Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
File: HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft (raw, json)
Hash identifier: tOsUec+egcKECDjzBtAZ7LqrZJycFBh9raEH+wNSWcE=
Subject key identifier: 73:E2:A2:41:68:2B:D9:F0:94:9D:D0:F3:43:E8:CF:47:12:DB:7B:07
Authority key identifier: 1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
Certificate issuer: /CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Certificate serial: 01A0C28D074959FB27710624F3F7ECDC32D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
Manifest number: 1A64
Signing time: Mon 21 Sep 2026 06:00:17 +0000
Manifest this update: Mon 21 Sep 2026 06:00:17 +0000
Manifest next update: Tue 22 Sep 2026 06:00:17 +0000
Files and hashes: 1: 4t1yiUQVN5Px9-wGHy62XxxqimU.roa (hash: FHoafxoTZhFU/Fxu+bGTDh9a2aT1nhPTACKs/kC0+Jg=)
2: 8jW3c1tdyMykRFAb8cKVIvXYm1o.roa (hash: Q0T2eH3RlaxZhFvfRSxmpGRJmTvjnKlI3xGp5fpQfVU=)
3: HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl (hash: 3S9Yw3Eh6klDoRp1+f30Vo4Zdz4kpuzyzqU3dxMyOt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:07:49:59:fb:27:71:06:24:f3:f7:ec:dc:32:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Validity
Not Before: Sep 21 06:00:17 2026 GMT
Not After : Sep 22 06:00:17 2026 GMT
Subject: CN=73e2a241682bd9f0949dd0f343e8cf4712db7b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e3:47:cc:86:20:05:42:42:c2:5a:ab:11:fe:
82:a0:da:ef:55:17:0c:e2:11:67:9d:54:34:1d:5a:
59:cc:a6:96:85:97:ba:a9:4a:e8:1a:b3:dc:18:14:
e9:b7:90:33:49:66:c0:38:54:8a:db:2a:62:35:3c:
3c:b7:01:12:d7:72:85:8b:6f:40:ff:82:30:f6:99:
c8:99:91:81:0a:54:e5:0f:7c:3c:76:dc:ef:fb:13:
f7:2c:74:49:2e:6f:75:07:09:9a:3e:53:d0:33:c8:
c5:36:59:4c:ed:2c:76:1e:e3:dc:4b:31:1c:c4:32:
b2:c9:bb:c1:de:f9:96:62:88:96:ad:c7:2f:98:41:
bf:30:32:2d:0c:6f:ab:b9:7f:77:f5:0b:a1:8e:24:
2f:11:08:bf:21:ab:98:57:8e:1a:46:aa:c6:47:84:
c7:5a:76:86:9b:b4:70:dd:0b:ca:b7:96:9c:68:d5:
76:40:5e:e2:e9:7f:7f:ec:06:0b:12:6f:9b:b0:e1:
e4:39:1a:e2:c5:43:9f:60:4c:be:f6:1e:01:c4:76:
7a:63:6f:94:92:e3:91:86:be:72:18:85:a1:23:1c:
ee:62:d1:0e:f4:94:25:15:1d:95:70:78:ed:92:9b:
50:97:6d:61:cf:32:24:c9:f2:24:57:b6:b3:58:9a:
66:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E2:A2:41:68:2B:D9:F0:94:9D:D0:F3:43:E8:CF:47:12:DB:7B:07
X509v3 Authority Key Identifier:
keyid:1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:08:0d:17:2b:96:c8:b0:90:c6:9c:6a:10:b7:a6:b1:89:64:
36:aa:b5:cb:97:1d:8d:40:11:c3:94:8f:62:e5:07:dd:50:56:
31:32:dc:a2:db:82:98:01:be:3d:6a:50:21:4b:5a:f7:42:58:
9d:32:6f:fd:46:7f:a4:51:11:66:92:1b:5c:87:a6:9e:0e:e9:
93:16:ac:13:c1:a4:4a:93:10:a7:1c:5a:f9:33:a3:57:da:0e:
94:a9:5f:71:0e:00:11:99:d7:69:1f:75:63:4f:e9:af:b3:ff:
c3:2c:42:17:7f:60:86:63:fb:cb:07:2c:aa:36:a4:ea:52:51:
72:69:90:f8:7d:82:a8:ec:4f:cc:6a:f9:69:d4:50:99:fa:44:
52:8a:70:53:24:cf:84:40:f3:17:a0:58:f9:36:9d:93:1d:47:
a9:9b:ec:5e:1b:1a:4b:f5:f7:ad:31:cb:d9:2f:4c:78:96:af:
45:e8:f6:93:0c:02:1c:49:4d:d4:5d:13:f3:7d:19:8f:22:74:
33:a6:35:54:a7:1d:14:69:07:5a:b7:27:3e:e8:e2:b0:64:84:
bd:e0:8d:6b:ee:47:46:83:b9:51:69:fc:6f:c9:05:61:9a:c8:
af:31:7b:f3:e5:0d:b5:ef:3c:71:11:97:60:75:91:c7:a7:ca:
5d:a2:52:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:42:54 2026 by rpki-client