Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
File: Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft (raw, json)
Hash identifier: rkhDeqrWgI2YTnw6GqbvXj6iQeKLJRmJkRMV7nPiNhM=
Subject key identifier: 01:FA:3D:63:77:6D:71:01:3E:03:BD:0F:B3:CB:1D:0E:B3:30:3F:FD
Authority key identifier: 1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C
Certificate issuer: /CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
Certificate serial: 01A17EBCE3C2F6642C1DE7D2A5773B3DFC4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
Manifest number: 0D04
Signing time: Tue 27 Oct 2026 19:01:10 +0000
Manifest this update: Tue 27 Oct 2026 19:01:10 +0000
Manifest next update: Wed 28 Oct 2026 19:01:10 +0000
Files and hashes: 1: Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl (hash: ct2UMcmkjr8j/hcsK1fpGcOhcdBwDelMwGhLJrroTWE=)
2: ZGLqYNMtolm5eL1wUXAdIeFX7S8.roa (hash: NyeDj2CCt8I3KwuYf4K9J8j74vTWf4ATwXYKw7Y/SY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bc:e3:c2:f6:64:2c:1d:e7:d2:a5:77:3b:3d:fc:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
Validity
Not Before: Oct 27 19:01:10 2026 GMT
Not After : Oct 28 19:01:10 2026 GMT
Subject: CN=01fa3d63776d71013e03bd0fb3cb1d0eb3303ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:42:f3:a6:e6:3d:43:e2:64:5b:98:2d:20:a2:
a4:ea:46:26:f6:62:2d:ab:b3:1a:6f:28:4c:80:51:
ff:08:fa:f1:97:3d:f0:97:07:4f:c9:4c:e5:ec:fd:
2f:6d:3a:3a:bd:17:65:b7:57:be:92:00:da:36:68:
10:fc:2a:8f:1d:0c:b9:3b:0a:a8:9f:45:ea:54:d9:
7a:58:ec:3e:6c:6f:6b:88:6c:f1:f5:f7:a2:d4:6d:
b1:84:09:b3:75:91:aa:43:90:54:c4:fc:fc:26:a5:
1f:09:e7:49:5e:42:ab:10:a6:c9:d6:f3:79:18:37:
ae:ab:bf:9a:5e:94:e7:3a:04:1b:90:d6:63:79:25:
b4:01:ad:48:b9:ee:12:84:f9:57:21:af:48:a3:6d:
8d:60:3b:27:ec:58:43:92:45:91:e8:d7:f8:76:aa:
07:2a:13:59:4b:ed:fd:dd:8e:97:d5:99:bb:4d:5f:
e1:df:83:89:76:f4:29:ee:56:3e:83:1d:91:d5:e1:
a5:83:e8:92:59:1a:7e:73:6a:85:91:a6:58:5c:6b:
2d:98:f5:bf:ea:d6:04:d2:d3:11:77:79:fb:1c:ce:
9e:af:b9:10:d4:5b:7e:ec:cb:e9:7a:cc:eb:d1:8a:
9c:ae:a7:59:39:e1:14:05:69:f2:11:a4:f8:2a:cd:
8b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FA:3D:63:77:6D:71:01:3E:03:BD:0F:B3:CB:1D:0E:B3:30:3F:FD
X509v3 Authority Key Identifier:
keyid:1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b5:d6:34:4d:bd:01:f0:29:a0:b5:e0:01:f3:45:3a:46:c8:
37:5e:3e:7e:09:b3:71:5d:1b:6e:e9:84:8a:c5:3b:69:06:8b:
f2:e2:c1:80:28:30:9b:4e:97:6d:e4:63:16:ee:04:01:c0:a0:
72:5d:70:e5:2e:76:39:94:e1:d4:6a:2f:34:8b:16:ff:46:65:
99:f6:35:cb:72:a5:6a:ed:e9:c8:30:d8:d9:93:58:89:1b:51:
4c:a9:12:f9:3e:87:6a:0e:30:fb:bb:12:8b:b4:59:58:bd:d0:
37:00:02:d6:fa:0b:de:cb:2e:2c:f4:de:28:9a:57:37:42:8a:
95:9a:38:48:14:4d:e0:f4:13:17:cc:85:72:94:7b:17:57:2c:
68:c6:66:83:54:8d:7b:86:1e:6c:0b:fc:82:cd:f7:ba:9e:a4:
b1:0a:85:7b:50:b2:74:c7:0d:63:ab:a9:cf:ee:d6:64:27:d4:
bf:98:66:91:4c:ce:93:fe:37:ea:8b:99:86:6d:be:85:d8:b8:
cb:24:61:c5:27:f8:b9:f8:e7:f2:24:4f:89:fd:53:84:82:fe:
10:80:e2:97:89:ab:96:cd:ad:40:29:d4:49:f4:2b:5e:d7:d6:
75:74:3c:57:41:b5:7b:b5:19:bb:20:11:71:72:9e:ea:f7:95:
46:39:3f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:43:54 2026 by rpki-client