Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
File: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft (raw, json)
Hash identifier: kMIOHV13hy3up0fidVTFmtzfNAkr+Tb/i4XQkdFTXqA=
Subject key identifier: DA:5E:3E:D7:45:EA:B8:92:48:BC:AF:18:7C:A3:DD:A0:10:64:E8:E0
Authority key identifier: 1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
Certificate issuer: /CN=1daf46a40c246d6540d992c321b1cc3623d65995
Certificate serial: 019EB9FCCDD4ED46D48B1EFA33BC636844E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
Manifest number: 1966
Signing time: Fri 12 Jun 2026 04:00:13 +0000
Manifest this update: Fri 12 Jun 2026 04:00:13 +0000
Manifest next update: Sat 13 Jun 2026 04:00:13 +0000
Files and hashes: 1: 0z1v-iMgN-IiCcFz7KgyRD_9W5o.roa (hash: BFX8flEMTYsLMbzmmvgL8prvL0RkcLfro9e2dMsJhWI=)
2: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl (hash: FbAfTkQFOIhtbQlRJ6jm8M8YZy5fhqAOozcfaIE5LGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 04:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:fc:cd:d4:ed:46:d4:8b:1e:fa:33:bc:63:68:44:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1daf46a40c246d6540d992c321b1cc3623d65995
Validity
Not Before: Jun 12 04:00:13 2026 GMT
Not After : Jun 13 04:00:13 2026 GMT
Subject: CN=da5e3ed745eab89248bcaf187ca3dda01064e8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b8:fe:5a:52:4e:bc:e9:55:eb:ec:31:c4:8a:
fe:b1:79:12:c9:da:d0:64:7b:d8:52:e3:c8:1d:84:
9a:a0:0a:34:df:26:40:13:3f:94:14:fa:c5:c6:4f:
af:b1:80:47:15:91:f6:35:e1:2e:55:18:f2:84:e1:
a6:b7:ed:10:86:86:26:4b:fe:cb:48:d5:2a:23:fd:
af:a7:b9:73:d0:7c:a8:88:67:35:75:9e:5b:31:2c:
05:b1:96:ae:a6:04:58:60:34:f8:8b:98:1d:5f:4d:
02:3f:e9:40:a1:18:ea:7e:14:dd:91:dd:c0:73:b2:
ed:dc:86:57:16:45:49:c4:b5:56:5d:4e:42:c6:61:
d4:82:a9:bf:da:22:b1:b6:65:2b:a0:34:e8:57:9d:
34:55:46:83:03:ff:0b:23:45:b6:d4:69:1b:55:bf:
70:e9:c3:8e:0e:b1:88:cb:f6:56:b8:8b:70:c9:ac:
c2:f3:a5:9f:02:39:e1:b6:f6:4b:ba:eb:91:f1:16:
11:79:c6:dd:9d:b7:7d:d0:2c:1d:45:6f:f5:e7:48:
37:f1:1c:5d:33:33:e1:df:51:d9:ab:e1:eb:82:11:
25:c0:79:fd:19:4a:3b:0b:dd:a9:fc:71:cd:d8:be:
ba:b4:28:e7:88:b6:40:f8:bf:d9:57:45:27:aa:d8:
25:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5E:3E:D7:45:EA:B8:92:48:BC:AF:18:7C:A3:DD:A0:10:64:E8:E0
X509v3 Authority Key Identifier:
keyid:1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ac:e9:0e:fa:35:5f:26:f6:24:6f:51:7f:bd:01:a7:69:bf:
