Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
File: hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft (raw, json)
Hash identifier: l9ptrkYtMgUblDIBvsjFGH55ndv7JNlMl1kMnS+KJYc=
Subject key identifier: 4F:8C:9A:84:84:AF:06:41:F4:30:C2:F6:34:C8:91:A6:5A:A8:CC:C1
Authority key identifier: 87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
Certificate issuer: /CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Certificate serial: 019D265FC4B8628279FA5E2CB7D7E5FFD453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
Manifest number: 0635
Signing time: Wed 25 Mar 2026 19:01:43 +0000
Manifest this update: Wed 25 Mar 2026 19:01:43 +0000
Manifest next update: Thu 26 Mar 2026 19:01:43 +0000
Files and hashes: 1: dwuC-Oont7VoWE0EeLLcfQ4EL44.roa (hash: +0Vnu02NvEFbgGKFBmW6kguLObTD4n6atdlC8I4zK9M=)
2: hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl (hash: 1LgMqqFLWMNGubbVqcULSqs/rvvjpTs/G3QKW50YhqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:c4:b8:62:82:79:fa:5e:2c:b7:d7:e5:ff:d4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8736e9b1d01474af2c3e4f8c20f461d136801949
Validity
Not Before: Mar 25 19:01:43 2026 GMT
Not After : Mar 26 19:01:43 2026 GMT
Subject: CN=4f8c9a8484af0641f430c2f634c891a65aa8ccc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7e:63:d6:d8:5a:b9:ad:53:13:03:76:b6:64:
c5:28:3a:b9:82:5c:a1:72:a0:46:97:7b:bf:b9:53:
51:64:04:a1:e0:90:14:4e:46:88:bc:9f:6b:39:10:
75:b6:d6:b8:b0:8b:89:db:57:4a:8b:2d:69:54:da:
42:59:c9:d8:a5:b6:ec:22:6d:b4:5a:76:a5:ac:e4:
09:8d:b0:ab:6d:fb:a3:58:a8:4e:3c:e5:1d:5c:b8:
b6:31:d1:9c:ed:a5:52:19:2f:b4:64:5e:23:97:17:
86:1a:d0:0a:de:68:61:1e:93:4c:32:4b:5c:93:63:
0b:54:c1:64:eb:0e:14:f2:b0:44:0a:27:60:60:70:
39:59:f0:d6:b0:2b:a8:75:80:93:6e:c0:ce:89:1e:
de:2d:66:a7:f2:9b:be:f1:f1:74:86:e6:d1:46:f0:
75:ce:7b:a4:1f:55:65:c2:15:78:8d:74:46:60:bb:
26:c7:52:45:99:03:ec:69:a4:be:61:3c:ab:a0:4c:
28:8a:cd:72:ae:e3:08:1e:5c:6a:7a:1c:6b:c2:ad:
ae:63:5c:6b:28:c5:11:4e:7a:5c:f6:00:42:0f:be:
c6:b5:8c:42:32:c1:17:5f:d3:91:ce:6d:a2:0b:83:
4c:8d:c2:da:4b:29:94:ea:20:40:65:a3:89:1a:40:
51:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8C:9A:84:84:AF:06:41:F4:30:C2:F6:34:C8:91:A6:5A:A8:CC:C1
X509v3 Authority Key Identifier:
keyid:87:36:E9:B1:D0:14:74:AF:2C:3E:4F:8C:20:F4:61:D1:36:80:19:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzbpsdAUdK8sPk-MIPRh0TaAGUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/581183-7a83-4cab-bd8b-3b068db41140/1/hzbpsdAUdK8sPk-MIPRh0TaAGUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:8a:41:90:71:87:1c:e0:4e:d6:d7:d6:ad:bd:09:8f:fa:d5:
7f:57:50:9c:4e:4e:40:83:cd:f3:38:78:78:7a:e0:06:0d:57:
7b:57:2f:b6:76:51:bd:37:cd:72:1c:8d:07:f8:72:34:81:87:
46:07:3f:ef:8c:77:f0:80:ae:46:07:8d:3b:39:20:22:67:1a:
9c:2e:c7:49:8c:91:6b:2a:79:41:3f:1e:3f:be:0a:e3:a2:e1:
3a:d7:62:89:42:ef:80:e8:9a:6f:83:b2:fc:45:96:b9:8f:de:
fd:2c:86:39:b3:f2:44:cc:0d:51:bd:10:a8:b3:c7:be:17:00:
c7:b4:24:f2:bd:06:a0:ab:25:ed:34:63:87:e6:3a:20:3c:b1:
ce:0e:a9:61:d9:39:28:89:9d:bf:7f:46:2f:79:b9:b0:38:23:
79:5e:f1:e3:c0:e1:54:b3:20:cf:49:0b:cc:32:96:75:c1:1f:
58:05:96:33:6a:65:4f:05:dd:12:d8:53:bb:15:89:ec:cd:df:
76:68:39:71:b1:61:16:d8:e3:e4:ed:f0:59:80:cd:81:e8:61:
b1:e7:9d:16:7f:7c:e1:fc:9c:85:1f:fd:08:68:d3:64:ba:42:
7c:7e:57:b7:e8:05:58:31:c8:af:ee:9e:e7:21:ad:a2:59:a0:
0f:92:44:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:16 2026 by rpki-client