Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
File: hZtbaj2CvQDtMcbOs66nrVke5Tc.mft (raw, json)
Hash identifier: ZbkfFOmw+AxTANfwgbLCgp7QdNkDhmRoWrsoLw4zY1E=
Subject key identifier: 72:6B:C1:20:1C:00:D1:4C:B3:7B:61:3F:4F:19:4A:FD:48:7A:F2:34
Authority key identifier: 85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
Certificate issuer: /CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Certificate serial: 019D29972A433C050E5265F9975B5357BDBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
Manifest number: 0934
Signing time: Thu 26 Mar 2026 10:01:05 +0000
Manifest this update: Thu 26 Mar 2026 10:01:05 +0000
Manifest next update: Fri 27 Mar 2026 10:01:05 +0000
Files and hashes: 1: WONQ7npwfGt536jW_jiQ6ofmsbE.roa (hash: wXrQD7008VodzAdmV5Adtb+RMKX/kAHGByf3aYplnok=)
2: hZtbaj2CvQDtMcbOs66nrVke5Tc.crl (hash: g1zWS9PSeYB9XzVF6AKCKO2fOWTN//TaSVe8ci7bAN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:2a:43:3c:05:0e:52:65:f9:97:5b:53:57:bd:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Validity
Not Before: Mar 26 10:01:05 2026 GMT
Not After : Mar 27 10:01:05 2026 GMT
Subject: CN=726bc1201c00d14cb37b613f4f194afd487af234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:07:d6:3b:e8:e3:f6:a8:83:9c:ca:b0:82:a5:
cf:7e:1e:4b:a4:b8:7d:4b:20:96:b1:89:36:9e:ad:
ad:38:e6:a3:ac:e8:12:34:f1:89:c3:41:c2:93:30:
7c:45:3d:02:05:15:a9:7b:bf:57:f8:7d:eb:1d:3b:
9a:69:f7:43:fd:82:3d:8b:cf:52:2a:94:44:1f:0d:
85:b4:5b:6a:a6:e0:7d:a3:7b:b7:cd:42:62:41:c3:
d3:52:6f:c5:35:38:fb:1f:0a:df:9a:9b:81:7a:58:
75:0e:2d:85:77:1b:63:f0:0a:15:01:1c:2a:d1:18:
06:fa:d1:95:bd:d7:2b:30:12:6e:29:44:84:57:7b:
95:5d:a6:c3:ab:c1:be:c7:ab:60:61:6d:11:dc:47:
1e:ca:c3:a8:f2:80:bb:ad:3e:96:56:a2:aa:8e:c3:
d9:63:43:e9:70:c9:88:a1:9c:3e:76:37:5e:8f:c8:
71:15:a2:69:9d:cb:fa:dc:a6:d5:0a:b4:84:18:54:
b4:e7:2c:cf:85:05:3c:12:ca:ce:b8:bb:fb:0d:08:
37:ca:f8:df:15:2e:1c:f9:9d:84:2f:94:c2:17:d6:
a1:a0:76:78:ea:ef:45:dc:5f:5d:0f:8f:f4:17:51:
cb:fe:7b:f1:0e:6a:73:c5:13:64:72:89:ad:6a:aa:
4b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6B:C1:20:1C:00:D1:4C:B3:7B:61:3F:4F:19:4A:FD:48:7A:F2:34
X509v3 Authority Key Identifier:
keyid:85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b1:95:fe:9c:6b:be:2a:90:a9:44:90:09:57:27:33:1f:23:
bb:53:5e:fd:95:8e:9c:74:b3:74:4c:e5:bb:27:d6:52:a9:50:
7c:1c:a6:6a:29:8a:72:1f:50:e2:64:5b:a9:57:5c:39:38:34:
91:04:b1:14:e0:f7:85:2c:b4:87:a4:39:1c:e2:7f:79:2d:89:
2f:fd:69:7f:86:c4:18:ec:ec:e2:7b:46:88:25:10:6c:09:f7:
e6:e6:3a:51:03:99:50:b0:6b:ef:01:43:64:94:f1:80:2b:19:
66:ab:ec:97:41:35:06:8c:1c:e9:5b:68:72:2a:73:05:54:c6:
32:ae:59:c0:dc:9e:1d:b6:45:b6:ea:07:e1:ef:f9:2f:f0:d2:
b1:b7:d6:1a:0f:65:ea:af:b9:30:b8:1d:e4:41:81:85:19:cc:
fe:3b:7a:1e:98:ba:f3:47:c7:25:38:0b:3f:68:41:a5:c7:50:
6a:c2:bc:2b:30:8f:9d:af:97:70:6f:82:ef:9b:84:ef:2d:7d:
f3:c1:59:35:40:cb:e3:20:da:a1:a2:0d:d7:ca:b1:47:52:a2:
98:22:fb:35:22:37:05:bb:ac:13:d4:9c:78:d0:2f:66:d8:dd:
6c:95:b9:d7:f5:de:dc:f2:06:f3:af:8e:18:6b:12:bb:b7:8e:
43:a5:cc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:26:08 2026 by rpki-client