Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
File: 1-hskeN_g8zonixP0LdMZYB1jeKg.mft (raw, json)
Hash identifier: TlRTU4o+vcSKcjVtEOpN86ASvP/0sT3LL9rlzbqprO0=
Subject key identifier: 81:2C:47:51:82:A4:94:43:62:85:35:C4:31:CE:DC:DA:8B:DD:D2:08
Authority key identifier: FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
Certificate issuer: /CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Certificate serial: 01A17B4D6267801A4159A1BB0846A9D7C50D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
Manifest number: 0BEE
Signing time: Tue 27 Oct 2026 03:00:31 +0000
Manifest this update: Tue 27 Oct 2026 03:00:31 +0000
Manifest next update: Wed 28 Oct 2026 03:00:31 +0000
Files and hashes: 1: 1-hskeN_g8zonixP0LdMZYB1jeKg.crl (hash: m/UlXftTc7RTRWbnV1NqwAUg11zhGtTwvxr1AsTK4bQ=)
2: 67OHgQ9oY03pFObGOEWvUB45FRY.roa (hash: Bw9KDuBO2RcXnPqBfJKA7s6j1vu8KiRAlWxURETULCk=)
3: JlERsOGpN9Jutvxh9cBCd5WIDhQ.roa (hash: 0TAzyXpM7LaR9Wg7trsFQxzAH4r7+W5/vZ5ekplhpko=)
4: o0B3A-uOWMJ0Q3rI62ZiZW1aPL4.roa (hash: 7bwGC4W14PVYfYqbu9cx4x9X5c24UYWk/Q4pZluMhT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:4d:62:67:80:1a:41:59:a1:bb:08:46:a9:d7:c5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Validity
Not Before: Oct 27 03:00:31 2026 GMT
Not After : Oct 28 03:00:31 2026 GMT
Subject: CN=812c475182a49443628535c431cedcda8bddd208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:82:92:af:c6:cb:67:25:46:72:61:98:3a:
35:09:3d:fd:d2:b5:27:43:99:5e:e9:30:01:be:3d:
c3:13:60:f9:e3:10:90:d6:71:cb:79:5d:76:11:85:
59:aa:91:97:f6:2f:4b:d9:31:b4:f5:e4:a3:32:8d:
8d:f6:08:18:22:c7:07:ad:86:05:f7:c6:a1:18:17:
c7:88:db:31:c2:a2:fe:96:9f:ee:e4:bb:b2:8c:1c:
05:e6:3f:cc:78:e6:ec:af:e7:73:bb:5b:b1:e6:50:
00:80:d8:e0:df:1c:be:ef:53:47:35:ae:e7:e8:16:
76:cb:75:24:4c:58:92:bc:eb:4d:82:54:52:00:ea:
5d:28:24:2a:8b:dc:05:e5:bd:a3:74:01:66:4b:ba:
e1:5d:66:95:37:7b:6e:ed:d7:96:d7:10:4b:44:35:
09:3a:22:f7:95:20:a1:a0:86:cc:07:1d:16:e0:36:
fa:be:42:8c:e3:7c:61:15:3f:9a:b7:5b:70:90:c3:
5d:07:99:6f:fa:aa:3d:1f:4b:c8:82:c4:23:c6:76:
ef:3a:21:b1:8d:51:76:25:0e:86:ae:a0:26:0d:17:
3d:d8:be:29:d4:2c:10:76:e0:1d:21:81:33:86:cb:
0a:22:31:68:0f:b8:f6:1a:fb:65:60:83:62:5b:d1:
71:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2C:47:51:82:A4:94:43:62:85:35:C4:31:CE:DC:DA:8B:DD:D2:08
X509v3 Authority Key Identifier:
keyid:FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:dd:a3:83:bf:1f:cc:34:ae:e7:12:32:0c:d9:55:8b:f9:e2:
35:af:f6:c6:51:2b:19:d5:2b:c0:eb:b5:0d:c5:be:cc:cd:aa:
ec:ed:dd:b7:d5:36:72:7c:53:26:20:f2:be:81:79:3c:c1:82:
2f:d4:94:06:c6:88:aa:02:fb:13:10:0a:16:47:78:23:75:5e:
8c:89:1f:91:5c:54:b7:5b:a3:ae:2c:28:dc:31:d3:cd:d7:db:
27:eb:b6:89:33:d5:37:6b:97:59:86:89:e4:8a:00:42:9d:bb:
48:ea:9e:94:c0:01:fc:00:c6:e6:10:55:9b:9b:ac:6e:e6:48:
35:24:e7:8b:74:d6:17:5f:9a:dc:27:8f:f7:3d:0b:10:0f:a0:
7c:0f:0e:a6:18:9f:c8:d5:41:a3:8e:64:7c:4b:70:0b:e1:5c:
da:6f:25:f8:b9:99:0f:d7:3d:7c:5f:cf:ae:1b:e5:af:a7:61:
72:a1:ba:f1:0a:12:67:88:60:1e:e3:94:db:1f:67:50:62:01:
d3:32:ce:b7:51:89:e8:b4:a8:0a:05:01:8d:7b:d7:32:d8:0a:
8d:0b:04:01:1b:2a:75:5e:70:87:eb:6b:00:fc:3c:18:37:47:
16:c9:b9:ec:1a:a4:8e:b8:3c:83:67:7a:95:03:86:68:0d:fe:
63:0f:76:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:38:25 2026 by rpki-client