Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft
File: HsazH53p01lJWdHlnWbJt-k_7WY.mft (raw, json)
Hash identifier: 1zEoL8mnB++QQL3V3U4/Ro6Ce95WsrskvWNGYPo2jWk=
Subject key identifier: 67:9B:11:9F:A5:02:B1:2F:33:66:B7:28:6A:D5:0E:AD:F4:09:E2:B1
Authority key identifier: 1E:C6:B3:1F:9D:E9:D3:59:49:59:D1:E5:9D:66:C9:B7:E9:3F:ED:66
Certificate issuer: /CN=1ec6b31f9de9d3594959d1e59d66c9b7e93fed66
Certificate serial: 019D25F1751391DAA50798EEB73E736632D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsazH53p01lJWdHlnWbJt-k_7WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft
Manifest number: 0142
Signing time: Wed 25 Mar 2026 17:01:14 +0000
Manifest this update: Wed 25 Mar 2026 17:01:14 +0000
Manifest next update: Thu 26 Mar 2026 17:01:14 +0000
Files and hashes: 1: HsazH53p01lJWdHlnWbJt-k_7WY.crl (hash: QjLotaKy0UI446ioKKactcs1tyc+OhUSyU8V1s8B8zY=)
2: aP0YLe6Eyddh_CvenzS4fc6xbEY.asa (hash: esUQ4x4KdmAuhxjOhLEJlSyDjJw3j6M3LGFJwk2gu70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HsazH53p01lJWdHlnWbJt-k_7WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:75:13:91:da:a5:07:98:ee:b7:3e:73:66:32:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ec6b31f9de9d3594959d1e59d66c9b7e93fed66
Validity
Not Before: Mar 25 17:01:14 2026 GMT
Not After : Mar 26 17:01:14 2026 GMT
Subject: CN=679b119fa502b12f3366b7286ad50eadf409e2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2a:11:d1:1c:3e:3a:b3:0c:d2:d4:29:a9:18:
e7:19:26:40:16:63:0e:22:00:8a:e9:02:e4:2b:aa:
c7:d4:21:64:e0:1c:17:f6:24:42:86:07:cb:02:27:
5a:60:b0:26:ba:9c:03:4d:49:53:e5:59:00:b5:a4:
fd:66:9d:84:96:44:7a:ec:70:3b:7d:48:de:e0:41:
da:a9:93:dd:2c:b0:0f:36:40:27:39:fd:56:69:16:
90:79:0f:2a:91:82:bf:c7:f5:e5:80:02:ef:93:8f:
c2:2a:99:cf:d9:16:cf:04:5b:aa:21:40:98:c1:59:
b3:f0:87:4e:4c:7e:57:8b:98:08:18:3a:16:5b:e4:
b8:8c:73:54:aa:d5:a9:76:da:78:0d:38:61:8f:32:
7d:5e:45:fb:72:83:b8:e6:7d:19:ec:ad:8c:ef:4f:
f6:58:37:a2:4a:64:fe:33:61:e5:70:5f:6b:ff:f7:
8d:5a:63:c7:63:89:ed:ff:50:e4:f0:37:bd:62:8c:
fc:b1:3d:09:5a:a4:ea:29:f8:b8:a9:8f:62:86:3c:
38:75:3a:c9:a2:9f:92:50:75:c5:d3:29:bc:ae:93:
a0:6a:c6:f5:7f:1e:28:da:a4:d0:66:2c:33:28:ad:
90:f1:d7:e8:f8:4b:ea:bc:8c:d5:47:24:2c:fd:5a:
f6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9B:11:9F:A5:02:B1:2F:33:66:B7:28:6A:D5:0E:AD:F4:09:E2:B1
X509v3 Authority Key Identifier:
keyid:1E:C6:B3:1F:9D:E9:D3:59:49:59:D1:E5:9D:66:C9:B7:E9:3F:ED:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsazH53p01lJWdHlnWbJt-k_7WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:9b:30:9d:92:08:ea:c7:ea:a1:73:2f:51:51:29:25:59:e4:
e9:4c:c0:16:1f:17:9a:5f:0f:2d:67:f0:f0:34:7b:2b:26:7a:
85:4f:5a:bb:15:f0:85:97:11:fb:36:44:ff:7f:99:5b:95:d5:
5b:3b:9f:a1:3e:3d:1f:30:59:06:08:10:9c:d4:fb:4d:99:30:
40:a7:95:ba:77:cd:fe:26:7f:e1:66:d5:a2:49:9e:d3:f2:95:
89:20:9c:cc:f9:21:ef:d9:5a:eb:c4:0a:be:79:1e:57:e4:ac:
23:75:c6:52:54:fb:99:60:fc:e1:ba:32:23:6b:21:29:f9:1d:
cf:65:ac:83:0f:29:0c:96:d3:55:ac:3d:ba:e7:b0:ae:5d:4e:
e0:7d:de:2a:27:75:1a:54:52:9b:8b:48:d9:c9:41:83:c0:86:
34:37:98:a3:d5:3f:93:d9:ba:19:32:f2:99:de:d9:0b:fc:4e:
48:9b:58:f2:f3:c2:11:c6:54:3d:0d:d2:c3:a2:fb:b1:81:bc:
c4:17:49:86:1f:cf:b0:4f:c9:e6:22:eb:ec:30:3e:0d:24:1e:
8f:b4:51:9b:72:5a:ae:b9:87:1c:1e:1d:58:15:01:c9:1d:3b:
47:1e:42:5c:92:94:89:3d:12:3b:64:5b:1f:d9:65:4f:50:06:
83:1e:27:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:29:28 2026 by rpki-client