Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
File: 1-hskeN_g8zonixP0LdMZYB1jeKg.mft (raw, json)
Hash identifier: 1jWbr5LwxjhCr1VmLwPJBNxFNV9CZVFDZHdAil8fyg8=
Subject key identifier: 02:82:42:AA:75:CF:3E:CF:4F:AF:2B:87:2A:84:EF:A3:82:12:C6:C6
Authority key identifier: FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
Certificate issuer: /CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Certificate serial: 019CAD22A3FDAAAD8145B3E6E4FE08FAB943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
Manifest number: 0971
Signing time: Mon 02 Mar 2026 06:00:54 +0000
Manifest this update: Mon 02 Mar 2026 06:00:54 +0000
Manifest next update: Tue 03 Mar 2026 06:00:54 +0000
Files and hashes: 1: 1-hskeN_g8zonixP0LdMZYB1jeKg.crl (hash: sT1Lm327ReMBQnaR6dcPbKK5+F+9RSXtYbEroBhCqDk=)
2: 67OHgQ9oY03pFObGOEWvUB45FRY.roa (hash: Bw9KDuBO2RcXnPqBfJKA7s6j1vu8KiRAlWxURETULCk=)
3: JlERsOGpN9Jutvxh9cBCd5WIDhQ.roa (hash: 0TAzyXpM7LaR9Wg7trsFQxzAH4r7+W5/vZ5ekplhpko=)
4: o0B3A-uOWMJ0Q3rI62ZiZW1aPL4.roa (hash: 7bwGC4W14PVYfYqbu9cx4x9X5c24UYWk/Q4pZluMhT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:a3:fd:aa:ad:81:45:b3:e6:e4:fe:08:fa:b9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Validity
Not Before: Mar 2 06:00:54 2026 GMT
Not After : Mar 3 06:00:54 2026 GMT
Subject: CN=028242aa75cf3ecf4faf2b872a84efa38212c6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ff:b9:a8:30:0f:66:5d:cc:92:04:e1:48:ad:
c3:67:dc:16:25:11:c3:3b:ba:0d:50:ff:ec:22:ca:
e5:ac:bf:13:bc:d8:2e:58:5f:77:d9:ee:b8:eb:e1:
4e:ac:9c:b0:4f:07:1a:e5:11:b9:ff:9b:c4:52:3e:
b5:a0:3c:c7:be:a1:6d:34:7a:c7:f4:b5:6b:1d:96:
8d:0d:78:7f:34:2e:bd:63:7e:c8:e5:92:11:93:9e:
d1:54:5c:cc:8f:8c:18:c4:12:cd:63:95:5c:19:b7:
e9:4d:e3:11:09:4d:08:d3:17:2b:0e:b0:a0:2a:71:
f0:ee:c2:f9:fa:f4:cc:64:db:c5:1c:83:b0:cf:3a:
62:48:64:c1:97:82:15:34:49:87:a6:99:a7:3a:df:
fc:05:47:b4:46:43:01:f8:72:b0:cb:a7:e6:d3:20:
9a:0f:bb:38:a0:29:36:c3:f9:fe:11:32:f1:88:06:
77:6a:e5:c1:d6:ed:f1:c0:29:9f:bb:45:00:2b:ea:
58:7d:29:fd:7d:6e:19:ed:df:77:00:c8:da:82:4a:
f2:ca:fc:99:f5:28:09:8e:f2:38:70:02:d8:05:26:
5c:19:69:23:8e:19:4e:fa:19:5f:e8:56:6e:95:40:
79:c0:69:97:66:03:f1:4d:3a:2c:4c:c6:32:d4:0b:
50:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:82:42:AA:75:CF:3E:CF:4F:AF:2B:87:2A:84:EF:A3:82:12:C6:C6
X509v3 Authority Key Identifier:
keyid:FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:af:fe:39:77:ab:5d:28:34:c8:bd:91:cd:01:60:68:be:2c:
e5:4e:a4:9c:ea:74:79:c9:40:40:66:bf:c2:58:22:72:b4:31:
ac:a7:7d:bd:c6:61:01:b2:d5:4c:6f:b7:9f:d4:4f:1d:99:4e:
86:85:f8:83:08:89:fa:2f:46:48:c7:e8:9b:43:55:2c:80:f5:
44:95:d4:aa:ba:b8:50:f3:fa:ea:b6:e0:f5:d9:54:17:9d:ee:
af:f6:0d:ae:b3:cc:a0:d3:50:ec:1c:21:5f:e0:3c:b2:27:76:
00:66:71:3a:77:57:3a:e6:c4:44:0e:02:fa:b6:3b:99:69:c7:
cc:24:66:f8:a9:79:e5:13:68:9c:e6:47:5e:70:1c:0c:b1:4c:
99:38:2e:6e:44:6f:cc:d8:00:89:e3:eb:c7:de:87:9b:b8:89:
0e:17:cc:87:17:5e:65:de:19:aa:13:75:b8:be:f8:73:b7:9b:
cd:7c:40:08:41:46:50:ff:d4:d3:6b:f8:7e:01:b6:f4:43:ec:
81:82:75:26:09:77:00:be:ce:c6:5c:41:73:af:02:49:ef:97:
52:1f:7a:ff:33:62:22:de:53:fc:31:80:b0:ea:04:0d:a3:83:
d7:f1:f5:6a:5e:cc:5e:99:e1:56:89:e9:ba:49:36:2c:04:5b:
ee:4c:15:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:04 2026 by rpki-client