Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
File: HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft (raw, json)
Hash identifier: vquuSiUljZzDdbFXf0BG4DznwsSCaSztAaoLSyPoJRA=
Subject key identifier: 8E:97:0E:85:DA:A3:4F:73:27:E6:AA:9F:9F:5E:4F:CC:44:AB:AF:43
Authority key identifier: 1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
Certificate issuer: /CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Certificate serial: 019FAA87C1C1288125B450A53CD0BDE7E0E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 21:00:51 +0000
Manifest this update: Tue 28 Jul 2026 21:00:51 +0000
Manifest next update: Wed 29 Jul 2026 21:00:51 +0000
Files and hashes: 1: 4t1yiUQVN5Px9-wGHy62XxxqimU.roa (hash: FHoafxoTZhFU/Fxu+bGTDh9a2aT1nhPTACKs/kC0+Jg=)
2: 8jW3c1tdyMykRFAb8cKVIvXYm1o.roa (hash: Q0T2eH3RlaxZhFvfRSxmpGRJmTvjnKlI3xGp5fpQfVU=)
3: HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl (hash: O88H4fwmPFGmQghYUQB5AxBtUxp/H9qAXhCgosjF7uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:c1:c1:28:81:25:b4:50:a5:3c:d0:bd:e7:e0:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Validity
Not Before: Jul 28 21:00:51 2026 GMT
Not After : Jul 29 21:00:51 2026 GMT
Subject: CN=8e970e85daa34f7327e6aa9f9f5e4fcc44abaf43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b4:75:ef:f7:61:96:1f:30:66:3e:3b:7e:25:
16:59:cd:2d:05:57:28:6f:cb:0d:eb:a7:1b:cd:7f:
88:f8:2a:f5:8c:48:de:bd:20:e4:48:e5:24:9d:1e:
75:bf:e3:82:02:70:79:c3:d4:c6:da:59:17:82:dc:
99:a1:b5:88:49:91:9f:f2:05:75:d1:a6:63:f4:77:
f1:83:20:fe:22:71:7d:0b:a2:f2:16:d0:20:5c:5e:
8d:40:a8:66:5c:56:6e:61:3b:ee:de:0b:e2:ad:78:
53:85:9d:4d:17:aa:99:ec:cb:a5:ed:98:ac:b0:c0:
6c:0b:dd:03:48:54:39:90:ce:d4:17:20:52:ce:24:
f6:fb:33:ef:57:6b:bb:73:e5:f4:af:85:c9:42:a0:
26:db:e4:7b:48:82:e4:69:bb:5a:c7:90:07:f2:8f:
d2:ae:14:11:18:b0:ee:a7:1f:61:4c:d7:35:d1:37:
0e:9d:10:fa:aa:fd:81:4d:1e:2f:12:53:e2:13:85:
78:4d:7c:5f:ff:47:61:95:ce:96:2b:26:97:62:21:
e9:88:de:e0:b2:4b:78:b7:ad:c4:8a:1a:b3:50:09:
4a:4e:e9:e3:42:83:74:10:e8:bd:19:36:12:23:61:
55:f2:64:49:33:f9:5e:db:d8:3e:e0:8c:ef:96:2e:
8c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:97:0E:85:DA:A3:4F:73:27:E6:AA:9F:9F:5E:4F:CC:44:AB:AF:43
X509v3 Authority Key Identifier:
keyid:1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:8d:81:fc:68:90:75:d5:81:f5:a5:53:5e:e7:e0:9f:3a:7a:
ff:4a:d4:b9:13:ef:3d:30:da:b4:2a:c6:0e:9f:34:66:7d:15:
03:f0:86:cd:f2:b0:cb:43:bd:44:8b:23:fb:16:99:b4:50:5c:
b3:90:a0:41:99:80:fd:25:32:17:0d:93:61:4c:a6:d0:eb:a7:
8e:5d:d3:a8:5d:ec:b9:a6:d7:ba:05:ad:9d:0a:85:88:a6:da:
67:a1:f2:7b:85:d4:05:f6:53:56:ab:32:b0:5b:9c:e4:65:68:
00:b5:5a:47:7a:d6:b0:45:ef:a7:b9:93:28:5a:39:5e:8a:f4:
31:19:34:1a:61:e6:d2:42:6a:5f:7f:b5:f9:7c:1d:85:dc:f1:
72:46:b9:1d:3f:0f:f7:d5:f6:8e:c8:2a:dc:fd:a5:a4:51:46:
8e:05:dd:2b:11:36:34:d4:96:7e:e6:78:2d:53:28:2a:8e:b9:
6e:e9:fb:8d:ee:e3:d1:f4:3d:48:3c:42:e7:53:09:54:6c:0c:
eb:f9:8b:2b:8d:cc:21:97:ca:a4:e6:79:d7:d3:75:82:ba:c6:
a9:a1:29:91:d9:1a:bb:d8:76:91:3c:0f:fb:79:0b:21:4e:b0:
e1:af:a2:88:8f:17:f2:1c:97:02:84:36:f9:63:ba:ab:41:46:
95:13:2c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:06:49 2026 by rpki-client