Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft
File: hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft (raw, json)
Hash identifier: 7B2erhuKQjNu+zyf6U59AERyO1Cgg8Kt+/Rk0dfJGPE=
Subject key identifier: 77:6C:1D:C0:ED:27:DB:73:46:C3:06:6F:C6:A8:E8:56:69:DE:76:9E
Authority key identifier: 86:7B:33:7C:E4:C3:4F:EB:4A:71:FF:F8:55:9E:5E:4C:98:E4:2B:00
Certificate issuer: /CN=867b337ce4c34feb4a71fff8559e5e4c98e42b00
Certificate serial: 019D38659FF2A8871B40B75875ED6E501230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hnszfOTDT-tKcf_4VZ5eTJjkKwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft
Manifest number: 97
Signing time: Sun 29 Mar 2026 07:01:17 +0000
Manifest this update: Sun 29 Mar 2026 07:01:17 +0000
Manifest next update: Mon 30 Mar 2026 07:01:17 +0000
Files and hashes: 1: PnZoP9c_MUx8bGVjWDH4QemT8Oc.roa (hash: N/n/c2ZTM9Bt63EXnz2HQd3THkOEOxgNYjeKCIXt71Y=)
2: hnszfOTDT-tKcf_4VZ5eTJjkKwA.crl (hash: SZraJPKkUfh2YuI/h4LWM8kTwCK5wyxIjdE+oRK5hKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hnszfOTDT-tKcf_4VZ5eTJjkKwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:9f:f2:a8:87:1b:40:b7:58:75:ed:6e:50:12:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=867b337ce4c34feb4a71fff8559e5e4c98e42b00
Validity
Not Before: Mar 29 07:01:17 2026 GMT
Not After : Mar 30 07:01:17 2026 GMT
Subject: CN=776c1dc0ed27db7346c3066fc6a8e85669de769e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c9:ed:fe:68:bb:b2:ef:bc:b6:09:54:86:47:
d4:69:d5:6e:94:d0:23:68:40:aa:3b:18:6b:7b:c5:
15:eb:89:71:1a:8c:ad:20:a9:f3:0c:f5:9c:cb:47:
d5:ea:eb:70:cc:c6:d8:9d:8d:41:09:fb:8c:a3:7d:
fa:13:33:c3:75:32:24:3f:3a:a1:c0:e0:5e:94:2b:
06:95:a2:ce:25:f6:8d:17:ca:73:e2:ad:b7:e9:4d:
d5:9a:01:29:7f:11:0b:30:4b:9a:44:6e:9f:45:b2:
b7:c1:f0:36:a0:1b:c4:84:53:20:42:0d:a6:94:39:
c2:61:28:02:e5:4c:61:cd:14:71:54:31:9d:3f:db:
29:6c:3b:6f:7a:cf:48:f2:7b:41:83:84:a2:a3:1a:
6e:ac:76:5d:ad:23:81:7a:85:be:dd:08:bf:b6:ae:
80:0b:cb:58:8b:bb:9f:9c:1b:79:e4:19:d2:53:f5:
37:77:02:f9:06:b9:45:97:4d:bc:81:1a:fc:e7:74:
2a:31:58:01:78:89:d7:4a:2b:7b:36:0e:a2:18:65:
d8:c8:db:bc:a9:8d:c7:a7:7e:d8:22:c9:4a:9b:53:
39:12:16:95:bc:ac:10:df:65:08:7a:f4:9a:82:71:
c5:ab:c9:f8:9e:a5:6e:a5:06:49:72:c6:05:25:d1:
50:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6C:1D:C0:ED:27:DB:73:46:C3:06:6F:C6:A8:E8:56:69:DE:76:9E
X509v3 Authority Key Identifier:
keyid:86:7B:33:7C:E4:C3:4F:EB:4A:71:FF:F8:55:9E:5E:4C:98:E4:2B:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hnszfOTDT-tKcf_4VZ5eTJjkKwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:26:7f:25:b8:95:e7:23:d4:cc:14:74:9d:b3:e2:54:81:a1:
