Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
File: HAkzrn59aIUNoxv6gb_KuLGFuMo.mft (raw, json)
Hash identifier: ekPqVz0EWM+2g3GCapVWMaG3jx0UTOgyBPjGJ6pcpsM=
Subject key identifier: DA:B4:DE:0B:46:59:A6:92:6B:95:CA:A8:24:F6:47:AA:0F:41:82:5F
Authority key identifier: 1C:09:33:AE:7E:7D:68:85:0D:A3:1B:FA:81:BF:CA:B8:B1:85:B8:CA
Certificate issuer: /CN=1c0933ae7e7d68850da31bfa81bfcab8b185b8ca
Certificate serial: 019D2703A0A3015AEF7776C4BC6157A278A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
Manifest number: 0F19
Signing time: Wed 25 Mar 2026 22:00:42 +0000
Manifest this update: Wed 25 Mar 2026 22:00:42 +0000
Manifest next update: Thu 26 Mar 2026 22:00:42 +0000
Files and hashes: 1: HAkzrn59aIUNoxv6gb_KuLGFuMo.crl (hash: hX/6v+iMdX6Djqx4eshXlJE/dzD0p0LP/ZkDlmN5/vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:a0:a3:01:5a:ef:77:76:c4:bc:61:57:a2:78:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0933ae7e7d68850da31bfa81bfcab8b185b8ca
Validity
Not Before: Mar 25 22:00:42 2026 GMT
Not After : Mar 26 22:00:42 2026 GMT
Subject: CN=dab4de0b4659a6926b95caa824f647aa0f41825f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bc:f3:d6:7d:42:7c:03:eb:52:66:92:20:d3:
37:f8:0b:20:79:b9:87:80:ac:bf:81:d1:de:5a:28:
86:c5:dc:60:77:d3:c1:cc:4d:6d:b2:8c:61:c9:6c:
45:3e:98:5f:49:3f:ea:8a:90:47:a3:96:63:74:c7:
b8:1f:d0:e9:d8:35:bf:ee:a0:01:2f:6b:a8:42:c9:
65:57:4e:89:43:f3:cd:4a:c7:56:ad:d3:77:4a:ca:
d6:07:02:6b:45:87:a1:f7:c7:fd:ba:ba:0a:25:4a:
d0:17:09:e7:84:9a:44:e2:44:c7:f5:ca:df:7d:aa:
5d:62:8f:87:eb:03:19:49:64:07:65:af:4d:07:32:
ae:b5:c7:1c:de:36:4b:d2:4d:3b:0f:03:c3:b0:42:
3e:92:74:d3:81:ac:41:51:d2:a4:1a:34:05:e4:b1:
bd:9d:8d:81:61:5b:dc:fb:8a:a0:a5:97:a1:33:c7:
3e:86:0a:13:b7:ee:b7:14:5f:4f:b4:4e:86:cd:ef:
2b:36:27:2c:5f:aa:d0:6a:8b:2d:d3:32:0a:6e:c8:
a8:50:90:ad:fa:d8:10:1c:99:59:4a:71:ed:c8:cd:
2e:91:8d:b0:fd:92:c7:fa:ef:5c:6d:b2:4e:66:75:
49:fc:ea:47:4f:4c:e4:ce:97:ad:62:24:9c:8f:57:
40:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B4:DE:0B:46:59:A6:92:6B:95:CA:A8:24:F6:47:AA:0F:41:82:5F
X509v3 Authority Key Identifier:
keyid:1C:09:33:AE:7E:7D:68:85:0D:A3:1B:FA:81:BF:CA:B8:B1:85:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:64:f1:36:27:2e:5b:91:89:c2:13:d1:85:63:c5:b7:80:e1:
b3:2b:68:4b:25:a3:6f:f0:f5:21:ed:8b:06:64:da:73:16:7e:
54:20:4b:e5:b3:81:53:6b:db:ea:e1:9a:21:6b:5d:86:d9:bf:
18:71:17:eb:79:6d:34:bf:27:eb:10:3b:97:3f:05:00:36:1e:
f9:22:1a:cf:20:ee:ad:b3:1c:0d:63:a6:ff:3c:c3:46:e9:8f:
30:be:36:ca:fc:5d:0b:61:c7:5a:90:62:4c:76:78:8b:59:bf:
4c:86:1e:42:e4:70:42:59:c0:8d:11:89:5d:1f:e9:b2:32:8f:
f1:ec:49:60:f4:30:4a:0a:e1:57:9c:49:83:2f:4a:6e:76:ec:
25:88:0e:74:ae:19:10:62:4e:cd:2b:e7:c4:2d:b9:b6:01:b1:
8f:7d:29:70:a9:18:06:3f:ff:ed:5e:8d:4d:1b:4e:50:d4:bd:
a8:93:2c:f7:87:7d:78:58:46:55:39:9c:98:2a:9f:6c:f4:86:
cc:ba:f5:4c:08:5b:c4:49:a9:ed:b8:30:3c:15:de:6f:8d:83:
e3:32:af:3c:6c:69:37:68:fe:88:01:18:3a:77:5b:a4:2c:4a:
7f:ea:14:63:cb:39:38:d4:43:47:f0:83:ca:98:0d:57:40:86:
8a:77:07:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:11 2026 by rpki-client