2b:b4:6d:7a:cd:dd:b8:b1:12:3c:c1:d9:cc:49:0a:1f:a3:0e:
22:12:08:34:15:4c:6f:52:00:1a:7d:21:2f:b0:d3:b4:79:d8:
14:27:30:69:16:a9:aa:63:24:c7:be:dd:b0:af:46:e3:2f:ce:
6f:49:3f:b8:44:5a:f6:4f:2c:35:45:e2:d4:d1:60:02:15:1a:
f0:a6:c7:d7:36:da:79:47:03:92:35:5e:8c:33:31:30:cc:3a:
68:a1:34:60:a2:50:9e:eb:58:d8:4a:e3:e8:0f:91:18:de:24:
4c:de:95:b7:18:92:b2:9e:c1:35:8e:f4:30:95:b7:eb:92:9d:
de:cf:8e:b4:7e:a6:ef:0e:7f:08:a1:ad:1c:71:6e:a1:64:fc:
98:2b:31:3a:04:4a:2e:50:1d:04:e3:31:6d:c4:83:a7:74:36:
7f:f4:53:24:85:d7:81:d0:46:cf:ac:4c:f2:ff:9c:76:32:96:
eb:be:fe:21:d6:ae:c2:ac:9b:f9:d6:65:0b:47:b6:fa:4a:1a:
85:a1:22:16:80:82:72:3d:10:d1:c4:12:66:99:29:f4:4e:68:
ca:48:cc:47:70:07:d7:b8:38:df:e7:3e:b5:69:04:f2:e5:60:
9d:ff:3d:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65/M3U7UbUix76M7xjaEThMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYWY0NmE0MGMyNDZkNjU0MGQ5OTJjMzIxYjFjYzM2MjNk
NjU5OTUwHhcNMjYwNjEyMDQwMDEzWhcNMjYwNjEzMDQwMDEzWjAzMTEwLwYDVQQD
EyhkYTVlM2VkNzQ1ZWFiODkyNDhiY2FmMTg3Y2EzZGRhMDEwNjRlOGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bj+WlJOvOlV6+wxxIr+sXkSydrQ
ZHvYUuPIHYSaoAo03yZAEz+UFPrFxk+vsYBHFZH2NeEuVRjyhOGmt+0QhoYmS/7L
SNUqI/2vp7lz0HyoiGc1dZ5bMSwFsZaupgRYYDT4i5gdX00CP+lAoRjqfhTdkd3A
c7Lt3IZXFkVJxLVWXU5CxmHUgqm/2iKxtmUroDToV500VUaDA/8LI0W21GkbVb9w
6cOODrGIy/ZWuItwyazC86WfAjnhtvZLuuuR8RYRecbdnbd90CwdRW/150g38Rxd
MzPh31HZq+HrghElwHn9GUo7C92p/HHN2L66tCjniLZA+L/ZV0UnqtglgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNpePtdF6riSSLyvGHyj3aAQZOjgMB8GA1UdIwQY
MBaAFB2vRqQMJG1lQNmSwyGxzDYj1lmVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGE5R3BBd2tiV1ZBMlpMREliSE1OaVBXV1pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80NGMwZWYtNWRhNi00ZmYyLWI1ZWYt
NzlmMDQ4YmQyYTdhLzEvSGE5R3BBd2tiV1ZBMlpMREliSE1OaVBXV1pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS80NGMwZWYtNWRhNi00ZmYyLWI1ZWYtNzlmMDQ4YmQyYTdh
LzEvSGE5R3BBd2tiV1ZBMlpMREliSE1OaVBXV1pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuKzpDvo1
Xyb2JG9Rf70Bp2m/K7Rtes3duLESPMHZzEkKH6MOIhIINBVMb1IAGn0hL7DTtHnY
FCcwaRapqmMkx77dsK9G4y/Ob0k/uERa9k8sNUXi1NFgAhUa8KbH1zbaeUcDkjVe
jDMxMMw6aKE0YKJQnutY2Erj6A+RGN4kTN6VtxiSsp7BNY70MJW365Kd3s+OtH6m
7w5/CKGtHHFuoWT8mCsxOgRKLlAdBOMxbcSDp3Q2f/RTJIXXgdBGz6xM8v+cdjKW
677+Idauwqyb+dZlC0e2+koahaEiFoCCcj0Q0cQSZpkp9E5oykjMR3AH17g43+c+
tWkE8uVgnf891g==
-----END CERTIFICATE-----
Generated at Fri Jun 12 13:21:53 2026 by rpki-client