Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft
File: HsazH53p01lJWdHlnWbJt-k_7WY.mft (raw, json)
Hash identifier: pHagoV3m+UtWMC+EzyC33zywBUvaZebSTGp3dcE00/Q=
Subject key identifier: 3C:B2:64:B5:07:23:BC:90:D6:5B:AE:34:E7:3D:B6:48:6D:B4:1D:87
Authority key identifier: 1E:C6:B3:1F:9D:E9:D3:59:49:59:D1:E5:9D:66:C9:B7:E9:3F:ED:66
Certificate issuer: /CN=1ec6b31f9de9d3594959d1e59d66c9b7e93fed66
Certificate serial: 019D3940BA689D572D4F7B6DB255DD9A0045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsazH53p01lJWdHlnWbJt-k_7WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft
Manifest number: 014C
Signing time: Sun 29 Mar 2026 11:00:36 +0000
Manifest this update: Sun 29 Mar 2026 11:00:36 +0000
Manifest next update: Mon 30 Mar 2026 11:00:36 +0000
Files and hashes: 1: HsazH53p01lJWdHlnWbJt-k_7WY.crl (hash: YDh6BqbEmUWe9WKXdf3Apvmrry5vwzwjGqmN1yYeHyU=)
2: aP0YLe6Eyddh_CvenzS4fc6xbEY.asa (hash: esUQ4x4KdmAuhxjOhLEJlSyDjJw3j6M3LGFJwk2gu70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HsazH53p01lJWdHlnWbJt-k_7WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ba:68:9d:57:2d:4f:7b:6d:b2:55:dd:9a:00:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ec6b31f9de9d3594959d1e59d66c9b7e93fed66
Validity
Not Before: Mar 29 11:00:36 2026 GMT
Not After : Mar 30 11:00:36 2026 GMT
Subject: CN=3cb264b50723bc90d65bae34e73db6486db41d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:29:6e:a8:fe:8f:3e:4d:88:e7:20:55:59:97:
45:4c:b3:0c:69:aa:e7:36:af:7c:cb:c1:9f:91:9d:
93:21:df:28:56:16:8a:a7:8e:c2:a2:f1:90:c6:73:
91:9a:fd:46:d0:06:0a:93:7d:a6:d1:e6:20:bb:82:
ed:19:6c:1e:05:44:8c:88:d5:c5:14:42:a0:c2:14:
15:ea:cc:e4:c5:58:4b:f9:66:74:0d:6f:c7:6a:8b:
2e:38:18:ae:30:0e:65:0f:f6:18:ea:43:8b:ab:da:
bd:fe:c7:23:26:1b:27:2c:8e:f9:18:a0:db:49:af:
f3:f1:8b:d9:ea:87:99:22:87:f2:7a:57:45:46:f2:
84:54:3d:3c:1f:5b:37:dd:a1:ea:d4:47:39:f9:c8:
06:91:95:c6:a6:dd:e7:8a:a5:82:41:ff:c6:25:61:
d3:18:a7:1e:0b:f5:69:db:d2:71:ad:65:ac:32:90:
a9:0e:ed:fb:13:93:f1:13:f9:9e:23:f3:31:14:0c:
67:40:c0:22:1a:88:d5:4e:e2:85:cd:e0:e8:f6:76:
24:3f:d2:13:3b:56:3f:66:43:2f:96:af:04:03:eb:
c8:51:1e:59:ac:72:0b:4b:8c:dd:0e:92:02:3c:cd:
91:ba:42:b8:b9:ae:0e:f0:a3:18:90:bc:99:b9:3b:
dd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B2:64:B5:07:23:BC:90:D6:5B:AE:34:E7:3D:B6:48:6D:B4:1D:87
X509v3 Authority Key Identifier:
keyid:1E:C6:B3:1F:9D:E9:D3:59:49:59:D1:E5:9D:66:C9:B7:E9:3F:ED:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsazH53p01lJWdHlnWbJt-k_7WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/83c7ea-7c1f-471a-a547-8578388a57ff/1/HsazH53p01lJWdHlnWbJt-k_7WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b3:92:d3:58:3b:5b:37:6c:b1:9d:ea:d6:d6:a0:00:bf:8f:
34:8e:8e:6d:0c:8c:ef:b7:8b:3c:61:65:29:77:b8:86:51:67:
46:37:85:47:0f:ec:fe:78:fd:e9:46:14:3b:7b:48:43:9c:f9:
76:ee:91:07:e6:95:19:2e:f1:81:0c:28:12:6a:f9:95:35:4c:
23:36:4e:80:1a:e1:de:76:8e:52:c0:ef:d4:3b:94:98:06:a6:
2a:8f:a5:14:88:49:67:0f:5f:57:9d:3e:1d:6b:b0:3a:bd:dd:
2a:e4:9c:14:79:28:f1:33:40:b9:14:e4:67:64:ae:bd:ec:2b:
a3:d8:3b:50:b7:7c:91:e3:5b:8a:4d:11:f6:d4:19:8b:4c:9f:
0c:d3:89:c2:73:d2:8b:2a:bc:48:62:48:c6:fd:b4:ff:52:18:
52:e9:4c:4a:20:2b:c2:35:12:f7:90:c3:11:ca:26:d4:53:9a:
98:5c:f0:81:8a:89:63:ed:1e:b9:50:5a:cc:0f:7a:61:3a:bb:
c8:db:77:00:a6:64:ec:85:13:37:8a:7d:57:9a:58:f7:04:74:
79:7f:e0:ac:86:45:58:1d:28:01:51:de:89:bf:7d:6e:6f:b6:
d1:c4:9e:e3:d1:df:7e:d4:5d:df:2a:f1:8e:31:d6:9a:eb:11:
81:fa:de:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:27:59 2026 by rpki-client