Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
File: HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft (raw, json)
Hash identifier: pseY6hT8ORTdgQIpXTj+3G2XbrXv6WN7+3mSdR8bxbs=
Subject key identifier: 05:EF:50:F6:EF:91:AB:D9:AF:86:98:AF:99:2A:4B:33:86:9B:60:5A
Authority key identifier: 1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
Certificate issuer: /CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Certificate serial: 01A0C09F48137D6E222542DBD304E5B81C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
Manifest number: 1A63
Signing time: Sun 20 Sep 2026 21:00:59 +0000
Manifest this update: Sun 20 Sep 2026 21:00:59 +0000
Manifest next update: Mon 21 Sep 2026 21:00:59 +0000
Files and hashes: 1: 4t1yiUQVN5Px9-wGHy62XxxqimU.roa (hash: FHoafxoTZhFU/Fxu+bGTDh9a2aT1nhPTACKs/kC0+Jg=)
2: 8jW3c1tdyMykRFAb8cKVIvXYm1o.roa (hash: Q0T2eH3RlaxZhFvfRSxmpGRJmTvjnKlI3xGp5fpQfVU=)
3: HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl (hash: inO8ULlm5Ylv9lLWrsyXYUaHtBHU60USW9owwZS/u8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:9f:48:13:7d:6e:22:25:42:db:d3:04:e5:b8:1c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1e354362cb9224c016dac944e3d9d49909b17f
Validity
Not Before: Sep 20 21:00:59 2026 GMT
Not After : Sep 21 21:00:59 2026 GMT
Subject: CN=05ef50f6ef91abd9af8698af992a4b33869b605a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:93:47:d9:a3:ec:7d:50:a1:dd:2f:0b:7f:67:
99:1c:4e:ab:32:30:10:2c:03:4b:62:ed:03:74:fe:
f5:16:18:37:01:80:01:b5:e8:4d:79:70:5e:3b:ef:
3f:ae:e1:c4:42:ae:b7:4f:6e:a7:0f:87:c8:7a:b6:
f4:c3:ca:d3:33:89:73:bc:2e:a8:f8:11:16:4a:27:
59:90:35:86:56:7c:b2:85:0c:4f:cc:2b:ed:15:e2:
cc:a5:dd:ea:96:16:4d:c5:4e:54:cb:a4:d8:81:97:
df:38:48:09:94:17:ce:05:92:18:27:05:3a:ce:00:
e3:b9:68:7e:41:92:59:0a:b9:0d:6e:34:f9:bb:05:
91:f6:6f:9b:54:5a:bd:8a:9b:8f:53:de:2a:98:84:
88:7c:72:f3:ce:5c:13:76:bd:bf:89:ce:c8:01:cb:
26:99:33:69:3f:4a:2d:70:e8:bb:6d:4f:bc:e1:12:
2f:fb:a9:57:a8:93:4d:fe:d6:f6:ae:1d:91:99:91:
b0:47:f7:76:2d:c4:6d:eb:32:0d:89:f8:d3:00:09:
6e:09:1f:37:61:7f:a2:f8:5e:87:82:77:cf:08:e6:
46:8b:02:5b:92:31:e2:b4:8a:1f:5c:48:a8:1f:9c:
7c:0d:20:d2:1e:ad:32:eb:1b:b8:a8:5f:53:7a:df:
53:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EF:50:F6:EF:91:AB:D9:AF:86:98:AF:99:2A:4B:33:86:9B:60:5A
X509v3 Authority Key Identifier:
keyid:1D:1E:35:43:62:CB:92:24:C0:16:DA:C9:44:E3:D9:D4:99:09:B1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HR41Q2LLkiTAFtrJROPZ1JkJsX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/282b19-68b9-4ef3-ad39-6ec8c81fdc3f/1/HR41Q2LLkiTAFtrJROPZ1JkJsX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ab:b5:0a:9f:f0:42:a8:60:f8:54:b2:32:22:3d:9d:87:c1:
8a:95:1e:5a:d2:93:a2:ba:c3:6d:cf:d5:76:62:41:87:54:1d:
9d:5a:a3:8b:f7:dd:ae:f4:c3:07:2c:26:28:e3:59:fc:63:c1:
d3:65:bf:1b:63:26:15:ac:1b:69:d1:5a:bb:86:48:e3:79:ea:
75:f1:04:5d:2b:01:5f:e3:b9:42:57:76:40:fc:77:6c:ed:ea:
1a:43:df:f1:83:02:1f:d4:4d:ba:e2:d7:ea:4c:fc:3c:89:c8:
fa:be:6b:c7:0c:6f:80:2a:01:d2:2f:31:fa:c2:cf:bb:de:91:
bd:ab:67:75:2b:f5:44:3b:2f:2d:65:42:a4:f3:e5:7c:bd:30:
ac:49:8e:d5:54:6d:33:ce:b8:ee:76:0b:11:3f:45:d4:37:30:
87:d7:e7:79:72:ab:e6:88:ba:ac:07:0b:ab:e2:02:33:b5:85:
d9:37:0f:d6:0d:ef:18:ca:61:ce:18:a4:21:7d:4c:f2:e3:23:
bb:b9:5d:7a:a1:f7:26:ed:c4:d8:44:90:0b:c7:65:12:7c:a9:
8f:2a:dc:08:d2:bd:90:3f:35:73:42:b0:4a:ba:a0:fb:fb:52:
b7:3c:a4:04:e4:9e:57:59:dc:e9:52:03:36:aa:8d:df:a0:8c:
c4:f4:43:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:55:07 2026 by rpki-client