Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
File: hzcmsXsBvwtUQm0YEPI9xPWPans.mft (raw, json)
Hash identifier: XAJhYX2Gm61CFgw9fOmhi5X+NyrjUvoXdci4BfTvr50=
Subject key identifier: 08:EC:65:DF:48:88:1E:66:A3:12:A0:8F:FA:E5:45:BA:A4:29:29:77
Authority key identifier: 87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
Certificate issuer: /CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Certificate serial: 019EB7D7FDD1B48D2A0A4E0952A688390D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
Manifest number: 07DD
Signing time: Thu 11 Jun 2026 18:00:46 +0000
Manifest this update: Thu 11 Jun 2026 18:00:46 +0000
Manifest next update: Fri 12 Jun 2026 18:00:46 +0000
Files and hashes: 1: AJ9-_JPvMLD7MTO7v_AyZRgy0_0.roa (hash: M5yAFXUAqTlGP6Djc4hTf8xHqNDR8r1HdPQdOiU2KQ8=)
2: RJDT3UOUnvRDdUrUt0bNzYpN6GY.roa (hash: Q11lItRU7b2xFDCN9amHeShSUMnSL5ED5A7C2wNVlbE=)
3: hzcmsXsBvwtUQm0YEPI9xPWPans.crl (hash: 8Xu//ouDhVetjn2waXSs/zPyLMLnqoenD0tv6+mHdpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d7:fd:d1:b4:8d:2a:0a:4e:09:52:a6:88:39:0d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Validity
Not Before: Jun 11 18:00:46 2026 GMT
Not After : Jun 12 18:00:46 2026 GMT
Subject: CN=08ec65df48881e66a312a08ffae545baa4292977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1f:db:42:ed:af:0c:a3:c4:7f:ad:12:57:d2:
f6:44:2a:9f:9f:a3:29:07:84:56:61:af:96:75:26:
c6:78:c0:35:70:8d:64:7a:ee:ba:d6:17:2a:3c:c9:
44:79:78:dd:28:da:5c:49:2f:92:41:36:04:c2:1b:
67:13:a6:a6:e6:4a:34:bf:93:f5:02:04:32:60:57:
ab:1e:36:e5:16:e3:7d:fc:53:04:07:0a:fe:cf:ab:
2f:90:76:b9:c7:b2:97:d4:72:b4:9b:51:d6:f6:07:
51:1c:d6:b5:96:d6:05:20:46:dc:1d:cf:75:13:96:
3f:c6:f0:24:9b:f0:ac:8a:0e:a9:aa:cd:8e:a5:5f:
78:31:5f:ad:fd:dd:f0:44:38:62:fd:c9:9e:c8:7e:
f2:88:98:20:72:a8:d7:73:40:d8:84:a4:a3:86:90:
49:fd:6f:40:97:36:91:e9:3c:6c:c6:85:f0:9c:c8:
56:90:8e:21:c7:56:85:9a:9e:8a:04:3e:87:0a:f2:
47:9a:b4:de:a8:53:2e:42:70:d9:01:3d:f1:09:90:
49:50:9c:06:2c:bf:9c:c7:46:07:77:36:ad:0a:15:
ad:37:ed:c6:57:ec:d4:c9:72:ba:1b:c4:03:5e:05:
81:e9:5b:70:ae:39:13:84:8c:f5:41:3e:90:35:b8:
dc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EC:65:DF:48:88:1E:66:A3:12:A0:8F:FA:E5:45:BA:A4:29:29:77
X509v3 Authority Key Identifier:
keyid:87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:78:bc:67:1f:02:12:89:5b:18:df:30:ce:39:36:bb:8a:10:
34:37:de:ef:02:66:f7:74:be:7b:41:2b:7b:44:69:5d:44:7c:
41:30:b7:1d:44:bc:e9:ce:11:47:85:a7:82:24:c3:99:f4:f4:
b8:98:e4:33:12:56:b9:42:08:ab:9d:fe:03:69:32:40:ce:89:
b6:e9:e2:e2:3d:7c:55:ff:c9:29:a2:e4:da:66:a4:57:a9:25:
81:a8:b5:3e:74:45:1c:fb:dc:ce:7d:47:44:cd:98:9c:67:c9:
d5:29:ae:83:aa:0d:23:16:08:cc:13:7b:5d:3d:19:ae:be:e4:
7b:0c:5c:a7:5a:32:56:b0:cc:7c:e6:59:1a:59:82:f8:e8:73:
78:6a:e6:93:de:9c:ae:ed:75:74:74:a8:42:4d:99:95:28:44:
4d:b2:bd:ae:ac:55:3b:67:05:c8:87:f0:66:f6:e9:e6:85:58:
c8:0d:54:d9:f9:74:ba:d7:ac:20:1d:cd:a0:05:cc:2c:b6:f4:
ca:9c:0c:61:16:0d:de:af:5a:9a:cb:9b:25:06:76:b4:70:33:
9f:4a:36:4c:d2:ce:87:19:91:ab:1c:4e:76:05:5a:c7:5b:31:
31:43:98:fc:57:08:08:9b:54:c6:00:f2:88:1b:42:04:52:ec:
41:4b:60:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:33 2026 by rpki-client