Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
File: 1-hskeN_g8zonixP0LdMZYB1jeKg.mft (raw, json)
Hash identifier: QO+AyX4vo6vcMUWbcGSlPT8RRfd54wORLEvBTQe3NAs=
Subject key identifier: 2E:94:90:1F:49:94:43:0A:C0:56:DC:0E:2E:FD:87:25:7E:92:B8:9C
Authority key identifier: FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
Certificate issuer: /CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Certificate serial: 019FA9E28E27C49658C59062CC3541E9DE61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
Manifest number: 0AFD
Signing time: Tue 28 Jul 2026 18:00:24 +0000
Manifest this update: Tue 28 Jul 2026 18:00:24 +0000
Manifest next update: Wed 29 Jul 2026 18:00:24 +0000
Files and hashes: 1: 1-hskeN_g8zonixP0LdMZYB1jeKg.crl (hash: 5QCoA2mvmUVdOor4wb6jZcmBfs9OsfGcnH3VEnIGAWE=)
2: 67OHgQ9oY03pFObGOEWvUB45FRY.roa (hash: Bw9KDuBO2RcXnPqBfJKA7s6j1vu8KiRAlWxURETULCk=)
3: JlERsOGpN9Jutvxh9cBCd5WIDhQ.roa (hash: 0TAzyXpM7LaR9Wg7trsFQxzAH4r7+W5/vZ5ekplhpko=)
4: o0B3A-uOWMJ0Q3rI62ZiZW1aPL4.roa (hash: 7bwGC4W14PVYfYqbu9cx4x9X5c24UYWk/Q4pZluMhT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:8e:27:c4:96:58:c5:90:62:cc:35:41:e9:de:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Validity
Not Before: Jul 28 18:00:24 2026 GMT
Not After : Jul 29 18:00:24 2026 GMT
Subject: CN=2e94901f4994430ac056dc0e2efd87257e92b89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2c:b7:b4:32:8d:7d:3b:6f:d6:f4:11:4f:96:
65:8e:3b:7f:8a:05:3f:23:55:64:15:23:29:4e:ab:
87:8e:4e:d2:98:1d:9a:61:79:91:fb:16:1f:69:9c:
be:46:f8:cb:33:d5:92:1e:9a:e1:9a:c9:18:91:f5:
ab:8d:ba:fa:c1:93:45:6a:0d:3b:a0:5e:10:b2:c2:
30:8f:f7:08:72:b9:2c:f8:6d:74:db:53:f8:1b:dc:
a1:4a:22:a0:bd:d3:3e:0f:2b:63:ce:42:bd:65:c1:
e1:b6:96:20:d3:27:d6:21:35:ad:b8:f3:39:02:fa:
5a:9a:82:81:3d:a4:95:fc:4e:b8:c5:1a:66:a9:76:
53:d7:c8:da:3e:ce:19:7b:4c:4f:c6:ae:3c:a4:65:
a5:3c:ce:75:39:2f:2f:cc:40:6c:7c:6a:1b:2a:f2:
03:8c:2f:9a:1c:28:52:82:a7:24:a1:b8:64:e6:24:
4c:51:2f:43:20:6b:19:0e:3e:0c:fd:1e:6f:ec:7e:
25:c9:b3:8b:7d:16:99:34:d6:d9:09:f4:f8:ab:08:
86:55:20:6c:e3:be:ae:63:d4:ec:5d:ac:fe:ad:49:
b8:5b:33:c3:42:92:9d:dd:45:3d:35:2e:f1:4e:2a:
58:8f:85:98:68:a5:97:dd:83:ed:02:a1:97:e3:c9:
35:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:94:90:1F:49:94:43:0A:C0:56:DC:0E:2E:FD:87:25:7E:92:B8:9C
X509v3 Authority Key Identifier:
keyid:FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a6:7b:97:6b:a9:80:c5:4c:07:37:77:ef:c1:c7:09:a2:ef:
