Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
File: hzcmsXsBvwtUQm0YEPI9xPWPans.mft (raw, json)
Hash identifier: 44fDlsmLeTqt+57wYvNXnucQHGhz8zfY+0X/WUcsCQE=
Subject key identifier: 7E:AE:B7:39:6B:39:F1:85:30:82:91:E5:A1:10:C6:93:1B:06:CD:37
Authority key identifier: 87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
Certificate issuer: /CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Certificate serial: 019CAA8FE8F80D7234DCE90B6BDE5A5F5C3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
Manifest number: 06CD
Signing time: Sun 01 Mar 2026 18:01:23 +0000
Manifest this update: Sun 01 Mar 2026 18:01:23 +0000
Manifest next update: Mon 02 Mar 2026 18:01:23 +0000
Files and hashes: 1: AJ9-_JPvMLD7MTO7v_AyZRgy0_0.roa (hash: M5yAFXUAqTlGP6Djc4hTf8xHqNDR8r1HdPQdOiU2KQ8=)
2: RJDT3UOUnvRDdUrUt0bNzYpN6GY.roa (hash: Q11lItRU7b2xFDCN9amHeShSUMnSL5ED5A7C2wNVlbE=)
3: hzcmsXsBvwtUQm0YEPI9xPWPans.crl (hash: 8IzIEp2miQ14Pfu4DYR3RNsspm1UT17x08Z95/YEiCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:e8:f8:0d:72:34:dc:e9:0b:6b:de:5a:5f:5c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Validity
Not Before: Mar 1 18:01:23 2026 GMT
Not After : Mar 2 18:01:23 2026 GMT
Subject: CN=7eaeb7396b39f185308291e5a110c6931b06cd37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bb:d0:9e:ac:db:9b:20:ce:3a:a3:e0:69:ea:
12:ef:47:f2:c5:5f:bd:bc:4b:a8:5e:7c:d0:41:22:
a2:88:16:58:2b:69:47:f8:5c:fc:fe:c7:bb:2e:0b:
87:c9:10:ad:fc:ae:41:9c:64:07:76:71:9b:a7:6d:
5b:24:f3:e8:da:a2:1c:19:3f:35:ac:d8:20:e7:7c:
73:46:0e:e9:3d:a2:ea:03:f9:eb:6b:3c:05:66:21:
c0:80:ba:bb:81:e3:73:9e:53:84:69:e6:08:c6:92:
af:0a:48:1b:f0:83:99:4e:a6:61:ed:06:3d:3a:34:
c8:78:ef:6e:2a:40:e5:7c:14:c7:89:43:12:4a:ae:
d6:c7:ac:cd:cd:03:d0:ed:c1:49:64:b7:df:33:d4:
9a:14:e4:02:42:ea:3e:d6:e3:46:6f:8a:44:09:91:
a5:36:1d:e1:ad:79:c5:25:b1:a3:41:93:fe:cf:cc:
67:28:31:09:b7:e7:43:11:39:75:3c:57:9b:75:c0:
99:07:2b:7a:a4:4e:43:fd:01:c2:47:a7:fe:98:67:
b6:e5:65:d6:40:17:43:95:ec:ee:e7:97:a1:b2:be:
7d:92:4e:6b:2e:1c:76:45:e5:92:d7:09:4b:a1:8c:
11:67:dc:5f:74:28:ff:db:cd:39:1f:09:09:66:53:
e1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AE:B7:39:6B:39:F1:85:30:82:91:E5:A1:10:C6:93:1B:06:CD:37
X509v3 Authority Key Identifier:
keyid:87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:11:82:ea:dd:cf:80:d8:8c:d8:c9:f4:ca:cb:73:4e:2c:85:
a9:6b:af:16:64:5f:6f:22:b3:41:ff:d2:7e:18:61:ff:6d:61:
c5:63:31:db:3c:b8:4b:bf:01:83:27:b1:f2:4c:98:b6:58:63:
7b:ae:87:71:39:9b:5a:54:57:5e:48:56:bb:c9:07:7f:74:ac:
b3:30:88:3b:08:94:c0:f1:9c:40:5d:18:2c:be:1d:38:89:b9:
2b:bc:2b:58:2c:47:ce:32:b9:97:28:07:16:86:a9:74:03:15:
b4:9b:7f:7f:4b:5f:7f:0b:65:a3:c4:80:8a:61:07:6c:32:29:
a6:d3:e5:0e:62:a3:f7:4d:91:eb:e5:99:f8:ad:7c:dc:b3:8d:
8a:63:07:77:be:46:88:66:b2:3c:02:17:00:8f:db:9e:37:91:
97:46:78:18:f0:0e:96:c6:43:f3:23:1e:b6:5a:bf:79:f6:b0:
8b:64:1f:33:9a:c9:b5:b9:b4:3c:ab:96:83:eb:15:ea:a3:c1:
ff:7c:f1:ea:eb:2b:77:cf:44:f4:18:8a:9f:f7:7d:37:a8:13:
3a:6b:fc:39:5a:0c:a7:ea:e0:cc:14:3f:c9:37:2e:8f:da:8a:
58:17:55:5c:49:ae:3a:b5:a1:c7:2c:6d:47:80:cc:12:eb:68:
36:76:38:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:24 2026 by rpki-client