Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
File: hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft (raw, json)
Hash identifier: JrL8ICr1Hflhx+OpQ7YtzrSQXIEJ6U/1a2QzYpGnLUI=
Subject key identifier: C1:21:EA:50:C4:9D:E6:C6:47:62:B6:87:3A:1A:17:39:C0:4F:EC:D7
Authority key identifier: 85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA
Certificate issuer: /CN=85916be7e63cfd8c8b77c0588d12694f16b14cda
Certificate serial: 019D386566E110519B61066FB47F36D969A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 07:01:02 +0000
Manifest this update: Sun 29 Mar 2026 07:01:02 +0000
Manifest next update: Mon 30 Mar 2026 07:01:02 +0000
Files and hashes: 1: hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl (hash: G2VMHWJD6ja06omVfHEVj8yI7bHlLrlt5buB3QFXgWk=)
2: nE7q5cWQst1PSqVDsLlOU6ye4Bo.roa (hash: VwaGIZ+yf1ZIOUOKEz3bZkTWkr43RISg2q2l8GV2Ibo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:66:e1:10:51:9b:61:06:6f:b4:7f:36:d9:69:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85916be7e63cfd8c8b77c0588d12694f16b14cda
Validity
Not Before: Mar 29 07:01:02 2026 GMT
Not After : Mar 30 07:01:02 2026 GMT
Subject: CN=c121ea50c49de6c64762b6873a1a1739c04fecd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6b:89:58:f0:4e:6c:f9:d3:1d:76:9e:8c:fd:
32:12:ca:a7:88:cf:b6:0d:eb:8f:f0:dc:22:3a:27:
87:57:30:cc:4a:c8:1b:43:c5:9b:b9:01:7b:ab:82:
09:a1:48:4d:f2:bc:c4:df:a3:11:27:93:47:22:1f:
2b:49:3e:14:39:c4:dd:5e:b0:18:5e:2e:9a:ab:f8:
7b:57:b8:df:4c:20:27:e8:b2:f1:fa:10:25:83:15:
e2:ba:bc:0d:5b:12:ca:94:a3:44:5e:e8:d2:32:0c:
1a:ea:5e:2e:ea:2b:53:41:40:0d:d0:97:94:33:63:
e2:e9:c3:78:b0:7d:b1:da:e8:c0:0b:5d:a0:4b:5b:
c1:1c:f9:4f:23:02:da:14:e0:f5:26:6a:ba:26:b2:
c7:9c:99:ee:74:ca:10:31:b5:dd:9b:69:87:47:a2:
27:dd:4e:59:aa:bc:c4:f1:e0:e2:c4:4f:23:42:7d:
29:3e:7c:1f:56:5a:1e:01:37:a8:e1:a6:3a:59:3d:
bd:7e:b1:c3:68:57:66:85:20:53:f5:ff:06:7c:e4:
40:1d:6a:61:80:55:4e:23:2d:c1:31:e9:83:ec:9e:
f6:d8:83:92:e2:e1:5d:44:58:f3:99:65:c0:55:02:
36:e6:57:cc:b6:9e:4f:fa:5e:d8:1e:ae:89:f5:00:
0f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:21:EA:50:C4:9D:E6:C6:47:62:B6:87:3A:1A:17:39:C0:4F:EC:D7
X509v3 Authority Key Identifier:
keyid:85:91:6B:E7:E6:3C:FD:8C:8B:77:C0:58:8D:12:69:4F:16:B1:4C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/57fb14-d705-4055-8045-bca234829f48/1/hZFr5-Y8_YyLd8BYjRJpTxaxTNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:25:5b:fa:f4:5a:4b:fc:1b:24:7d:54:5f:7f:96:85:37:9f:
da:f4:8c:18:28:52:a5:06:d9:7a:6e:d6:df:c0:06:d9:31:b4:
a4:62:f1:d0:98:d6:2f:e5:aa:9e:54:72:e0:b6:47:61:6e:f0:
16:0c:ac:1d:bd:50:fe:78:16:dc:8c:e8:74:eb:c4:03:d4:b0:
fc:19:8c:25:c7:c1:37:70:09:35:7a:84:d3:d1:d6:ca:82:a2:
be:26:4f:f7:9a:2f:0e:3d:94:2f:22:42:c6:08:03:d3:d7:ee:
e0:ed:a8:4d:b7:26:01:60:39:d2:25:b3:58:16:6c:e0:33:f6:
0a:1f:19:17:e6:b3:8e:1c:69:49:cc:de:a7:b4:be:ea:cc:e6:
69:c2:37:91:42:91:ad:e2:c7:53:b5:5d:65:95:9e:2e:4d:30:
63:d9:9f:40:64:9c:65:d1:56:fe:a6:92:b6:78:94:ee:da:e0:
fd:38:ca:bb:44:d7:80:54:6b:0f:68:06:e6:d4:04:c3:e2:d4:
79:b8:9b:7d:ba:58:53:08:4f:a7:9d:9a:46:e6:d7:11:01:9f:
d2:36:67:81:d2:6d:a7:ce:f4:74:b2:1a:96:ed:76:2b:5a:71:
27:b9:e6:73:27:32:8d:9f:18:87:99:b1:18:d7:95:1e:0b:21:
fe:f2:5b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:15 2026 by rpki-client