Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
File: 1-hskeN_g8zonixP0LdMZYB1jeKg.mft (raw, json)
Hash identifier: Ep9jKTGesHKj2o130HodIo98sqNau7ivU9FHemUgQF0=
Subject key identifier: 8E:63:90:57:3F:82:0E:8B:1D:75:C8:9A:BB:FD:48:AA:F4:9C:DD:C2
Authority key identifier: FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
Certificate issuer: /CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Certificate serial: 019D98BDC04C7EBE820829D42895BB932F18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
Manifest number: 09EB
Signing time: Fri 17 Apr 2026 00:01:05 +0000
Manifest this update: Fri 17 Apr 2026 00:01:05 +0000
Manifest next update: Sat 18 Apr 2026 00:01:05 +0000
Files and hashes: 1: 1-hskeN_g8zonixP0LdMZYB1jeKg.crl (hash: RFsV6Jne38Xz5Z/YEGI7YQgNYOqbvUQ/CQnMRqqmdTE=)
2: 67OHgQ9oY03pFObGOEWvUB45FRY.roa (hash: Bw9KDuBO2RcXnPqBfJKA7s6j1vu8KiRAlWxURETULCk=)
3: JlERsOGpN9Jutvxh9cBCd5WIDhQ.roa (hash: 0TAzyXpM7LaR9Wg7trsFQxzAH4r7+W5/vZ5ekplhpko=)
4: o0B3A-uOWMJ0Q3rI62ZiZW1aPL4.roa (hash: 7bwGC4W14PVYfYqbu9cx4x9X5c24UYWk/Q4pZluMhT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:c0:4c:7e:be:82:08:29:d4:28:95:bb:93:2f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Validity
Not Before: Apr 17 00:01:05 2026 GMT
Not After : Apr 18 00:01:05 2026 GMT
Subject: CN=8e6390573f820e8b1d75c89abbfd48aaf49cddc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c3:d3:94:9c:67:6b:2b:d9:a8:ba:82:db:48:
a9:b6:d3:d2:b3:95:2f:dc:21:54:99:0e:77:00:83:
b2:61:67:24:84:d7:5d:a4:27:c9:45:08:f0:7b:9d:
3b:60:32:56:a5:7a:fd:58:99:8a:36:dd:d4:ca:ac:
ff:22:3d:c9:51:09:c2:57:1e:d5:e5:a1:5c:62:13:
c6:03:c9:c5:c2:f7:fe:dc:18:02:f0:35:8d:98:f8:
a1:00:bc:08:2d:98:62:db:b1:d4:37:2e:32:9f:20:
62:24:18:c1:46:cb:de:83:22:27:cd:3c:46:d7:18:
ac:59:54:ac:55:61:21:a1:5e:a7:a6:b6:eb:ff:99:
21:ec:80:ee:8d:43:7a:7e:cf:15:de:3a:94:ff:e5:
cb:b7:c3:52:f6:fa:44:b5:f2:3a:dc:fe:dc:3a:45:
3e:6f:72:4a:4d:83:38:a9:21:e9:0b:6d:4a:78:18:
2d:e3:b3:e9:b2:ae:bc:37:a3:5f:2c:d4:0d:33:58:
d6:5b:8d:61:38:e1:be:33:06:4f:1d:fd:15:a9:83:
1d:42:c5:d4:da:8f:4e:9c:12:a2:89:9b:bd:61:3e:
d1:13:ad:49:bf:4a:ad:fa:96:3e:66:ad:db:ad:dd:
a5:85:ec:3a:42:bb:32:e7:95:e0:ba:76:4f:44:29:
e1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:63:90:57:3F:82:0E:8B:1D:75:C8:9A:BB:FD:48:AA:F4:9C:DD:C2
X509v3 Authority Key Identifier:
keyid:FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:28:fe:65:c8:82:5f:16:cd:4f:d9:0f:8f:8e:5d:f6:32:04:
07:da:f3:d0:85:88:52:4a:f6:8b:00:67:1f:9e:e0:ea:77:b2:
a8:3f:11:69:9e:2e:6a:0a:16:41:00:7e:c4:07:db:53:13:8e:
bd:b5:0a:ba:c4:c3:c3:83:b2:d1:07:ef:df:7a:66:3d:87:9c:
1e:5b:f6:1c:11:0a:5c:c9:1b:0c:fa:c0:b6:b7:3c:24:18:54:
a7:66:19:ee:bb:cf:16:3a:91:7b:09:8c:c2:6e:53:a4:ba:4f:
30:4f:e4:f7:a1:62:7c:c0:78:16:0a:60:72:34:a1:b0:d8:13:
ce:16:0c:07:9c:df:2f:c6:1c:d1:1c:04:5c:27:5f:ec:22:c7:
60:bc:7a:1e:bf:79:53:09:d9:7f:23:e0:14:19:24:20:ce:67:
3f:03:36:48:87:c1:40:4a:a7:97:8b:64:9d:13:63:de:d2:e9:
f1:95:fc:fe:15:8d:8d:32:53:e8:03:26:0f:87:07:4f:e2:3b:
73:f2:84:4b:2f:1f:43:0e:15:dd:78:0d:39:cd:0d:a2:a8:3f:
bd:e0:9f:e4:14:e7:90:53:6b:04:99:ed:8e:03:3f:42:96:91:
37:5a:bb:c7:fc:70:b1:cf:c9:f8:03:95:6c:ab:c4:7b:55:b1:
96:cc:82:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:07:38 2026 by rpki-client