
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
File: Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft (raw, json)
Hash identifier: aNyUY+177JquGPnOy9sWPnqkZ9XWloCkjQ2Ysb28ZkE=
Subject key identifier: 22:9B:8A:C6:01:4F:C4:D6:9D:E9:D7:A0:F3:EF:95:5C:B1:E9:1E:C4
Authority key identifier: 1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
Certificate issuer: /CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Certificate serial: 019F841EAD546AE0351BC7C1257859F479A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
Manifest number: 19C3
Signing time: Tue 21 Jul 2026 10:00:30 +0000
Manifest this update: Tue 21 Jul 2026 10:00:30 +0000
Manifest next update: Wed 22 Jul 2026 10:00:30 +0000
Files and hashes: 1: Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl (hash: DwdTC+FACpmVPx1Pmc2lLWaG3dI1+Ks5yAMXeKxooVQ=)
2: LpF7hzS-_Bqq_u0GKSkOq_jaXmU.roa (hash: pIhXh24IzpIa3o8LFBdn/va5JW8n7fuKIIlkGDvBzts=)
3: TlSVX0-vba4I-NSKL89Ngm4tw7c.roa (hash: o/YwPV35MkVtWefJ+k8c31/h+x9nhWf+AtSwL8HvxrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:1e:ad:54:6a:e0:35:1b:c7:c1:25:78:59:f4:79:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Validity
Not Before: Jul 21 10:00:30 2026 GMT
Not After : Jul 22 10:00:30 2026 GMT
Subject: CN=229b8ac6014fc4d69de9d7a0f3ef955cb1e91ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6f:13:58:7d:25:42:e5:81:32:47:4a:ce:7c:
64:4b:38:50:49:4a:56:d1:47:cb:5e:14:44:62:e1:
6f:ec:0d:86:53:e2:95:d5:59:3e:38:4c:d5:1e:fd:
1e:ec:d5:02:18:e9:eb:f1:8b:4b:61:29:ce:d7:38:
8c:6d:11:cf:f9:d9:dd:d7:da:54:69:da:2c:01:b6:
99:e3:d0:8d:26:67:b9:54:3a:e6:ad:a0:d4:b5:98:
25:9e:dd:48:ff:99:ba:09:05:6b:b2:98:0f:ab:9c:
b6:7d:a8:98:dc:0f:45:fc:2e:bc:da:7c:88:83:34:
d9:ec:1d:14:0e:0a:62:ea:6f:73:de:d6:c2:0f:9a:
7d:d3:2c:4e:e5:46:a9:7b:6a:a8:a4:46:0c:52:e6:
26:fc:e2:90:e0:50:9e:59:c6:54:46:48:0f:c8:28:
54:04:a6:59:09:43:95:88:6a:f3:a4:dd:22:cd:18:
75:3b:d7:0e:ff:51:87:0f:57:05:e5:cd:e3:eb:14:
dc:43:40:23:21:08:dc:5d:dd:66:7e:bc:f3:86:73:
06:6a:de:b1:3b:c6:0f:7a:e2:a6:e5:14:42:0f:1d:
98:fa:e9:ca:ec:9a:40:78:98:18:59:f8:93:57:37:
4c:09:22:43:f0:04:9d:48:18:29:41:a3:d1:96:3f:
fb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9B:8A:C6:01:4F:C4:D6:9D:E9:D7:A0:F3:EF:95:5C:B1:E9:1E:C4
X509v3 Authority Key Identifier:
keyid:1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:89:16:97:7f:2a:0c:ac:a1:98:c6:aa:4d:6b:14:a8:2d:56:
ee:b7:b1:9f:4b:d3:1e:68:8d:06:90:58:2f:f0:b6:43:48:82:
49:0d:62:1b:c2:22:d9:04:bb:be:b6:99:e5:fa:65:ff:9d:b5:
57:34:66:54:52:34:b1:77:16:7a:b4:50:76:5c:02:d9:8c:3b:
29:85:ee:50:13:70:e9:ce:78:26:21:6a:d2:84:45:06:46:97:
65:5f:70:f3:02:f1:5c:b3:05:6b:8b:ec:51:36:7c:ea:0d:03:
05:66:10:5e:87:da:48:04:38:60:32:16:f7:4a:ee:ae:d7:b5:
97:ae:2e:b7:69:3a:5e:ab:15:4c:97:a1:a1:81:dc:c0:0a:42:
a0:e7:c9:60:d6:0c:d5:0e:f5:7a:5d:7c:87:a4:af:a9:75:f5:
4a:a1:cd:71:84:91:b4:2d:48:ef:f7:6d:fc:28:55:50:a7:81:
3c:73:14:a6:aa:a4:d8:03:f6:f6:99:07:04:08:88:f6:57:64:
05:2e:ad:8a:8a:c4:4c:1f:4d:6d:c7:df:8a:62:58:8f:52:02:
c1:89:72:47:5e:47:34:96:9c:31:45:2e:44:40:a2:52:00:9a:
47:bc:12:2d:e8:0e:3a:80:57:19:73:be:d9:41:1d:6a:18:07:
f3:67:28:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:04:35 2026 by rpki-client