Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
File: Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft (raw, json)
Hash identifier: luTYnO9Wz9G5JbW+oxr0xLmHlxz/GWm2VsfCiZGG+l8=
Subject key identifier: D9:84:7E:55:12:38:CF:A2:7C:03:05:FD:F1:31:64:A3:D0:75:CD:D0
Authority key identifier: 1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C
Certificate issuer: /CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
Certificate serial: 01A0DE72FF8CB9524E4F7D019CDCF2B88363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
Manifest number: 0CB1
Signing time: Sat 26 Sep 2026 16:01:13 +0000
Manifest this update: Sat 26 Sep 2026 16:01:13 +0000
Manifest next update: Sun 27 Sep 2026 16:01:13 +0000
Files and hashes: 1: Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl (hash: zuwZoOXMZKQxcW/j26rCpUX9g+Pkw4gdpj0qnyvgEjM=)
2: ZGLqYNMtolm5eL1wUXAdIeFX7S8.roa (hash: NyeDj2CCt8I3KwuYf4K9J8j74vTWf4ATwXYKw7Y/SY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 16:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:72:ff:8c:b9:52:4e:4f:7d:01:9c:dc:f2:b8:83:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
Validity
Not Before: Sep 26 16:01:13 2026 GMT
Not After : Sep 27 16:01:13 2026 GMT
Subject: CN=d9847e551238cfa27c0305fdf13164a3d075cdd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5e:99:8d:bf:8f:dd:22:4a:fc:6d:3b:e5:c5:
d7:46:c5:ec:13:cd:79:b0:4b:49:66:65:af:06:f7:
b0:6a:4c:66:74:1a:b3:c8:90:de:c1:0a:3e:af:82:
53:23:f9:3d:e6:ff:ff:30:79:2f:5c:1f:44:20:9f:
d8:30:93:aa:70:76:13:ed:42:4a:01:87:b0:bf:76:
4d:b5:bb:7c:0f:44:82:1f:20:a3:d0:6b:3f:a6:58:
46:80:62:1a:cc:02:5d:70:91:d9:e3:07:ae:b9:f0:
06:91:52:6a:f8:77:e2:37:28:b0:d3:18:94:51:ad:
a5:b1:96:f9:2f:40:b9:e7:fb:e3:7e:30:9d:1c:18:
27:08:5b:eb:07:6e:32:2e:5d:e1:4f:2e:b0:be:84:
d1:e4:b3:96:be:65:32:1b:12:f2:e6:14:52:1f:df:
b2:41:a0:1d:3f:3f:97:d0:a2:6d:51:68:f1:81:5b:
69:59:18:01:77:da:cd:3c:b5:4d:56:32:f9:54:b3:
29:f4:93:e1:e1:36:00:c5:66:77:15:32:10:83:f1:
01:f6:24:73:68:9e:2a:84:8c:ab:11:90:20:35:a7:
38:60:8b:27:67:26:9b:d8:a0:aa:f7:6e:9a:a5:eb:
10:7b:f1:65:67:79:81:2a:c0:f9:77:ff:50:80:a7:
4d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:84:7E:55:12:38:CF:A2:7C:03:05:FD:F1:31:64:A3:D0:75:CD:D0
X509v3 Authority Key Identifier:
keyid:1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:71:19:a0:f3:25:00:eb:87:ee:07:42:42:b0:51:df:35:1a:
