
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
File: 1-hskeN_g8zonixP0LdMZYB1jeKg.mft (raw, json)
Hash identifier: T1EluaIcHwC7MdQf5bt8T2tzg9qqy49ye9E39+M5NzY=
Subject key identifier: B0:49:28:85:FC:7F:42:C4:D7:45:CF:07:A6:4A:F1:52:3C:7F:8E:D2
Authority key identifier: FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
Certificate issuer: /CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Certificate serial: 019DCED027EEDB8C4FA413FB6A0ABE68E58F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
Manifest number: 0A07
Signing time: Mon 27 Apr 2026 12:00:41 +0000
Manifest this update: Mon 27 Apr 2026 12:00:41 +0000
Manifest next update: Tue 28 Apr 2026 12:00:41 +0000
Files and hashes: 1: 1-hskeN_g8zonixP0LdMZYB1jeKg.crl (hash: gFpfcCqDFx9qyh0FtVd/sV6y+MwEl3b0CZuXACYfipc=)
2: 67OHgQ9oY03pFObGOEWvUB45FRY.roa (hash: Bw9KDuBO2RcXnPqBfJKA7s6j1vu8KiRAlWxURETULCk=)
3: JlERsOGpN9Jutvxh9cBCd5WIDhQ.roa (hash: 0TAzyXpM7LaR9Wg7trsFQxzAH4r7+W5/vZ5ekplhpko=)
4: o0B3A-uOWMJ0Q3rI62ZiZW1aPL4.roa (hash: 7bwGC4W14PVYfYqbu9cx4x9X5c24UYWk/Q4pZluMhT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:27:ee:db:8c:4f:a4:13:fb:6a:0a:be:68:e5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Validity
Not Before: Apr 27 12:00:41 2026 GMT
Not After : Apr 28 12:00:41 2026 GMT
Subject: CN=b0492885fc7f42c4d745cf07a64af1523c7f8ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:9f:1d:b8:ed:17:0c:65:38:0b:01:c4:de:
0d:46:e8:55:35:77:94:b4:4b:c2:d9:78:19:ac:fb:
4a:9e:c1:8f:b1:7a:e7:ef:bf:11:d0:ec:28:17:0e:
a8:77:41:02:2e:68:08:de:a2:15:eb:8b:0b:2b:8b:
1c:c5:66:04:f1:cc:92:24:ec:89:d8:ca:c0:ab:59:
e3:6f:68:d5:36:23:70:6d:32:ca:df:e7:2c:2b:60:
0b:0d:d5:32:e7:d8:b2:0a:76:f5:53:0e:e8:93:1e:
bb:51:2f:d1:85:a9:f0:95:1c:7b:af:77:2f:8b:dc:
e7:37:5e:b2:bf:37:52:9c:e5:83:6b:47:26:14:f2:
c1:38:9c:d2:20:72:63:30:75:f9:21:35:db:53:22:
d9:de:d0:06:39:4a:d8:24:3e:41:d5:21:9d:bc:06:
5a:79:6a:82:55:24:7a:e1:c2:8d:3e:f1:93:a4:ae:
ca:c7:d9:53:6b:a4:a8:28:21:c4:59:b9:85:61:42:
8a:60:cb:9e:a4:f9:a2:58:bc:e7:a0:8a:93:22:29:
02:a6:4b:9a:ad:f5:a4:20:1b:f1:34:e6:94:31:ef:
88:56:e7:96:5f:22:96:e9:5c:b9:56:88:50:03:e3:
9f:48:89:c1:ae:20:90:ea:cc:6c:bc:9b:54:6a:53:
15:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:49:28:85:FC:7F:42:C4:D7:45:CF:07:A6:4A:F1:52:3C:7F:8E:D2
X509v3 Authority Key Identifier:
keyid:FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:27:9e:40:0a:9d:06:5a:28:5d:d3:75:91:b5:9b:4c:7c:8f:
15:e3:cb:a0:25:ac:31:7a:55:8f:b1:9d:50:84:c0:b6:c3:64:
63:d2:1c:1c:53:82:6b:6e:30:fe:07:19:8d:80:72:4c:bb:97:
e7:67:2a:50:0e:8c:f3:25:2f:77:b8:6e:d0:f7:6d:29:00:de:
fb:99:23:a2:67:1c:0d:2d:bb:ff:30:ea:13:8f:3e:24:ba:12:
02:d0:6a:ff:a0:50:5c:fa:78:17:28:8b:d4:c0:6d:c0:a3:6f:
8d:b7:63:34:ab:a2:7f:e8:18:f7:5c:e3:a6:ec:c6:c8:39:47:
4e:7a:5e:5a:fe:49:39:8a:b3:e9:2d:a7:3f:76:ae:9c:4d:30:
85:cf:a4:2a:7a:a9:c5:7c:27:cb:d8:54:6d:30:e6:aa:ef:c0:
86:a4:97:f4:b7:ef:86:9d:70:11:de:02:d1:c7:0a:08:58:73:
8a:b6:1b:06:bb:62:c9:e2:ab:2a:10:1d:4a:32:9f:c1:f6:86:
32:e8:a7:01:f6:a1:91:af:24:f5:c7:07:76:c4:91:b9:92:d1:
88:b0:e7:7f:1f:2a:a2:b9:75:2b:64:f4:53:55:94:f8:4b:c5:
6b:f1:e2:e4:72:ad:4f:8b:56:3b:68:ce:dc:89:27:e4:02:82:
c8:54:67:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:05:47 2026 by rpki-client