Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
File: hzcmsXsBvwtUQm0YEPI9xPWPans.mft (raw, json)
Hash identifier: 2O01fJ0HOB8PznTj5GW6xWc6exJeq6cCs4qd8cWRN3U=
Subject key identifier: 1F:25:3A:D7:63:9A:79:88:67:CC:1D:88:25:E3:35:3A:16:7F:21:9C
Authority key identifier: 87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
Certificate issuer: /CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Certificate serial: 019D98185D2E6DDDAEA47FD0826139A254D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
Manifest number: 0748
Signing time: Thu 16 Apr 2026 21:00:26 +0000
Manifest this update: Thu 16 Apr 2026 21:00:26 +0000
Manifest next update: Fri 17 Apr 2026 21:00:26 +0000
Files and hashes: 1: AJ9-_JPvMLD7MTO7v_AyZRgy0_0.roa (hash: M5yAFXUAqTlGP6Djc4hTf8xHqNDR8r1HdPQdOiU2KQ8=)
2: RJDT3UOUnvRDdUrUt0bNzYpN6GY.roa (hash: Q11lItRU7b2xFDCN9amHeShSUMnSL5ED5A7C2wNVlbE=)
3: hzcmsXsBvwtUQm0YEPI9xPWPans.crl (hash: R4J9v7G1dj0fY8nAP8aBdW0l3bIaktY5CUyvjq1Mo6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:5d:2e:6d:dd:ae:a4:7f:d0:82:61:39:a2:54:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Validity
Not Before: Apr 16 21:00:26 2026 GMT
Not After : Apr 17 21:00:26 2026 GMT
Subject: CN=1f253ad7639a798867cc1d8825e3353a167f219c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:67:c6:84:63:09:1a:69:fd:e2:17:9e:6c:05:
95:56:29:75:f2:fe:45:94:4f:86:4d:ca:30:30:09:
b7:7d:a8:f1:d5:4b:59:1a:df:25:a0:76:58:82:df:
35:7d:05:52:f6:55:c7:5f:9a:43:d3:6a:1b:6f:35:
e9:29:c8:95:3f:ae:ba:54:08:44:7b:7b:6c:be:35:
88:bb:24:4b:c3:c0:75:cf:90:da:3f:9b:78:d5:bd:
ae:55:df:99:0f:6e:d6:46:f1:c7:5c:e2:26:b0:93:
eb:93:87:99:a9:72:8e:c5:54:c8:63:13:38:7c:16:
47:55:41:74:3e:71:c2:b6:a8:92:90:81:94:4d:fc:
c4:14:3d:f1:f3:9b:5c:80:96:4f:5d:4a:b5:6b:d1:
5d:3e:63:aa:21:03:1e:73:5b:e4:b1:21:db:a4:d2:
2c:27:dc:1c:3b:44:6b:e7:e7:87:c2:24:11:1b:25:
80:b9:7a:42:ef:ea:de:3a:ef:d7:bf:eb:e2:b0:c8:
5f:0c:d0:07:d9:51:12:4a:b7:19:05:e9:fa:08:46:
1e:c0:83:f7:12:a5:89:53:e2:fe:36:af:22:57:eb:
be:84:98:46:ab:62:60:98:50:e5:c0:94:f4:a9:4f:
4f:4a:f0:55:e3:25:32:0d:b2:8b:21:1e:7b:b0:57:
76:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:25:3A:D7:63:9A:79:88:67:CC:1D:88:25:E3:35:3A:16:7F:21:9C
X509v3 Authority Key Identifier:
keyid:87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4e:54:3f:66:f2:53:24:8b:5b:e3:98:6e:1c:ed:1a:72:04:
6f:a4:38:dd:f6:94:e4:8f:b3:88:2e:f9:8d:8b:33:b0:4c:e6:
02:12:b3:4b:7d:38:df:f1:d4:84:24:94:3e:09:1f:2a:46:62:
9b:c4:f2:b3:c1:f3:5f:b9:a8:16:ef:4a:ca:1e:c9:e5:70:7a:
58:b8:00:0d:30:84:46:e3:ea:04:b3:62:94:6f:87:01:03:b7:
12:09:65:04:87:a7:e3:fe:2c:96:3e:ac:5b:eb:30:a6:44:36:
4f:a6:47:68:4a:f5:cb:35:ed:45:c2:cc:33:00:9c:39:d8:4f:
2c:05:76:d7:c8:d6:4e:06:dd:c1:14:ff:93:54:2f:3c:76:ae:
07:27:78:03:7c:c0:28:2b:b4:ab:0e:59:71:4f:a3:98:a9:11:
a3:64:d8:49:57:8a:dd:01:9b:75:8c:de:88:bb:08:67:21:a1:
3c:94:f6:2e:be:51:31:23:64:b1:97:fe:10:64:87:bf:aa:b5:
35:df:7c:5a:e0:01:b2:6b:02:a5:8e:cb:94:e7:ff:90:03:f2:
a2:fe:7b:7c:b1:78:50:52:9b:fd:8d:68:d9:f6:64:80:81:96:
4e:59:bd:58:82:f4:51:f5:25:40:31:95:f8:9d:f3:3a:cd:51:
b8:92:39:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:10:03 2026 by rpki-client