Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
File: hzcmsXsBvwtUQm0YEPI9xPWPans.mft (raw, json)
Hash identifier: m5h4FplqnI+4ClN5Mt8uF5O2r6CelO7tcldDZK0DY0Y=
Subject key identifier: 67:F2:8C:DF:0D:38:D0:AF:2F:81:12:C1:B4:15:2D:45:D8:01:08:95
Authority key identifier: 87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
Certificate issuer: /CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Certificate serial: 019EC17F80C8D1004CF4B713FBA39F3755C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
Manifest number: 07E2
Signing time: Sat 13 Jun 2026 15:00:19 +0000
Manifest this update: Sat 13 Jun 2026 15:00:19 +0000
Manifest next update: Sun 14 Jun 2026 15:00:19 +0000
Files and hashes: 1: AJ9-_JPvMLD7MTO7v_AyZRgy0_0.roa (hash: M5yAFXUAqTlGP6Djc4hTf8xHqNDR8r1HdPQdOiU2KQ8=)
2: RJDT3UOUnvRDdUrUt0bNzYpN6GY.roa (hash: Q11lItRU7b2xFDCN9amHeShSUMnSL5ED5A7C2wNVlbE=)
3: hzcmsXsBvwtUQm0YEPI9xPWPans.crl (hash: uA2uYqtF1PQ0R9YKve42SaCIQMhcMf9B6oGEL4XRIu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:80:c8:d1:00:4c:f4:b7:13:fb:a3:9f:37:55:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Validity
Not Before: Jun 13 15:00:19 2026 GMT
Not After : Jun 14 15:00:19 2026 GMT
Subject: CN=67f28cdf0d38d0af2f8112c1b4152d45d8010895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:11:0a:aa:07:d5:ae:3c:86:11:b0:e2:e8:
57:ea:ac:99:24:20:ba:40:cb:99:70:89:68:f8:ac:
54:83:d7:0c:e1:a7:25:99:a8:71:96:1e:86:70:da:
df:e3:75:8e:3a:db:fb:1e:ea:7a:6f:5f:17:94:ed:
62:df:56:15:50:30:2e:d0:88:fd:a1:b1:42:e9:e9:
1f:d0:d4:fa:c5:60:86:fb:80:90:12:43:be:9a:ce:
34:8f:b5:9a:c1:f5:ac:2a:92:f9:c1:ee:ad:d9:ce:
89:2e:de:60:1e:13:af:25:64:fb:e0:b5:d9:d7:c2:
f4:f1:f8:2d:74:8e:70:21:67:42:62:7d:af:91:30:
91:27:f4:b5:b7:02:73:da:8d:97:65:72:f8:85:b0:
26:a9:5b:01:a5:c3:db:ae:89:ec:ef:8b:50:51:55:
57:db:a9:e1:86:14:37:86:d1:2b:50:06:7f:4a:ae:
1c:42:cb:6b:f7:dd:04:67:59:ac:f8:8b:96:d7:e1:
dc:6e:39:ed:cc:c2:71:cf:29:87:8c:4a:f2:45:3f:
1b:cb:90:82:95:bc:d7:d3:9a:5a:b8:90:b2:45:cb:
fa:b2:31:a6:e9:59:02:23:33:d6:02:39:f2:da:48:
fc:9a:4e:13:a2:9f:07:37:72:b1:a6:4e:a8:a8:ec:
b4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F2:8C:DF:0D:38:D0:AF:2F:81:12:C1:B4:15:2D:45:D8:01:08:95
X509v3 Authority Key Identifier:
keyid:87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:27:b6:ff:79:cf:0a:00:1a:5e:35:70:73:bf:69:20:a2:9e:
e3:43:c2:f8:0c:88:cf:7d:c8:ac:7c:35:39:0a:ad:03:10:82:
bc:f6:6f:b9:88:a5:63:4b:1b:80:f6:d9:6d:92:96:bc:04:be:
42:4e:79:28:c1:69:ef:6d:46:fb:d5:2b:48:01:70:82:ca:74:
be:c1:6e:26:81:77:44:f3:b7:08:30:11:d9:20:2c:d4:f5:37:
f3:e2:ba:e7:ef:9c:4e:73:5d:6b:70:2c:d8:92:ec:d7:61:07:
4b:2a:cf:d9:1b:ea:1b:b2:0a:e4:63:cd:c2:8d:7d:fc:3a:e4:
06:d1:2b:3b:35:d3:7c:6d:e1:49:c8:77:9f:88:28:65:01:9c:
95:ce:8f:9f:04:4b:6e:fa:e8:66:31:c1:b2:d1:42:bb:a6:bb:
5c:5d:fb:02:f5:11:a0:b9:3a:ba:70:41:47:b1:77:09:28:4a:
69:94:7f:f7:02:d6:e5:fb:e3:aa:6d:9f:99:e6:6a:69:2b:1e:
ec:12:73:75:a9:30:79:57:df:9a:67:c7:bd:99:dc:68:05:63:
04:af:d9:0a:56:79:eb:81:97:44:bf:47:8b:0e:bd:59:4f:d9:
b2:48:b8:23:f1:11:8d:f9:2e:ac:2d:61:44:09:79:3a:8c:78:
c3:61:fd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:33:31 2026 by rpki-client