Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
File: HnsuJD-KqVRZeTK83NmvZWDc5RY.mft (raw, json)
Hash identifier: F8roFEmDYQwnBQno3LlhyWwuARNobOrjmNl0+hI+phA=
Subject key identifier: 07:FB:7C:52:02:0E:F8:7F:F2:DE:29:EB:88:91:C1:90:18:0D:44:7F
Authority key identifier: 1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
Certificate issuer: /CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Certificate serial: 019F927FA6E5CE7B72B1D2D876AFF05B17D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
Manifest number: 0E8B
Signing time: Fri 24 Jul 2026 05:01:06 +0000
Manifest this update: Fri 24 Jul 2026 05:01:06 +0000
Manifest next update: Sat 25 Jul 2026 05:01:06 +0000
Files and hashes: 1: 1-z-hX5qlCf8aH8nr2X0zpJdE1hg.roa (hash: 9rLZMVrt7BCmTVumDwvgzgKKJKdaVIZCBXEilPyFZ4c=)
2: HnsuJD-KqVRZeTK83NmvZWDc5RY.crl (hash: ErPjNp+Gkrla7Dy+p5XIbILaQ1xFxAJir/Wb7Wu7e8s=)
3: XI8CVY8sYwhzkz3YLD7pkxjD3Zk.roa (hash: 25+wg4lixvrKpaIcYJueXb9oNmVKiR9L4SbDtXfdAjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:a6:e5:ce:7b:72:b1:d2:d8:76:af:f0:5b:17:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Validity
Not Before: Jul 24 05:01:06 2026 GMT
Not After : Jul 25 05:01:06 2026 GMT
Subject: CN=07fb7c52020ef87ff2de29eb8891c190180d447f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:88:06:f9:b0:73:c9:4c:c6:60:36:ed:bd:b3:
b0:b6:64:9f:fe:bb:14:bb:9e:6a:49:29:7a:be:15:
cc:f8:ad:c1:7d:7f:25:6c:5d:33:93:c6:18:0a:2b:
2d:8c:aa:3d:9a:5b:05:25:95:f8:22:f0:d7:bd:22:
48:12:67:d2:e3:a4:22:19:25:48:8c:39:6b:40:21:
2b:69:cf:bf:21:16:bf:f5:1b:ab:93:27:21:6d:27:
d0:dc:48:1f:6d:34:17:1e:92:b6:0c:f4:d3:04:b3:
5f:f2:e6:a9:8f:75:a9:d8:bf:ef:e7:eb:24:36:84:
3e:4d:64:27:42:68:fe:aa:9e:ba:b9:39:5f:68:21:
a1:00:da:0d:e5:f3:90:eb:74:00:c1:fa:c1:38:a5:
58:45:5c:aa:93:59:58:c3:c2:ba:99:4b:82:a6:c0:
84:ed:1d:25:26:c5:5a:2f:93:90:1b:6d:ff:73:18:
3c:a1:21:4d:da:d8:5d:a6:ab:43:0d:36:b9:74:e4:
e9:e9:58:cf:a9:cb:4f:b1:c2:9d:72:0b:01:29:fa:
95:4a:bb:26:10:9d:e8:e6:8c:1c:65:76:92:d8:f5:
ca:cf:33:ef:f6:23:c4:3c:3c:86:c7:2b:dc:60:3f:
d6:09:1a:0c:0c:d0:22:ca:3e:49:1e:de:15:63:9b:
46:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FB:7C:52:02:0E:F8:7F:F2:DE:29:EB:88:91:C1:90:18:0D:44:7F
X509v3 Authority Key Identifier:
keyid:1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:15:53:ec:e5:f5:f6:fe:99:bf:f5:f9:35:19:22:5c:19:22:
37:d5:66:a0:e9:0c:30:34:28:9f:8c:b0:d8:b7:3c:45:01:64:
de:c8:c7:ba:5f:b1:fd:e8:b3:f5:ca:6c:cd:c8:c3:aa:14:55:
dc:c6:80:cc:cb:b5:35:f0:0f:5c:4d:77:ce:12:94:53:19:df:
2b:33:b4:43:fe:97:0b:fe:86:ec:7c:37:ef:9f:a7:76:66:85:
6e:aa:6b:8b:6b:83:35:29:3b:cb:c4:db:3c:fa:13:07:6a:35:
3a:b3:ba:c4:ee:62:9d:c5:4b:f1:52:cb:72:a1:43:57:c6:45:
fb:5b:ad:e1:8e:9d:15:f6:53:a7:e0:74:20:50:1b:d0:47:b3:
02:1d:6f:d0:0a:27:4b:e3:11:39:32:f4:41:3f:07:fe:c7:1c:
7c:ab:90:ab:45:8d:76:cf:a1:66:b8:9a:30:a2:0a:4c:0a:2a:
6b:5f:82:44:93:4e:1d:71:d5:e9:7c:6c:a6:45:da:3d:1e:5b:
2a:da:fc:ea:ed:7f:1e:47:86:e1:1a:4d:d6:e4:5d:9a:52:72:
cb:4e:96:af:6f:a2:e1:85:0e:13:87:63:4a:ac:4f:28:51:5e:
1c:f3:4e:60:6c:bb:d9:c5:a2:da:26:69:42:ad:9b:e6:c3:fe:
ee:2d:06:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:26:04 2026 by rpki-client