Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
File: hZtbaj2CvQDtMcbOs66nrVke5Tc.mft (raw, json)
Hash identifier: ePsGGOhcVCdvHzJoHuXtzc5F7unbc0+L6vY5HPplyxM=
Subject key identifier: A3:13:70:BA:07:C8:38:A0:9D:84:F9:75:E5:B4:99:B7:37:D2:8A:54
Authority key identifier: 85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
Certificate issuer: /CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Certificate serial: 019D3909EAF11013E1DCE68D4052950D93B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
Manifest number: 093C
Signing time: Sun 29 Mar 2026 10:00:44 +0000
Manifest this update: Sun 29 Mar 2026 10:00:44 +0000
Manifest next update: Mon 30 Mar 2026 10:00:44 +0000
Files and hashes: 1: WONQ7npwfGt536jW_jiQ6ofmsbE.roa (hash: wXrQD7008VodzAdmV5Adtb+RMKX/kAHGByf3aYplnok=)
2: hZtbaj2CvQDtMcbOs66nrVke5Tc.crl (hash: eY748rCNPzc3jlOm5QLmBksPNfjDnoiwaaNHDQbQnSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:ea:f1:10:13:e1:dc:e6:8d:40:52:95:0d:93:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Validity
Not Before: Mar 29 10:00:44 2026 GMT
Not After : Mar 30 10:00:44 2026 GMT
Subject: CN=a31370ba07c838a09d84f975e5b499b737d28a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6d:8c:de:1e:5e:5d:79:67:5b:2a:6e:69:18:
2d:ee:79:89:ee:3d:2a:83:e1:93:78:66:b5:8c:9b:
be:27:7b:6b:e2:d2:1c:9f:3b:97:fb:43:0a:4b:83:
c8:c1:85:24:c5:06:40:e1:15:7c:34:b6:e9:ca:9a:
cd:81:c5:a2:4d:88:d8:db:1c:c0:c1:a0:47:3e:65:
18:18:0a:bf:e8:10:69:67:74:20:75:f9:ee:2b:fd:
d5:0b:0a:bd:6d:28:50:53:d4:46:5f:02:2e:1a:d9:
97:51:88:8c:2a:dd:26:5b:cc:d1:3b:8d:f6:ee:9d:
b9:30:e4:76:12:8c:8c:c1:bd:36:bf:6b:95:f0:88:
33:f7:f6:06:44:cb:21:08:67:2b:a6:c4:72:68:39:
33:b2:38:b1:78:80:1e:97:fc:0b:0a:fc:8f:50:3b:
fd:27:4b:4e:d5:22:6d:79:a0:5b:cd:cd:b8:0a:0a:
a8:7a:b1:f9:91:03:b9:04:0a:9d:94:e7:7d:6c:39:
2b:96:89:dc:32:bb:7b:e2:ad:12:c6:74:cc:3a:ab:
c7:cd:cd:a8:21:61:55:8b:e2:b7:92:f6:34:1e:51:
86:d8:56:d8:c5:3d:76:90:62:97:41:86:c7:fa:95:
ad:73:40:16:bf:cd:fe:eb:25:e8:65:2c:5e:11:68:
49:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:13:70:BA:07:C8:38:A0:9D:84:F9:75:E5:B4:99:B7:37:D2:8A:54
X509v3 Authority Key Identifier:
keyid:85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:39:29:64:2b:9b:7a:e6:91:23:a5:0d:95:8c:b6:f7:b6:37:
c2:c8:1c:a9:2b:2f:34:8a:b8:52:9e:03:8c:d2:64:5c:05:0f:
8c:69:c6:9a:d5:d7:66:8c:e9:74:27:37:2b:5e:90:9b:e8:65:
d2:ab:b5:e3:66:5e:66:9f:39:67:a9:e3:d9:ad:41:00:ab:cc:
3e:09:67:d7:51:1e:a8:cf:02:1d:ac:9d:5a:c5:fe:4f:e9:a5:
c1:56:df:08:28:15:f6:71:01:30:e1:02:7f:62:b4:02:2d:03:
67:81:7b:35:24:52:89:02:5f:08:ab:60:9a:0b:c2:d3:b5:5a:
65:25:ef:c4:36:89:54:85:05:6d:53:8e:f6:6d:a6:aa:97:2c:
2c:72:88:d1:fb:55:58:99:14:3a:cf:86:2e:70:41:32:98:3c:
3c:7a:66:1e:39:ee:27:e4:ac:05:ec:63:ac:9d:47:92:7c:9e:
d0:4c:d7:d7:ab:5e:a3:98:d5:4c:34:b3:6f:a6:f7:fa:90:22:
a7:44:5b:5d:aa:e5:fa:c3:32:1f:af:5a:bb:44:6a:dc:0c:cc:
db:75:73:11:56:cf:01:87:79:22:ed:6c:cf:24:b3:1f:e9:cc:
df:b8:41:d8:db:19:50:35:6f:2b:3f:b6:1b:96:5f:60:76:24:
59:e5:e1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:09 2026 by rpki-client