Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
File: 1-hskeN_g8zonixP0LdMZYB1jeKg.mft (raw, json)
Hash identifier: tDx6LRde0cmhDttB23eFkcavdn9tah2DdE3x6u3KG10=
Subject key identifier: A3:05:DA:65:D1:24:01:14:90:84:F2:BA:02:B4:CC:18:04:86:CF:BB
Authority key identifier: FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
Certificate issuer: /CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Certificate serial: 01A0DB04AD6B2330B8E09104ED7806257BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
Manifest number: 0B9B
Signing time: Sat 26 Sep 2026 00:01:51 +0000
Manifest this update: Sat 26 Sep 2026 00:01:51 +0000
Manifest next update: Sun 27 Sep 2026 00:01:51 +0000
Files and hashes: 1: 1-hskeN_g8zonixP0LdMZYB1jeKg.crl (hash: RkuC4pkA9VuFofzErFL2Smbqssf/roezEyrh3zkRjyI=)
2: 67OHgQ9oY03pFObGOEWvUB45FRY.roa (hash: Bw9KDuBO2RcXnPqBfJKA7s6j1vu8KiRAlWxURETULCk=)
3: JlERsOGpN9Jutvxh9cBCd5WIDhQ.roa (hash: 0TAzyXpM7LaR9Wg7trsFQxzAH4r7+W5/vZ5ekplhpko=)
4: o0B3A-uOWMJ0Q3rI62ZiZW1aPL4.roa (hash: 7bwGC4W14PVYfYqbu9cx4x9X5c24UYWk/Q4pZluMhT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:ad:6b:23:30:b8:e0:91:04:ed:78:06:25:7b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Validity
Not Before: Sep 26 00:01:51 2026 GMT
Not After : Sep 27 00:01:51 2026 GMT
Subject: CN=a305da65d12401149084f2ba02b4cc180486cfbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e0:2b:b7:f8:00:84:fa:b1:72:ff:f5:92:17:
d5:ef:46:4e:eb:ee:a6:f4:55:6a:f8:2f:5e:a9:ea:
8a:f4:2c:3d:0e:7c:dd:d8:e4:de:68:ec:4e:ef:9b:
6c:89:f3:ae:2e:34:bb:59:2f:6f:24:69:b4:89:3e:
85:20:e1:4c:c1:6a:f4:8b:6d:4a:41:26:80:05:15:
f1:0f:a8:c2:bf:a5:c0:df:7f:2f:3f:77:d5:de:39:
04:fc:42:f5:70:11:7f:03:b5:69:b6:94:e3:3f:cf:
2e:53:9b:be:97:33:8c:93:d4:a6:cc:60:73:be:fb:
ce:ce:b2:f9:1b:73:95:63:a6:e0:7e:95:70:cc:22:
18:ac:e6:a2:83:b9:42:92:28:7a:d0:64:f6:81:9f:
ee:54:44:63:3f:1c:08:b8:87:e5:69:27:53:29:28:
52:23:58:d2:cd:93:c0:77:3d:cb:d6:12:a5:b8:8c:
69:0f:c7:45:ec:63:40:a7:6e:83:d0:ed:f6:9e:21:
a3:3e:ee:c6:41:5e:2b:c8:f4:74:15:f9:20:c6:83:
f7:5e:01:de:9f:91:81:ed:3e:75:bd:9f:a2:c8:ab:
ff:14:1f:bc:d2:fd:e3:51:85:d8:ef:9e:20:08:bd:
3c:0d:90:96:8b:bd:c3:ce:3f:16:af:15:48:d1:7a:
f1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:05:DA:65:D1:24:01:14:90:84:F2:BA:02:B4:CC:18:04:86:CF:BB
X509v3 Authority Key Identifier:
keyid:FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b3:1e:55:1f:34:47:69:02:5d:38:cc:de:06:13:2f:b6:4f:
74:28:26:e9:9c:bc:fe:45:8d:76:6c:76:3f:b9:e8:67:73:31:
e2:60:00:a2:ca:59:6c:5a:f4:1a:7a:a6:7a:73:bf:ee:08:18:
ce:a9:66:ac:b1:36:ed:9d:21:cf:e0:cc:a5:e8:a9:d2:a4:34:
be:f9:75:ef:59:cd:ca:91:1d:f3:9f:d7:00:20:76:4c:40:71:
f3:43:29:b1:bb:01:7f:33:46:2b:23:cd:be:79:89:ad:99:cb:
e6:ae:96:38:c3:06:de:1c:a8:7a:45:f3:31:d3:9d:a5:f3:aa:
35:9f:89:5f:a6:c8:a7:40:fa:15:a8:95:ef:10:c6:66:67:db:
30:b6:a4:3e:e1:db:04:88:7b:1c:3c:5b:ab:e9:88:96:73:4c:
9c:69:8c:00:2b:1e:b6:e1:d1:18:f0:d9:eb:74:e8:8d:36:0e:
09:0a:9c:d6:06:2a:33:99:aa:61:04:f2:3e:77:89:04:ca:43:
cd:10:cc:4d:f5:de:77:0b:84:0d:90:25:4e:f6:a0:23:db:41:
b2:e0:18:bf:47:8f:99:a4:4a:aa:38:96:54:1c:71:20:40:4f:
22:74:15:22:7f:35:3f:20:14:0f:3a:d3:36:c8:ea:26:94:13:
7a:8f:4d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:03:43 2026 by rpki-client