Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
File: Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft (raw, json)
Hash identifier: CkxwnkEqR2FO0V2Ai2TKS5uwE9+HKktzOeagaHiiMeM=
Subject key identifier: 66:78:15:76:D9:E3:B7:5B:4E:FA:A5:8C:E9:F6:AA:61:BB:80:9C:95
Authority key identifier: 1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C
Certificate issuer: /CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
Certificate serial: 019E1D9076270088002E44EC9E032B43A0AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
Manifest number: 0B44
Signing time: Tue 12 May 2026 19:01:07 +0000
Manifest this update: Tue 12 May 2026 19:01:07 +0000
Manifest next update: Wed 13 May 2026 19:01:07 +0000
Files and hashes: 1: Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl (hash: ubSlbxfSBgZDNUHpWQJ8pjtzuh+Yl4qEL6SU+GJsBrk=)
2: ZGLqYNMtolm5eL1wUXAdIeFX7S8.roa (hash: NyeDj2CCt8I3KwuYf4K9J8j74vTWf4ATwXYKw7Y/SY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:76:27:00:88:00:2e:44:ec:9e:03:2b:43:a0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
Validity
Not Before: May 12 19:01:07 2026 GMT
Not After : May 13 19:01:07 2026 GMT
Subject: CN=66781576d9e3b75b4efaa58ce9f6aa61bb809c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cb:4a:bc:37:58:51:71:0b:ae:c7:e0:c5:4f:
55:05:16:c1:be:e5:cc:9e:40:ac:57:f6:2d:c0:02:
1e:27:08:ba:b4:d0:ad:2c:cb:09:b2:b2:6b:01:b4:
ee:45:f0:bf:e8:c7:9a:c1:47:a1:2b:47:fc:8c:ad:
e7:c2:87:93:26:76:b2:26:a5:22:35:9e:36:2f:ee:
1a:cb:7b:db:79:49:e4:32:03:f9:da:bf:c2:bf:07:
e0:9a:01:66:0b:55:c3:65:8d:ff:91:22:a7:1c:9d:
08:19:1c:a8:62:6f:4c:be:d6:83:49:e7:94:fb:79:
ec:f0:47:af:5f:0e:c6:00:23:0e:3e:27:c1:be:bc:
78:b5:37:9b:b0:1b:65:6f:03:0f:21:78:3d:69:49:
a4:30:3e:40:51:08:4e:27:a2:2a:ca:65:06:e9:6d:
db:63:1d:0e:3b:56:7b:22:e1:4f:ea:ab:62:1e:a5:
81:6d:76:d4:5e:58:e8:7f:8e:dd:b4:13:b7:0a:ed:
64:2c:95:c8:9e:ed:31:dd:3e:77:46:83:b1:95:82:
58:65:5a:86:58:c3:d6:80:dc:c4:0a:b3:e1:ee:4a:
da:77:c5:91:55:27:bf:f7:e7:8e:87:43:af:03:de:
5a:8f:ef:cd:28:e6:f4:b6:33:39:a3:bf:85:a0:66:
a4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:78:15:76:D9:E3:B7:5B:4E:FA:A5:8C:E9:F6:AA:61:BB:80:9C:95
X509v3 Authority Key Identifier:
keyid:1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:66:7b:a4:2c:7c:b3:55:17:f3:f4:01:81:65:c3:be:ea:1c:
33:40:96:64:7b:a0:6b:14:ea:65:b2:0e:b7:81:16:25:3b:d7:
7b:ea:59:5b:0f:d6:81:d4:ca:ee:85:d7:4a:fd:a2:9c:01:78:
61:dd:95:e1:c8:2b:e4:fc:a7:cd:5f:4f:5a:d8:b3:b4:bd:33:
ac:6f:3e:d1:f4:58:4d:cc:8b:cb:ea:ba:53:bd:be:87:ee:10:
63:7a:b0:7e:b4:77:7b:80:a4:88:7f:65:0f:09:99:6f:a8:f2:
96:60:f4:59:35:e4:c0:b8:ba:b1:b1:c1:20:81:db:dc:53:97:
9f:d7:23:ff:e3:67:0c:77:50:3d:58:4a:68:a2:01:6d:76:e1:
6f:a9:19:1f:5c:23:c5:39:d2:94:8c:eb:24:20:4a:9e:f6:d4:
d8:a8:a5:59:40:cd:7c:8b:2f:3e:2c:94:2a:22:63:1d:6d:51:
a1:cf:c4:5e:f7:c0:d9:d9:25:e0:4f:a8:6f:2a:c8:00:be:00:
30:f8:35:c7:19:2c:45:1a:4d:c4:8e:7e:1b:7b:7e:30:88:ae:
60:41:19:33:2e:80:2d:ba:03:b6:9b:97:71:99:c9:22:54:24:
70:d1:b4:a9:a7:23:9b:d8:fa:f7:d7:5e:21:84:7e:fd:51:8c:
de:74:74:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:44:50 2026 by rpki-client