Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
File: HAkzrn59aIUNoxv6gb_KuLGFuMo.mft (raw, json)
Hash identifier: s9a8EP6IM1cswdnNFXV9sN+dRW4VlkjQxWXXsspaLFU=
Subject key identifier: AC:5B:70:74:35:61:3E:40:1E:06:26:CA:F1:BD:D8:21:AD:FE:4C:3D
Authority key identifier: 1C:09:33:AE:7E:7D:68:85:0D:A3:1B:FA:81:BF:CA:B8:B1:85:B8:CA
Certificate issuer: /CN=1c0933ae7e7d68850da31bfa81bfcab8b185b8ca
Certificate serial: 019CA97D1B2F1371554B517874A204ADA323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
Manifest number: 0ED8
Signing time: Sun 01 Mar 2026 13:01:14 +0000
Manifest this update: Sun 01 Mar 2026 13:01:14 +0000
Manifest next update: Mon 02 Mar 2026 13:01:14 +0000
Files and hashes: 1: HAkzrn59aIUNoxv6gb_KuLGFuMo.crl (hash: TlxqgrhcA9tNtnJEMb4cPKyZjS6B/9/gHHmnZ2ITKRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:1b:2f:13:71:55:4b:51:78:74:a2:04:ad:a3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0933ae7e7d68850da31bfa81bfcab8b185b8ca
Validity
Not Before: Mar 1 13:01:14 2026 GMT
Not After : Mar 2 13:01:14 2026 GMT
Subject: CN=ac5b707435613e401e0626caf1bdd821adfe4c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f1:8d:e6:33:1a:e9:ed:63:5e:9c:38:99:c7:
77:f7:72:e3:bc:71:0d:ba:29:6a:98:f3:82:de:ed:
92:aa:05:89:17:53:22:31:fb:10:cf:69:55:e6:cb:
b8:7f:f5:d7:70:f8:40:0f:3f:1c:40:dc:b6:fc:23:
e3:7d:a7:e5:e8:e6:dd:0a:8d:2c:f1:2d:1c:9f:b9:
b7:5e:9f:f8:00:f1:57:94:d0:5c:71:27:f9:54:8d:
3e:90:a8:fb:51:db:42:09:3c:02:9e:43:c2:34:da:
00:ce:f2:14:c0:f6:2d:ad:39:3f:f2:09:06:ef:b7:
2d:09:e5:65:34:4d:11:21:9f:a0:f5:9d:3b:8e:a4:
3a:c2:20:b7:1a:0e:28:4e:75:79:2b:73:1b:4f:fd:
c0:43:61:d5:90:26:ba:26:91:3d:4e:23:41:3d:53:
6c:61:87:e9:0e:74:9e:1a:00:0a:0b:65:df:07:72:
24:36:86:3c:6b:1f:e6:63:82:c8:43:c1:9f:17:8d:
ab:0b:08:ad:8b:8a:df:a6:b4:35:49:68:d6:e5:63:
a4:9b:82:d9:a5:9f:bb:ed:5f:ac:6f:d5:d9:64:be:
35:d2:3e:37:31:18:6b:1c:4d:d8:13:e5:1c:b2:e9:
1e:ff:ba:7f:8f:1f:54:ce:56:4a:e2:f9:8c:79:7e:
e8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5B:70:74:35:61:3E:40:1E:06:26:CA:F1:BD:D8:21:AD:FE:4C:3D
X509v3 Authority Key Identifier:
keyid:1C:09:33:AE:7E:7D:68:85:0D:A3:1B:FA:81:BF:CA:B8:B1:85:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0d:f3:07:32:8e:21:db:23:5d:08:ae:4b:c0:05:7b:ba:50:
20:28:65:2f:a2:fd:38:f6:e5:d4:8c:d5:85:22:b0:01:33:67:
4c:fd:5d:7e:d6:6c:12:6c:22:4c:33:61:c7:e5:48:82:20:0f:
ac:46:ab:b0:4b:d4:27:23:da:a8:5c:fb:af:1b:8d:41:54:34:
0a:04:de:ea:bc:43:f2:d4:57:bf:dc:cf:37:13:66:af:88:20:
77:5d:f0:dd:95:7c:70:46:7a:6e:11:e0:8c:d8:13:b6:38:25:
2b:78:1d:99:b3:7f:9a:76:0f:68:2c:da:84:8b:e4:d3:a8:1c:
09:60:9a:b6:a5:5c:96:c9:69:5e:c0:31:d4:71:3c:d2:93:ce:
70:53:54:bf:c8:5e:69:cd:cc:fe:ab:f3:d8:7b:ba:70:a0:43:
8e:66:d4:47:3d:78:03:ad:25:8a:3a:06:03:fb:aa:a1:77:e7:
ab:70:19:f8:29:dc:67:6c:cb:91:1c:74:ed:54:b6:01:4a:cd:
0f:d7:13:0b:d6:a5:0a:b9:f3:54:d2:f5:78:81:17:1f:64:3c:
d3:65:cc:a5:eb:a0:17:bd:4a:50:ad:54:4a:d9:8a:7b:67:d1:
e7:2a:05:fe:9b:92:41:a2:fc:03:bb:50:e9:71:f4:5c:e2:f3:
0f:59:fa:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:40 2026 by rpki-client