Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft
File: HsazH53p01lJWdHlnWbJt-k_7WY.mft (raw, json)
Hash identifier: m7LyLHl9H+RbgSMCYRZYMxHLgfmjOabO0+RaRJ7MErk=
Subject key identifier: C2:69:5F:1F:67:4F:7E:B4:24:B2:77:82:57:35:1D:93:EA:C8:3E:0A
Authority key identifier: 1E:C6:B3:1F:9D:E9:D3:59:49:59:D1:E5:9D:66:C9:B7:E9:3F:ED:66
Certificate issuer: /CN=1ec6b31f9de9d3594959d1e59d66c9b7e93fed66
Certificate serial: 019CA86A3F686B2B84F6FB74D0660DB35CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsazH53p01lJWdHlnWbJt-k_7WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft
Manifest number: 0101
Signing time: Sun 01 Mar 2026 08:01:01 +0000
Manifest this update: Sun 01 Mar 2026 08:01:01 +0000
Manifest next update: Mon 02 Mar 2026 08:01:01 +0000
Files and hashes: 1: HsazH53p01lJWdHlnWbJt-k_7WY.crl (hash: D/3DYB/8Iwixe8H6qQms6AdIlBFYPX0gpP+7/NrSA+M=)
2: aP0YLe6Eyddh_CvenzS4fc6xbEY.asa (hash: esUQ4x4KdmAuhxjOhLEJlSyDjJw3j6M3LGFJwk2gu70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HsazH53p01lJWdHlnWbJt-k_7WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:6a:3f:68:6b:2b:84:f6:fb:74:d0:66:0d:b3:5c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ec6b31f9de9d3594959d1e59d66c9b7e93fed66
Validity
Not Before: Mar 1 08:01:01 2026 GMT
Not After : Mar 2 08:01:01 2026 GMT
Subject: CN=c2695f1f674f7eb424b2778257351d93eac83e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e0:20:4d:30:f5:77:ff:59:29:89:14:ae:d5:
87:22:99:50:0e:da:fb:a5:ce:24:e1:58:b6:96:f4:
d0:e0:9c:94:42:87:33:30:00:79:38:d3:87:26:2e:
fd:7b:17:7d:59:96:9c:a3:85:f6:81:bd:e1:c4:08:
11:29:b4:71:c3:2d:68:93:07:0f:a9:61:06:6f:70:
24:75:40:f6:b4:e4:4a:f9:7c:b7:b6:af:ff:6f:da:
0e:b1:a1:38:3d:ff:73:bc:03:fd:de:7c:5c:06:78:
01:bf:2e:53:4c:ca:70:5c:de:b9:9f:b6:4a:4c:88:
be:3f:6f:d1:8a:2f:fb:e4:fb:0d:25:69:0d:c5:3c:
2d:e3:a9:b5:cc:62:86:06:ac:4d:60:74:88:ec:25:
29:72:8d:e0:01:08:4a:76:86:88:be:84:86:38:16:
7c:54:f0:75:9e:d4:22:02:da:9d:b4:2a:02:bc:d8:
3f:a3:e6:6a:d1:6d:4c:0c:19:6e:00:34:f3:ee:8c:
22:f0:08:f3:05:16:11:a9:df:48:dd:a9:5d:2f:1c:
ba:dd:e3:93:fd:3d:b2:2b:63:74:e0:44:06:7c:af:
29:9b:ae:95:07:4a:61:40:ef:f2:5b:d8:10:66:fb:
ed:2f:83:7f:29:5c:d6:9c:f4:b9:6e:44:83:35:fd:
31:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:69:5F:1F:67:4F:7E:B4:24:B2:77:82:57:35:1D:93:EA:C8:3E:0A
X509v3 Authority Key Identifier:
keyid:1E:C6:B3:1F:9D:E9:D3:59:49:59:D1:E5:9D:66:C9:B7:E9:3F:ED:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsazH53p01lJWdHlnWbJt-k_7WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f8:f6:83:3d:9f:e7:d5:81:35:b3:2f:18:ef:b6:b5:77:de:
