Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
File: 1-hskeN_g8zonixP0LdMZYB1jeKg.mft (raw, json)
Hash identifier: AblOEnAaQ681CkIZlYeibnYNMqg/icnrhWKOijVxkKk=
Subject key identifier: 54:8F:91:39:6A:A7:4D:90:CB:3A:08:68:F7:9D:E1:45:CD:F8:F1:AB
Authority key identifier: FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
Certificate issuer: /CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Certificate serial: 01A1DDCC02F2D25383B3A6DA3A2FDC4BD53C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
Manifest number: 0C21
Signing time: Sun 15 Nov 2026 06:01:37 +0000
Manifest this update: Sun 15 Nov 2026 06:01:37 +0000
Manifest next update: Mon 16 Nov 2026 06:01:37 +0000
Files and hashes: 1: 1-hskeN_g8zonixP0LdMZYB1jeKg.crl (hash: Dnvus6UBSvycTpiFBWoUQySxCzZpVehpX8tdlgPYfsU=)
2: 67OHgQ9oY03pFObGOEWvUB45FRY.roa (hash: Bw9KDuBO2RcXnPqBfJKA7s6j1vu8KiRAlWxURETULCk=)
3: JlERsOGpN9Jutvxh9cBCd5WIDhQ.roa (hash: 0TAzyXpM7LaR9Wg7trsFQxzAH4r7+W5/vZ5ekplhpko=)
4: o0B3A-uOWMJ0Q3rI62ZiZW1aPL4.roa (hash: 7bwGC4W14PVYfYqbu9cx4x9X5c24UYWk/Q4pZluMhT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cc:02:f2:d2:53:83:b3:a6:da:3a:2f:dc:4b:d5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Validity
Not Before: Nov 15 06:01:37 2026 GMT
Not After : Nov 16 06:01:37 2026 GMT
Subject: CN=548f91396aa74d90cb3a0868f79de145cdf8f1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1c:26:de:7a:1f:b4:2e:5b:74:eb:7a:5c:49:
bc:df:c2:9f:01:7b:04:a0:5e:1b:83:e5:9d:58:db:
bf:c9:76:4c:72:f3:4f:b7:14:f6:b7:88:bd:a1:9f:
18:17:26:d2:f1:6d:89:ad:80:c0:e2:4d:cb:c7:63:
75:7d:6b:60:4a:84:88:ea:10:b4:6e:50:9f:51:06:
23:f7:a2:57:aa:1e:e1:91:34:c9:53:9e:7d:51:67:
1b:1b:11:86:bf:32:20:ef:15:79:82:d0:22:35:eb:
85:73:47:f3:4b:9b:2e:41:3b:6a:69:72:83:71:e4:
fb:7c:23:3a:d1:39:2c:04:9d:f2:33:08:07:81:c1:
bd:e9:cf:c1:b9:e1:39:bf:3d:fa:91:8b:26:e5:c0:
40:0c:fc:08:85:67:40:27:94:92:04:eb:5f:c1:31:
06:55:9f:0f:f4:40:44:73:19:c6:9d:02:9a:3a:d7:
d2:a9:b9:43:67:77:6e:ff:ab:8c:b2:21:b7:b4:77:
ae:8d:38:c0:9f:c9:a2:5c:0c:7f:4f:d3:18:fd:8d:
92:4c:44:57:b9:81:29:1c:e1:46:21:e2:4a:4d:7e:
2e:9f:e2:eb:d6:df:95:13:50:68:e0:1d:64:0b:7e:
c1:9f:8b:86:eb:44:8e:8b:fc:be:d1:29:55:42:ee:
31:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8F:91:39:6A:A7:4D:90:CB:3A:08:68:F7:9D:E1:45:CD:F8:F1:AB
X509v3 Authority Key Identifier:
keyid:FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:8c:a5:7b:d3:aa:ee:9a:bb:06:5c:44:47:12:e4:fb:a6:ac:
7a:0d:da:a5:76:36:a7:9e:a3:c0:54:0c:cf:a5:70:90:9c:5e:
19:69:7a:ea:83:41:24:16:2c:f1:12:e3:ff:c1:ab:90:0c:0e:
19:4c:1e:83:66:98:a0:3f:5e:19:9d:07:f4:d7:36:be:73:8e:
33:e5:59:9f:89:10:88:21:5f:eb:df:dd:38:06:f7:f0:4d:9e:
f4:ae:d3:44:bb:46:87:c0:31:7f:02:02:00:f1:39:e2:c4:7a:
71:8e:91:46:52:87:06:2f:52:d4:8b:bb:32:b0:23:90:7d:e4:
22:f0:6b:9b:c8:e3:55:49:e2:c7:ad:be:3d:ce:cc:60:1f:87:
ac:4b:1a:e5:28:14:40:51:37:11:f4:65:95:d0:a7:ed:43:85:
f8:83:b0:c4:16:3c:ff:eb:db:4b:a0:02:71:10:ac:4b:81:d5:
e3:cf:4b:28:67:78:71:d6:3f:48:cd:74:cc:46:61:56:18:c0:
c5:e9:5d:4c:90:ce:01:fe:db:9a:80:b6:13:3f:18:b3:d0:8e:
13:d5:2f:57:72:8a:83:74:90:8a:0c:32:72:4a:b8:b7:bc:94:
72:19:a6:e6:79:d4:0f:dd:55:93:7a:fe:00:aa:80:b6:ff:0f:
3c:93:8c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:12:40 2026 by rpki-client