Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
File: HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft (raw, json)
Hash identifier: Q2W2U8IU8S69CzuDaHbhiom8F5XuyudbxEiKqA1XqCw=
Subject key identifier: 5E:DE:5C:8C:21:F0:E8:BF:F0:E0:EF:80:80:3D:30:21:89:89:90:38
Authority key identifier: 1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
Certificate issuer: /CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Certificate serial: 019E31F3B7DDBFA1D08C03521243C7876BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
Manifest number: 1910
Signing time: Sat 16 May 2026 18:01:56 +0000
Manifest this update: Sat 16 May 2026 18:01:56 +0000
Manifest next update: Sun 17 May 2026 18:01:56 +0000
Files and hashes: 1: 4t1yiUQVN5Px9-wGHy62XxxqimU.roa (hash: FHoafxoTZhFU/Fxu+bGTDh9a2aT1nhPTACKs/kC0+Jg=)
2: 8jW3c1tdyMykRFAb8cKVIvXYm1o.roa (hash: Q0T2eH3RlaxZhFvfRSxmpGRJmTvjnKlI3xGp5fpQfVU=)
3: HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl (hash: D1lkVwFfcVAm97OAD5P+3gR1Qq/b2audXvV7Ek7TMHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f3:b7:dd:bf:a1:d0:8c:03:52:12:43:c7:87:6b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Validity
Not Before: May 16 18:01:56 2026 GMT
Not After : May 17 18:01:56 2026 GMT
Subject: CN=5ede5c8c21f0e8bff0e0ef80803d302189899038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6c:0c:b7:f7:d0:a4:2a:d9:67:89:51:e8:48:
86:52:70:b6:0f:32:09:b2:1d:e9:95:af:16:fa:d8:
51:34:37:58:9c:e6:a1:04:7f:7a:82:0b:3f:f9:8f:
22:c6:de:88:c6:da:05:98:63:c2:4d:30:b9:b7:53:
af:5d:29:d7:20:9e:0e:72:34:73:74:3f:f0:ed:45:
d9:b4:60:79:d6:42:ab:b3:23:19:ee:3f:05:58:7d:
e0:09:33:48:30:7c:2e:86:3c:7e:43:06:2a:29:13:
99:28:ca:fe:3e:70:31:55:e4:86:1f:11:a3:cd:6b:
e3:39:7b:25:91:19:c8:b9:88:7c:6d:14:a8:ed:de:
09:a0:d0:cc:de:72:ca:10:ed:d3:86:d8:a3:5c:e8:
68:96:3c:e8:90:17:66:64:32:cf:15:db:0e:2a:47:
2c:57:ec:8e:d7:36:7b:ac:57:8d:72:b5:69:5b:48:
9c:e5:00:8c:a3:4e:e9:48:da:ab:80:4f:60:7e:61:
86:38:2c:fd:9a:08:a4:97:60:07:e2:06:9f:84:99:
5b:54:5d:f9:ec:cd:e7:12:7a:c1:cf:25:ad:e5:f6:
42:16:0d:4f:16:c6:97:a9:06:44:9e:65:fc:fb:6c:
b5:61:c9:ad:d2:b0:b2:f5:79:5d:ef:f8:cc:8e:19:
80:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DE:5C:8C:21:F0:E8:BF:F0:E0:EF:80:80:3D:30:21:89:89:90:38
X509v3 Authority Key Identifier:
keyid:1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:81:24:36:56:79:0c:88:41:7f:49:24:d4:b1:16:4c:40:b6:
c3:52:7b:c9:6e:a0:93:aa:0f:2a:17:a0:dd:cb:e7:d6:55:e6:
c7:4a:69:81:6c:5c:5c:78:9f:ec:99:eb:64:7c:55:a5:09:df:
5b:34:ee:75:b9:35:fb:94:2d:a1:70:f0:d2:43:7a:4b:27:dd:
c8:ca:62:45:c0:ca:f5:71:88:2b:19:47:4c:96:df:ef:93:27:
54:2c:7a:f9:78:45:6c:9a:62:dc:03:db:4b:1c:12:34:80:86:
e0:1a:a4:bc:85:70:1d:3f:2a:ca:9f:b8:f1:32:65:b5:47:c6:
bf:8b:23:55:a8:e7:49:e3:9e:0d:8e:1d:5f:70:1c:f3:6f:e2:
c3:3a:f0:c5:52:9c:b8:63:ca:05:61:2c:40:0d:17:f4:df:7b:
af:86:fd:3b:fa:54:39:e8:0c:38:04:5a:6a:8b:82:fc:ae:1b:
40:7a:15:87:5d:3f:5d:43:5a:62:d7:bf:62:43:3a:bf:9d:61:
61:70:3d:b9:f7:9d:d9:96:58:a2:03:17:52:da:e6:b3:b7:50:
59:24:6f:88:da:4d:a6:25:6e:fa:26:db:fd:85:94:9f:02:23:
4b:f6:c2:7c:c5:07:fb:a6:3b:04:31:8c:9b:9a:be:0d:15:ee:
c6:30:a3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 00:27:40 2026 by rpki-client