Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
File: hZtbaj2CvQDtMcbOs66nrVke5Tc.mft (raw, json)
Hash identifier: 27OV44cDW2dCSwXVp/Y4I9A2vixoREaeWFXJjBj3qXQ=
Subject key identifier: B1:DE:5D:A9:7A:29:C6:46:C2:CB:3F:54:CD:AF:93:DD:46:33:51:E3
Authority key identifier: 85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
Certificate issuer: /CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Certificate serial: 019CAC46D94EFF9900C993626ECDD36BCD22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
Manifest number: 08F0
Signing time: Mon 02 Mar 2026 02:00:50 +0000
Manifest this update: Mon 02 Mar 2026 02:00:50 +0000
Manifest next update: Tue 03 Mar 2026 02:00:50 +0000
Files and hashes: 1: XiklanRbiidoE85zKpbvsUmN5qA.roa (hash: 8135ww+Xdljchx0NgMI539w6J7mtMHiGCI+yUaoZKJc=)
2: hZtbaj2CvQDtMcbOs66nrVke5Tc.crl (hash: FaWT75RJky1tGUKaT33PcM29Mf0QheMS1ZnZK5oETw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:d9:4e:ff:99:00:c9:93:62:6e:cd:d3:6b:cd:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Validity
Not Before: Mar 2 02:00:50 2026 GMT
Not After : Mar 3 02:00:50 2026 GMT
Subject: CN=b1de5da97a29c646c2cb3f54cdaf93dd463351e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:0f:82:56:25:6f:c5:c6:31:a0:57:47:ad:
4b:44:66:e4:32:9c:25:04:8b:78:31:fd:53:f8:32:
a2:33:b1:ee:b9:a0:ec:3a:d0:25:ef:40:f0:a4:3f:
74:34:5e:a7:e2:13:78:36:e4:d0:66:10:75:b6:a0:
a0:ea:8d:69:88:90:91:e0:f4:8a:43:80:00:82:aa:
91:62:a1:a3:6e:07:74:01:19:68:7f:f8:00:e9:8d:
d1:0b:26:ef:2b:13:72:39:24:2b:80:7d:f0:44:9e:
cc:67:e2:37:97:64:5e:ec:e2:94:dc:4f:49:3f:d7:
5a:a2:43:9f:d7:46:50:d3:67:2d:db:35:48:46:30:
98:71:2c:e0:e4:35:40:c6:7f:65:c5:88:ce:91:d1:
62:f4:6a:a0:50:84:4d:41:47:a9:62:52:6b:de:42:
9d:ae:b1:8a:83:f2:82:b0:ca:ae:20:e1:bc:3a:8f:
ab:a7:50:88:2f:aa:e0:56:25:7b:5b:23:43:38:f2:
bc:03:f6:00:20:b7:cb:2b:5f:1d:83:ce:14:ab:3d:
39:ea:d4:00:c3:dd:eb:7a:83:d6:86:62:e9:55:35:
f5:2f:1a:11:14:03:8f:c5:70:00:cd:aa:fc:2c:a1:
e1:b5:e6:69:1e:0d:92:af:9e:96:ea:cb:54:4f:99:
e6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DE:5D:A9:7A:29:C6:46:C2:CB:3F:54:CD:AF:93:DD:46:33:51:E3
X509v3 Authority Key Identifier:
keyid:85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c7:43:44:e0:e0:66:1c:80:b5:5f:9c:76:87:f6:c1:56:ea:
75:61:4e:48:74:09:f8:8b:04:b4:06:f7:ac:71:19:69:7b:c1:
22:b4:56:96:9e:17:62:33:7e:f2:94:7d:55:d6:ab:7b:ee:84:
3f:10:35:a2:6a:03:6a:1c:ff:96:dd:81:aa:0d:a0:c4:07:f1:
41:65:ab:bc:5f:41:99:fe:69:bb:7f:87:ff:9c:a8:40:29:5e:
00:b9:4b:0f:be:5f:88:b8:ec:91:85:46:77:3a:7a:0e:8e:b4:
b5:11:5e:ff:29:b2:c0:10:ed:e5:f2:45:11:fc:84:8a:1a:c3:
e7:a6:d4:58:40:a6:4e:2e:8d:3b:ef:d4:9a:d5:ad:35:5e:8f:
72:1a:bc:c1:22:e4:b8:93:20:a2:37:da:00:ff:a5:17:08:87:
d3:eb:f0:d3:68:71:24:91:ed:3c:1b:3b:e3:6a:44:9d:7f:de:
5a:28:86:e0:71:28:aa:ad:4c:ef:87:7b:30:9a:db:c5:da:82:
ab:61:30:4c:0b:64:1a:06:a7:41:15:de:58:01:0c:9d:44:43:
12:25:1f:6c:4a:be:29:73:b9:02:57:7d:81:61:93:78:f5:6b:
eb:6b:86:19:07:4b:d1:c6:8c:00:6c:14:75:b0:44:4f:63:20:
98:c5:7a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:28:31 2026 by rpki-client