Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
File: Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft (raw, json)
Hash identifier: aUx219bTIi4scnaquANPNcrS+zjjEY5D4bV3r8bf25U=
Subject key identifier: 58:C8:12:AA:57:99:05:3A:75:6C:45:1E:0D:31:F6:D5:73:E0:7C:6C
Authority key identifier: 1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B
Certificate issuer: /CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b
Certificate serial: 019CAD594C07E1E991E96A8BBD0A02AA3C0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
Manifest number: 0796
Signing time: Mon 02 Mar 2026 07:00:36 +0000
Manifest this update: Mon 02 Mar 2026 07:00:36 +0000
Manifest next update: Tue 03 Mar 2026 07:00:36 +0000
Files and hashes: 1: Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl (hash: Mb4mAN8NkCZ9RvVeXXnV5i5kPJhdP2p/dPp037zlxoQ=)
2: lx2J9WOsX2M54t8-J-Ipl4_XUM4.roa (hash: jlAohhibW/lQaiHQMqOapsCsgW9kpTO6lOTRSlTXr4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:4c:07:e1:e9:91:e9:6a:8b:bd:0a:02:aa:3c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b
Validity
Not Before: Mar 2 07:00:36 2026 GMT
Not After : Mar 3 07:00:36 2026 GMT
Subject: CN=58c812aa5799053a756c451e0d31f6d573e07c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c0:0e:00:c2:53:26:b7:98:c6:8a:a7:68:75:
e4:9b:2a:14:c3:1a:37:fe:ae:88:a8:03:cb:47:b3:
38:04:1b:fe:e3:bb:f2:bf:e8:23:f9:cb:d0:df:a8:
81:35:84:db:58:2f:2d:6b:6e:dc:70:96:ed:cf:3f:
1b:05:cc:b0:15:f1:e6:f9:cb:94:90:7e:54:24:52:
1b:5c:d8:6e:c6:c8:ed:e4:47:6b:88:d9:68:b4:97:
1e:cc:10:2b:72:62:73:2f:4b:7d:a2:04:4c:0f:3d:
c9:36:f7:6b:7b:62:28:61:52:86:3f:54:18:c0:0c:
a0:e3:0d:93:74:de:9a:62:56:75:d6:0b:a3:84:a6:
99:82:1e:c6:0b:e7:2b:13:82:a0:7b:4b:b9:ef:77:
6d:18:48:59:fb:40:f6:1e:90:e6:62:84:99:5a:ae:
5d:98:e0:7d:67:a1:5f:99:4d:f1:38:34:6c:24:cb:
b7:b1:73:f5:a6:6a:19:4f:d7:7c:97:71:27:27:c6:
b0:50:f4:10:4e:22:49:76:41:7a:7c:65:d8:d8:d8:
22:3d:f0:6e:54:ea:8e:5a:d6:bd:19:4a:3f:99:d6:
d0:06:97:af:9b:5d:7f:df:9f:6f:2b:e9:96:42:a1:
e5:4d:10:c5:61:50:8e:dc:da:5c:3f:6f:29:f3:cb:
ea:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C8:12:AA:57:99:05:3A:75:6C:45:1E:0D:31:F6:D5:73:E0:7C:6C
X509v3 Authority Key Identifier:
keyid:1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:70:aa:1e:73:3f:dd:38:34:27:d2:4f:49:6c:ea:5a:a1:7d:
59:1d:72:e8:e8:17:6c:1b:7a:ac:70:d9:af:03:9d:31:ba:31:
de:c2:1c:a7:f1:bd:13:cf:5b:f7:8e:5a:05:d4:18:fb:20:5f:
4c:6d:60:39:d3:17:77:f7:d1:e7:e8:e5:13:03:4a:03:38:42:
8c:7d:b8:7f:08:3c:8b:f7:29:cb:a6:1b:f5:c7:eb:96:37:73:
03:3f:de:59:82:1d:46:88:fa:98:d8:9b:d3:0b:7b:ff:36:c7:
b1:5d:9b:36:1a:9f:db:25:2e:13:19:75:75:fc:ea:10:54:90:
93:5d:2c:1d:82:f1:db:a5:cb:0c:e7:15:2d:a5:d5:b4:30:25:
26:a9:b4:83:3b:c0:d0:cd:3e:8f:d6:02:46:15:84:2b:df:2a:
a0:13:10:cf:cf:07:17:15:5d:1a:6a:9a:5d:fb:6a:8d:9c:bf:
cf:10:67:18:1d:2d:38:f1:81:f4:ca:eb:30:7e:d3:67:90:f8:
aa:90:c6:54:ff:39:f9:d6:17:77:c2:5e:18:fb:e7:bb:5e:58:
32:13:e0:42:1c:81:9b:e0:88:53:26:67:39:e5:ca:98:8b:26:
0e:5a:7a:e9:0a:77:52:3e:76:2d:80:5b:66:b0:95:5f:0f:c7:
65:e8:74:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:54 2026 by rpki-client