Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
File: HRUAB3Kzw_orvXcn09OJORoUYz4.mft (raw, json)
Hash identifier: gHgsy7Tninm2VIrRt+lCJowXXMHAq051WqgqIWQ81PQ=
Subject key identifier: 19:9A:03:A6:13:CF:CE:66:0D:88:DE:41:1D:B4:58:E1:B8:6A:52:85
Authority key identifier: 1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
Certificate issuer: /CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Certificate serial: 01A002B924970028AE050F4E4A738B8DD52E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
Manifest number: 0821
Signing time: Sat 15 Aug 2026 00:01:22 +0000
Manifest this update: Sat 15 Aug 2026 00:01:22 +0000
Manifest next update: Sun 16 Aug 2026 00:01:22 +0000
Files and hashes: 1: HRUAB3Kzw_orvXcn09OJORoUYz4.crl (hash: yAK2xD0dZCFATxVHcwHtmzjArvDS8kSFXgv13icjIF8=)
2: h6CMS5oBPwqxsthnPIFhjc0V9K8.roa (hash: SyY/BmEPaPkpZh5+caF1REe1XeX5Sv+dw9c9C5Elg48=)
3: yiX6lLdpB5XmkAdPuvtnINRIVlY.roa (hash: mWoNnZ8RcTqfWnj2UmwqsuLMfxRCZHX81aZJ54qm8Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b9:24:97:00:28:ae:05:0f:4e:4a:73:8b:8d:d5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Validity
Not Before: Aug 15 00:01:22 2026 GMT
Not After : Aug 16 00:01:22 2026 GMT
Subject: CN=199a03a613cfce660d88de411db458e1b86a5285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2e:31:2f:ce:7a:da:a2:36:47:bf:06:d4:ff:
b0:e0:27:30:ac:ef:4b:27:54:fc:00:de:eb:41:10:
da:a7:21:7a:87:c5:7c:d4:81:e3:9b:99:4b:74:c9:
2d:90:e5:dd:56:be:db:b2:b6:92:fd:62:7e:f1:87:
a8:e8:cf:69:bb:f5:bb:25:2b:13:3d:93:87:f9:8b:
7a:13:59:7c:8b:d8:12:a0:8c:0c:44:d4:28:49:fd:
f8:23:5d:b1:8a:38:be:d2:a5:43:50:71:68:85:80:
b7:e9:b9:ce:2e:0e:6e:e2:29:7f:cc:25:71:24:0d:
bd:43:6f:2f:c5:8d:34:f1:5a:bf:23:61:ad:26:04:
2d:21:b6:c0:3a:bf:6c:a1:d4:e4:6e:2f:b0:90:fb:
39:36:3f:04:5d:e8:d0:fb:b8:39:f8:6e:e0:c6:4c:
f6:fc:41:aa:d5:b4:9f:51:14:85:f1:af:5d:1f:62:
23:14:c8:ab:a6:2e:19:75:d7:02:3f:6e:c2:0a:b9:
21:cc:f5:ae:37:00:df:f2:06:f7:81:4e:e7:3e:8a:
2f:e9:8c:b0:b8:4d:84:3f:71:30:93:a3:7e:cd:70:
e6:bd:6f:cb:23:fb:de:39:78:40:6c:5c:53:97:88:
e9:28:3c:b2:db:fe:50:20:c2:0e:ae:54:48:f2:ca:
4c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9A:03:A6:13:CF:CE:66:0D:88:DE:41:1D:B4:58:E1:B8:6A:52:85
X509v3 Authority Key Identifier:
keyid:1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ec:bd:ee:4e:e3:d1:ba:14:6b:b2:2a:0c:6f:f1:2e:24:8c:
c4:2a:09:c4:62:f9:8d:da:3f:4e:8f:ea:52:40:f2:c0:6a:f8:
f7:e2:00:55:61:3a:b4:aa:ca:8b:f6:86:3f:a8:af:c5:15:0d:
68:69:39:55:ca:a4:18:4a:eb:03:45:40:70:b6:15:6d:b2:01:
f7:d3:99:5e:d1:15:76:f6:03:bc:80:50:be:b2:69:aa:69:74:
87:8c:bd:8f:19:37:19:f9:2c:a7:91:cb:d5:ed:f6:85:1e:e1:
ac:ac:5e:13:12:45:20:8f:4d:ee:c4:47:67:6d:d8:b7:47:9b:
65:81:46:e2:ee:09:dd:7d:70:de:2f:11:dd:02:6a:25:6d:32:
14:b5:a3:8e:0d:c8:e7:93:b4:c5:37:f0:ff:b2:37:5d:1b:a3:
c4:d0:5b:65:42:17:cc:c6:2c:fb:12:df:5e:a6:8d:81:91:9d:
55:7c:ad:2c:03:6a:e8:ab:03:69:16:38:c7:1b:57:9b:53:67:
7f:b0:12:16:c8:07:fa:2c:11:63:1a:1f:f9:3c:b9:c2:81:e7:
62:e1:79:77:9b:61:eb:bb:b8:70:1a:c8:4f:a8:55:f7:4b:df:
89:ee:8a:18:d4:69:d3:b2:c1:de:94:c9:f8:c3:0b:b6:81:9f:
7c:45:b3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:15:16 2026 by rpki-client