Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
File: Ha5HTXlZfbddH01JkBtSVYu_avQ.mft (raw, json)
Hash identifier: /68bma1ujgAt1RB1CiNPUddiKiDueUfB/vqXmUi3/L4=
Subject key identifier: 0D:94:C9:B7:5D:C4:3C:67:63:0B:63:66:8C:34:ED:46:68:BA:7D:6D
Authority key identifier: 1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
Certificate issuer: /CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Certificate serial: 019D992B2F5B4DD86711EA8A851FBEF969B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
Manifest number: 10DF
Signing time: Fri 17 Apr 2026 02:00:37 +0000
Manifest this update: Fri 17 Apr 2026 02:00:37 +0000
Manifest next update: Sat 18 Apr 2026 02:00:37 +0000
Files and hashes: 1: Ha5HTXlZfbddH01JkBtSVYu_avQ.crl (hash: VseWQE6wO+oJPzUhAnwL3QQGsUdFKF9XRrzRZ5nCrJI=)
2: k97xiEPNhhSgqvtrR_5TEOjiPrM.roa (hash: ZH1DGUuXgshBEvHt5egPH/VHWGjZYucZ8h4th9PhsLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:2f:5b:4d:d8:67:11:ea:8a:85:1f:be:f9:69:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Validity
Not Before: Apr 17 02:00:37 2026 GMT
Not After : Apr 18 02:00:37 2026 GMT
Subject: CN=0d94c9b75dc43c67630b63668c34ed4668ba7d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:24:4d:95:31:56:4f:d3:75:31:ef:fb:38:55:
a0:28:dd:eb:6a:f7:9e:21:22:38:5c:da:0c:fa:9e:
87:0e:d7:8c:75:ba:7b:d9:05:78:83:8c:ed:fb:72:
6e:bf:2d:54:de:13:99:ac:86:62:73:42:12:eb:38:
94:2d:91:a4:cf:29:75:57:8c:b0:fb:2a:96:39:e4:
f7:c6:15:95:81:e8:77:c0:6e:47:f6:f9:c9:9e:3c:
49:7d:03:4b:61:25:95:d2:9c:d4:a0:5e:c1:e5:c9:
86:4c:78:46:f3:6e:98:ed:3c:dc:04:80:23:75:64:
b0:7b:b5:cd:ed:ab:1d:e6:42:45:eb:c8:5f:72:5c:
9c:27:6e:9c:fb:36:e4:94:1e:57:fd:e4:88:6b:e3:
73:94:d7:33:98:94:1c:ce:57:51:fb:ff:e1:60:5f:
2b:0b:f9:9a:74:85:bc:84:fa:c7:52:0d:3a:14:2b:
08:40:80:5c:34:64:3c:01:c3:74:a1:d2:f9:30:61:
a7:5c:9f:c5:3a:e9:45:8b:4f:71:a0:5b:65:a5:8c:
ce:5d:69:8d:ac:5c:4a:28:cf:68:76:88:43:4f:85:
bd:71:8f:b5:da:f7:15:e7:2b:dc:04:18:cc:3b:28:
39:d4:52:18:8a:55:95:ee:7c:8b:17:7b:9c:ee:80:
d1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:94:C9:B7:5D:C4:3C:67:63:0B:63:66:8C:34:ED:46:68:BA:7D:6D
X509v3 Authority Key Identifier:
keyid:1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:db:a8:3c:05:f9:5b:76:1f:31:ef:47:81:8a:8e:07:b4:c4:
87:31:31:20:57:ea:78:9e:2a:6f:92:26:37:9b:0b:16:b8:f7:
14:de:41:b7:b5:63:8a:f5:a3:5a:05:1e:30:7e:32:80:be:8f:
d1:34:6b:0e:66:25:3d:c4:33:32:ee:20:84:54:48:d3:31:1a:
b0:3d:24:1c:07:d2:cd:ba:38:51:98:4a:31:20:ca:a0:4c:8e:
d5:04:6a:ce:42:af:36:38:1f:48:32:f6:12:33:cb:fa:40:7c:
34:04:b8:97:f1:8d:75:a9:f2:3f:ec:0b:67:41:26:0d:67:42:
20:a6:64:ba:6c:e8:6b:66:85:9a:92:91:e9:89:86:56:96:21:
d2:e9:c7:a4:76:78:06:fc:67:91:8f:83:b7:c6:50:4d:43:fa:
96:10:c6:b7:05:ab:c1:85:6f:bf:6b:e0:bd:51:55:25:10:2e:
c8:b0:52:d7:72:0c:04:df:d1:e9:33:21:2f:b1:55:0b:e4:89:
d2:20:f7:ec:64:1b:f7:51:80:a2:5a:ba:b4:07:7a:a5:f8:b2:
cf:d9:67:6e:f0:41:3f:a6:ca:01:78:e0:ec:b9:4b:c0:ab:5b:
cd:c4:4b:f4:a3:9a:79:22:f9:aa:5d:f9:1a:f4:e0:ee:9d:68:
8e:02:92:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:42:55 2026 by rpki-client