cd:f0:8b:74:66:17:5a:9e:3e:59:a6:54:de:12:07:8e:7a:0c:
9d:0d:ad:76:3b:b6:55:3a:ef:7c:f4:0d:de:c9:3f:ed:e9:32:
25:16:51:f2:d9:2d:19:c6:95:a7:64:59:28:77:62:af:ed:a0:
c6:46:16:4f:d2:e9:6d:bd:84:7e:ab:a1:4e:37:80:1f:62:1e:
c3:4a:7a:f7:42:6c:ea:48:7d:3e:bb:e5:03:fa:df:f7:15:3c:
fd:2e:e9:34:39:4f:c7:ed:74:e3:27:48:fe:59:64:07:97:dd:
fc:69:7f:40:0c:62:2f:1e:62:d3:51:04:1a:22:8a:9d:fd:e3:
a4:88:24:af:35:ad:28:71:c5:5e:5a:1a:31:21:9b:70:cd:e2:
10:0a:b2:36:9c:1c:2e:e2:e1:24:55:52:03:5b:3b:89:10:dd:
5d:48:b6:3f:cf:0e:cb:7e:39:04:26:74:c6:af:17:8a:79:5c:
d9:06:1a:3d:17:31:3d:04:a5:62:be:25:98:ef:ec:a2:89:6b:
42:07:8e:e9:4c:6b:b3:96:50:9e:7a:63:7d:4e:ed:74:51:96:
a1:a4:70:52:20:58:21:bb:ad:fc:9c:9f:65:0b:d2:ed:a2:0f:
ab:1a:a2:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDecv+MuVJOT30BnNzyuINjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmM2UzYmY1NjBkYTBiMTI2MThiMDI3YWFjYTYxZmFjNzhk
NWZmNWMwHhcNMjYwOTI2MTYwMTEzWhcNMjYwOTI3MTYwMTEzWjAzMTEwLwYDVQQD
EyhkOTg0N2U1NTEyMzhjZmEyN2MwMzA1ZmRmMTMxNjRhM2QwNzVjZGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyl6Zjb+P3SJK/G075cXXRsXsE815
sEtJZmWvBvewakxmdBqzyJDewQo+r4JTI/k95v//MHkvXB9EIJ/YMJOqcHYT7UJK
AYewv3ZNtbt8D0SCHyCj0Gs/plhGgGIazAJdcJHZ4weuufAGkVJq+HfiNyiw0xiU
Ua2lsZb5L0C55/vjfjCdHBgnCFvrB24yLl3hTy6wvoTR5LOWvmUyGxLy5hRSH9+y
QaAdPz+X0KJtUWjxgVtpWRgBd9rNPLVNVjL5VLMp9JPh4TYAxWZ3FTIQg/EB9iRz
aJ4qhIyrEZAgNac4YIsnZyab2KCq926apesQe/FlZ3mBKsD5d/9QgKdN0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmEflUSOM+ifAMF/fExZKPQdc3QMB8GA1UdIwQY
MBaAFB8+O/Vg2gsSYYsCeqymH6x41f9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHo0NzlXRGFDeEpoaXdKNnJLWWZySGpWXzF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81ZGIwYTgtYjhlNy00ZjQ0LWIwM2Et
ZWE1NzMxNjg0OTE3LzEvSHo0NzlXRGFDeEpoaXdKNnJLWWZySGpWXzF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81ZGIwYTgtYjhlNy00ZjQ0LWIwM2EtZWE1NzMxNjg0OTE3
LzEvSHo0NzlXRGFDeEpoaXdKNnJLWWZySGpWXzF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANnEZoPMl
AOuH7gdCQrBR3zUazfCLdGYXWp4+WaZU3hIHjnoMnQ2tdju2VTrvfPQN3sk/7eky
JRZR8tktGcaVp2RZKHdir+2gxkYWT9Lpbb2EfquhTjeAH2Iew0p690Js6kh9Prvl
A/rf9xU8/S7pNDlPx+104ydI/llkB5fd/Gl/QAxiLx5i01EEGiKKnf3jpIgkrzWt
KHHFXloaMSGbcM3iEAqyNpwcLuLhJFVSA1s7iRDdXUi2P88Oy345BCZ0xq8Xinlc
2QYaPRcxPQSlYr4lmO/soolrQgeO6Uxrs5ZQnnpjfU7tdFGWoaRwUiBYIbut/Jyf
ZQvS7aIPqxqiSA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 00:41:53 2026 by rpki-client