Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
File: hzcmsXsBvwtUQm0YEPI9xPWPans.mft (raw, json)
Hash identifier: 4bImaQdwxeVxoM5nUyWivn48dPXFUFlGeob0wDKsHzA=
Subject key identifier: 7E:75:59:C0:2C:FB:29:A3:50:A0:8E:2C:71:43:70:E0:6C:60:0A:C1
Authority key identifier: 87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
Certificate issuer: /CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Certificate serial: 01A178BA88B4551BE4B9DE78ECD8772184E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
Manifest number: 094A
Signing time: Mon 26 Oct 2026 15:00:52 +0000
Manifest this update: Mon 26 Oct 2026 15:00:52 +0000
Manifest next update: Tue 27 Oct 2026 15:00:52 +0000
Files and hashes: 1: AJ9-_JPvMLD7MTO7v_AyZRgy0_0.roa (hash: M5yAFXUAqTlGP6Djc4hTf8xHqNDR8r1HdPQdOiU2KQ8=)
2: RJDT3UOUnvRDdUrUt0bNzYpN6GY.roa (hash: Q11lItRU7b2xFDCN9amHeShSUMnSL5ED5A7C2wNVlbE=)
3: hzcmsXsBvwtUQm0YEPI9xPWPans.crl (hash: ZlERADK/0OxbM9YGMrWNpbGcVvkArt91IJouNEs5mmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:ba:88:b4:55:1b:e4:b9:de:78:ec:d8:77:21:84:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Validity
Not Before: Oct 26 15:00:52 2026 GMT
Not After : Oct 27 15:00:52 2026 GMT
Subject: CN=7e7559c02cfb29a350a08e2c714370e06c600ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b0:62:b8:7b:99:63:8c:ca:be:ac:da:1b:ad:
3e:dd:2f:42:54:d6:bb:22:0c:03:f5:58:b3:3f:d7:
00:02:c8:1c:b9:f9:ed:0d:24:f9:ae:99:c2:93:e0:
7e:1a:f4:b5:b6:fc:c5:a9:a4:3b:d4:bc:6f:af:bd:
9b:84:1a:8a:40:e7:e5:61:86:84:63:ef:81:72:71:
82:25:e6:d1:43:c0:f8:9d:37:ec:66:4d:4f:09:dc:
9a:1c:42:09:a4:9e:47:dd:c9:a2:66:5d:28:a7:0d:
29:16:3d:65:a0:39:90:3c:d4:f8:e2:77:91:4b:4d:
d1:37:59:25:bb:1b:ac:47:1a:cd:c0:96:76:92:15:
72:f9:93:2e:26:16:44:e8:63:4e:01:ee:10:47:1d:
54:aa:54:5f:a9:43:59:0e:1e:86:d5:43:38:da:2f:
9a:dc:73:ad:b8:f7:79:78:d7:9f:a6:15:46:37:3e:
dc:c2:a5:97:98:1c:9e:e4:b6:0f:7c:96:34:91:19:
52:ce:ba:27:b5:28:fe:92:64:2c:25:7f:b8:11:17:
f9:49:46:16:38:5e:71:ea:78:88:80:ee:f8:2f:d1:
e3:7c:ed:cc:56:81:ea:e6:cc:aa:1a:94:47:97:2f:
76:39:44:2f:33:dd:37:0c:d2:1f:db:9e:6b:34:de:
57:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:75:59:C0:2C:FB:29:A3:50:A0:8E:2C:71:43:70:E0:6C:60:0A:C1
X509v3 Authority Key Identifier:
keyid:87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:16:59:b7:ed:6d:15:fd:4a:04:4e:19:6d:cf:6d:d7:53:c2:
50:71:89:49:f2:32:9d:6d:82:1f:51:c4:6f:28:b6:6f:b2:9c:
40:e8:a1:a3:ce:21:74:cc:e9:98:3f:f9:ec:dc:0a:76:51:0e:
45:49:05:27:3f:1c:72:21:40:92:80:00:88:bf:92:90:a3:28:
bc:4c:c3:b7:23:c2:57:1a:0c:66:1d:7c:6d:82:15:e8:67:98:
28:85:5f:88:95:f0:1f:85:10:32:29:66:4d:61:63:e1:ab:42:
79:b7:55:fc:75:33:79:31:c0:a6:a2:ed:bf:9c:8e:24:52:f5:
9a:b1:f1:b4:31:19:69:f1:05:74:03:aa:a3:c4:2d:dc:be:58:
f9:90:b5:6a:99:f7:dd:cc:2d:5b:e5:69:6e:4f:4f:f1:12:de:
e9:c3:c3:90:a1:46:13:ec:b7:cb:9c:c4:14:fb:44:31:24:5b:
aa:36:85:72:b0:c0:9d:b5:50:a5:da:9f:cd:e1:6e:bc:04:14:
28:c6:ae:bc:9a:77:bd:65:ea:2c:fc:80:3e:e5:6a:1f:e5:6d:
3d:c8:63:9e:a1:6f:fb:03:89:39:26:81:e4:f9:eb:8d:93:41:
c4:06:f7:04:6a:84:b9:42:01:36:7f:c3:85:aa:17:f2:38:88:
71:f6:98:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:04:31 2026 by rpki-client