Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft
File: hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft (raw, json)
Hash identifier: tNFVDiP+gYFWkrcCV5tcAI4nH9xn6k5JCVAWreh7N9w=
Subject key identifier: 0F:F8:D3:AD:DA:B5:79:8D:4E:CD:CB:BA:F4:E3:8C:08:E8:73:1F:9E
Authority key identifier: 86:7B:33:7C:E4:C3:4F:EB:4A:71:FF:F8:55:9E:5E:4C:98:E4:2B:00
Certificate issuer: /CN=867b337ce4c34feb4a71fff8559e5e4c98e42b00
Certificate serial: 01A0C96B90C95CBAB8BD34235A144878CB31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hnszfOTDT-tKcf_4VZ5eTJjkKwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft
Manifest number: 0270
Signing time: Tue 22 Sep 2026 14:01:04 +0000
Manifest this update: Tue 22 Sep 2026 14:01:04 +0000
Manifest next update: Wed 23 Sep 2026 14:01:04 +0000
Files and hashes: 1: PnZoP9c_MUx8bGVjWDH4QemT8Oc.roa (hash: N/n/c2ZTM9Bt63EXnz2HQd3THkOEOxgNYjeKCIXt71Y=)
2: hnszfOTDT-tKcf_4VZ5eTJjkKwA.crl (hash: AxXTjT79KIPO63qeQipWYu0ZO5SoFvRzQjWf6A8mkx0=)
3: t6GAlny-fqKuuQwhbvUz_72cDZg.roa (hash: 0Z7m8nppSdIlpMkeX4RoJU4whGw35KKZIMqUWhBFgBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hnszfOTDT-tKcf_4VZ5eTJjkKwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:90:c9:5c:ba:b8:bd:34:23:5a:14:48:78:cb:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=867b337ce4c34feb4a71fff8559e5e4c98e42b00
Validity
Not Before: Sep 22 14:01:04 2026 GMT
Not After : Sep 23 14:01:04 2026 GMT
Subject: CN=0ff8d3addab5798d4ecdcbbaf4e38c08e8731f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2b:ae:b3:fc:ab:fc:b3:7d:ef:b4:56:96:3e:
6f:bb:58:17:1e:82:cb:a5:83:7a:63:71:59:bd:47:
61:98:83:aa:11:ed:02:e8:30:0d:aa:e9:da:78:3f:
3a:09:ed:96:a1:83:6a:1b:40:a5:c7:c6:46:11:9a:
22:87:a9:4b:64:84:9d:27:54:21:0e:f7:30:72:13:
95:11:95:ef:95:d3:0b:fa:fc:30:bb:03:3a:43:1d:
a5:eb:b9:18:fd:b6:05:8d:b1:62:05:f4:8a:9f:e5:
b5:22:15:db:b8:88:fb:8c:b4:42:c2:76:48:aa:ca:
3e:9d:38:93:9d:86:c3:04:e7:48:f2:6b:22:d2:90:
8b:9c:9f:38:7d:73:0d:1e:c8:61:7d:0a:a2:40:51:
64:17:02:ce:5e:d9:4a:2c:85:20:90:d6:fa:ed:2c:
2c:eb:f8:6a:68:cb:85:1c:ce:26:53:fd:c4:05:f4:
c2:fe:8e:e7:a3:b5:9c:d5:83:ca:bd:4f:70:e0:2a:
c6:83:af:7e:d7:71:2c:2b:88:35:d4:2d:33:16:47:
f1:d8:33:a7:ea:ba:aa:fb:78:6f:67:72:b2:c6:d2:
13:9f:87:da:d9:a5:84:36:6e:3b:45:48:3f:e3:52:
73:be:d6:52:08:40:3c:b4:d0:c5:8d:c4:99:34:72:
04:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F8:D3:AD:DA:B5:79:8D:4E:CD:CB:BA:F4:E3:8C:08:E8:73:1F:9E
X509v3 Authority Key Identifier:
keyid:86:7B:33:7C:E4:C3:4F:EB:4A:71:FF:F8:55:9E:5E:4C:98:E4:2B:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hnszfOTDT-tKcf_4VZ5eTJjkKwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:73:10:1c:f4:5b:52:79:57:ab:8c:ff:0f:06:5b:2f:06:57:
1b:9e:9f:aa:db:0b:df:9f:70:73:32:67:e5:c1:e7:1f:20:2a:
d8:6f:31:10:3a:83:09:54:ed:b5:d7:44:c7:82:5d:8e:50:db:
ca:d2:0b:2c:39:53:ec:a3:c8:b8:ba:4f:c0:d1:30:b5:3f:ff:
45:66:91:30:06:53:4e:69:14:fd:a4:71:f3:8a:66:ea:ac:43:
99:0b:89:8a:75:df:53:ba:f3:71:ef:22:06:f3:dd:11:34:7c:
d8:58:8f:1e:fa:b2:60:fc:c7:4a:8f:e1:4c:6f:e8:5e:1d:2e:
6a:3d:97:98:ed:f5:75:68:51:c0:f8:b4:de:12:37:27:43:60:
d5:eb:31:55:16:f2:ec:34:e5:16:de:fc:64:9a:e4:d6:10:cf:
46:36:43:4b:d4:19:a0:16:b4:7d:d4:c3:2e:f1:f1:02:2c:c2:
b5:b5:31:9c:57:97:66:b8:0b:0f:74:28:3a:91:73:94:94:f6:
19:88:05:3b:ab:69:06:4e:a3:99:96:d8:26:ca:24:32:7c:ba:
a1:a9:e5:cd:19:ea:16:e0:60:e2:7c:f4:b2:e5:aa:60:47:50:
16:40:7b:92:d3:8c:c7:1d:c9:3e:31:88:7d:c3:02:b3:77:f0:
3f:7d:79:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:40:08 2026 by rpki-client