Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/HrtSbnfVKLIWxgHbyYPGj5pn5fg.mft
File: HrtSbnfVKLIWxgHbyYPGj5pn5fg.mft (raw, json)
Hash identifier: ygdCtN/d4okMDHGd+QqwUiBjVZd/FpImvwDovhu8xwM=
Subject key identifier: 11:79:C5:87:46:BF:E8:28:A4:77:41:E9:41:BB:40:42:6F:67:D5:AD
Authority key identifier: 1E:BB:52:6E:77:D5:28:B2:16:C6:01:DB:C9:83:C6:8F:9A:67:E5:F8
Certificate issuer: /CN=1ebb526e77d528b216c601dbc983c68f9a67e5f8
Certificate serial: 019FA8995875FC35938D61BEFD4C22EB2EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HrtSbnfVKLIWxgHbyYPGj5pn5fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/HrtSbnfVKLIWxgHbyYPGj5pn5fg.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:49 +0000
Manifest this update: Tue 28 Jul 2026 12:00:49 +0000
Manifest next update: Wed 29 Jul 2026 12:00:49 +0000
Files and hashes: 1: HrtSbnfVKLIWxgHbyYPGj5pn5fg.crl (hash: TOO+Miojpsmy7wtZOZedhfj7EUV5sciY6Igq5qhK8Fo=)
2: fr2U1ETSBDaYtpmel9S6z2AF8Q0.asa (hash: vnqoM5a+GH/Bcj8OwND/TYSLxt03hi6ZcbKX0HMYzDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/HrtSbnfVKLIWxgHbyYPGj5pn5fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/HrtSbnfVKLIWxgHbyYPGj5pn5fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HrtSbnfVKLIWxgHbyYPGj5pn5fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:58:75:fc:35:93:8d:61:be:fd:4c:22:eb:2e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ebb526e77d528b216c601dbc983c68f9a67e5f8
Validity
Not Before: Jul 28 12:00:49 2026 GMT
Not After : Jul 29 12:00:49 2026 GMT
Subject: CN=1179c58746bfe828a47741e941bb40426f67d5ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e5:0f:57:36:2e:01:1b:e2:9c:8d:92:95:21:
44:94:a9:6e:d3:aa:96:9f:73:69:b8:44:25:c2:f7:
cf:27:ff:f7:9e:07:ca:2e:9e:b0:ee:53:5d:0f:5b:
ab:4d:6a:a2:a1:68:3e:5d:ba:4f:ec:87:90:ab:71:
3c:23:f8:ba:a5:12:3f:2b:ba:45:5d:48:de:b1:04:
51:ce:97:ba:68:71:b8:d5:73:ed:c9:70:21:39:49:
61:c8:93:87:74:67:f2:ff:8c:8f:b8:e4:c9:0a:af:
6b:bd:a9:f2:37:4b:94:6b:52:53:42:32:7f:aa:4e:
47:fd:c5:ba:50:1d:cb:f7:0a:9d:af:c3:23:cc:8a:
71:e0:c7:8f:fd:b7:c1:bf:5a:70:cb:89:e0:4d:60:
e9:31:9a:df:a7:39:ff:47:fe:0f:79:99:26:60:2d:
dc:e2:1c:b0:78:36:7a:51:7d:f0:72:bc:8b:97:0a:
ec:5b:7e:6c:21:32:62:22:c6:b1:c4:65:e2:72:84:
42:23:00:e9:15:4b:c9:50:62:7c:b7:ee:f3:d5:ca:
19:05:e9:c6:67:ac:73:98:5b:28:03:2b:0f:fd:14:
42:78:d3:75:06:4d:bb:3c:4a:18:d2:41:78:79:39:
11:de:ac:51:fb:5a:26:40:d3:e7:e6:55:25:8e:a8:
70:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:79:C5:87:46:BF:E8:28:A4:77:41:E9:41:BB:40:42:6F:67:D5:AD
X509v3 Authority Key Identifier:
keyid:1E:BB:52:6E:77:D5:28:B2:16:C6:01:DB:C9:83:C6:8F:9A:67:E5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HrtSbnfVKLIWxgHbyYPGj5pn5fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/HrtSbnfVKLIWxgHbyYPGj5pn5fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1c4153-b8c9-4685-a566-faef2e184462/1/HrtSbnfVKLIWxgHbyYPGj5pn5fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:59:4a:90:e4:fa:7e:a7:72:a5:71:a5:fd:8e:d5:5c:b6:53:
ea:6e:68:97:5f:3b:57:d0:49:00:b0:f9:cc:cc:fb:78:32:25:
dd:84:cc:87:66:6f:b9:20:98:85:c9:b9:0e:07:ee:05:1d:cf:
ef:d2:74:eb:bf:fa:26:84:cf:38:41:c7:fc:6f:9a:67:35:20:
f9:ae:a5:5e:1d:ea:62:38:a0:83:b3:30:db:dc:fd:37:5e:c0:
99:93:7e:6d:a9:62:8d:f2:0c:25:ba:83:cc:a2:db:2a:91:bd:
ac:02:26:59:18:3d:c7:6e:48:0e:82:dd:83:f8:75:b2:fb:3c:
d6:d5:c2:1b:87:bb:d3:2d:7b:e4:c2:df:5f:75:b4:7b:7c:9f:
4a:82:c1:0e:4d:ea:97:c3:2d:a1:08:d9:7d:d2:17:a0:bd:bb:
e0:67:a2:7b:14:6a:fa:a6:b6:f8:8a:5e:b2:ca:f3:1d:27:eb:
04:f5:22:04:e0:79:26:ec:51:d1:97:88:25:78:2a:e7:4c:89:
6c:5c:e3:2e:fb:16:11:02:0b:54:29:6f:be:70:12:f6:db:4a:
11:8c:5b:83:3d:54:77:0e:36:79:47:d2:65:04:db:d3:ee:1b:
90:78:55:84:04:72:94:6f:5a:62:ac:d5:6e:68:f3:e6:9d:67:
9b:e2:02:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:38:59 2026 by rpki-client