Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
File: Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft (raw, json)
Hash identifier: dGNdHlmSMNDQXeu5Wup3lplGZ0m5RKsl2a8mU2Yo5LM=
Subject key identifier: 5F:81:21:29:CB:5B:E1:1E:75:47:C4:CC:12:FF:43:71:FF:BE:C7:EC
Authority key identifier: 1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C
Certificate issuer: /CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
Certificate serial: 019D9A3EF40E4E27F797B38E69DD2629B778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
Manifest number: 0B00
Signing time: Fri 17 Apr 2026 07:01:50 +0000
Manifest this update: Fri 17 Apr 2026 07:01:50 +0000
Manifest next update: Sat 18 Apr 2026 07:01:50 +0000
Files and hashes: 1: Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl (hash: e3BhhhdPgQUZXKSZxcPnK9VBtTfIx11fOcUcqBFWU90=)
2: ZGLqYNMtolm5eL1wUXAdIeFX7S8.roa (hash: NyeDj2CCt8I3KwuYf4K9J8j74vTWf4ATwXYKw7Y/SY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:f4:0e:4e:27:f7:97:b3:8e:69:dd:26:29:b7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
Validity
Not Before: Apr 17 07:01:50 2026 GMT
Not After : Apr 18 07:01:50 2026 GMT
Subject: CN=5f812129cb5be11e7547c4cc12ff4371ffbec7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9d:1a:1a:2d:41:84:83:aa:ea:1c:c0:5f:ae:
04:80:58:f3:94:2b:61:d1:b3:3d:6d:21:9d:98:0a:
e7:8d:8e:a3:63:c6:f5:95:b2:23:7e:aa:f6:fb:b8:
ab:80:e1:2b:2d:92:7a:0b:ee:62:39:57:b2:8b:df:
43:bc:c7:c6:03:21:3e:e1:41:05:b1:63:37:e9:f4:
1e:b6:12:c8:1e:91:6a:11:45:83:d7:b8:c6:c7:be:
ea:73:dc:dc:32:90:dc:b6:ae:eb:31:f5:d7:ad:12:
4a:4b:1d:01:52:f0:29:f8:30:46:f2:08:23:79:8a:
8d:7e:c7:f8:15:c0:e1:45:e6:c0:37:e9:5d:75:f6:
1a:ac:b0:78:ec:e3:be:ac:ef:41:72:c7:36:14:80:
b6:82:d9:b7:4f:4d:22:9b:72:b4:e7:ff:bf:c9:1f:
c0:69:c0:e3:1f:37:49:4b:13:8e:fa:2b:5c:62:4e:
83:93:cf:3b:9d:42:c5:17:b6:0f:ea:6a:a4:f4:17:
30:0d:6d:0f:f9:83:12:24:1c:76:c7:fc:65:a3:7a:
67:9c:70:b7:5d:92:47:71:e7:08:bb:c8:a3:b7:bc:
fa:3b:94:90:e8:72:40:df:c1:93:3d:6e:84:47:d6:
7c:9a:3c:90:22:aa:f8:17:bc:dc:53:50:0f:91:ae:
fa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:81:21:29:CB:5B:E1:1E:75:47:C4:CC:12:FF:43:71:FF:BE:C7:EC
X509v3 Authority Key Identifier:
keyid:1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:5e:c0:c6:b6:2b:2e:3d:ca:1f:4e:04:94:71:a4:26:38:22:
4d:76:35:ad:64:88:76:9f:0d:9a:24:fb:33:ec:96:5c:f6:5b:
98:78:f9:d0:a7:8a:6b:b6:83:5f:b0:08:57:55:6e:a4:05:30:
82:3a:52:39:05:33:79:d9:24:5a:f2:fe:71:55:0e:17:87:7c:
e5:36:cc:51:94:1f:9b:8a:7e:ed:2f:12:64:38:96:31:c1:d3:
25:c2:be:7d:2d:47:cf:22:f7:90:0a:76:b0:fb:bc:f0:78:8a:
30:a9:61:5a:10:02:ca:d3:51:45:99:d4:81:7e:21:60:45:8b:
4e:6c:3e:ec:8a:4d:fd:8b:ed:96:3d:dd:52:35:f4:36:b8:01:
6f:b4:12:9f:89:41:79:9a:b2:a0:22:c8:8f:cc:34:03:14:08:
2c:16:a7:0c:13:83:32:a3:bf:40:3b:dd:89:29:6a:12:41:b8:
9a:28:3b:83:4b:ec:f0:fe:2d:00:07:c0:02:39:1f:a8:69:4e:
01:79:75:f7:2f:a6:31:ec:a6:bc:34:31:14:ca:04:6b:44:0c:
4f:12:2e:5b:2e:2e:d7:0e:5d:2a:df:7a:a8:2f:30:1c:ba:39:
bb:64:91:7d:a2:9c:28:3c:79:94:13:98:04:10:20:7e:f5:10:
37:f3:be:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:49:10 2026 by rpki-client