e2:ab:f7:17:b6:cc:03:66:4a:b3:14:5b:33:26:27:45:88:8d:
1f:6d:a8:74:ac:7b:c8:b4:d4:07:e6:31:53:de:8e:97:26:58:
18:18:23:2e:d0:23:73:b2:19:f9:55:4f:b6:1b:a3:2a:4a:bf:
bf:4f:0f:db:89:bc:f7:9e:3a:18:1d:93:de:dc:f5:e6:ca:65:
56:9e:c1:c1:ad:03:4d:f1:51:ab:49:6a:67:e4:82:7e:fc:ad:
1e:4e:79:3b:ce:d0:8a:78:10:3e:d9:0f:f0:92:20:c3:69:42:
6a:22:24:6c:e6:ac:53:bc:13:b1:e0:28:cc:81:39:a0:d7:40:
ab:b7:c5:ad:c4:60:cc:9a:cf:3d:d3:56:f5:bc:b3:52:06:f8:
c6:4d:23:c7:bf:5b:a0:79:c3:66:f7:6d:48:a3:41:35:ae:52:
f2:3e:08:85:d1:d6:cd:38:85:3a:7d:cd:01:93:5e:27:36:d8:
ce:23:2f:22:f5:3e:31:f1:5f:da:33:c0:d9:a6:84:8d:ed:9b:
b4:7e:c6:b1:3e:36:c2:f6:65:e5:cb:15:13:86:4b:4a:23:2a:
bb:09:7c:20:ad:c1:43:6e:8c:b8:2d:60:70:e3:fb:93:a5:c0:
4d:29:1f:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyoaj9oayuE9vt00GYNs1zrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYzZiMzFmOWRlOWQzNTk0OTU5ZDFlNTlkNjZjOWI3ZTkz
ZmVkNjYwHhcNMjYwMzAxMDgwMTAxWhcNMjYwMzAyMDgwMTAxWjAzMTEwLwYDVQQD
EyhjMjY5NWYxZjY3NGY3ZWI0MjRiMjc3ODI1NzM1MWQ5M2VhYzgzZTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeAgTTD1d/9ZKYkUrtWHIplQDtr7
pc4k4Vi2lvTQ4JyUQoczMAB5ONOHJi79exd9WZaco4X2gb3hxAgRKbRxwy1okwcP
qWEGb3AkdUD2tORK+Xy3tq//b9oOsaE4Pf9zvAP93nxcBngBvy5TTMpwXN65n7ZK
TIi+P2/Rii/75PsNJWkNxTwt46m1zGKGBqxNYHSI7CUpco3gAQhKdoaIvoSGOBZ8
VPB1ntQiAtqdtCoCvNg/o+Zq0W1MDBluADTz7owi8AjzBRYRqd9I3aldLxy63eOT
/T2yK2N04EQGfK8pm66VB0phQO/yW9gQZvvtL4N/KVzWnPS5bkSDNf0x8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJpXx9nT360JLJ3glc1HZPqyD4KMB8GA1UdIwQY
MBaAFB7Gsx+d6dNZSVnR5Z1mybfpP+1mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHNhekg1M3AwMWxKV2RIbG5XYkp0LWtfN1dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84M2M3ZWEtN2MxZi00NzFhLWE1NDct
ODU3ODM4OGE1N2ZmLzEvSHNhekg1M3AwMWxKV2RIbG5XYkp0LWtfN1dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS84M2M3ZWEtN2MxZi00NzFhLWE1NDctODU3ODM4OGE1N2Zm
LzEvSHNhekg1M3AwMWxKV2RIbG5XYkp0LWtfN1dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAufj2gz2f
59WBNbMvGO+2tXfe4qv3F7bMA2ZKsxRbMyYnRYiNH22odKx7yLTUB+YxU96OlyZY
GBgjLtAjc7IZ+VVPthujKkq/v08P24m89546GB2T3tz15splVp7Bwa0DTfFRq0lq
Z+SCfvytHk55O87QingQPtkP8JIgw2lCaiIkbOasU7wTseAozIE5oNdAq7fFrcRg
zJrPPdNW9byzUgb4xk0jx79boHnDZvdtSKNBNa5S8j4IhdHWzTiFOn3NAZNeJzbY
ziMvIvU+MfFf2jPA2aaEje2btH7GsT42wvZl5csVE4ZLSiMquwl8IK3BQ26MuC1g
cOP7k6XATSkfVg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:30:04 2026 by rpki-client