Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft
File: hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft (raw, json)
Hash identifier: ILxP+vajnO0VEaL8BcG4sJa9zRn0O7oALA/V7GePiV8=
Subject key identifier: EB:9C:41:AE:48:4C:AC:5E:5F:A8:50:D4:5F:BB:37:E3:2C:67:B2:B3
Authority key identifier: 86:7B:33:7C:E4:C3:4F:EB:4A:71:FF:F8:55:9E:5E:4C:98:E4:2B:00
Certificate issuer: /CN=867b337ce4c34feb4a71fff8559e5e4c98e42b00
Certificate serial: 019FAB9A0D335AADA27FB2B95EC437D0D577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hnszfOTDT-tKcf_4VZ5eTJjkKwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft
Manifest number: 01DC
Signing time: Wed 29 Jul 2026 02:00:27 +0000
Manifest this update: Wed 29 Jul 2026 02:00:27 +0000
Manifest next update: Thu 30 Jul 2026 02:00:27 +0000
Files and hashes: 1: PnZoP9c_MUx8bGVjWDH4QemT8Oc.roa (hash: N/n/c2ZTM9Bt63EXnz2HQd3THkOEOxgNYjeKCIXt71Y=)
2: hnszfOTDT-tKcf_4VZ5eTJjkKwA.crl (hash: e/8M6FtFDn4gQntdqCAGGSzf66g3KbhZ0AVtE15SbI8=)
3: t6GAlny-fqKuuQwhbvUz_72cDZg.roa (hash: 0Z7m8nppSdIlpMkeX4RoJU4whGw35KKZIMqUWhBFgBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hnszfOTDT-tKcf_4VZ5eTJjkKwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:0d:33:5a:ad:a2:7f:b2:b9:5e:c4:37:d0:d5:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=867b337ce4c34feb4a71fff8559e5e4c98e42b00
Validity
Not Before: Jul 29 02:00:27 2026 GMT
Not After : Jul 30 02:00:27 2026 GMT
Subject: CN=eb9c41ae484cac5e5fa850d45fbb37e32c67b2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:60:72:0c:a8:38:b2:51:fd:ac:0a:14:86:7b:
9b:06:37:cf:57:b9:2e:c3:1a:7d:d0:4c:a3:94:c6:
fd:a1:52:50:be:f6:a6:4a:6f:fb:d1:5a:ab:41:64:
73:be:54:cb:bc:7d:6c:b5:9c:80:c9:c6:b1:46:24:
de:9a:26:b0:4f:d2:c6:3d:e5:68:a2:2b:63:42:74:
d9:ad:14:6f:d8:df:58:ee:45:6a:05:68:bf:5a:08:
a6:b8:90:9e:e6:ba:08:a4:e4:18:d1:50:72:b7:8b:
ec:3f:f5:24:27:0a:08:1b:e0:28:2a:a6:15:13:8f:
2a:49:4c:e0:08:be:16:cc:f4:32:e9:1d:10:17:5e:
46:f1:7d:5b:58:b5:f3:16:ad:66:66:68:1b:b0:3e:
1e:34:6a:c5:69:67:d8:16:16:4b:16:fd:94:57:78:
aa:6d:2a:62:c8:a4:5c:fd:cc:6a:79:50:89:80:02:
ea:7b:eb:ac:35:71:3b:d6:ed:61:02:fc:f8:b5:9f:
91:95:84:6c:ae:46:81:ef:51:bf:de:ed:8a:57:a6:
1e:d6:1f:92:10:23:4a:0d:ab:c7:e4:09:b5:4e:21:
31:9b:2d:59:40:40:ef:bc:bd:74:65:33:26:93:89:
0a:2b:03:44:79:08:4c:6c:f0:c6:d3:14:83:b5:b9:
e4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9C:41:AE:48:4C:AC:5E:5F:A8:50:D4:5F:BB:37:E3:2C:67:B2:B3
X509v3 Authority Key Identifier:
keyid:86:7B:33:7C:E4:C3:4F:EB:4A:71:FF:F8:55:9E:5E:4C:98:E4:2B:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hnszfOTDT-tKcf_4VZ5eTJjkKwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a4:9b:a9:38:4b:a1:e4:ac:9b:1a:56:c8:8a:1c:95:6e:f0:
52:c7:8d:cb:3a:fe:0d:d5:e3:a2:66:80:7c:06:90:c1:fd:81:
ef:b8:7f:dd:1e:f2:db:b0:f6:e3:5a:34:94:d8:f7:23:27:24:
24:fe:3c:e6:fa:54:06:6b:0d:2d:9a:14:9a:39:6c:ca:9a:f4:
dc:77:0a:a2:a6:8a:a7:ba:8a:38:6d:ab:71:8f:3a:e3:9b:ee:
bf:16:ad:28:57:5a:20:34:29:71:bf:c4:e7:ca:e1:56:ca:e0:
4e:29:62:7e:58:a6:44:80:d3:21:f2:87:f8:0a:4a:02:31:ae:
53:32:f8:22:cb:f7:60:f4:09:7f:ee:34:55:c1:c6:52:16:33:
86:e6:56:7c:80:51:9a:db:0b:76:a1:2a:d6:bb:df:fa:e0:25:
05:10:4b:55:84:9c:e5:d4:64:b8:36:d6:09:91:f9:f1:72:3d:
09:fc:1b:08:47:95:2d:86:a5:0a:39:9e:60:34:1a:14:2d:be:
79:38:da:75:b5:8c:9c:b5:f3:1e:28:92:2f:0d:e3:38:ff:9d:
3d:cf:74:61:86:f3:01:7a:f8:e7:db:ba:90:db:7f:27:7f:d3:
e8:e6:42:18:8d:4c:0a:7a:8c:22:f3:d3:e6:fb:13:5b:cf:80:
ec:bc:b7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:13:52 2026 by rpki-client