Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
File: hZjLxOjf8YUkBKmSddIwpWERBV8.mft (raw, json)
Hash identifier: c4LSBvIvngmVKBqgAbZmmbCI8VBncBW4l2xz+dnUWck=
Subject key identifier: 79:1F:CB:0F:6F:94:C9:7D:86:3C:DD:70:06:58:AC:C5:8F:DF:B1:BB
Authority key identifier: 85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
Certificate issuer: /CN=8598cbc4e8dff1852404a99275d230a56111055f
Certificate serial: 019CAAC66A356D5C311E3DE7ACF72356BC60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
Manifest number: 0895
Signing time: Sun 01 Mar 2026 19:00:55 +0000
Manifest this update: Sun 01 Mar 2026 19:00:55 +0000
Manifest next update: Mon 02 Mar 2026 19:00:55 +0000
Files and hashes: 1: 6Zls-m6M9cBINWFd4w7uZTmGtY8.roa (hash: G1IdsClkRwxJrpDcDQsqLk4FP+v4Gfd2cicmc4XSPyc=)
2: hZjLxOjf8YUkBKmSddIwpWERBV8.crl (hash: ZZG3TLHnm1mjQxx4xkFqhF0PousEHdqHd6S7KmEZLMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:6a:35:6d:5c:31:1e:3d:e7:ac:f7:23:56:bc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8598cbc4e8dff1852404a99275d230a56111055f
Validity
Not Before: Mar 1 19:00:55 2026 GMT
Not After : Mar 2 19:00:55 2026 GMT
Subject: CN=791fcb0f6f94c97d863cdd700658acc58fdfb1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:db:00:40:a1:35:fa:09:d3:30:f0:3d:c0:3d:
e4:e0:6f:42:11:df:9e:4c:d3:b5:cf:09:6d:26:38:
c9:1d:f3:91:d7:da:eb:f5:29:05:69:b3:92:70:93:
aa:17:06:85:dc:58:3c:6e:a6:02:fd:5d:56:56:00:
8c:25:b9:ae:f4:40:42:a4:5b:46:3a:1f:ee:d4:04:
0d:eb:d0:c1:82:c8:60:23:25:ae:32:f3:12:ec:3b:
60:fa:79:5c:32:62:94:64:75:e7:48:98:da:5c:51:
ee:de:06:6c:9c:e1:44:da:97:56:eb:33:59:42:c6:
0c:ff:38:9b:f5:80:ce:b1:7c:38:19:33:c8:63:1d:
f2:84:bb:ba:10:0b:49:c6:45:dd:e8:d4:86:a0:ad:
c2:fb:1c:7b:4d:4b:f2:9a:71:47:47:a8:72:3c:44:
b9:79:08:f9:6b:11:da:85:1c:15:2e:6d:56:77:d1:
22:63:52:6f:75:6f:75:92:74:fd:e6:fd:cc:49:c7:
14:8c:28:32:41:c5:06:77:17:94:1e:61:b7:a5:3f:
58:34:a5:b7:fb:7f:ad:2d:c6:4e:29:04:53:24:49:
d2:f5:1d:13:91:99:75:28:4b:de:42:d9:cd:f3:28:
19:ac:52:e6:29:e5:c0:15:05:a6:2a:29:81:71:d4:
8f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1F:CB:0F:6F:94:C9:7D:86:3C:DD:70:06:58:AC:C5:8F:DF:B1:BB
X509v3 Authority Key Identifier:
keyid:85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d8:51:39:73:ff:d6:5a:89:33:fc:72:bf:83:a0:1f:24:ce:
d2:1d:47:a6:85:32:ce:3e:b8:92:a1:8c:83:56:c3:8b:90:39:
29:74:00:47:a5:b9:0b:9a:9b:4b:21:e1:89:ad:98:4d:1c:a5:
ed:41:42:10:14:e3:59:10:30:1f:58:19:11:bc:05:ed:5f:f8:
c8:ab:aa:fa:92:ce:0d:d6:5a:0d:93:47:48:10:96:d9:fc:2d:
6c:5a:39:1a:c7:0d:96:fa:f7:39:cc:19:19:83:7b:04:f8:0e:
9a:be:29:0d:89:3c:35:41:68:dc:cb:7a:3f:5f:82:6d:fd:03:
63:7e:f3:a6:c7:18:2d:4d:40:c9:5e:74:47:04:b2:11:ee:0f:
ed:f5:1e:c7:83:56:34:a5:8d:fd:5c:bc:27:73:23:ea:a5:6c:
5b:69:68:d8:84:74:9a:0a:7a:10:43:ee:e7:45:f8:a3:0a:d7:
e5:c9:20:50:1d:d0:bc:e8:9f:16:fd:60:ab:be:45:f9:29:49:
2e:86:b4:2a:dc:31:7a:3a:4d:b6:4b:51:43:68:41:e9:4e:fb:
f1:2e:3a:f3:13:d0:2a:a2:f1:aa:6b:5a:27:cc:f9:39:f5:ce:
4d:d9:03:cc:dc:21:83:17:00:38:83:ff:6e:b8:ab:0a:bc:0c:
5e:61:69:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:32 2026 by rpki-client