Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6f679e-62be-4e22-8b2c-24001919eade/1/Hz2d1Kof8utQ2g1Ayuxb_aaOczc.mft
File: Hz2d1Kof8utQ2g1Ayuxb_aaOczc.mft (raw, json)
Hash identifier: ReOCF9Du2EyceKtzRjfzDoJ51PaK9BR6dgZbqT8qB74=
Subject key identifier: DA:4B:A7:BF:57:F9:EC:F2:0A:AA:93:B7:ED:31:41:4E:7A:94:24:06
Authority key identifier: 1F:3D:9D:D4:AA:1F:F2:EB:50:DA:0D:40:CA:EC:5B:FD:A6:8E:73:37
Certificate issuer: /CN=1f3d9dd4aa1ff2eb50da0d40caec5bfda68e7337
Certificate serial: 019D3909D7314D98F74FD2408A08EA56B208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hz2d1Kof8utQ2g1Ayuxb_aaOczc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6f679e-62be-4e22-8b2c-24001919eade/1/Hz2d1Kof8utQ2g1Ayuxb_aaOczc.mft
Manifest number: 01E7
Signing time: Sun 29 Mar 2026 10:00:39 +0000
Manifest this update: Sun 29 Mar 2026 10:00:39 +0000
Manifest next update: Mon 30 Mar 2026 10:00:39 +0000
Files and hashes: 1: Hz2d1Kof8utQ2g1Ayuxb_aaOczc.crl (hash: 4BG3lCbmdrAoAd9ZyiHZ1utqiQJPpIWCHUvT82qhbSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6f679e-62be-4e22-8b2c-24001919eade/1/Hz2d1Kof8utQ2g1Ayuxb_aaOczc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6f679e-62be-4e22-8b2c-24001919eade/1/Hz2d1Kof8utQ2g1Ayuxb_aaOczc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hz2d1Kof8utQ2g1Ayuxb_aaOczc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d7:31:4d:98:f7:4f:d2:40:8a:08:ea:56:b2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3d9dd4aa1ff2eb50da0d40caec5bfda68e7337
Validity
Not Before: Mar 29 10:00:39 2026 GMT
Not After : Mar 30 10:00:39 2026 GMT
Subject: CN=da4ba7bf57f9ecf20aaa93b7ed31414e7a942406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a3:d8:49:eb:5e:0e:13:29:bb:76:c3:ea:e6:
e1:8f:ce:0e:b1:fb:87:15:5e:ef:f7:19:11:12:19:
33:28:2f:47:de:e9:b3:b9:b7:f4:ac:08:74:f0:51:
d7:db:82:a4:59:f7:a2:11:81:db:82:f7:3c:2c:60:
53:71:ca:67:3f:27:50:54:32:67:78:3b:ab:c4:d5:
86:47:57:07:a0:e7:be:ae:4f:b8:16:d5:7a:d0:70:
b0:8e:d8:25:0b:ef:5d:7a:35:b5:53:41:e9:d3:58:
50:0c:76:38:a9:2c:b6:da:f5:8f:c2:da:ac:b6:42:
dd:bd:ec:aa:e9:bd:aa:86:d7:ee:bf:8f:b5:85:4c:
4b:1a:93:57:f8:d9:ee:61:d0:6e:88:20:43:3d:36:
56:19:36:29:df:15:4e:4b:28:a5:07:e7:cd:81:75:
f7:95:1c:31:74:92:f0:3b:95:d9:96:2d:c8:5b:b7:
8b:f6:c9:19:f3:54:67:af:c1:65:ac:27:2b:00:5c:
26:b9:ca:c8:78:c1:ed:58:a0:c4:d5:db:72:c1:fb:
cd:97:93:f0:2c:96:91:cb:90:97:fd:74:b1:fc:b4:
d1:64:d5:1f:cd:c1:43:b6:bf:c3:b1:ae:b4:39:27:
36:8d:b4:0b:b1:8e:4b:a1:6f:8a:08:7a:fe:85:68:
dd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4B:A7:BF:57:F9:EC:F2:0A:AA:93:B7:ED:31:41:4E:7A:94:24:06
X509v3 Authority Key Identifier:
keyid:1F:3D:9D:D4:AA:1F:F2:EB:50:DA:0D:40:CA:EC:5B:FD:A6:8E:73:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hz2d1Kof8utQ2g1Ayuxb_aaOczc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6f679e-62be-4e22-8b2c-24001919eade/1/Hz2d1Kof8utQ2g1Ayuxb_aaOczc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6f679e-62be-4e22-8b2c-24001919eade/1/Hz2d1Kof8utQ2g1Ayuxb_aaOczc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9a:f3:53:7a:9a:16:74:49:f9:5b:7d:62:2f:b4:c7:79:d0:
46:b7:af:25:69:62:bd:8e:07:c4:b7:74:df:bf:5f:41:f4:f8:
b1:0a:bb:20:98:6a:f8:e1:ba:7c:36:e6:0f:66:c0:fd:d3:d6:
55:46:22:de:0b:87:60:87:10:46:ca:9a:20:fd:88:02:13:06:
3c:2a:97:11:4a:bb:35:98:f2:d7:97:0d:91:a7:1b:2e:6d:10:
c0:b0:1b:de:3a:dd:48:06:6d:93:91:a1:37:3a:7c:5a:c6:a5:
fc:8f:76:1d:f1:e8:15:fa:d9:2a:d8:ea:6d:e7:fe:1d:cd:0b:
6e:e2:9c:bc:85:5a:9f:98:e5:fa:4b:56:28:4a:98:84:48:af:
48:57:6c:56:0b:91:94:18:af:66:d4:fd:ef:46:83:26:9a:55:
4b:59:7e:70:8e:84:c0:e9:1a:7e:70:d4:58:ba:76:3e:fd:03:
ee:14:9e:05:3b:31:68:80:4b:18:c2:2c:62:39:e1:5c:31:94:
9e:0c:21:91:ce:d8:a8:34:9e:7c:d6:78:1f:c6:2a:bf:b6:a4:
bf:ae:3a:d5:bc:50:57:f3:b6:ed:3d:dd:fc:f0:e6:91:6d:b8:
71:b1:e7:27:9c:c8:18:de:fc:fc:42:7f:46:34:1b:08:8e:3b:
0b:4f:cd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:00:45 2026 by rpki-client