Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft
File: hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft (raw, json)
Hash identifier: Z/NU1DsEKz74OLD0uyZi/2R6bGyOAXxmrCZbg+ARH2s=
Subject key identifier: E7:BA:31:37:9D:BD:8B:A8:AF:F1:73:B5:D2:37:0A:32:D0:97:19:35
Authority key identifier: 86:7B:33:7C:E4:C3:4F:EB:4A:71:FF:F8:55:9E:5E:4C:98:E4:2B:00
Certificate issuer: /CN=867b337ce4c34feb4a71fff8559e5e4c98e42b00
Certificate serial: 019F84FA68828EA8F1CEBC20059C2B685DE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hnszfOTDT-tKcf_4VZ5eTJjkKwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft
Manifest number: 01C8
Signing time: Tue 21 Jul 2026 14:00:30 +0000
Manifest this update: Tue 21 Jul 2026 14:00:30 +0000
Manifest next update: Wed 22 Jul 2026 14:00:30 +0000
Files and hashes: 1: PnZoP9c_MUx8bGVjWDH4QemT8Oc.roa (hash: N/n/c2ZTM9Bt63EXnz2HQd3THkOEOxgNYjeKCIXt71Y=)
2: hnszfOTDT-tKcf_4VZ5eTJjkKwA.crl (hash: y+RBM5+drYPEaCDK/hr9Dt8Ou0m6ZLjJVA45woo569o=)
3: t6GAlny-fqKuuQwhbvUz_72cDZg.roa (hash: 0Z7m8nppSdIlpMkeX4RoJU4whGw35KKZIMqUWhBFgBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hnszfOTDT-tKcf_4VZ5eTJjkKwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:fa:68:82:8e:a8:f1:ce:bc:20:05:9c:2b:68:5d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=867b337ce4c34feb4a71fff8559e5e4c98e42b00
Validity
Not Before: Jul 21 14:00:30 2026 GMT
Not After : Jul 22 14:00:30 2026 GMT
Subject: CN=e7ba31379dbd8ba8aff173b5d2370a32d0971935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:93:dd:52:fb:ab:fe:08:a3:95:62:d4:1e:
fd:ff:b6:36:8d:57:ee:a9:84:19:38:3a:e0:41:aa:
3f:cc:53:57:d0:a9:b7:21:a7:db:6a:fa:2e:5f:3a:
09:81:24:94:f5:dc:24:8c:67:1a:bd:26:4f:13:95:
f2:8a:bc:86:e0:f8:86:8e:38:c2:70:b0:24:f0:a6:
34:75:96:94:42:da:62:a5:74:59:27:22:a2:37:cf:
f2:18:aa:4b:7c:4e:7e:8b:98:d3:93:9d:dd:0a:41:
17:51:8f:64:af:b2:81:d8:77:1a:0e:27:14:3c:36:
ba:05:c0:fa:66:9f:b8:fd:c9:d7:f3:f1:4b:a3:70:
d5:27:b5:45:43:89:cd:f1:6e:35:cd:79:36:51:e1:
56:f0:28:e3:5b:d3:16:19:2b:f6:7a:ee:a9:79:68:
8e:9f:c3:d0:71:2d:3a:c6:07:64:35:dd:ac:ab:57:
aa:ff:16:00:ab:50:ae:79:ca:84:2f:25:bc:6d:ed:
12:5f:57:38:d1:eb:f3:ea:4a:03:74:ba:4d:d8:46:
b9:3c:ec:61:f5:45:be:cf:cb:2d:bb:0d:02:d7:44:
68:31:11:27:5b:13:bd:2e:b3:da:1c:cc:9b:a1:f0:
23:d1:4b:ae:bd:7c:8c:c4:31:9a:48:50:f2:32:91:
f8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BA:31:37:9D:BD:8B:A8:AF:F1:73:B5:D2:37:0A:32:D0:97:19:35
X509v3 Authority Key Identifier:
keyid:86:7B:33:7C:E4:C3:4F:EB:4A:71:FF:F8:55:9E:5E:4C:98:E4:2B:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hnszfOTDT-tKcf_4VZ5eTJjkKwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e0:d0:99:42:51:41:6a:13:a5:80:c3:c8:de:0a:74:31:0c:
72:b7:d1:18:e4:4c:e7:ff:ab:6d:8a:dd:11:95:50:c2:5e:71:
98:ed:3f:eb:44:f5:73:e7:89:ca:e5:76:61:fb:d3:ea:04:b0:
d6:78:26:6c:a8:a8:90:94:05:44:d5:2e:d6:92:49:76:b1:c0:
6e:f2:f3:76:04:e8:50:ab:f6:cb:9f:9e:4d:7e:45:be:99:8b:
5e:71:1a:2f:83:ae:a2:f2:6a:3a:1d:81:98:7a:02:1f:b6:c3:
e4:e2:18:14:93:e5:7a:e3:48:c6:bd:12:ad:1c:b4:88:79:62:
c1:77:f1:0d:c1:b8:33:fa:db:4d:b2:df:ed:74:2d:e6:35:12:
a9:75:59:51:78:ab:0c:c5:42:48:b8:51:1b:ff:4c:b2:ef:b7:
d2:82:89:48:c2:67:04:09:22:96:fe:35:7c:a7:28:2d:e9:25:
44:87:04:10:de:0f:f8:4e:21:24:7c:00:26:4b:59:99:48:f3:
c3:30:2c:74:9a:a9:9c:cd:a5:05:08:e9:d0:85:ce:39:9c:25:
fe:19:48:09:02:81:9a:fa:cc:56:66:9e:0f:8e:25:29:22:f3:
2f:34:49:00:30:1c:b3:cf:78:ee:fc:a9:aa:22:84:92:0d:cb:
8d:b8:41:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:34:55 2026 by rpki-client