Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
File: HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft (raw, json)
Hash identifier: DakszD2aRJ8khRoiTBzEr4mGKfTY/oKigf+Gx9VW0YE=
Subject key identifier: 7F:4F:E5:D7:6F:EC:C5:CB:54:E0:0D:D5:F6:E0:DC:54:D0:92:50:FA
Authority key identifier: 1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
Certificate issuer: /CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Certificate serial: 019CA9EB9982F7F7257EE4921DC1231D2488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 15:01:55 +0000
Manifest this update: Sun 01 Mar 2026 15:01:55 +0000
Manifest next update: Mon 02 Mar 2026 15:01:55 +0000
Files and hashes: 1: 4t1yiUQVN5Px9-wGHy62XxxqimU.roa (hash: FHoafxoTZhFU/Fxu+bGTDh9a2aT1nhPTACKs/kC0+Jg=)
2: 8jW3c1tdyMykRFAb8cKVIvXYm1o.roa (hash: Q0T2eH3RlaxZhFvfRSxmpGRJmTvjnKlI3xGp5fpQfVU=)
3: HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl (hash: 7obv5qpAvD0QMGboykykDCDLoH6ITbBAG6+9VtX1SrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:99:82:f7:f7:25:7e:e4:92:1d:c1:23:1d:24:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Validity
Not Before: Mar 1 15:01:55 2026 GMT
Not After : Mar 2 15:01:55 2026 GMT
Subject: CN=7f4fe5d76fecc5cb54e00dd5f6e0dc54d09250fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bf:66:8e:9f:2e:79:09:24:8d:4a:3e:a6:28:
cf:bd:8e:98:49:9a:ca:14:65:22:dd:8b:7e:36:b8:
4d:38:53:0d:c0:26:38:5f:e2:2a:40:7c:9f:2d:05:
b0:43:2b:ae:73:00:28:c1:8e:37:49:32:3d:d9:57:
df:f5:6f:4d:c5:44:3b:ad:f7:37:00:90:30:b1:ea:
c5:16:e8:92:5e:8d:b8:5f:fc:aa:39:42:2f:c2:79:
c9:0c:30:d3:e7:76:44:e7:ba:4f:f4:f1:bb:78:c5:
e9:72:d9:b5:5d:00:46:02:da:3a:73:d1:49:cf:eb:
9c:56:a4:e3:61:f0:54:a3:90:73:3b:bf:a4:b8:9a:
ec:b0:27:74:e6:9c:ed:a1:d4:f3:da:69:da:9c:72:
10:a2:02:fa:65:f9:07:49:03:e1:f2:38:79:53:3c:
e9:e5:0b:07:6f:40:f8:c5:c6:52:9d:da:18:2a:e9:
55:bb:59:f1:c7:94:58:ae:fe:64:71:d6:50:29:50:
92:cb:41:18:2c:94:e4:bc:9e:e4:53:7d:52:f3:26:
84:de:21:08:22:d7:20:75:ec:f4:eb:e1:53:bb:be:
19:d9:e2:cd:12:cb:fd:d9:ac:f0:a0:71:b6:e5:75:
cc:ef:d2:5d:46:98:34:e0:80:34:81:00:16:81:f1:
15:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4F:E5:D7:6F:EC:C5:CB:54:E0:0D:D5:F6:E0:DC:54:D0:92:50:FA
X509v3 Authority Key Identifier:
keyid:1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:5a:65:d3:37:c6:01:25:ed:5b:d8:5c:fa:24:f6:cf:de:73:
b1:11:12:7b:dd:b2:1c:04:b5:23:d9:bc:c0:57:73:68:3e:96:
a9:f4:47:3e:76:c0:6b:9e:2a:a9:b5:7f:70:80:1c:e3:78:10:
1d:89:3c:5e:81:d0:09:53:00:59:63:43:10:de:92:9c:74:a2:
a5:22:cb:6c:61:56:22:37:40:a5:9c:58:ef:cd:54:cd:19:d6:
51:ba:51:12:39:06:cd:7c:31:39:dc:58:6d:7c:77:eb:97:f9:
47:6b:1d:ae:90:7b:c4:2a:89:8c:54:51:85:dc:a8:f2:4c:6a:
96:f2:a2:8a:75:b5:44:7d:71:8e:b8:25:02:09:0e:b8:8c:ab:
40:17:1c:ef:b5:0f:5e:6c:66:92:ae:dd:4a:32:90:d2:23:8d:
84:b9:9d:b9:77:0e:a3:f9:1e:d1:f6:38:f3:a7:7d:85:ee:ee:
11:ae:d3:99:6c:86:9b:b6:2d:45:af:40:c1:c9:35:3c:d1:3e:
54:9a:3f:2a:b8:d3:50:55:b5:54:56:ec:f5:5f:aa:28:3e:c9:
ae:a0:51:09:95:20:bc:29:16:13:f6:25:31:a6:1c:d4:9c:1c:
46:d8:8d:8e:76:f8:ce:f1:9c:3e:a0:c2:7a:2d:54:ce:b5:d6:
56:0b:73:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:50 2026 by rpki-client