
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
File: 1-hskeN_g8zonixP0LdMZYB1jeKg.mft (raw, json)
Hash identifier: 4sWvfNR1oaKzCAwUPSiqgoD6SFcbpFZSW/6ZPfy3n1Y=
Subject key identifier: 39:0A:06:22:85:BF:95:28:45:09:AA:AC:13:FE:80:97:BA:A7:CC:F6
Authority key identifier: FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
Certificate issuer: /CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Certificate serial: 019F90C8014ED651C1CD34137FEEF0DA8413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
Manifest number: 0AF0
Signing time: Thu 23 Jul 2026 21:00:54 +0000
Manifest this update: Thu 23 Jul 2026 21:00:54 +0000
Manifest next update: Fri 24 Jul 2026 21:00:54 +0000
Files and hashes: 1: 1-hskeN_g8zonixP0LdMZYB1jeKg.crl (hash: VYfuk4tiBpesKE7+4p3G2nXtJv2zb+JO2xJaWQUtxOM=)
2: 67OHgQ9oY03pFObGOEWvUB45FRY.roa (hash: Bw9KDuBO2RcXnPqBfJKA7s6j1vu8KiRAlWxURETULCk=)
3: JlERsOGpN9Jutvxh9cBCd5WIDhQ.roa (hash: 0TAzyXpM7LaR9Wg7trsFQxzAH4r7+W5/vZ5ekplhpko=)
4: o0B3A-uOWMJ0Q3rI62ZiZW1aPL4.roa (hash: 7bwGC4W14PVYfYqbu9cx4x9X5c24UYWk/Q4pZluMhT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:01:4e:d6:51:c1:cd:34:13:7f:ee:f0:da:84:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Validity
Not Before: Jul 23 21:00:54 2026 GMT
Not After : Jul 24 21:00:54 2026 GMT
Subject: CN=390a062285bf95284509aaac13fe8097baa7ccf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f0:4c:ce:0e:18:f6:89:9e:b0:6d:31:c0:3f:
b8:dc:de:d2:7b:0c:09:5b:2d:81:58:ee:7a:b6:e8:
4f:d1:ff:7d:2e:b5:3e:6f:20:64:11:c8:b0:21:9e:
ed:86:86:5d:c1:f8:90:7a:01:c3:cb:22:b2:57:47:
41:09:64:34:f7:92:fa:3d:13:1b:c3:f9:b9:66:51:
9b:f3:21:83:6c:1d:60:92:8f:96:68:44:f3:ea:c0:
00:16:7a:9e:fb:94:85:65:6d:0d:d1:09:34:44:f2:
de:50:bf:cf:63:78:17:50:6a:24:e0:fd:38:c1:b4:
3f:1f:2c:c5:b7:be:da:47:63:be:09:f0:05:50:e3:
ad:3f:98:63:4d:f4:e0:dd:ac:4b:67:01:fe:ff:45:
5e:bb:09:8c:1f:9d:b1:cb:12:4f:33:77:ad:ac:f7:
38:e2:7c:27:ab:6f:1c:22:f0:c0:0c:29:07:19:a4:
42:4b:1f:74:b2:fb:57:10:f8:02:96:1e:37:69:52:
7a:eb:d0:ec:76:af:4b:b7:14:11:69:5d:96:2c:77:
10:03:e5:65:95:ff:24:ca:7b:f6:b7:8b:cd:7d:a5:
09:b8:57:52:17:59:03:b3:a8:93:74:2d:ef:c0:03:
16:19:b9:57:ef:43:cb:9c:79:cf:e2:7c:b3:7a:0c:
46:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0A:06:22:85:BF:95:28:45:09:AA:AC:13:FE:80:97:BA:A7:CC:F6
X509v3 Authority Key Identifier:
keyid:FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:5e:83:6e:66:c7:b1:e2:65:50:de:f5:f8:18:fd:24:e1:47:
bb:b7:de:b2:33:39:bd:8b:11:85:a2:82:7e:d2:8b:fc:24:fc:
b7:83:93:b0:16:3a:e2:ff:fe:0a:81:99:27:fa:1d:3f:54:21:
32:a5:ca:93:3b:e8:43:da:2a:79:b2:99:32:6e:e8:ce:88:f9:
bc:c4:fa:31:c3:b2:f5:ea:16:53:65:02:bd:1e:95:06:dc:09:
19:11:7b:12:dc:e0:42:5a:98:c6:bc:a9:2d:6b:80:7d:e4:aa:
f0:c7:69:31:6f:47:9e:b9:74:05:c6:bf:a7:a5:62:33:e9:1c:
23:d3:7d:83:c5:76:60:a6:33:5c:f0:4c:e2:a2:17:e7:db:3d:
00:97:df:62:4a:7e:c7:5e:4b:10:b2:3d:37:49:95:3b:37:a3:
0f:d8:8f:05:a0:67:ef:d9:e6:25:ef:8e:8b:53:03:5b:05:2a:
0a:b7:5f:32:bd:da:3c:f2:cf:73:d1:be:81:a9:ce:5e:d9:8d:
40:cf:bd:10:d9:1e:0c:32:0e:a8:bb:8a:ec:2b:49:84:70:20:
ee:d8:5a:bc:2c:ce:f5:4e:5d:bb:58:15:51:35:76:bf:a5:8a:
bb:c4:a1:67:bc:d8:5a:9e:77:71:73:26:94:f8:29:d8:2c:9e:
cb:98:15:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:31:33 2026 by rpki-client