Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
File: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft (raw, json)
Hash identifier: RTfE+ITpJfGLFOc6ZyMVgHAEneHFFL6Z37hYsIogY8w=
Subject key identifier: C5:39:24:28:83:94:49:37:43:14:71:EA:55:5C:25:1D:47:6E:02:26
Authority key identifier: 1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
Certificate issuer: /CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Certificate serial: 019CAB3403725ED57EF72847B27C9509675A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 21:00:38 +0000
Manifest this update: Sun 01 Mar 2026 21:00:38 +0000
Manifest next update: Mon 02 Mar 2026 21:00:38 +0000
Files and hashes: 1: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl (hash: 42TcZ+JBcpfifzjfrE+qCnaAwOWnuf7DKAznnDzaUiQ=)
2: fA_uTKLLbWG518h0njj_cqP2p6E.roa (hash: 4mY7FOvfpwAUXlFXu+ZK1/hojb4S0OMizyAm+Nun5mU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:03:72:5e:d5:7e:f7:28:47:b2:7c:95:09:67:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Validity
Not Before: Mar 1 21:00:38 2026 GMT
Not After : Mar 2 21:00:38 2026 GMT
Subject: CN=c539242883944937431471ea555c251d476e0226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:34:a0:c5:c9:17:63:e7:73:09:a9:69:c4:24:
8f:ab:f1:87:3b:cc:29:21:0a:89:b2:4c:24:5e:09:
7c:b9:c6:d1:5d:b0:59:65:60:23:11:35:1e:14:ac:
7c:39:6e:be:58:85:5a:60:30:d5:26:ff:0b:40:01:
80:27:ff:21:16:b2:79:9e:5a:9e:9d:e6:54:4c:a9:
fa:65:d8:69:3c:e7:6f:b7:05:89:9c:44:66:b3:16:
06:16:bf:0d:ef:10:10:fb:84:86:f8:00:00:b0:69:
48:44:6b:6d:86:f3:02:4b:23:97:81:10:93:c8:a3:
2e:ca:ff:b0:db:1f:eb:09:b6:89:40:38:86:f5:7d:
c5:a6:d4:e2:76:30:19:97:33:89:56:b6:9b:45:a5:
1e:2d:6b:1b:de:db:ad:b2:d6:e6:c6:cc:46:d9:91:
9b:df:71:1d:41:8d:8a:b8:cf:6f:e8:a6:e9:39:cc:
7f:52:d1:78:6a:c1:64:4d:a3:c5:99:bb:eb:a7:4a:
47:03:0e:75:5a:35:5f:3a:25:84:95:03:43:d4:af:
6c:fd:4d:da:a5:cc:ea:68:36:53:cd:c3:61:57:3c:
05:b0:d1:f2:19:9f:53:68:ef:ec:8b:6d:2c:95:e2:
0c:7f:21:ff:66:6b:c2:54:8d:ed:ea:20:19:3f:8a:
c8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:39:24:28:83:94:49:37:43:14:71:EA:55:5C:25:1D:47:6E:02:26
X509v3 Authority Key Identifier:
keyid:1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:75:72:13:6e:7a:d2:8e:a7:f2:01:14:dd:db:ec:de:ab:1f:
58:92:9f:3c:bf:1c:a9:59:66:4f:ad:99:a1:b9:59:a5:e3:e6:
89:1a:cf:61:6d:94:30:23:41:7d:f1:3d:ae:b8:57:6c:c2:ce:
03:ad:0c:29:f6:22:59:da:c6:f7:43:53:fb:41:99:9a:52:93:
de:a6:fd:3d:a3:dd:a8:b9:a3:e3:de:85:94:58:eb:13:00:82:
89:92:ba:5d:cd:0a:ff:57:2c:db:d2:77:11:78:76:3f:61:7d:
91:d4:1f:74:10:75:24:cf:6d:c8:30:40:db:50:29:be:93:6e:
9e:51:3f:d8:2c:c7:c6:f4:24:ba:c7:94:dc:2e:2f:63:76:db:
4c:11:3e:45:5f:bc:25:93:03:3c:5b:2d:6f:1d:56:11:3d:f1:
a0:52:e3:a7:e0:dd:40:b3:a6:27:e9:11:d6:7a:1f:69:a1:a3:
bb:68:d2:df:43:42:63:8f:49:64:1f:fe:f5:de:d0:ad:88:0a:
c9:00:73:ae:d5:22:4b:7f:26:2b:bf:3c:f9:fe:02:61:f7:fa:
54:5b:7a:86:3e:d2:c1:8c:8d:77:73:00:29:e8:f8:91:08:67:
3b:d6:33:e8:ad:c5:94:41:44:96:31:f1:99:91:b1:16:79:c8:
c5:f6:e9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:33:20 2026 by rpki-client