Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
File: HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft (raw, json)
Hash identifier: Bd0UAL7sK+nLU+oNohqYoae0vuLpJlcD3T5ywqyxCZ8=
Subject key identifier: BF:C0:0E:7C:79:DE:77:27:69:94:30:51:FC:2F:06:E3:D5:65:E3:08
Authority key identifier: 1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
Certificate issuer: /CN=1c766b058c096753a34ad625d53275cd2dba5b33
Certificate serial: 019D0DB1B0B7AF948922FD1343ED8087669A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
Manifest number: 15BE
Signing time: Sat 21 Mar 2026 00:00:41 +0000
Manifest this update: Sat 21 Mar 2026 00:00:41 +0000
Manifest next update: Sun 22 Mar 2026 00:00:41 +0000
Files and hashes: 1: GNlEKqFh-Tv2hz0SznfgxA4czj8.roa (hash: 43aHiWheagiqIIyy3ZQAw5+wp/fUUv/1/kOcWYJ6M+c=)
2: HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl (hash: IsOR+YUXzSnM/T+FnjVz0cc6Zl46ZujRDHyB1RG79jc=)
3: lJxYVzr-KS-fYsC57OKvflP8A4c.roa (hash: 4pvbPMsGzdgVlC585Dyoz1kyokZkz2DdP27jl7Yydb4=)
4: r-1SzrZjoEXcWaVFk74aF23TjJ0.roa (hash: sRjFv0mWTbb1HZj7c7GM888be2VPScRA9imdmTy3Guc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0d:b1:b0:b7:af:94:89:22:fd:13:43:ed:80:87:66:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c766b058c096753a34ad625d53275cd2dba5b33
Validity
Not Before: Mar 21 00:00:41 2026 GMT
Not After : Mar 22 00:00:41 2026 GMT
Subject: CN=bfc00e7c79de772769943051fc2f06e3d565e308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:93:56:f6:96:e4:38:26:51:28:84:ac:30:3c:
fa:bd:75:03:8b:43:a9:02:54:28:7e:c4:2a:05:2a:
e6:0d:e9:7e:a0:8c:51:41:6e:b8:88:9f:48:3d:41:
18:92:10:5b:ef:a6:d0:ab:da:23:30:fd:b3:6c:5c:
47:4f:d7:85:90:b7:1b:2f:36:03:f8:42:28:5b:ed:
ac:88:98:59:79:38:ab:9d:0b:9f:e2:86:58:d4:96:
d8:54:1c:38:2d:da:4b:a7:66:25:bb:00:bd:3c:b2:
b3:3a:32:8f:9a:38:39:5b:c8:1a:58:e7:8c:6a:26:
a9:0d:32:4d:6d:8e:ed:12:66:95:0e:23:7f:45:a9:
30:b0:05:06:db:a7:a0:cf:b1:d9:26:25:4a:61:f2:
45:69:1f:ef:67:cd:62:43:ea:44:59:4a:2b:a0:84:
46:cb:84:6e:b6:73:3d:0c:5a:15:1e:a6:65:c1:74:
2e:02:a5:1e:24:4d:71:00:60:98:08:8a:c6:78:c9:
ba:c4:17:58:6c:6c:20:50:f8:d5:f4:70:93:31:0d:
0a:c0:fb:01:8a:86:4b:1f:92:d4:51:4b:9b:28:85:
f9:d8:f4:da:79:ea:7e:80:72:bd:95:66:8c:81:6c:
80:4f:96:88:b3:db:91:c8:98:8b:2b:68:6a:55:05:
c4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C0:0E:7C:79:DE:77:27:69:94:30:51:FC:2F:06:E3:D5:65:E3:08
X509v3 Authority Key Identifier:
keyid:1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c5:01:ca:b9:e5:fc:13:a8:a4:e5:6f:55:df:72:ee:89:67:
57:fc:0d:a9:e2:80:17:77:09:5c:fd:c2:63:17:28:22:60:63:
0d:dc:f9:73:36:8a:d1:dc:90:fb:9a:6b:f1:c8:48:fe:39:cd:
d8:c1:9a:99:3f:89:eb:68:8b:6c:17:16:29:ba:0b:a1:9e:ab:
46:3e:35:e4:91:33:72:ed:97:f4:34:07:bf:be:07:a0:a9:06:
bf:72:c1:f6:12:c8:f2:f9:bf:54:22:85:21:71:d6:c5:85:14:
b7:b2:39:c4:bf:d0:62:b7:de:db:49:cf:f9:4f:11:f8:cd:69:
3b:57:1d:af:17:b9:b3:b5:4f:53:ce:09:29:5e:43:6e:2c:a3:
3d:fc:c0:10:4e:ea:f3:58:3d:08:23:bd:1c:2e:ce:47:f1:d6:
bf:d8:1a:31:42:72:0a:c8:81:03:c4:e3:c4:aa:25:1d:09:3b:
f2:63:11:50:81:51:a2:d0:ff:33:65:c2:a6:66:1e:12:68:ad:
e0:5b:86:5b:c1:87:e0:69:be:8c:de:c3:b0:86:00:0a:76:ab:
26:3a:68:a2:0b:f5:ba:99:08:03:98:15:8b:a6:12:2d:fe:fa:
56:a6:e3:ff:c7:a4:a0:9a:51:91:22:dd:17:29:5b:a4:6d:7f:
7e:ff:11:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 03:25:01 2026 by rpki-client