Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft
File: HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft (raw, json)
Hash identifier: tWZ7dwR5UVqu2U+H0U07KjYPXxt/in15shssiFZ98lc=
Subject key identifier: 20:B7:A8:9F:4E:F8:6D:FB:A0:AE:0E:1C:22:61:CB:47:77:64:A4:41
Authority key identifier: 1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C
Certificate issuer: /CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c
Certificate serial: 019D25F131816D41AD34E35E12D9449DA5D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft
Manifest number: 04FF
Signing time: Wed 25 Mar 2026 17:00:56 +0000
Manifest this update: Wed 25 Mar 2026 17:00:56 +0000
Manifest next update: Thu 26 Mar 2026 17:00:56 +0000
Files and hashes: 1: C1MfLnWz3pFJhiVu4Dmt7NWGzTE.roa (hash: cpa4ey5flhFVWa6hOHqUoUQLhSQVEdjFj4vHoE37Kb0=)
2: HMfT7RXQv0cCzI6qjjbXpv0Dpvs.roa (hash: rpVCvThgsyRbmHi9yrVB1FHQ2vnW/yUkYGAfm5xLUFo=)
3: HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl (hash: Y6V3RvvEDkVQCl1pXqa9RUYgXOAR0lsPSd4i1zKJiWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:31:81:6d:41:ad:34:e3:5e:12:d9:44:9d:a5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c
Validity
Not Before: Mar 25 17:00:56 2026 GMT
Not After : Mar 26 17:00:56 2026 GMT
Subject: CN=20b7a89f4ef86dfba0ae0e1c2261cb477764a441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7a:28:76:53:91:00:bf:32:b8:e8:79:09:f0:
2b:3c:37:13:cf:e9:4f:71:b9:d2:3c:13:7b:75:2f:
b7:3d:be:1e:76:15:6d:54:32:f2:b0:b6:b7:c6:73:
0f:cd:a9:1f:2a:18:b4:ee:be:77:77:f5:4c:75:43:
28:f7:55:58:cd:98:3f:69:3f:18:35:06:32:cf:78:
67:d9:17:5e:9a:51:df:92:77:1c:7d:e5:7f:4f:e7:
d6:16:10:7a:e8:53:9f:7c:05:7f:30:9e:5e:56:5e:
f4:55:38:f1:c1:1a:28:92:55:e4:5d:15:ce:a7:45:
df:ff:82:68:91:a1:ad:7f:5f:1c:ac:a7:6a:e2:fe:
c4:d4:d9:03:39:52:0a:54:91:b5:23:c9:7b:ce:fa:
40:ce:45:19:1a:52:2e:f1:f1:bb:b7:8a:8a:b2:33:
8f:91:f5:8a:52:34:d7:fc:be:e0:89:78:af:b2:bf:
c4:f9:39:21:b9:b4:da:6b:96:a4:6a:3c:de:a0:55:
f7:db:9a:38:12:f7:0d:e3:8d:20:90:7d:4f:27:73:
27:92:ef:58:9a:82:6d:d3:38:75:b0:83:a2:e4:24:
83:37:9c:49:bf:bd:e6:54:3e:da:89:bc:b6:0a:cd:
07:7f:f5:6a:02:78:86:15:42:a0:4e:99:77:63:a8:
58:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B7:A8:9F:4E:F8:6D:FB:A0:AE:0E:1C:22:61:CB:47:77:64:A4:41
X509v3 Authority Key Identifier:
keyid:1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e5:35:0e:36:ad:9e:27:ab:41:71:99:4e:71:99:93:95:1e:
25:f9:fd:1d:71:1a:1c:20:e9:69:b9:8f:d7:39:80:21:7b:4f:
6c:71:ee:7f:fe:2a:e3:fa:e7:bd:2a:9e:26:34:ab:3f:f6:0b:
96:3c:7c:74:55:83:56:b2:25:64:f1:66:1b:71:1c:b7:b7:2d:
15:b2:02:2e:5b:0a:71:dc:ac:ec:69:2f:c3:1e:fe:35:54:4c:
b4:c5:9a:59:00:a4:b1:1d:0d:be:4d:52:82:b4:7e:ca:69:ee:
7c:93:05:7c:ed:7e:c3:b7:62:33:20:ba:99:b3:34:2b:38:78:
56:51:8a:f0:13:d5:43:c5:08:a4:86:98:58:fc:74:f6:be:dd:
bd:3e:35:76:fd:7d:be:3c:ad:dd:2a:0f:05:ba:20:72:ce:4f:
29:aa:2f:7f:45:f9:42:ca:0a:63:4d:9a:33:ce:1b:d3:a8:72:
01:87:7e:45:7a:68:d6:16:33:99:b4:8a:01:e2:91:d4:a7:a6:
3f:ce:b9:10:3a:66:19:c9:a8:b5:f3:0f:e7:a7:2f:70:e7:35:
2f:b8:94:d8:ef:cf:02:36:23:87:a2:94:e1:a8:da:11:b8:70:
9b:57:10:d9:d4:a1:b6:c4:e4:0b:fb:6d:4b:c0:d4:69:4d:ce:
17:59:b2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:36:48 2026 by rpki-client