Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
File: hzcmsXsBvwtUQm0YEPI9xPWPans.mft (raw, json)
Hash identifier: 2xReUPXkkPCGopJRA5thdbn3G8rI9nBKoEXsnc1KQ3A=
Subject key identifier: 1B:51:8F:29:F0:79:EC:6A:62:85:07:17:13:63:49:F9:1B:71:8F:98
Authority key identifier: 87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
Certificate issuer: /CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Certificate serial: 019DCC3D8E1EC31DE0B5DCB731FD4A0B6795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
Manifest number: 0763
Signing time: Mon 27 Apr 2026 00:01:19 +0000
Manifest this update: Mon 27 Apr 2026 00:01:19 +0000
Manifest next update: Tue 28 Apr 2026 00:01:19 +0000
Files and hashes: 1: AJ9-_JPvMLD7MTO7v_AyZRgy0_0.roa (hash: M5yAFXUAqTlGP6Djc4hTf8xHqNDR8r1HdPQdOiU2KQ8=)
2: RJDT3UOUnvRDdUrUt0bNzYpN6GY.roa (hash: Q11lItRU7b2xFDCN9amHeShSUMnSL5ED5A7C2wNVlbE=)
3: hzcmsXsBvwtUQm0YEPI9xPWPans.crl (hash: PYC8zTMDOWpUyoIpP+pwxY3OyIzqVtdzkwHxo12CkXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:3d:8e:1e:c3:1d:e0:b5:dc:b7:31:fd:4a:0b:67:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Validity
Not Before: Apr 27 00:01:19 2026 GMT
Not After : Apr 28 00:01:19 2026 GMT
Subject: CN=1b518f29f079ec6a62850717136349f91b718f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:37:58:c6:85:e5:76:7c:00:1f:41:c6:e4:01:
3d:ea:68:f3:9d:aa:aa:b9:f6:c9:47:48:96:6c:33:
0e:cc:95:02:ae:f6:48:17:d9:6d:f2:bd:d8:5e:28:
ab:7f:7d:7d:f9:4f:d6:1a:0a:0e:1d:f6:e6:78:29:
81:2b:0c:52:54:52:5c:6c:18:23:b2:af:67:83:51:
5e:dc:b8:47:ac:d3:b7:70:bc:c4:84:5a:64:dc:4e:
8f:95:32:f7:f1:df:f9:c1:71:6c:29:65:fa:88:13:
15:e5:f1:b5:46:c1:11:66:07:c4:c3:e0:85:89:56:
b5:cd:66:7a:bf:16:f1:f8:4b:ec:29:78:eb:3a:7e:
d5:3e:d4:9b:05:12:b4:f5:95:67:8a:14:b5:a1:c2:
bc:41:d9:0c:15:12:b1:2f:46:42:6f:dd:7b:5d:e8:
a3:27:d0:22:e6:e9:a3:07:67:9d:20:5c:b6:63:8d:
18:3e:0e:0e:eb:5a:4b:1a:fb:08:e0:2b:34:b9:d4:
84:3d:47:50:69:5b:96:75:d5:17:e8:b9:58:4e:d6:
16:a9:d6:99:58:9a:32:87:38:eb:8d:75:78:83:f7:
4e:fb:7d:62:69:b3:73:61:ea:56:69:3d:3b:30:02:
c0:85:63:82:39:79:d2:c9:67:f5:11:7d:2b:a6:38:
da:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:51:8F:29:F0:79:EC:6A:62:85:07:17:13:63:49:F9:1B:71:8F:98
X509v3 Authority Key Identifier:
keyid:87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c8:c3:0d:73:3a:d3:28:c9:e2:12:0d:ca:cd:c7:8d:c5:51:
64:2f:cb:85:d3:fc:1b:e7:30:e7:2f:2c:d9:ed:1c:55:7c:65:
eb:13:09:bc:c5:f4:01:d9:6f:64:48:94:29:f6:13:4b:7c:0a:
1a:38:63:d2:4d:e8:e6:64:de:bf:a6:26:31:61:6e:5d:a4:2c:
18:e5:eb:c4:1a:cc:5f:41:86:07:0e:f9:80:bb:86:09:45:19:
58:47:0a:b1:67:c2:92:c1:84:a0:0e:2f:1c:d4:40:0f:cb:7a:
08:b6:0e:6a:1d:2b:8b:c8:38:d2:2c:86:8a:b3:10:89:18:33:
fb:bf:6b:31:29:c1:28:fa:50:10:b8:96:ee:48:4d:b7:fc:08:
91:a5:d8:f2:3c:30:c2:76:9f:a6:f1:12:ec:a0:09:fb:1c:4e:
f4:d5:58:b2:14:84:1d:bc:dc:af:2e:93:6a:53:c8:52:d9:8a:
a0:d9:97:a9:93:06:37:a4:a0:9b:b8:4a:7c:7f:f3:f9:33:45:
ff:fa:27:41:c7:d3:b6:83:69:31:10:ce:76:7b:87:c2:e3:d7:
32:d2:a3:2b:2d:e4:ff:a5:ae:33:f2:65:a3:43:2e:14:d3:ff:
1f:b8:f7:fb:bd:1c:a0:bc:bd:e0:ce:bb:84:7d:43:96:53:c5:
27:84:e8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:18 2026 by rpki-client