Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
File: HZoJxRB-fkTKeNxy1RlzftPdMRo.mft (raw, json)
Hash identifier: d5x2p+g/1HHdSFb1k3dYsyvzlwUECHU5gNekj32W2u8=
Subject key identifier: 8A:A5:F0:90:AF:FD:3E:30:53:B2:7F:9C:FF:A6:63:85:5D:95:D3:EC
Authority key identifier: 1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A
Certificate issuer: /CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
Certificate serial: 019CACEBA6DC905B65D8C0583D8F5C24AF8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
Manifest number: 16AE
Signing time: Mon 02 Mar 2026 05:00:50 +0000
Manifest this update: Mon 02 Mar 2026 05:00:50 +0000
Manifest next update: Tue 03 Mar 2026 05:00:50 +0000
Files and hashes: 1: HZoJxRB-fkTKeNxy1RlzftPdMRo.crl (hash: YRUp8LTeEaCnTQmAg9/uPdAPP4JSA5FC2WwMt1HCYDM=)
2: _wGjPopaleb7rolTBZPWY4rLAR0.roa (hash: cxMklFmwljucLQ52IKrbd2Z95wZK3+gwqoZkVO4J3co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:a6:dc:90:5b:65:d8:c0:58:3d:8f:5c:24:af:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
Validity
Not Before: Mar 2 05:00:50 2026 GMT
Not After : Mar 3 05:00:50 2026 GMT
Subject: CN=8aa5f090affd3e3053b27f9cffa663855d95d3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:02:87:f7:73:93:c5:86:c3:76:74:d5:3f:85:
58:b7:86:d2:af:9c:6d:18:38:c3:97:30:55:5d:64:
b0:a3:e0:39:d3:1b:15:69:78:1d:bd:b7:8d:7b:2f:
2a:e2:66:4f:7c:60:42:34:d1:6b:86:75:3f:f4:47:
9d:d5:98:48:de:b8:2f:64:cf:7e:c0:c4:97:37:1f:
4e:69:02:61:e8:2d:3f:a3:b6:c4:60:ce:14:2d:c0:
47:f0:9b:1a:13:d0:b7:1c:e3:ec:49:7e:b6:91:3a:
15:ac:a5:e0:48:eb:44:d6:89:5f:50:8a:68:42:e6:
14:b5:53:b5:4b:4c:17:8a:7b:9e:bf:8d:62:7a:11:
0e:86:75:4c:a5:6e:cf:20:f0:4f:59:05:29:77:69:
42:a7:bf:74:f4:02:37:f2:6f:2a:cc:14:bc:75:eb:
80:e8:86:6a:cf:64:48:b5:e6:45:d1:b0:3d:bd:b3:
5a:5e:10:d4:ff:d0:2a:31:db:56:d8:bf:f2:36:80:
d6:9b:c8:f9:35:11:77:fd:9f:a2:8c:70:10:52:7e:
ca:26:b5:93:09:8a:9f:a6:17:59:a8:25:98:fa:29:
e3:19:62:f2:f8:f6:89:3d:cd:34:ea:18:a7:a2:e4:
78:dd:e7:1c:ea:0d:91:0a:c5:96:54:03:38:96:e7:
c4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A5:F0:90:AF:FD:3E:30:53:B2:7F:9C:FF:A6:63:85:5D:95:D3:EC
X509v3 Authority Key Identifier:
keyid:1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:2d:72:82:38:d9:f5:7e:7e:97:a7:46:c9:94:91:de:98:9d:
b2:ce:93:f8:8c:5f:ea:1d:77:b5:29:6d:29:35:41:80:ff:65:
47:f8:72:37:74:d6:88:74:4a:c1:17:36:78:25:99:66:ad:88:
ac:6e:f0:5c:0e:bf:02:77:29:0b:e6:1a:90:06:42:ae:8b:46:
43:9e:eb:6c:ab:6a:eb:9d:b2:b3:a5:95:5e:a4:f7:60:b7:47:
8d:c4:4a:5f:29:51:dd:69:fd:1a:a1:5f:9c:f3:ca:4c:12:9a:
75:9c:43:a8:18:9f:07:87:fa:7e:99:85:ec:5f:d8:c2:63:86:
bf:cb:72:96:3d:67:b5:87:1d:c9:60:fc:c8:68:98:16:51:00:
6c:d1:27:24:13:73:4a:75:08:41:34:f5:25:4b:31:68:3f:91:
7a:bb:3f:79:3b:4e:32:56:5c:45:74:e1:be:38:ca:2d:2d:29:
df:7f:40:4f:0c:ae:8a:83:1a:2c:56:1a:ae:2e:19:e5:92:cb:
40:79:f1:ad:e5:26:24:aa:08:8d:fe:de:8d:cf:59:84:34:2c:
8f:33:19:c9:e8:c5:b4:5f:06:4a:06:49:9d:b8:52:5a:c4:c8:
c3:93:11:1d:1f:cf:b8:4a:91:4d:5e:7c:c8:98:c0:26:e6:30:
c0:89:46:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:24:02 2026 by rpki-client