Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
File: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft (raw, json)
Hash identifier: +eeRyO0CHWMUd5B9t8VlKJp5VvrCSn1bKbX4Rk3Tf9Q=
Subject key identifier: B5:10:2D:3C:F8:5C:74:36:37:AF:1D:86:BE:86:B8:F3:7E:4D:19:C3
Authority key identifier: 1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
Certificate issuer: /CN=1daf46a40c246d6540d992c321b1cc3623d65995
Certificate serial: 01A199C66C6BB2970DDEF30A03867F678672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
Manifest number: 1AE3
Signing time: Mon 02 Nov 2026 01:01:20 +0000
Manifest this update: Mon 02 Nov 2026 01:01:20 +0000
Manifest next update: Tue 03 Nov 2026 01:01:20 +0000
Files and hashes: 1: 0z1v-iMgN-IiCcFz7KgyRD_9W5o.roa (hash: BFX8flEMTYsLMbzmmvgL8prvL0RkcLfro9e2dMsJhWI=)
2: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl (hash: DwUDW6v5W6r2AV0LViCJ6EojcBxA/oFKSLYZBLKbOKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 21:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:99:c6:6c:6b:b2:97:0d:de:f3:0a:03:86:7f:67:86:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1daf46a40c246d6540d992c321b1cc3623d65995
Validity
Not Before: Nov 2 01:01:20 2026 GMT
Not After : Nov 3 01:01:20 2026 GMT
Subject: CN=b5102d3cf85c743637af1d86be86b8f37e4d19c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ab:3c:b6:ea:90:88:a2:a7:ff:54:d4:64:86:
bf:67:37:b0:ca:36:4b:1f:bd:47:a6:d6:19:a6:52:
47:cc:6f:a5:11:cc:63:f0:c9:b9:f6:c0:78:f0:34:
02:e3:7d:6f:72:63:4e:a0:f5:fb:df:03:7e:08:17:
a7:e8:05:1d:46:b7:4a:46:05:49:3b:1e:76:cb:b6:
ab:63:c5:69:e5:ff:8b:a6:6e:d2:2d:5d:bd:f7:90:
42:1e:b2:95:77:6e:af:28:7f:22:f2:41:0c:80:17:
ed:88:66:68:28:2a:5c:87:99:9b:b0:04:6f:92:fe:
d8:d2:8d:72:74:f4:1e:98:13:7f:4f:81:d6:56:66:
58:ec:99:5a:3e:e8:93:69:a4:f5:09:e0:b7:36:37:
ca:26:1d:7f:55:d9:ac:48:0a:c5:b2:ba:b4:e5:1f:
42:f7:b1:02:f6:de:12:23:17:d9:a1:fe:1c:0e:a7:
74:1a:bb:ae:e3:f6:85:51:26:b8:f1:fb:f9:8e:e5:
45:c4:d2:ea:34:16:4e:8b:1a:3e:88:db:ff:fc:e2:
9c:a1:b0:57:b7:fe:c2:6c:2e:fa:bc:27:09:44:95:
31:8a:98:da:e0:5e:37:cd:44:a8:f9:cb:40:ff:89:
4c:6c:d8:61:39:15:2e:03:31:b4:48:db:85:6c:ea:
a5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:10:2D:3C:F8:5C:74:36:37:AF:1D:86:BE:86:B8:F3:7E:4D:19:C3
X509v3 Authority Key Identifier:
keyid:1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:e9:37:89:2f:77:4c:dc:c9:48:2f:0c:6c:f9:5c:69:f3:93:
4f:ab:1c:2a:af:33:82:69:aa:cc:d7:d5:38:26:7e:f0:de:b6:
23:80:b6:c5:75:0e:f9:e5:d7:58:33:c9:23:0b:47:4c:d4:bc:
08:4e:a2:5b:3f:da:9b:47:c5:c2:5e:60:e5:fb:98:46:d7:cf:
ac:8b:ef:9a:2f:a6:7a:33:c7:67:da:7c:8f:ff:1e:29:de:e8:
7e:13:b3:8a:31:dc:55:95:e0:4e:c5:bd:b2:af:57:9b:64:4b:
96:ac:ff:c2:8f:31:d4:ab:b1:e5:05:39:f7:45:7f:80:24:44:
f3:35:8f:e2:60:c7:b4:f5:16:e3:a5:fc:e8:59:f9:32:92:72:
6f:56:7e:ae:0e:d0:0b:6c:4b:a1:1e:9d:64:1a:5d:23:77:09:
9e:a2:6c:c6:68:88:04:f3:51:a9:0f:b7:a9:65:2f:75:a0:f5:
b1:4c:20:ce:cd:2d:44:45:ce:5d:a8:cd:42:d9:cf:3b:ec:53:
f7:b8:04:a1:04:98:23:ee:9a:a7:ba:40:05:ed:60:b5:d5:23:
b0:cb:d1:4c:a9:3b:a7:4e:ba:19:62:e1:6e:14:ed:f9:f1:56:
5f:44:2f:8b:a8:ca:74:5f:2c:8b:4b:f3:6d:43:3e:21:89:af:
42:6f:41:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 08:27:28 2026 by rpki-client