Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
File: HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft (raw, json)
Hash identifier: 420v2v76O39s+z7QwRVWsiTOGx5q0+97AKTzI3wmjLk=
Subject key identifier: B4:D5:05:FB:72:9D:60:BC:BE:B0:C8:D0:4B:1F:45:4B:0B:F9:48:6D
Authority key identifier: 1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
Certificate issuer: /CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Certificate serial: 01A15176163095A1421C9A5D7036AC201E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
Manifest number: 1AAE
Signing time: Mon 19 Oct 2026 00:00:55 +0000
Manifest this update: Mon 19 Oct 2026 00:00:55 +0000
Manifest next update: Tue 20 Oct 2026 00:00:55 +0000
Files and hashes: 1: 4t1yiUQVN5Px9-wGHy62XxxqimU.roa (hash: FHoafxoTZhFU/Fxu+bGTDh9a2aT1nhPTACKs/kC0+Jg=)
2: 8jW3c1tdyMykRFAb8cKVIvXYm1o.roa (hash: Q0T2eH3RlaxZhFvfRSxmpGRJmTvjnKlI3xGp5fpQfVU=)
3: HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl (hash: XvV5s6WvXxo4NAN9lBcyNBiZyYh3WO9q0imgYOeFDVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:76:16:30:95:a1:42:1c:9a:5d:70:36:ac:20:1e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Validity
Not Before: Oct 19 00:00:55 2026 GMT
Not After : Oct 20 00:00:55 2026 GMT
Subject: CN=b4d505fb729d60bcbeb0c8d04b1f454b0bf9486d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:57:d8:80:cd:3d:d1:b3:8f:2c:de:e4:e9:99:
ae:26:df:d1:99:35:9f:7a:41:18:5c:df:fa:cc:df:
92:a0:36:99:c9:c0:64:f5:23:fd:3e:9d:f0:69:4d:
a6:ba:20:c5:37:ec:62:db:34:c1:29:60:bc:06:74:
f1:5e:0f:ce:16:56:59:25:c3:a7:3c:66:f5:49:bb:
3e:b7:20:50:c3:b8:e1:87:4e:5f:a7:ed:9b:82:49:
f1:d1:22:a0:c1:0d:61:3d:1d:b2:4e:98:e2:8b:74:
2b:62:70:0d:7f:b6:60:6a:3c:43:e5:0b:69:5b:2d:
5e:70:58:6f:83:c8:09:03:5e:e2:11:a5:70:a9:e7:
8b:95:ce:bc:62:9b:ef:86:20:ab:12:54:7f:25:3c:
02:9a:8a:83:54:e8:1e:35:1b:d2:bb:67:e8:f4:e4:
63:f9:f1:42:e3:63:96:8c:79:5d:08:5b:e8:0b:32:
aa:42:9f:2d:9b:5a:0f:f8:2a:e1:d5:ba:dc:4c:55:
4a:ee:ec:59:c1:88:2b:8d:ea:01:51:5b:65:b9:97:
58:fa:b5:f9:d0:81:39:4e:b5:72:a2:5c:0f:2f:64:
dc:5d:de:1a:32:49:1f:ca:a0:4a:c2:7d:e4:f9:35:
ff:52:34:f5:e2:71:d3:3d:eb:56:c2:a6:1d:cc:3d:
d5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D5:05:FB:72:9D:60:BC:BE:B0:C8:D0:4B:1F:45:4B:0B:F9:48:6D
X509v3 Authority Key Identifier:
keyid:1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:28:ff:60:c1:32:66:9c:e1:cd:a4:1e:0f:9a:a7:a6:94:2a:
fa:d0:a9:9f:d1:78:97:56:22:8e:12:62:a8:91:60:88:60:d4:
62:21:b2:34:30:ac:2f:54:a1:f1:9a:95:59:e7:e0:40:ca:59:
9d:80:aa:38:de:29:5b:a6:4e:d1:4b:fb:f8:37:4f:fc:04:8b:
73:63:36:35:f5:cf:98:25:c1:72:23:7e:a4:97:95:6c:55:ca:
60:42:91:7b:e8:c2:31:50:61:88:14:38:4f:57:5e:d5:e8:28:
ab:1a:85:5b:8c:2f:e7:23:c0:73:9f:92:4e:b4:84:f1:31:0f:
41:f5:ad:fd:50:6f:8c:56:a1:4c:76:32:55:22:b9:63:1e:99:
dc:63:d2:35:3e:38:eb:17:4e:fc:52:82:23:d2:fa:10:10:82:
3c:48:a5:ab:36:97:27:1c:d7:64:33:26:fe:75:14:8a:96:52:
41:2b:74:56:0b:b9:85:44:34:8b:6e:8a:cc:70:97:9d:74:3d:
ac:08:8b:8a:54:fe:51:58:db:4f:5c:c1:7c:b7:61:07:17:f0:
36:08:05:52:13:58:46:c3:a4:8f:00:3f:a9:ed:76:73:fa:f7:
c3:97:f0:8e:eb:c8:64:14:0a:30:54:e3:e5:d6:ce:06:71:1c:
a2:0f:a0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 07:30:59 2026 by rpki-client