Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
File: HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft (raw, json)
Hash identifier: eZDJzfVAP/IRsXcU9Hv/Q3D3HsjRD6yHsqjxuU3bRvg=
Subject key identifier: AB:E6:2A:19:9A:AA:52:C3:3B:6C:F7:A3:D8:9C:1D:71:C4:AD:D4:C3
Authority key identifier: 1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
Certificate issuer: /CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Certificate serial: 019F19B12A841968C4A156CABAD8560FC1DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 18:01:08 +0000
Manifest this update: Tue 30 Jun 2026 18:01:08 +0000
Manifest next update: Wed 01 Jul 2026 18:01:08 +0000
Files and hashes: 1: 4t1yiUQVN5Px9-wGHy62XxxqimU.roa (hash: FHoafxoTZhFU/Fxu+bGTDh9a2aT1nhPTACKs/kC0+Jg=)
2: 8jW3c1tdyMykRFAb8cKVIvXYm1o.roa (hash: Q0T2eH3RlaxZhFvfRSxmpGRJmTvjnKlI3xGp5fpQfVU=)
3: HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl (hash: LMBn9KERbCoapycBZ6sDK7oG4ao8zFwN01p4Sp2UWHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 18:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:b1:2a:84:19:68:c4:a1:56:ca:ba:d8:56:0f:c1:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Validity
Not Before: Jun 30 18:01:08 2026 GMT
Not After : Jul 1 18:01:08 2026 GMT
Subject: CN=abe62a199aaa52c33b6cf7a3d89c1d71c4add4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a3:b6:2c:ab:76:54:55:24:2f:01:22:a2:02:
32:c2:e6:b8:2b:61:ee:aa:35:78:ce:73:2d:73:b6:
47:b2:03:b3:fc:fd:4f:17:d8:d4:eb:ac:63:59:31:
5d:24:fe:30:6d:ad:e8:76:2e:a4:86:06:97:7c:80:
b3:8f:bf:25:13:9a:0f:0e:0e:5f:9e:c1:0f:bd:09:
64:bd:ba:3e:91:67:6a:79:4a:f8:9d:4b:2a:7e:6a:
64:e9:79:1d:15:c2:35:e5:e8:f8:cf:98:f7:53:1a:
66:81:a8:44:94:9b:b3:50:8d:29:99:f1:3c:d5:8c:
df:6d:72:2e:8e:b5:e7:d5:03:16:65:e5:f3:4b:f7:
ce:e5:b2:56:20:35:45:af:ef:19:51:7e:cb:0b:d3:
cc:3f:c6:28:0e:8f:da:ab:5b:fe:c1:29:16:78:a9:
2b:a5:2a:70:52:44:1b:78:ee:8a:aa:0e:ee:1f:e8:
f7:ed:93:55:cb:23:37:c3:64:40:ba:0f:38:d7:b7:
c7:95:4d:bd:4e:82:9f:62:36:ba:5b:01:c4:42:87:
bd:f4:94:b5:a3:fb:97:e3:0d:39:b0:d5:66:62:83:
ef:1e:57:56:fc:e0:f3:18:0c:3c:62:9f:3d:f4:92:
ac:76:e5:a2:44:ff:ef:a2:ec:0e:07:84:34:fd:8f:
9f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E6:2A:19:9A:AA:52:C3:3B:6C:F7:A3:D8:9C:1D:71:C4:AD:D4:C3
X509v3 Authority Key Identifier:
keyid:1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e8:74:0e:c4:ea:b5:85:33:21:92:f3:a2:86:53:2f:12:98:
81:dd:a8:31:94:e3:8e:8f:0e:0c:6e:ba:7f:e8:79:ef:62:4b:
23:8d:04:2f:87:ce:ce:be:26:dc:7a:1d:90:65:d4:ad:00:c4:
69:94:63:fe:b5:79:53:a1:2f:24:5d:64:a9:5c:3e:9e:05:97:
86:08:d7:b3:95:9c:1a:18:77:98:bf:63:f2:94:05:e2:e6:13:
56:0d:0f:e0:4a:da:42:04:e8:25:dc:dc:c0:4c:6f:1a:c3:fa:
92:62:58:79:ce:70:7a:14:30:98:9f:e3:8a:64:02:5f:2c:b6:
9f:22:a2:05:fe:87:6c:c4:f3:f2:7b:f9:1c:8e:ad:24:b3:9e:
1d:0b:a2:df:81:00:b0:96:e7:46:26:f4:da:4b:07:b0:54:4c:
63:4d:82:87:49:47:40:05:a4:30:57:ff:d1:82:7a:8a:e9:63:
95:5f:c6:b3:59:99:2b:8d:27:4f:75:77:56:b4:fe:29:8d:bb:
1f:c1:a6:7c:60:1b:87:f7:08:45:f4:22:a6:08:00:aa:9d:d3:
40:e5:a7:d6:44:53:64:af:a4:db:a8:10:15:ec:9f:9b:75:f8:
ff:47:17:ae:a1:ae:0d:b7:01:f3:d4:d2:31:c1:4e:de:1d:c9:
ce:d1:b3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 03:31:55 2026 by rpki-client