Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
File: HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft (raw, json)
Hash identifier: QWgxcFpCXLJaEa+0bPBSzmgYJ7X/6NkkDvKkOVuz4Mw=
Subject key identifier: D4:24:7D:17:29:9E:74:74:8D:3A:D9:AF:00:19:D8:29:3A:2B:23:32
Authority key identifier: 1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
Certificate issuer: /CN=1c766b058c096753a34ad625d53275cd2dba5b33
Certificate serial: 019D28BB7536FCC56B78FE6F417F18E11D75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
Manifest number: 15CC
Signing time: Thu 26 Mar 2026 06:01:06 +0000
Manifest this update: Thu 26 Mar 2026 06:01:06 +0000
Manifest next update: Fri 27 Mar 2026 06:01:06 +0000
Files and hashes: 1: GNlEKqFh-Tv2hz0SznfgxA4czj8.roa (hash: 43aHiWheagiqIIyy3ZQAw5+wp/fUUv/1/kOcWYJ6M+c=)
2: HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl (hash: Q5fWGExIO+xjoimIXkgFM5i9JPIvZvhN4nOP8LzCQdQ=)
3: lJxYVzr-KS-fYsC57OKvflP8A4c.roa (hash: 4pvbPMsGzdgVlC585Dyoz1kyokZkz2DdP27jl7Yydb4=)
4: r-1SzrZjoEXcWaVFk74aF23TjJ0.roa (hash: sRjFv0mWTbb1HZj7c7GM888be2VPScRA9imdmTy3Guc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:75:36:fc:c5:6b:78:fe:6f:41:7f:18:e1:1d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c766b058c096753a34ad625d53275cd2dba5b33
Validity
Not Before: Mar 26 06:01:06 2026 GMT
Not After : Mar 27 06:01:06 2026 GMT
Subject: CN=d4247d17299e74748d3ad9af0019d8293a2b2332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e4:f1:50:a2:25:6c:cc:ff:35:22:32:28:71:
39:30:ca:b1:c9:db:70:37:1e:b5:3a:23:20:76:c7:
92:93:ba:e3:6b:2e:ef:32:eb:91:20:cd:15:f7:3b:
1f:5a:2c:ea:75:a2:3c:e3:70:7b:f9:01:5c:44:0e:
be:0a:a8:42:7d:8d:40:28:df:8c:81:2d:6d:e2:b5:
36:4b:5c:35:fe:14:3d:6e:4a:f4:83:bd:fe:8d:a5:
0d:46:f3:fe:ae:54:19:3a:4b:fb:76:81:f7:56:3e:
34:a4:2f:84:67:be:3c:6a:a6:d1:97:08:51:a9:6b:
71:33:13:ba:14:e3:a6:03:22:19:4f:e0:37:d9:f1:
1c:f0:c6:d5:e5:32:37:9c:7b:3c:cb:d5:91:b5:60:
25:e3:4c:c6:5d:1d:b9:97:e1:25:96:13:95:5a:b2:
f2:e4:67:e6:9a:4e:ea:97:e9:91:39:0b:c9:09:30:
99:9b:ab:ac:eb:4f:90:7a:71:bd:31:5c:fa:7e:bb:
7e:01:ad:e0:77:c6:37:14:fc:06:5d:35:66:dc:17:
67:c6:3b:b2:4b:f8:5e:d0:fa:c6:c7:0d:78:3a:be:
0d:7d:78:54:a0:bb:dd:68:bb:d0:36:e5:19:ea:f5:
5c:cd:64:7f:79:e1:5d:be:4b:1c:51:90:e3:80:da:
a2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:24:7D:17:29:9E:74:74:8D:3A:D9:AF:00:19:D8:29:3A:2B:23:32
X509v3 Authority Key Identifier:
keyid:1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:00:5c:86:62:60:6f:5a:ef:98:4d:05:93:44:26:4f:27:73:
93:5c:fb:44:ff:b2:da:41:e6:ff:a4:d7:8d:ad:22:15:6b:bf:
4c:a8:8a:99:cf:1c:46:21:24:d5:1f:ad:c6:1a:dd:a8:66:76:
38:1e:67:ea:ec:3c:ed:4a:9a:cd:d2:0c:d7:da:34:0e:af:b6:
d0:6c:2f:b1:cd:bc:b5:0f:c5:ff:22:7a:70:fe:48:01:f8:fa:
50:f0:08:53:90:43:c4:b6:f3:c8:61:13:cd:13:1b:38:1e:85:
3e:d6:22:e4:e4:44:ea:3b:39:be:c7:4e:67:44:e1:ea:fa:97:
9a:57:fd:3f:86:2f:f9:0e:39:f0:62:2f:6b:13:38:33:7d:1c:
25:ed:72:40:b2:84:57:1f:6f:f6:f5:a3:05:8a:93:68:fb:83:
76:13:92:3f:64:0a:63:10:24:62:8c:5f:34:01:73:10:0b:88:
eb:c8:f5:93:7f:cf:d4:ce:55:00:21:5e:5f:64:f9:b9:bd:4b:
95:50:f0:33:4c:c3:f5:2d:26:0f:97:b0:c6:9a:88:e8:50:19:
f5:b5:2b:6b:66:a6:6b:e4:89:5c:04:fd:ce:58:86:d5:5b:45:
6d:06:c7:49:6a:55:fd:84:ae:c8:a9:fe:13:d6:51:11:aa:8e:
d8:94:65:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:08:38 2026 by rpki-client