Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
File: HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft (raw, json)
Hash identifier: Fw4WJlo3PkEZjAyTIAozK82pflaoFq+wVz2Sj4aYk18=
Subject key identifier: 09:6E:90:EA:75:50:CD:08:67:9A:54:56:55:E1:83:4A:9F:10:C6:75
Authority key identifier: 1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
Certificate issuer: /CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Certificate serial: 01A0054C8469BB5644B8C15E2B323E2E2D68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
Manifest number: 1A02
Signing time: Sat 15 Aug 2026 12:01:35 +0000
Manifest this update: Sat 15 Aug 2026 12:01:35 +0000
Manifest next update: Sun 16 Aug 2026 12:01:35 +0000
Files and hashes: 1: 4t1yiUQVN5Px9-wGHy62XxxqimU.roa (hash: FHoafxoTZhFU/Fxu+bGTDh9a2aT1nhPTACKs/kC0+Jg=)
2: 8jW3c1tdyMykRFAb8cKVIvXYm1o.roa (hash: Q0T2eH3RlaxZhFvfRSxmpGRJmTvjnKlI3xGp5fpQfVU=)
3: HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl (hash: r/STXIT3cRnWWz3HhQpjt4HZk2DROkPdpNKSPhWojwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:05:4c:84:69:bb:56:44:b8:c1:5e:2b:32:3e:2e:2d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Validity
Not Before: Aug 15 12:01:35 2026 GMT
Not After : Aug 16 12:01:35 2026 GMT
Subject: CN=096e90ea7550cd08679a545655e1834a9f10c675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6e:cb:71:5e:bb:1c:ec:20:22:de:b0:e5:ec:
2a:88:83:cf:a9:75:73:3b:53:45:f5:87:e0:cd:b5:
20:52:9c:ba:f4:ad:cd:2c:9b:05:c4:87:a5:4b:cf:
c4:eb:e9:8d:b6:90:da:9a:a5:0c:7b:dd:b4:05:13:
fb:2a:c8:26:0a:4f:b6:33:77:49:bb:d1:3f:15:d9:
47:f5:84:41:69:f8:f4:57:40:2b:5d:9f:6c:17:fa:
d3:33:59:61:6e:26:a3:63:ed:b0:17:00:eb:37:2a:
68:83:3f:d3:da:8c:37:8c:0f:f3:b9:f1:b1:c3:b3:
2f:59:db:3b:1a:48:62:55:a2:6e:0e:55:b9:5a:40:
f3:6d:bc:78:b4:bb:24:9f:59:ce:b5:07:bd:32:9b:
ca:28:8a:7f:58:b4:a4:ff:f7:5a:3e:1f:92:62:de:
48:41:b6:53:f1:7e:92:18:78:fe:1d:dc:5a:c9:6b:
13:d0:9f:2f:c7:f6:1a:6b:17:cd:e6:fa:9e:73:6d:
4a:a4:a7:49:11:23:73:c6:43:36:3e:1c:0f:00:35:
95:40:cc:b7:c5:0b:b1:cb:ea:fd:30:e1:be:f6:f4:
3d:c4:95:05:23:14:c2:f4:84:17:c0:82:d5:ee:2f:
87:58:32:37:ca:2f:21:d9:e7:a9:5e:7a:43:07:8d:
10:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6E:90:EA:75:50:CD:08:67:9A:54:56:55:E1:83:4A:9F:10:C6:75
X509v3 Authority Key Identifier:
keyid:1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:35:44:ad:08:80:f4:21:ce:85:54:0f:de:d1:2f:fe:2c:55:
f8:cd:cc:a3:6e:34:02:e1:9f:05:f0:3d:50:2c:3b:be:3c:e2:
f0:eb:0b:d3:d4:02:c8:03:76:76:71:5b:3d:cc:01:0d:8a:13:
eb:ec:56:b4:75:84:da:82:09:ec:80:d7:bb:75:72:bc:7e:ff:
9d:67:f7:15:11:59:db:7b:d4:52:9b:54:20:0b:83:2d:1f:1b:
c8:59:10:fc:77:61:78:cf:c4:2a:cc:e8:e9:30:ac:52:0a:19:
e5:c6:4c:28:a4:0b:a4:77:e5:94:9a:f3:ce:a1:a8:cc:78:e6:
2d:39:83:f2:3b:89:a9:67:e1:c5:ea:c2:5e:63:a2:a6:9b:f1:
ca:84:1b:5e:23:42:69:83:e5:fe:fd:0a:81:7f:83:64:00:3f:
65:54:09:7d:1a:52:23:09:de:0a:e5:8d:d1:b3:1c:2e:c9:62:
ea:5a:ca:df:28:8e:11:be:58:f7:c6:bf:c2:b1:0f:26:9b:36:
3c:77:77:74:2d:12:42:7c:15:37:99:29:af:11:b5:98:4f:cc:
f3:73:68:3a:a8:d0:ee:13:dc:b3:6a:1a:2c:ba:02:63:74:4b:
af:79:8b:ac:f9:f0:36:a1:e3:4b:cb:00:99:3b:0a:59:82:39:
cc:f1:54:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 13:44:23 2026 by rpki-client