Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
File: hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft (raw, json)
Hash identifier: Zri9DF/RPd+TIlngsEX2KPsOm+zqtsFsrnU0WWjqbYA=
Subject key identifier: 74:C8:E2:9B:F2:6D:7F:AB:7F:3E:A8:95:5D:6A:56:36:42:D8:55:FF
Authority key identifier: 84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A
Certificate issuer: /CN=8498f3fefce2fa0120336264df15010461082e8a
Certificate serial: 019D382E611FD0058453BDBCB870C100D6B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 06:00:56 +0000
Manifest this update: Sun 29 Mar 2026 06:00:56 +0000
Manifest next update: Mon 30 Mar 2026 06:00:56 +0000
Files and hashes: 1: GfTuX0KwSdkfHKGDeWKZFDGssWg.roa (hash: EwufZny6b9Jopwvn2m9ePJKhZ4mgvDv4zGEryHxcyLs=)
2: hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl (hash: 5lEzPj4DqIix3Ih4RuYDn3dWEd/oPG2XmB1kjw6c31o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:61:1f:d0:05:84:53:bd:bc:b8:70:c1:00:d6:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8498f3fefce2fa0120336264df15010461082e8a
Validity
Not Before: Mar 29 06:00:56 2026 GMT
Not After : Mar 30 06:00:56 2026 GMT
Subject: CN=74c8e29bf26d7fab7f3ea8955d6a563642d855ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f2:ba:9b:40:dc:1f:58:60:ad:1d:7a:b2:74:
0d:ef:d6:5c:a4:63:e7:c7:eb:1e:70:7e:8f:5a:3f:
24:e0:ff:73:a3:fa:c4:d9:da:67:3c:7e:6d:8c:30:
32:48:f1:71:2b:fe:0f:36:6d:21:d5:f5:8a:45:c1:
d6:6f:04:8d:35:f0:f6:23:9d:a9:22:b4:ee:40:02:
4f:e2:55:de:57:44:c1:db:ec:4c:8a:e2:17:e6:1a:
e0:9e:8c:14:5a:1b:c4:a9:c1:0d:47:5b:cc:5c:96:
1c:ce:e6:ca:1e:b7:ec:ac:8f:6e:8c:e1:0e:6c:9c:
4b:2f:bf:92:15:c3:9d:dc:13:79:31:2c:2b:25:22:
01:36:36:a6:7c:2f:b7:a4:02:d8:bd:ef:c3:a2:6f:
c2:11:a3:cd:35:ce:9a:15:ba:a4:0a:9c:26:82:a9:
d8:80:41:6b:c9:37:e5:53:6d:c7:8a:5d:be:1c:f0:
ee:4b:26:1b:7e:c6:58:e0:1e:78:48:29:62:c0:ee:
eb:42:80:7a:5f:95:47:f8:79:b4:64:de:f4:44:81:
49:e8:42:00:e2:14:b3:0e:6e:f0:5d:42:08:1a:81:
9e:31:b1:c4:3d:08:28:6a:4a:0e:c9:27:71:b6:90:
a1:05:db:66:94:af:cc:08:ec:c9:57:58:9b:bd:12:
14:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C8:E2:9B:F2:6D:7F:AB:7F:3E:A8:95:5D:6A:56:36:42:D8:55:FF
X509v3 Authority Key Identifier:
keyid:84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:72:b3:d8:a9:fd:67:bf:9c:7d:e8:b1:16:2c:d6:44:f8:79:
11:1f:7c:f4:3a:13:87:30:0a:ad:84:64:7b:04:c0:cf:34:10:
e3:dc:7a:0f:3c:52:44:2d:81:3f:b9:a4:ed:9b:94:6a:31:c9:
e4:cb:ae:8e:b7:30:04:3e:1f:2e:21:80:36:11:21:c1:82:0f:
32:ce:e5:f1:98:f8:27:4f:23:f2:4b:10:11:05:21:1e:3e:98:
8e:42:4c:8c:f8:a2:15:56:d1:be:10:a6:aa:89:35:68:f9:2f:
73:c2:a5:75:e6:8b:51:c7:cb:89:1f:c1:5e:59:4e:f8:c0:d6:
ac:65:4a:11:46:aa:61:86:ee:ac:72:68:aa:70:6d:f0:bc:c5:
b9:0f:85:1a:c9:7d:ce:be:c9:cd:75:0b:de:3e:23:58:da:03:
2a:9d:f9:2b:2f:3b:55:fa:8f:08:f9:23:8c:9b:f9:a0:c0:f5:
12:11:cd:01:21:4f:9e:33:34:39:ab:98:17:ff:8c:56:3b:11:
2b:83:94:25:74:fe:70:47:41:19:14:a5:9f:c5:f0:f2:28:78:
f0:d6:b7:ee:11:0d:cc:fd:d3:76:ef:83:51:37:9b:ae:2e:df:
2b:e2:68:14:b9:3e:a1:81:a1:a0:a8:66:bc:94:69:90:35:94:
76:86:9e:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LmEf0AWEU728uHDBANa2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0OThmM2ZlZmNlMmZhMDEyMDMzNjI2NGRmMTUwMTA0NjEw
ODJlOGEwHhcNMjYwMzI5MDYwMDU2WhcNMjYwMzMwMDYwMDU2WjAzMTEwLwYDVQQD
Eyg3NGM4ZTI5YmYyNmQ3ZmFiN2YzZWE4OTU1ZDZhNTYzNjQyZDg1NWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvK6m0DcH1hgrR16snQN79ZcpGPn
x+secH6PWj8k4P9zo/rE2dpnPH5tjDAySPFxK/4PNm0h1fWKRcHWbwSNNfD2I52p
IrTuQAJP4lXeV0TB2+xMiuIX5hrgnowUWhvEqcENR1vMXJYczubKHrfsrI9ujOEO
bJxLL7+SFcOd3BN5MSwrJSIBNjamfC+3pALYve/Dom/CEaPNNc6aFbqkCpwmgqnY
gEFryTflU23Hil2+HPDuSyYbfsZY4B54SCliwO7rQoB6X5VH+Hm0ZN70RIFJ6EIA
4hSzDm7wXUIIGoGeMbHEPQgoakoOySdxtpChBdtmlK/MCOzJV1ibvRIU4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTI4pvybX+rfz6olV1qVjZC2FX/MB8GA1UdIwQY
MBaAFISY8/784voBIDNiZN8VAQRhCC6KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEpqel92emktZ0VnTTJKazN4VUJCR0VJTG9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80NjExZmYtNDBiMi00YzBhLWE3Zjgt
NDA0ZGZkYjQ2NDc3LzEvaEpqel92emktZ0VnTTJKazN4VUJCR0VJTG9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy80NjExZmYtNDBiMi00YzBhLWE3ZjgtNDA0ZGZkYjQ2NDc3
LzEvaEpqel92emktZ0VnTTJKazN4VUJCR0VJTG9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3Kz2Kn9
Z7+cfeixFizWRPh5ER989DoThzAKrYRkewTAzzQQ49x6DzxSRC2BP7mk7ZuUajHJ
5MuujrcwBD4fLiGANhEhwYIPMs7l8Zj4J08j8ksQEQUhHj6YjkJMjPiiFVbRvhCm
qok1aPkvc8KldeaLUcfLiR/BXllO+MDWrGVKEUaqYYburHJoqnBt8LzFuQ+FGsl9
zr7JzXUL3j4jWNoDKp35Ky87VfqPCPkjjJv5oMD1EhHNASFPnjM0OauYF/+MVjsR
K4OUJXT+cEdBGRSln8Xw8ih48Na37hENzP3Tdu+DUTebri7fK+JoFLk+oYGhoKhm
vJRpkDWUdoaeSw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:51 2026 by rpki-client