Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
File: HZoJxRB-fkTKeNxy1RlzftPdMRo.mft (raw, json)
Hash identifier: 0MQG+8HB4SxBW+w7/8Qo4HOGMZnvHc7+jiwKqnfmFjU=
Subject key identifier: FF:3C:C6:27:7D:96:F7:59:8A:6F:47:BB:75:86:D1:48:EF:41:2F:CA
Authority key identifier: 1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A
Certificate issuer: /CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
Certificate serial: 019D2A722BFFD9F5F74CF2F75CB8F8061860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
Manifest number: 16EF
Signing time: Thu 26 Mar 2026 14:00:18 +0000
Manifest this update: Thu 26 Mar 2026 14:00:18 +0000
Manifest next update: Fri 27 Mar 2026 14:00:18 +0000
Files and hashes: 1: HZoJxRB-fkTKeNxy1RlzftPdMRo.crl (hash: +eJVDAQuFGXMyfoH5oBoBFsWGONBiwVU6z9fxtof2jg=)
2: _wGjPopaleb7rolTBZPWY4rLAR0.roa (hash: cxMklFmwljucLQ52IKrbd2Z95wZK3+gwqoZkVO4J3co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:2b:ff:d9:f5:f7:4c:f2:f7:5c:b8:f8:06:18:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
Validity
Not Before: Mar 26 14:00:18 2026 GMT
Not After : Mar 27 14:00:18 2026 GMT
Subject: CN=ff3cc6277d96f7598a6f47bb7586d148ef412fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0c:98:75:a6:df:7e:8c:7c:5a:06:7f:32:71:
5e:38:cc:76:36:1d:45:e2:5e:dc:5f:4a:28:7c:38:
34:ae:8a:5a:07:9f:cb:1b:99:08:42:c4:02:b2:9a:
11:58:44:cc:34:c5:38:e4:1f:9e:b8:6a:f4:c7:68:
8d:4a:4c:23:9e:38:11:27:70:07:41:6b:d2:d7:92:
28:b0:33:3f:61:1c:3b:12:19:37:f4:9c:8d:08:d2:
0f:25:bd:b2:6e:a0:83:09:fd:c7:e3:d3:39:dd:5e:
ac:58:b6:ec:40:f8:6b:6b:9b:47:d0:e8:0c:59:f1:
fe:01:6b:31:7f:46:ba:8b:e8:70:92:75:32:37:6a:
e8:80:13:7b:5d:bd:41:44:23:7c:d7:c9:cf:16:5c:
72:4e:f9:e6:48:49:8c:0a:fd:38:43:1a:8d:56:58:
13:23:47:69:2f:dc:22:6d:a8:e9:b6:e7:8b:28:00:
12:76:fd:3d:a2:a7:c2:0d:bd:75:5c:77:3a:10:81:
8d:93:76:d4:c3:a5:d1:ef:00:36:20:53:d8:a9:c7:
56:4f:7d:a4:10:1a:49:36:cb:74:2f:59:65:b5:e5:
fc:f9:be:a9:32:79:60:13:5d:e7:f9:ca:62:28:18:
21:0f:95:46:2e:2c:97:c2:f3:ba:23:a1:65:fa:ab:
ab:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3C:C6:27:7D:96:F7:59:8A:6F:47:BB:75:86:D1:48:EF:41:2F:CA
X509v3 Authority Key Identifier:
keyid:1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ea:b8:cc:be:c5:5a:d6:bb:fe:98:5e:72:c2:52:86:f2:6c:
72:a8:ac:05:8e:f3:a2:31:65:4a:b2:05:ee:17:93:25:f4:ff:
8c:1a:11:67:88:26:e5:12:65:25:f3:ac:4b:fd:6d:5a:d1:af:
a0:f3:06:54:bb:32:93:a1:c0:86:2f:d2:6f:d5:12:88:77:4d:
a9:00:1d:77:88:14:21:74:2d:0f:80:a1:2d:99:f0:53:5b:d5:
9e:7d:a1:52:a6:9c:dd:bc:e5:e1:5c:b5:ad:c3:32:be:fa:09:
ef:51:65:b2:67:dc:46:d2:44:03:2e:6b:9f:ab:e4:69:da:64:
e2:60:c2:9b:f9:43:db:b7:cb:45:d1:9f:7f:de:57:87:0f:1e:
fe:b2:15:94:eb:b2:1a:b4:58:fc:c5:bf:48:58:87:66:93:88:
ca:58:db:a7:32:30:99:94:19:78:37:91:ca:05:1a:1c:34:49:
02:6a:33:f7:1e:be:3d:55:3f:ab:d7:6d:e7:d3:87:80:40:45:
26:7c:2f:4b:21:78:88:cc:67:ab:a8:90:e5:86:56:9e:4f:e0:
b4:02:1a:0f:35:69:79:7b:cd:ac:13:76:2a:0b:fd:da:2e:ab:
10:31:ab:f9:15:cc:54:0d:c6:3b:1c:46:75:60:2e:dc:5b:0a:
65:2f:7f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:31:45 2026 by rpki-client