpki-client