Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft
File: hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft (raw, json)
Hash identifier: DGqFWr96hEsQX7yIGRBUCdmzS2JKUb8rFkfYA1Uyll4=
Subject key identifier: B2:74:78:C2:9E:18:5E:75:01:BC:87:14:37:10:0D:92:76:7B:D3:7E
Authority key identifier: 86:7B:33:7C:E4:C3:4F:EB:4A:71:FF:F8:55:9E:5E:4C:98:E4:2B:00
Certificate issuer: /CN=867b337ce4c34feb4a71fff8559e5e4c98e42b00
Certificate serial: 019E691880C82555CE45700860F6C570A197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hnszfOTDT-tKcf_4VZ5eTJjkKwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft
Manifest number: 0135
Signing time: Wed 27 May 2026 11:01:13 +0000
Manifest this update: Wed 27 May 2026 11:01:13 +0000
Manifest next update: Thu 28 May 2026 11:01:13 +0000
Files and hashes: 1: PnZoP9c_MUx8bGVjWDH4QemT8Oc.roa (hash: N/n/c2ZTM9Bt63EXnz2HQd3THkOEOxgNYjeKCIXt71Y=)
2: hnszfOTDT-tKcf_4VZ5eTJjkKwA.crl (hash: Ryaka3+nyGZD+iTRdqjGZmFQVUarWS4khfx4Nmg6+rw=)
3: t6GAlny-fqKuuQwhbvUz_72cDZg.roa (hash: 0Z7m8nppSdIlpMkeX4RoJU4whGw35KKZIMqUWhBFgBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hnszfOTDT-tKcf_4VZ5eTJjkKwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:69:18:80:c8:25:55:ce:45:70:08:60:f6:c5:70:a1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=867b337ce4c34feb4a71fff8559e5e4c98e42b00
Validity
Not Before: May 27 11:01:13 2026 GMT
Not After : May 28 11:01:13 2026 GMT
Subject: CN=b27478c29e185e7501bc871437100d92767bd37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:9f:c0:df:d5:2c:98:4f:ec:22:42:04:28:
6a:78:24:00:65:90:a9:14:e3:ca:e1:61:c5:69:3e:
90:d2:4d:ba:3c:57:0a:c8:0b:8f:0e:19:d1:47:c7:
dd:c0:86:ec:db:fb:e9:67:fd:f9:d1:bb:c1:98:1f:
a4:d3:6b:20:93:8d:9c:a8:28:a4:5c:d1:ff:5c:8b:
78:68:84:f2:b5:ab:1a:9e:55:1d:a2:e1:3e:20:73:
8c:c2:f4:23:4a:df:68:c9:26:f0:40:f1:b2:35:e7:
c4:f7:5e:e1:91:82:21:ab:0f:c7:e6:a0:bc:d3:61:
7a:27:f4:fd:fa:02:0a:c7:e0:eb:f9:55:d8:2e:0e:
4a:84:f3:4f:bf:d0:a0:ae:33:44:65:c3:98:28:99:
a6:b4:44:ed:bb:c7:3b:b8:ca:55:ac:72:4d:c0:9d:
90:50:76:34:f2:40:5d:d6:0f:6b:e7:a3:1b:12:50:
d3:b2:bc:0b:df:4d:a8:94:67:b5:50:52:7c:4d:fd:
76:5d:70:01:8e:a7:92:dc:c5:66:66:ad:dd:ce:45:
97:4b:6a:4a:45:23:a5:dd:68:09:b9:0a:23:43:7e:
22:10:c2:46:31:36:a9:08:53:74:b8:5e:0b:bb:80:
e8:24:13:48:4f:86:5b:56:24:5a:9d:3c:09:01:a9:
a4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:74:78:C2:9E:18:5E:75:01:BC:87:14:37:10:0D:92:76:7B:D3:7E
X509v3 Authority Key Identifier:
keyid:86:7B:33:7C:E4:C3:4F:EB:4A:71:FF:F8:55:9E:5E:4C:98:E4:2B:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hnszfOTDT-tKcf_4VZ5eTJjkKwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e279f5-73d1-4fe8-978d-90acfdb01e90/1/hnszfOTDT-tKcf_4VZ5eTJjkKwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:19:81:d4:3a:a4:8d:36:55:d2:f5:22:32:e3:f5:14:0e:96:
56:66:bb:18:50:ef:39:f3:2c:52:56:5e:21:b8:e9:92:d3:88:
7f:96:06:8e:c4:ad:2f:25:a9:bb:69:b5:44:07:b5:f2:58:75:
8c:71:ca:58:88:6d:93:21:36:35:4b:d3:28:b2:a2:4c:d4:84:
e5:48:29:b9:aa:7a:e9:fb:50:9d:c9:12:51:eb:b9:8a:91:1e:
e0:c5:41:4c:62:0b:58:49:6c:1b:62:e3:f2:df:c1:e3:97:d7:
99:f1:62:5f:0e:e0:7f:ef:8d:b4:63:23:63:49:3a:31:ea:d0:
4d:3d:a3:87:cf:16:e5:bc:e3:1e:04:25:01:42:c6:75:34:19:
9e:cc:1a:8a:55:54:0d:cc:38:e1:2f:80:3b:a0:3a:c0:d4:da:
00:13:52:ca:0f:37:4c:7a:a4:48:b4:69:48:c7:85:72:47:16:
b6:33:88:6b:da:9d:65:06:62:14:79:4a:ee:ec:4b:63:4a:b7:
d1:a1:4d:c8:fe:17:85:1b:e0:1f:f9:6b:70:12:a0:57:05:24:
a6:23:15:57:2c:fd:9b:17:59:05:05:47:a9:a1:3a:08:1e:7f:
22:e6:83:8c:df:b0:16:0a:0d:d2:0e:d4:85:a3:b8:a2:93:49:
b1:fd:c1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 18:33:37 2026 by rpki-client