Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
File: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft (raw, json)
Hash identifier: QIQNeUoSs17IYWjSRFBeCt03Vnm9xbUnYiPr8xj18TE=
Subject key identifier: E9:FF:74:29:7E:35:13:05:30:F6:24:FC:F0:43:49:EF:B2:64:D2:1B
Authority key identifier: 1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
Certificate issuer: /CN=1daf46a40c246d6540d992c321b1cc3623d65995
Certificate serial: 019D37C11953C9D4DD93739831AF43B3DCD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
Manifest number: 189E
Signing time: Sun 29 Mar 2026 04:01:34 +0000
Manifest this update: Sun 29 Mar 2026 04:01:34 +0000
Manifest next update: Mon 30 Mar 2026 04:01:34 +0000
Files and hashes: 1: 0z1v-iMgN-IiCcFz7KgyRD_9W5o.roa (hash: BFX8flEMTYsLMbzmmvgL8prvL0RkcLfro9e2dMsJhWI=)
2: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl (hash: snUZyoxC9JRDwRFc1aCj8wFafENNvBRTgMDzvGXJ/VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:19:53:c9:d4:dd:93:73:98:31:af:43:b3:dc:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1daf46a40c246d6540d992c321b1cc3623d65995
Validity
Not Before: Mar 29 04:01:34 2026 GMT
Not After : Mar 30 04:01:34 2026 GMT
Subject: CN=e9ff74297e35130530f624fcf04349efb264d21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a0:d6:2c:0b:b9:6b:71:cb:e7:2e:e7:f3:c4:
b3:81:c9:3b:3a:93:0e:8c:45:f6:4c:c0:54:e9:66:
d2:6f:19:36:a4:6a:24:22:d6:39:60:f2:e9:16:f1:
1b:a1:cd:88:01:af:82:c8:d2:73:a6:08:c5:6d:7d:
47:b4:09:00:e8:92:6c:4e:58:c1:f7:48:4a:6b:0c:
33:b9:fb:2b:53:54:b2:75:8f:bb:db:33:18:eb:d6:
b1:0f:01:a3:c2:ff:7f:20:25:84:cb:37:e3:da:33:
9b:81:61:d8:04:e8:c7:35:44:09:8e:b4:04:0b:be:
58:e0:38:15:a4:1a:6f:58:6a:61:a7:4e:fd:d4:9c:
87:47:f5:96:3f:34:1d:61:d1:fd:f3:75:a6:d3:c4:
dd:9b:9d:6c:50:e3:12:af:a3:2a:c1:a6:7e:44:8c:
15:30:b0:a1:23:ab:0c:38:8b:2a:83:3c:7e:35:70:
56:45:92:db:db:a3:b2:dc:3e:01:b6:0b:51:39:45:
ec:7b:86:6b:80:f6:bd:ea:fc:e8:0e:e9:64:2f:c2:
18:b7:9b:cc:47:a6:f8:f8:45:74:2e:39:ab:48:ae:
89:22:68:c5:2a:90:f2:4e:65:19:85:c7:e4:d8:ee:
41:ac:20:81:65:7d:70:46:45:51:56:4a:38:93:93:
21:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FF:74:29:7E:35:13:05:30:F6:24:FC:F0:43:49:EF:B2:64:D2:1B
X509v3 Authority Key Identifier:
keyid:1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:87:3a:9a:7d:c5:5f:6d:d3:da:af:fc:f4:f0:0d:d6:28:f1:
3e:8d:52:69:0b:f2:6d:20:f2:57:2e:35:92:aa:65:87:7d:14:
32:7c:89:cf:7a:f1:63:e3:b1:c8:f7:1d:92:10:1f:16:3e:d6:
76:7c:00:cd:2d:10:af:b7:b2:06:64:72:66:d7:1e:28:89:3e:
fe:73:1f:dc:d4:b4:a8:04:d2:14:29:96:08:dd:c0:2e:ae:61:
d2:8b:b7:96:96:4a:af:b1:ed:05:18:32:91:ad:88:ea:fa:d0:
0e:66:7c:d6:ba:5a:af:c6:e1:69:b9:0d:49:51:c1:0e:ad:c2:
c9:c3:b6:9f:0d:1f:c5:1f:a2:f4:7e:42:46:51:a6:3d:14:89:
a1:cb:3b:b3:fe:20:b9:cb:7e:7d:7a:0e:88:55:6f:d2:1c:d0:
fa:90:2e:ce:7b:25:b4:f7:28:03:64:3c:6b:f0:e1:ef:0f:21:
bc:b3:3f:f0:e2:f2:18:fe:c7:8b:bf:ab:24:cf:49:a9:99:6b:
be:b0:7d:15:d7:2d:6a:2e:92:d9:d2:97:43:e7:59:20:75:b3:
b4:94:10:9e:cd:a8:9f:5d:e8:2f:8f:be:46:b8:6e:e7:14:d5:
9b:bd:8b:2b:65:e8:0d:0e:76:54:15:05:fc:c2:e2:c4:4a:a9:
ac:99:02:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:10 2026 by rpki-client