Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
File: Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft (raw, json)
Hash identifier: 1XDWOpqFgZBpQZqwK8WSA+CCBO+dgtfcV425yyRCa8Q=
Subject key identifier: 1A:3E:86:F9:31:07:61:C2:2D:BF:2D:5A:1D:C4:D2:C2:91:5C:A8:D2
Authority key identifier: 1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C
Certificate issuer: /CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
Certificate serial: 019CAAC6FA9E737EBDC431DDAE670262CB49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
Manifest number: 0A84
Signing time: Sun 01 Mar 2026 19:01:32 +0000
Manifest this update: Sun 01 Mar 2026 19:01:32 +0000
Manifest next update: Mon 02 Mar 2026 19:01:32 +0000
Files and hashes: 1: Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl (hash: 3IGuYRBTSbhpXSsSSiXLFeAXdiNQ3YneqDA2UBmG134=)
2: ZGLqYNMtolm5eL1wUXAdIeFX7S8.roa (hash: NyeDj2CCt8I3KwuYf4K9J8j74vTWf4ATwXYKw7Y/SY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:fa:9e:73:7e:bd:c4:31:dd:ae:67:02:62:cb:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
Validity
Not Before: Mar 1 19:01:32 2026 GMT
Not After : Mar 2 19:01:32 2026 GMT
Subject: CN=1a3e86f9310761c22dbf2d5a1dc4d2c2915ca8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b0:35:c3:f5:e8:2f:c1:fb:cf:15:6e:40:fd:
34:82:47:4f:4b:33:8c:5d:5d:c3:3a:51:37:3c:96:
35:48:c8:43:d4:a4:57:2f:42:1f:05:61:9d:1f:71:
a9:e2:41:48:96:e4:54:13:d5:82:98:c7:ca:48:9c:
a4:c8:d6:d2:76:08:2f:9b:e1:74:06:8e:21:9f:92:
5e:01:92:20:97:9f:ae:5e:6b:c3:18:e7:98:7b:60:
e8:df:55:72:f9:52:d3:2d:30:91:db:d0:a4:06:32:
66:82:2a:cf:80:33:d8:34:98:9b:c5:8d:56:20:49:
92:66:45:47:dc:cb:52:f4:08:72:93:f5:f4:b8:a5:
c8:63:9b:11:ce:1a:54:4f:95:a4:a9:1d:ce:35:2b:
cc:ed:5e:41:72:25:a4:e9:fd:c5:8b:84:8e:9f:00:
f9:54:b9:e6:7b:cb:ee:cb:86:28:bb:2b:d9:d8:bb:
96:2a:00:38:52:a7:df:d6:a5:53:a8:a9:0d:91:46:
81:48:42:bf:44:b9:04:ff:cf:69:c8:25:6a:e5:89:
8f:90:01:7a:f4:c9:10:36:36:89:13:ee:e3:97:c9:
6e:9b:dd:f9:8a:24:b4:44:bb:62:9f:03:9c:e0:a1:
46:4f:1f:3a:6f:9e:db:66:64:3b:e3:b9:d7:93:2f:
2f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3E:86:F9:31:07:61:C2:2D:BF:2D:5A:1D:C4:D2:C2:91:5C:A8:D2
X509v3 Authority Key Identifier:
keyid:1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:06:94:42:cb:12:31:a6:27:93:cf:44:66:33:30:5d:b9:8a:
e0:cb:0e:f6:be:bf:e3:a8:23:2b:cb:4b:12:56:5f:2c:f3:7d:
ab:4d:f3:07:68:d7:68:00:05:8a:58:c4:51:93:60:72:34:ec:
38:a8:a5:c3:d2:30:1c:22:9f:dc:93:15:0d:0b:49:47:79:12:
53:96:9f:19:91:07:98:25:08:55:67:4c:7c:bf:b3:e2:25:41:
f1:5c:7b:ae:c0:d6:2a:da:e4:29:94:58:20:4f:14:b5:00:29:
a9:da:37:7e:fd:dc:8e:25:74:04:42:c9:f5:18:de:fa:08:ca:
64:5c:19:9d:71:8f:8a:57:f0:fa:6e:54:90:ff:d1:f3:63:68:
75:95:56:dd:8c:c1:47:d5:b2:f1:6f:c0:f1:ef:06:42:19:64:
bb:86:12:c6:20:9e:64:84:14:80:a6:07:ec:f9:58:31:68:4e:
fd:15:d9:ea:dd:8f:a2:8a:88:22:16:27:0a:3f:e2:27:d8:08:
07:06:7b:62:4e:a9:56:16:e4:bd:9e:8a:6c:a6:a0:42:ed:d9:
ef:5c:9a:f6:67:c6:e4:8d:7a:d3:81:70:0d:00:b0:f4:8f:b3:
a1:ed:3c:b2:82:ef:7a:57:0a:d7:72:98:79:c7:1d:76:f1:0c:
48:b9:d7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:51:02 2026 by rpki-client