Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
File: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft (raw, json)
Hash identifier: t4EKmjSip+VAywFX7qB17CPe1PhlQtXNohordjub7l0=
Subject key identifier: B5:39:34:60:4A:62:19:41:F8:DD:06:8A:36:71:C3:3F:7E:C7:69:5A
Authority key identifier: 1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
Certificate issuer: /CN=1daf46a40c246d6540d992c321b1cc3623d65995
Certificate serial: 019FA3A9F9962317238A699E751CD0E5B748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
Manifest number: 19DF
Signing time: Mon 27 Jul 2026 13:00:53 +0000
Manifest this update: Mon 27 Jul 2026 13:00:53 +0000
Manifest next update: Tue 28 Jul 2026 13:00:53 +0000
Files and hashes: 1: 0z1v-iMgN-IiCcFz7KgyRD_9W5o.roa (hash: BFX8flEMTYsLMbzmmvgL8prvL0RkcLfro9e2dMsJhWI=)
2: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl (hash: 9MrzZ4YTPX/FtzhUulvJtI/OIWZ/QMj0dWQ8r2uwhlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:a9:f9:96:23:17:23:8a:69:9e:75:1c:d0:e5:b7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1daf46a40c246d6540d992c321b1cc3623d65995
Validity
Not Before: Jul 27 13:00:53 2026 GMT
Not After : Jul 28 13:00:53 2026 GMT
Subject: CN=b53934604a621941f8dd068a3671c33f7ec7695a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0c:f6:c0:a4:87:9d:41:f7:48:d9:37:14:94:
87:39:10:92:80:6b:fd:6f:8b:16:25:36:9b:3d:50:
04:95:f8:9a:6d:44:6d:fa:32:69:f4:ad:b2:f0:29:
6d:e4:8f:76:43:9e:bb:95:48:5b:f4:0b:1a:c5:f6:
04:bd:db:f9:63:e8:d6:0c:22:92:f3:1e:d8:fa:09:
36:b4:33:b7:c5:81:5b:28:af:ff:ac:2c:71:38:55:
21:d6:49:d3:c7:9c:8f:5d:ca:69:fc:90:8e:2e:b0:
66:97:aa:31:88:04:2b:a5:89:78:d9:91:4e:ad:25:
45:9e:73:64:a2:a3:f2:5d:5f:6e:5a:35:27:2e:15:
6d:49:11:10:b9:56:d9:08:c3:70:96:e8:2f:87:f5:
e1:c1:90:76:ee:f4:14:09:80:5b:9e:15:89:14:3b:
ab:b8:a8:d4:88:4e:73:2a:3f:4c:fc:30:a6:a1:bd:
44:02:b5:9c:02:f5:1b:05:44:d5:18:a9:17:28:26:
da:54:c6:b6:8b:cc:5b:c9:3c:bc:83:af:a4:ae:35:
43:48:7a:5a:6c:d1:76:f1:49:6a:c8:58:37:0c:8d:
f3:cf:ca:5f:7d:7d:19:12:c5:bf:0e:87:9c:b3:c4:
be:9f:47:e7:16:9f:5c:89:e0:c5:2a:a3:b2:99:cc:
f3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:39:34:60:4A:62:19:41:F8:DD:06:8A:36:71:C3:3F:7E:C7:69:5A
X509v3 Authority Key Identifier:
keyid:1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ce:39:6f:8e:c6:e1:18:e1:8b:62:d8:64:71:27:d1:35:e6:
a6:a0:1e:6b:10:c1:44:d9:ab:20:25:81:b1:4f:f9:e6:38:44:
54:37:a9:4c:d3:1e:64:59:d4:e0:f0:37:e0:fe:a6:fe:7f:a3:
05:1f:12:75:ea:78:f3:d3:d0:eb:43:c9:ab:ac:7d:71:79:3b:
78:2b:f4:43:fe:a2:26:c5:ce:9e:06:8e:d3:4f:0a:a0:9d:57:
93:0e:a6:d7:99:e3:3e:a0:4d:71:88:ff:d9:ef:51:36:8b:08:
ae:ce:4f:91:5d:6b:de:d4:de:57:60:8d:1d:e2:3c:6d:27:fb:
9b:b2:23:57:f4:7f:bf:c5:9e:91:fa:f8:a2:c6:d8:e3:d7:3a:
53:73:59:2a:e9:45:0e:bc:cb:42:08:57:f3:e8:49:5a:85:0a:
fe:46:d0:69:8f:02:f3:19:6e:dd:81:f2:e9:bc:51:b1:cb:e0:
bc:fe:16:70:d1:a6:08:f2:c6:a5:d3:7f:f5:52:68:8e:08:34:
87:1a:e5:71:a6:f0:29:9d:e7:06:0e:57:b8:8f:d1:e6:08:2b:
87:49:cd:3a:43:37:b5:0a:80:81:81:77:ad:d5:c4:83:f3:ce:
e7:67:88:39:52:1e:30:69:24:1b:f3:43:94:e5:32:c7:f3:a7:
fb:f7:a6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:46:59 2026 by rpki-client