92:23:bd:f9:67:fe:99:5f:44:34:f5:34:2e:c2:10:a8:ef:33:
5a:35:d2:7a:12:61:06:ef:a8:83:d0:07:fa:19:12:03:84:d5:
52:6f:91:fa:81:44:e8:68:78:49:cb:c8:5c:04:e6:14:0d:40:
12:fd:d8:de:31:87:40:ad:0b:2d:58:4d:4d:c7:74:60:33:5f:
c7:cb:f7:12:47:58:3d:1f:f1:a0:1f:2c:4d:c5:a4:7a:32:9f:
76:95:28:bb:9d:1e:09:60:b8:1f:e6:d1:d1:d7:1a:e5:8d:e8:
0a:b5:fc:35:6e:40:7d:db:a2:8b:4f:96:75:1a:36:5b:f1:35:
53:45:ce:ff:1e:1d:ed:33:d4:ab:54:ed:c7:f3:93:1f:03:0c:
c6:2e:71:e0:5c:68:b4:5e:20:12:6e:b2:08:9e:12:14:51:b4:
57:15:4f:61:5a:89:7d:c6:64:cd:f4:b6:47:57:49:b3:bc:3c:
6f:3a:b0:f8:74:92:b1:0e:63:a5:4d:bf:3b:14:4b:9a:7e:59:
34:88:b9:ee:61:4a:84:35:59:54:38:0f:84:7e:cb:38:b0:d3:
d9:ee:c7:6b:34:f1:37:46:35:b9:dd:7c:6f:dd:46:05:06:2d:
19:e7:be:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZZ/yqIcbQLdYde1uUBIwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2N2IzMzdjZTRjMzRmZWI0YTcxZmZmODU1OWU1ZTRjOThl
NDJiMDAwHhcNMjYwMzI5MDcwMTE3WhcNMjYwMzMwMDcwMTE3WjAzMTEwLwYDVQQD
Eyg3NzZjMWRjMGVkMjdkYjczNDZjMzA2NmZjNmE4ZTg1NjY5ZGU3NjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMnt/mi7su+8tglUhkfUadVulNAj
aECqOxhre8UV64lxGoytIKnzDPWcy0fV6utwzMbYnY1BCfuMo336EzPDdTIkPzqh
wOBelCsGlaLOJfaNF8pz4q236U3VmgEpfxELMEuaRG6fRbK3wfA2oBvEhFMgQg2m
lDnCYSgC5UxhzRRxVDGdP9spbDtves9I8ntBg4SioxpurHZdrSOBeoW+3Qi/tq6A
C8tYi7ufnBt55BnSU/U3dwL5BrlFl028gRr853QqMVgBeInXSit7Ng6iGGXYyNu8
qY3Hp37YIslKm1M5EhaVvKwQ32UIevSagnHFq8n4nqVupQZJcsYFJdFQ9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdsHcDtJ9tzRsMGb8ao6FZp3naeMB8GA1UdIwQY
MBaAFIZ7M3zkw0/rSnH/+FWeXkyY5CsAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG5zemZPVERULXRLY2ZfNFZaNWVUSmprS3dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9lMjc5ZjUtNzNkMS00ZmU4LTk3OGQt
OTBhY2ZkYjAxZTkwLzEvaG5zemZPVERULXRLY2ZfNFZaNWVUSmprS3dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9lMjc5ZjUtNzNkMS00ZmU4LTk3OGQtOTBhY2ZkYjAxZTkw
LzEvaG5zemZPVERULXRLY2ZfNFZaNWVUSmprS3dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAayZ/JbiV
5yPUzBR0nbPiVIGhkiO9+Wf+mV9ENPU0LsIQqO8zWjXSehJhBu+og9AH+hkSA4TV
Um+R+oFE6Gh4ScvIXATmFA1AEv3Y3jGHQK0LLVhNTcd0YDNfx8v3EkdYPR/xoB8s
TcWkejKfdpUou50eCWC4H+bR0dca5Y3oCrX8NW5Afduii0+WdRo2W/E1U0XO/x4d
7TPUq1Ttx/OTHwMMxi5x4FxotF4gEm6yCJ4SFFG0VxVPYVqJfcZkzfS2R1dJs7w8
bzqw+HSSsQ5jpU2/OxRLmn5ZNIi57mFKhDVZVDgPhH7LOLDT2e7HazTxN0Y1ud18
b91GBQYtGee+Xg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:33 2026 by rpki-client