Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
File: 1-hskeN_g8zonixP0LdMZYB1jeKg.mft (raw, json)
Hash identifier: dsBargJAEN8cDNAox8wOx/JQXRJsvuxMuZoH7BDA7LE=
Subject key identifier: 89:7C:47:C3:FE:25:E0:C1:CB:3B:12:6D:F4:7A:C8:AE:5D:77:5D:34
Authority key identifier: FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
Certificate issuer: /CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Certificate serial: 019D28BB5B7C5A37A6B2343F24F31783231D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
Manifest number: 09B1
Signing time: Thu 26 Mar 2026 06:01:00 +0000
Manifest this update: Thu 26 Mar 2026 06:01:00 +0000
Manifest next update: Fri 27 Mar 2026 06:01:00 +0000
Files and hashes: 1: 1-hskeN_g8zonixP0LdMZYB1jeKg.crl (hash: 5g3cndsWxsVws6Fc19Tp0L3cqS1dDG/VQP01ts3YQ2I=)
2: 67OHgQ9oY03pFObGOEWvUB45FRY.roa (hash: Bw9KDuBO2RcXnPqBfJKA7s6j1vu8KiRAlWxURETULCk=)
3: JlERsOGpN9Jutvxh9cBCd5WIDhQ.roa (hash: 0TAzyXpM7LaR9Wg7trsFQxzAH4r7+W5/vZ5ekplhpko=)
4: o0B3A-uOWMJ0Q3rI62ZiZW1aPL4.roa (hash: 7bwGC4W14PVYfYqbu9cx4x9X5c24UYWk/Q4pZluMhT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:5b:7c:5a:37:a6:b2:34:3f:24:f3:17:83:23:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Validity
Not Before: Mar 26 06:01:00 2026 GMT
Not After : Mar 27 06:01:00 2026 GMT
Subject: CN=897c47c3fe25e0c1cb3b126df47ac8ae5d775d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3f:3d:ad:0b:90:ac:47:f9:34:a2:79:f8:c4:
d6:f3:21:94:b9:58:cb:91:0d:37:20:27:67:a6:1b:
4a:2d:db:00:8d:53:ba:eb:93:2e:ec:79:97:f4:29:
34:79:08:d8:4d:24:51:dd:09:69:4b:50:0c:3f:11:
21:57:e4:89:84:35:4a:78:86:83:0a:36:42:79:ac:
07:20:4d:0e:45:a9:3b:79:91:05:ae:ad:f0:79:90:
dc:f7:19:ae:f3:32:0b:ce:41:51:e3:5d:3a:df:6b:
3b:3a:e2:fd:4e:c5:ab:8b:36:95:94:40:42:17:33:
2d:ea:bb:2d:0a:36:e9:a2:d1:9a:32:2d:61:ca:e8:
c7:e3:01:93:67:71:36:3a:d7:6d:05:2e:44:f3:8b:
00:2d:8e:5b:26:bd:0e:83:8e:f5:ee:db:62:03:11:
ff:7d:bb:a5:45:c3:20:19:d2:18:ff:3a:cf:c5:60:
53:12:8f:ee:3d:36:98:64:11:62:44:14:2d:6d:ca:
b2:ab:2f:59:64:11:61:6c:dd:11:b1:39:6c:eb:bb:
33:e8:56:7f:87:d3:3f:cb:f8:1b:eb:b6:00:cc:c2:
36:c6:c5:2e:a6:5e:38:b4:56:aa:02:fc:54:ee:c9:
11:df:ef:bd:c9:25:83:78:d6:ca:4b:6a:86:86:98:
2d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7C:47:C3:FE:25:E0:C1:CB:3B:12:6D:F4:7A:C8:AE:5D:77:5D:34
X509v3 Authority Key Identifier:
keyid:FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:78:c4:4d:bc:71:e1:fe:3b:15:40:df:28:c5:5f:2a:2a:65:
57:9d:44:64:6e:a2:6a:d6:19:0c:ad:3b:0d:6c:28:d5:e8:09:
1a:4d:b1:98:b9:13:db:65:8b:76:a5:39:67:77:78:7c:c7:21:
cb:d3:f3:b4:bc:e0:ee:e3:52:4f:ca:45:cf:e2:d3:b9:25:ff:
46:2b:6f:97:eb:c0:fe:61:d7:00:8f:6b:21:e4:e8:c4:35:ed:
20:78:3f:9a:4b:c8:33:9d:9d:56:f6:15:4c:df:e5:e9:94:52:
d4:8f:df:cc:60:d1:f9:d4:3d:16:bb:f9:11:a8:dd:b2:a2:98:
14:c3:f4:29:e6:e8:cd:6f:28:78:3e:b3:c3:5b:34:bf:3c:ff:
dc:f0:42:a6:30:2e:4d:1c:91:7b:e0:bc:84:6b:60:bb:4b:26:
b9:18:01:69:d8:46:1b:47:c9:16:8c:0f:e1:30:0f:f9:94:04:
2d:fd:02:c5:60:1d:81:2a:70:06:da:8b:d4:7f:7b:69:68:f9:
99:0e:a8:1e:cf:c1:a7:08:93:00:46:da:be:02:e8:1d:ac:f9:
cc:c3:13:b1:62:09:0e:c1:c5:69:b5:41:51:d9:f0:19:64:01:
3e:3e:98:8a:70:52:30:10:1e:e3:88:3a:0c:56:b3:aa:32:cb:
db:69:2a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:23 2026 by rpki-client