Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
File: hzcmsXsBvwtUQm0YEPI9xPWPans.mft (raw, json)
Hash identifier: A2Aek++M9GpFAA0t+6JLTy32dUpfN6P+LIedvhAzY9o=
Subject key identifier: DC:DC:1E:6A:73:5D:FD:43:90:34:27:EA:BF:BE:B7:35:28:13:6C:B1
Authority key identifier: 87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
Certificate issuer: /CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Certificate serial: 01A0C8FD76CF8E099453F433870BF2BD4261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
Manifest number: 08EF
Signing time: Tue 22 Sep 2026 12:00:49 +0000
Manifest this update: Tue 22 Sep 2026 12:00:49 +0000
Manifest next update: Wed 23 Sep 2026 12:00:49 +0000
Files and hashes: 1: AJ9-_JPvMLD7MTO7v_AyZRgy0_0.roa (hash: M5yAFXUAqTlGP6Djc4hTf8xHqNDR8r1HdPQdOiU2KQ8=)
2: RJDT3UOUnvRDdUrUt0bNzYpN6GY.roa (hash: Q11lItRU7b2xFDCN9amHeShSUMnSL5ED5A7C2wNVlbE=)
3: hzcmsXsBvwtUQm0YEPI9xPWPans.crl (hash: ksjEX1KuuRgN7z9WAVAQwMAFjbcpDYaWVsbc5/9ybpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:76:cf:8e:09:94:53:f4:33:87:0b:f2:bd:42:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Validity
Not Before: Sep 22 12:00:49 2026 GMT
Not After : Sep 23 12:00:49 2026 GMT
Subject: CN=dcdc1e6a735dfd43903427eabfbeb73528136cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:19:2c:43:89:66:65:83:be:b3:be:0a:54:02:
67:d1:f1:0f:d5:f7:2d:b2:c0:64:95:b9:35:a2:0c:
67:a8:e5:96:af:c8:82:c4:40:a7:22:a2:9b:4e:24:
08:2f:03:50:be:6a:5e:98:a6:36:09:b5:b8:8e:66:
0c:37:1b:b3:b5:33:2f:48:2c:a7:10:17:0c:9c:6c:
1a:ef:6d:5a:ad:42:b2:1b:c5:80:f2:eb:09:b8:93:
07:b4:91:30:9e:42:09:29:4a:d2:c9:cf:df:86:ad:
83:9e:8f:d8:75:1e:56:95:3d:b9:27:ea:ea:23:73:
df:95:d2:1d:ab:94:08:3b:b9:03:75:0a:ae:97:9f:
7e:d1:a5:dc:91:00:d8:46:b8:45:5d:91:78:7a:e9:
19:44:b3:01:45:0c:d6:d3:76:37:b8:69:0d:5f:ed:
43:39:91:ea:9c:2b:59:0d:88:80:10:f5:f5:02:7b:
ec:45:5e:e5:6a:db:5d:c8:e6:7b:df:a3:4d:77:46:
23:e5:6f:38:6e:0d:00:57:f1:f9:20:61:ba:cf:99:
fb:9d:56:31:9f:86:98:69:e2:c8:12:24:34:88:47:
ef:8f:d3:04:37:8c:96:8c:b7:00:d1:18:1c:d7:89:
1d:21:02:17:79:e1:98:9a:e4:ad:4a:e2:a6:8e:18:
93:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DC:1E:6A:73:5D:FD:43:90:34:27:EA:BF:BE:B7:35:28:13:6C:B1
X509v3 Authority Key Identifier:
keyid:87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:94:9b:30:3d:fc:40:62:34:5d:f6:1a:1b:9f:b3:63:79:e7:
3f:35:c6:31:1e:21:e7:b7:4d:4b:37:42:e8:c8:fd:81:84:1b:
47:1a:34:2f:2a:3c:ab:20:c6:7d:7b:12:6f:2a:84:35:6c:ba:
0c:29:52:b3:64:ba:84:81:85:9d:a9:f2:a5:9d:48:a0:de:1b:
a8:f2:ed:81:8e:8d:bc:1a:5b:16:74:63:75:d7:42:35:70:cf:
3a:86:12:c4:0e:61:76:ab:bb:e9:c6:e3:a4:40:d8:74:e9:fb:
53:b2:1c:88:a3:c8:c6:51:ff:6f:79:5a:d1:24:71:f9:ca:cb:
c9:da:d5:98:94:01:37:47:68:54:7c:65:3c:01:b5:25:0c:34:
e2:a6:5b:9b:4e:e2:1b:bd:7a:79:24:ec:90:cf:55:39:7e:76:
be:f4:41:80:3c:70:de:25:b1:b0:ea:e5:a0:f1:87:4a:fa:ac:
c5:f0:98:56:c1:0f:3f:c1:bc:63:f1:69:55:cd:3b:98:52:af:
64:06:5b:ac:3d:c8:37:2e:da:a6:11:07:31:37:ec:44:b8:13:
70:ac:d8:f6:f6:6b:2a:dc:57:2c:79:d5:b9:ff:13:7e:e7:22:
fb:0d:a9:74:ba:0c:53:ca:e1:be:3d:dd:cb:00:a0:5d:e0:7e:
42:4f:d4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:10:26 2026 by rpki-client