Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
File: HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft (raw, json)
Hash identifier: eq5ogtoDn45LJNbhOJYVYI8m0rSiMPWx0Y85itm01SQ=
Subject key identifier: 72:04:99:79:DA:7A:D8:24:F0:48:B3:A8:55:C1:53:EA:FD:61:93:1E
Authority key identifier: 1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
Certificate issuer: /CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Certificate serial: 019EC0DB3D6AE879C9439BA683148BAD066A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 12:00:54 +0000
Manifest this update: Sat 13 Jun 2026 12:00:54 +0000
Manifest next update: Sun 14 Jun 2026 12:00:54 +0000
Files and hashes: 1: 4t1yiUQVN5Px9-wGHy62XxxqimU.roa (hash: FHoafxoTZhFU/Fxu+bGTDh9a2aT1nhPTACKs/kC0+Jg=)
2: 8jW3c1tdyMykRFAb8cKVIvXYm1o.roa (hash: Q0T2eH3RlaxZhFvfRSxmpGRJmTvjnKlI3xGp5fpQfVU=)
3: HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl (hash: 5du2rhoLQDLWODW7qvsdMLZPAqNYneLL7TDV2BqnzG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:3d:6a:e8:79:c9:43:9b:a6:83:14:8b:ad:06:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Validity
Not Before: Jun 13 12:00:54 2026 GMT
Not After : Jun 14 12:00:54 2026 GMT
Subject: CN=72049979da7ad824f048b3a855c153eafd61931e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c4:2d:3a:75:9e:a1:d3:14:cd:f9:0a:e8:ad:
0c:6f:79:7e:d2:90:a6:22:a7:70:ea:0c:c0:1a:bd:
35:3c:73:bc:3f:2c:98:93:72:4e:75:5e:bf:6f:a7:
b7:bb:e4:4f:e2:9f:cb:13:91:96:17:6d:8b:8f:af:
28:d1:e8:89:02:5f:dc:66:6e:65:7e:b5:0a:83:1b:
e1:8b:a7:a6:32:c4:14:35:a0:61:1d:c4:ce:4e:af:
5a:fe:4d:95:57:b2:6c:87:44:9e:6a:29:63:28:63:
20:48:a8:8b:04:f2:ed:a4:82:81:96:18:98:28:c4:
05:73:12:5f:50:a3:09:33:f3:62:59:84:25:53:3c:
9a:78:27:4e:50:74:14:40:0c:7f:e7:6e:89:a9:d7:
b5:d3:67:c6:3c:cb:36:8c:da:05:98:06:c6:e9:52:
75:42:1f:0f:b4:e8:22:7d:15:93:1c:cb:3b:5e:5d:
f6:1f:3f:57:3b:e9:64:1d:78:ce:71:a7:f2:cc:86:
ce:ca:e9:44:d1:e4:2f:f6:8d:3d:59:ba:df:cc:fa:
88:38:2b:d0:7d:d7:e1:90:21:e4:f8:66:55:2c:27:
13:cc:61:df:50:59:46:b5:ec:09:ca:c4:1f:9e:7c:
a7:3d:63:c0:23:f0:84:b8:63:48:f5:3c:d1:55:d8:
1a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:04:99:79:DA:7A:D8:24:F0:48:B3:A8:55:C1:53:EA:FD:61:93:1E
X509v3 Authority Key Identifier:
keyid:1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:3d:78:f2:25:41:d2:91:57:eb:6e:15:20:a3:23:8a:dc:d3:
d0:07:3e:5f:c5:6e:bd:51:b6:41:89:19:f4:e8:45:61:c4:53:
30:8c:ec:4e:cf:4c:c0:f0:e1:74:c6:b0:f2:33:90:3b:c3:96:
dc:8c:cd:d3:67:70:eb:05:13:a9:ee:13:5a:04:2f:b7:c9:84:
36:b1:cf:f2:a5:cb:5e:05:70:4b:0f:2f:e0:ca:f2:c0:f1:d7:
92:2b:26:78:46:d4:ac:1f:8f:b9:17:48:96:71:20:d7:1f:a2:
5f:e4:11:ec:03:a0:75:fd:83:ce:ee:8f:0f:94:48:19:0f:3a:
c4:1a:37:6b:38:fc:9f:de:7a:b9:80:64:57:25:06:4e:bb:a5:
94:c9:cc:7a:66:ee:e5:54:a1:4d:ea:23:fc:b5:56:9c:cb:59:
73:dd:cb:e3:72:62:67:9a:af:c0:a6:54:85:e4:69:d9:30:dc:
8d:58:5b:6c:eb:c8:dd:46:4b:f5:66:2d:3d:cc:c9:55:5a:7b:
c1:64:21:2f:10:6a:39:39:a9:3f:f7:a2:21:1c:b5:67:92:02:
9a:26:8e:de:a1:8e:53:0f:62:f0:87:6d:a9:85:11:64:21:c3:
89:de:b6:0f:42:f6:83:a8:d9:5f:4f:e2:5e:44:bf:27:d2:19:
33:b0:e6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:31:32 2026 by rpki-client