18:57:a9:0e:5a:f7:9a:db:0e:84:91:46:07:9a:b7:66:b5:20:
21:88:ae:6c:b0:9b:83:0a:fc:58:2b:84:12:52:e0:f9:bb:ad:
fb:a9:35:10:5e:d5:12:33:80:5e:8c:7c:41:54:3b:1e:6f:3e:
e7:c3:bb:c5:85:7c:0c:8c:97:08:c3:72:17:da:12:4b:bb:5e:
48:99:31:85:36:75:c5:4a:64:d6:71:9e:6e:9f:9f:2c:8e:73:
68:c6:17:e4:85:c3:e6:ec:cf:43:11:6c:03:05:80:2e:79:00:
3f:27:84:00:86:cd:08:a5:4e:8b:ff:bf:c8:f4:18:eb:5a:6a:
10:30:e9:5f:56:d2:a0:27:2b:c6:aa:aa:02:39:f8:4f:53:67:
56:ef:a7:a5:76:d2:45:f7:70:ed:f0:8c:3a:e9:95:58:e6:94:
5a:f9:35:fd:38:a1:4c:cd:a6:d2:4d:37:5d:73:8f:0e:93:6f:
31:5f:1d:ab:14:4f:52:92:03:81:45:1d:93:15:59:c2:fa:d8:
5f:f9:76:e3:18:64:70:20:89:7b:24:68:f5:d1:73:dc:88:f6:
73:e7:c8:ca:21:c6:63:14:9f:8f:97:80:e8:ad:01:5a:db:3c:
60:a1:f2:a3
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+p4o4nxJZYxZBizDVB6d5hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMWIyNDc4ZGZlMGYzM2EyNzhiMTNmNDJkZDMxOTYwMWQ2
Mzc4YTgwHhcNMjYwNzI4MTgwMDI0WhcNMjYwNzI5MTgwMDI0WjAzMTEwLwYDVQQD
EygyZTk0OTAxZjQ5OTQ0MzBhYzA1NmRjMGUyZWZkODcyNTdlOTJiODljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iy3tDKNfTtv1vQRT5Zljjt/igU/
I1VkFSMpTquHjk7SmB2aYXmR+xYfaZy+RvjLM9WSHprhmskYkfWrjbr6wZNFag07
oF4QssIwj/cIcrks+G1021P4G9yhSiKgvdM+DytjzkK9ZcHhtpYg0yfWITWtuPM5
AvpamoKBPaSV/E64xRpmqXZT18jaPs4Ze0xPxq48pGWlPM51OS8vzEBsfGobKvID
jC+aHChSgqckobhk5iRMUS9DIGsZDj4M/R5v7H4lybOLfRaZNNbZCfT4qwiGVSBs
476uY9TsXaz+rUm4WzPDQpKd3UU9NS7xTipYj4WYaKWX3YPtAqGX48k1vwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFC6UkB9JlEMKwFbcDi79hyV+kricMB8GA1UdIwQY
MBaAFPobJHjf4PM6J4sT9C3TGWAdY3ioMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1oc2tlTl9nOHpvbml4UDBMZE1aWUIxamVLZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvMDhhOWM4LTRiZTMtNDY4Mi1hZjgy
LTJhMWNjZTdkMmM2NS8xLzEtaHNrZU5fZzh6b25peFAwTGRNWllCMWplS2cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2FmLzA4YTljOC00YmUzLTQ2ODItYWY4Mi0yYTFjY2U3ZDJj
NjUvMS8xLWhza2VOX2c4em9uaXhQMExkTVpZQjFqZUtnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEqZ7
l2upgMVMBzd378HHCaLvGFepDlr3mtsOhJFGB5q3ZrUgIYiubLCbgwr8WCuEElLg
+but+6k1EF7VEjOAXox8QVQ7Hm8+58O7xYV8DIyXCMNyF9oSS7teSJkxhTZ1xUpk
1nGebp+fLI5zaMYX5IXD5uzPQxFsAwWALnkAPyeEAIbNCKVOi/+/yPQY61pqEDDp
X1bSoCcrxqqqAjn4T1NnVu+npXbSRfdw7fCMOumVWOaUWvk1/TihTM2m0k03XXOP
DpNvMV8dqxRPUpIDgUUdkxVZwvrYX/l24xhkcCCJeyRo9dFz3Ij2c+fIyiHGYxSf
j5eA6K0BWts8YKHyow==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:56:25 2026 by rpki-client