Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
File: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft (raw, json)
Hash identifier: wef/OnNZMwj8Lw+GlHRkHfr05nN/jHJHgsD70yTwJ1w=
Subject key identifier: 4B:18:6E:EE:DF:E7:B6:93:40:F6:64:7F:52:52:34:49:39:29:E9:2F
Authority key identifier: 84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
Certificate issuer: /CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Certificate serial: 019FA86245ACCA0A137EF39A32B327DA5CCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 11:00:40 +0000
Manifest this update: Tue 28 Jul 2026 11:00:40 +0000
Manifest next update: Wed 29 Jul 2026 11:00:40 +0000
Files and hashes: 1: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl (hash: rz9CEzDEcKKi8mpTTH1TKxtbQA1Ud/ZIzGozxxnChh4=)
2: lFgdap73IKN-x6XHvGiMEA7qWxg.roa (hash: Cy3+NfE+G8o591s23SgJa1A+OW1ox1rr66Hm02Ee6OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:45:ac:ca:0a:13:7e:f3:9a:32:b3:27:da:5c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Validity
Not Before: Jul 28 11:00:40 2026 GMT
Not After : Jul 29 11:00:40 2026 GMT
Subject: CN=4b186eeedfe7b69340f6647f525234493929e92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:18:f7:31:3e:c5:5a:e3:b8:7b:3e:8b:08:72:
2a:4c:3b:ef:12:cd:95:c6:21:84:40:d3:52:b4:ed:
e0:28:6c:ed:a1:21:24:c6:2c:0d:87:ce:c1:14:03:
41:d0:d8:77:a1:3e:4d:8d:02:6f:53:75:7d:26:fa:
5a:14:f5:99:39:04:53:23:99:dd:3a:c3:c8:fb:21:
f9:0a:31:a3:b0:1a:15:2f:72:0f:16:cc:1a:fd:cb:
48:69:1e:97:5f:7a:17:b5:27:1c:9b:43:87:46:4c:
44:9a:68:98:11:09:c8:87:d0:46:18:95:69:64:45:
a7:17:47:8a:2d:5a:67:f2:ac:70:5f:4e:1d:7b:44:
22:bd:5a:be:cf:0b:e9:ab:af:f9:a9:8f:0d:d6:0f:
53:c0:c4:e7:96:d5:cd:51:cd:98:77:82:33:a5:05:
37:2f:b5:18:fc:14:bf:1f:ab:82:c2:7b:09:2c:d0:
1b:28:c9:41:c0:18:53:50:0b:cc:cd:c1:43:30:2c:
b7:d7:8b:e4:31:4a:1a:75:c6:a4:b6:b2:a4:15:b7:
91:79:c8:ac:d6:3b:86:d1:ff:f9:ad:54:24:c2:9e:
e5:7a:65:69:a0:5e:96:a2:72:d3:8a:79:96:ca:b2:
2b:e7:c4:24:78:b7:4b:5f:19:48:44:a8:a0:5b:c6:
d1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:18:6E:EE:DF:E7:B6:93:40:F6:64:7F:52:52:34:49:39:29:E9:2F
X509v3 Authority Key Identifier:
keyid:84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:7b:b7:b6:a9:70:18:04:c5:fc:01:dd:46:b8:4e:c7:f4:04:
1b:2c:76:e3:3d:c1:93:0a:b2:88:06:e4:c6:cb:c2:49:93:60:
51:68:7d:65:24:5e:87:fd:a5:22:6c:5a:8b:1b:fd:73:37:39:
16:dd:08:6b:16:e8:bc:3f:fc:ec:a4:0e:28:6c:0b:a3:f9:9e:
84:94:35:06:92:a7:63:dc:dd:7c:85:9d:c3:b3:0a:05:cd:e6:
07:36:1f:59:2d:19:2d:d1:61:f6:a8:78:7b:91:ff:86:a4:e0:
74:1a:df:7b:92:2b:38:98:2f:01:e6:3f:0a:6f:56:d5:a0:a6:
88:9b:52:97:28:be:60:82:b8:5d:d3:92:af:3e:2a:48:33:72:
74:4c:c0:87:66:88:56:50:90:b3:24:b5:48:c0:d3:4f:4e:bb:
56:91:bc:77:66:f3:99:ab:f4:dc:66:1c:12:46:9e:c4:9c:c4:
96:1c:e1:e3:d1:e9:31:4e:2b:71:8d:52:c2:51:91:4c:ca:38:
49:a5:17:7d:f3:99:c9:ce:ed:a8:d1:de:00:31:6a:1e:31:f3:
49:30:db:24:c0:e0:fa:a8:a1:e6:3c:2c:1f:53:3d:ae:94:4e:
a9:aa:5e:a1:77:79:ef:57:66:5e:0f:99:e4:c3:df:19:00:59:
55:0e:80:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:21:24 2026 by rpki-client