Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft
File: hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft (raw, json)
Hash identifier: 8MmZgZPqbZ3eD+bk2w6KRWp5N/7HEcfGDekukQeiU7o=
Subject key identifier: BF:3B:FF:A1:DD:65:0C:CC:22:9F:90:81:12:0B:A1:79:18:FD:C9:86
Authority key identifier: 86:7B:33:7C:E4:C3:4F:EB:4A:71:FF:F8:55:9E:5E:4C:98:E4:2B:00
Certificate issuer: /CN=867b337ce4c34feb4a71fff8559e5e4c98e42b00
Certificate serial: 019F946DE1E3968368D7E05943B14DFBFBA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hnszfOTDT-tKcf_4VZ5eTJjkKwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft
Manifest number: 01D0
Signing time: Fri 24 Jul 2026 14:00:56 +0000
Manifest this update: Fri 24 Jul 2026 14:00:56 +0000
Manifest next update: Sat 25 Jul 2026 14:00:56 +0000
Files and hashes: 1: PnZoP9c_MUx8bGVjWDH4QemT8Oc.roa (hash: N/n/c2ZTM9Bt63EXnz2HQd3THkOEOxgNYjeKCIXt71Y=)
2: hnszfOTDT-tKcf_4VZ5eTJjkKwA.crl (hash: m52N0SZ6RzghBHL/q8YekxP07p0KvAD7vOqkdC9tlqY=)
3: t6GAlny-fqKuuQwhbvUz_72cDZg.roa (hash: 0Z7m8nppSdIlpMkeX4RoJU4whGw35KKZIMqUWhBFgBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hnszfOTDT-tKcf_4VZ5eTJjkKwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:e1:e3:96:83:68:d7:e0:59:43:b1:4d:fb:fb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=867b337ce4c34feb4a71fff8559e5e4c98e42b00
Validity
Not Before: Jul 24 14:00:56 2026 GMT
Not After : Jul 25 14:00:56 2026 GMT
Subject: CN=bf3bffa1dd650ccc229f9081120ba17918fdc986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5d:79:4a:fe:24:c9:d1:7b:8e:d8:43:ef:80:
b2:61:f7:c0:a7:4c:01:36:e9:da:ba:40:80:68:cb:
80:20:8e:ca:f4:a4:be:ab:95:bf:95:b6:de:5c:71:
af:c1:af:6c:49:49:66:da:85:44:c0:28:a3:66:2b:
b9:3a:4e:e7:42:02:13:e9:0c:b8:11:fb:d1:50:52:
ba:a4:c8:67:7d:d1:37:bf:b4:d8:41:2f:60:e5:de:
d3:3f:77:05:10:1b:0d:04:30:d1:51:e5:8e:26:d3:
d5:a6:34:26:c4:99:1f:0c:bd:c2:c5:00:9f:db:2b:
ca:e6:e9:bf:f8:e1:ec:c9:13:ef:26:14:b6:21:ee:
40:93:cf:bf:08:a9:75:7b:8e:56:09:d6:38:f3:d6:
41:b3:fa:3d:54:2a:e5:80:b1:92:6f:be:7f:44:af:
4f:8e:a3:73:d9:cc:ea:e0:56:ad:08:6c:78:fe:dd:
28:cb:33:ca:fb:53:1d:03:b8:4c:31:ff:4d:8d:b3:
e8:16:70:2a:0d:cd:07:eb:41:e5:fc:60:7a:3a:27:
7b:ee:18:fa:36:62:0f:e1:ad:3a:85:5a:f1:04:68:
f3:46:26:ad:07:de:09:05:80:ab:cb:ad:01:02:23:
ec:75:d7:18:9d:6d:15:04:be:61:9f:38:90:d5:c1:
87:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3B:FF:A1:DD:65:0C:CC:22:9F:90:81:12:0B:A1:79:18:FD:C9:86
X509v3 Authority Key Identifier:
keyid:86:7B:33:7C:E4:C3:4F:EB:4A:71:FF:F8:55:9E:5E:4C:98:E4:2B:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hnszfOTDT-tKcf_4VZ5eTJjkKwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:9f:dc:8c:f4:46:1d:b3:f1:7f:39:cc:53:28:9e:05:ce:39:
6d:0a:d1:67:67:26:8e:e7:34:f4:45:cf:9c:ef:05:c7:4a:2f:
af:f4:c5:5d:6d:74:01:10:8a:8f:ac:3d:d0:0f:07:81:f4:8f:
bf:56:82:f7:02:91:ed:80:89:4e:bc:2c:6b:4d:14:44:4b:95:
15:fa:4c:32:05:65:c7:ca:5e:9c:40:29:28:23:7e:42:de:aa:
f1:04:35:c4:37:69:cf:18:d0:0c:f4:da:b1:64:1e:22:a2:1f:
cc:ed:72:d6:ec:7c:c5:8e:3d:81:ad:f4:c0:42:ed:8f:76:a7:
4e:ba:4a:94:aa:6d:fd:54:cf:68:19:5a:5a:01:41:d5:ea:42:
8b:2a:5f:60:b2:5f:1a:2b:42:87:50:6a:c2:f2:db:d4:c7:c0:
15:40:71:31:60:7f:db:64:67:70:46:8b:1c:a7:8c:be:84:19:
a8:bd:e6:56:7a:f6:d0:ff:37:4b:fe:1b:b8:5b:41:33:53:ec:
52:4a:fd:5a:99:48:df:01:9f:29:14:4a:3e:51:79:27:bb:1c:
05:05:b7:c6:b2:62:dc:3d:9d:7b:ac:ac:68:84:4c:aa:6a:57:
56:f4:d2:c6:0d:85:dd:3e:e6:93:87:01:14:e1:03:1c:43:ae:
b9:b9:42:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:18:50 2026 by rpki-client