Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
File: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft (raw, json)
Hash identifier: cNlAeUOywdr8vsEPpS/gi38Icaow7NwL98cqtn2IVEU=
Subject key identifier: C3:C6:71:48:37:0A:C8:6E:62:62:3A:2C:05:A1:64:E2:3A:C7:20:98
Authority key identifier: 1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
Certificate issuer: /CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Certificate serial: 019D9AABC924B378EB781DCACE3BECDC7F51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 09:00:42 +0000
Manifest this update: Fri 17 Apr 2026 09:00:42 +0000
Manifest next update: Sat 18 Apr 2026 09:00:42 +0000
Files and hashes: 1: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl (hash: /e/8PEGhvtlbbOQcbcY7W8hui32I38NQKm2yYPbclGo=)
2: fA_uTKLLbWG518h0njj_cqP2p6E.roa (hash: 4mY7FOvfpwAUXlFXu+ZK1/hojb4S0OMizyAm+Nun5mU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:c9:24:b3:78:eb:78:1d:ca:ce:3b:ec:dc:7f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Validity
Not Before: Apr 17 09:00:42 2026 GMT
Not After : Apr 18 09:00:42 2026 GMT
Subject: CN=c3c67148370ac86e62623a2c05a164e23ac72098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:41:bc:1b:06:15:21:51:97:a6:54:ef:9c:ab:
bc:a5:e3:05:c7:6d:37:c3:86:eb:ef:59:d8:79:d2:
fc:5f:48:60:37:33:81:c0:8d:52:7d:77:b2:a7:10:
de:4a:33:57:2f:e5:ae:a1:7f:86:09:84:3b:69:24:
30:57:da:23:43:56:33:9f:85:7d:c1:56:b9:be:b8:
ec:7d:af:39:52:96:6c:31:bc:05:3d:35:22:7a:f8:
9f:90:e9:6f:1c:0e:84:64:6a:61:95:a4:2f:6b:63:
97:0e:a3:75:71:b7:8a:69:d1:d0:c2:56:25:98:6b:
88:14:6a:d8:7a:5a:6b:ad:44:83:32:63:82:f8:92:
6e:69:1a:cd:2f:7b:73:a1:33:2a:d6:68:ed:72:8a:
63:0a:6f:48:48:40:f4:e7:0a:05:a9:02:e0:95:bd:
9c:13:ca:82:6e:82:65:e1:6a:ea:79:fd:da:9e:c6:
ef:29:28:b5:6f:13:97:b8:6e:5e:40:dc:54:90:60:
bd:57:99:fe:bb:89:da:05:ab:ba:bf:9c:7f:0c:f4:
88:71:81:1d:44:84:50:ae:bc:10:2b:7c:b8:70:14:
12:36:7c:af:4a:c2:73:c8:cd:ab:3a:2e:df:31:36:
5e:7d:68:ee:fd:30:f9:4d:b3:66:06:2f:8f:89:ca:
d3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C6:71:48:37:0A:C8:6E:62:62:3A:2C:05:A1:64:E2:3A:C7:20:98
X509v3 Authority Key Identifier:
keyid:1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:5a:e9:bc:f7:e4:73:8f:a3:79:a1:b6:ee:a0:b0:89:16:00:
f9:d6:03:cc:b3:10:52:dc:90:f5:10:cd:91:bd:83:cf:99:c1:
a5:bd:40:07:e3:14:80:d6:a6:a1:dd:40:53:52:f5:19:25:66:
30:4d:44:a3:2f:f9:c3:df:f0:34:a0:79:0b:e3:67:c6:95:f2:
d9:b3:54:39:45:b0:d2:b3:aa:ce:fc:a2:8a:8f:67:8d:db:17:
98:41:02:7e:c1:98:7b:d3:28:e6:80:7c:ef:a8:a1:cc:25:fc:
05:a1:01:55:78:4d:b7:fe:50:ae:9f:47:bf:b6:4a:d6:dc:df:
c8:68:14:60:07:7e:9e:36:a2:98:d5:07:62:9e:28:04:7c:f9:
af:42:fb:1f:54:6e:a0:4d:74:34:6c:3e:fa:97:14:11:1c:07:
ef:ea:1c:9c:a0:cc:1c:df:ce:79:91:82:3e:79:f9:66:a5:d6:
53:7e:80:77:80:43:86:6f:31:04:cc:cc:25:b0:96:0f:e6:15:
35:15:e3:3f:79:46:eb:b3:60:8e:25:6b:a9:ca:18:3e:48:f1:
9d:52:f4:db:c6:98:d2:b4:f8:97:c5:bd:c1:12:54:59:2b:3e:
73:db:d3:3a:5e:4c:2f:96:2a:4e:15:da:9e:d6:40:a5:34:35:
1e:fb:a1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:42:42 2026 by rpki-client