Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
File: HZoJxRB-fkTKeNxy1RlzftPdMRo.mft (raw, json)
Hash identifier: l38t5twXm5TlK7fafcsKtzcrDS4gaCxzHBbRTHm+NDc=
Subject key identifier: 3F:BC:5F:7C:B1:5F:EE:09:8D:CD:52:CE:25:39:B1:8E:06:6A:F6:88
Authority key identifier: 1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A
Certificate issuer: /CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
Certificate serial: 019D37F722ED354F106061DE95ABB84CE626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
Manifest number: 16F6
Signing time: Sun 29 Mar 2026 05:00:36 +0000
Manifest this update: Sun 29 Mar 2026 05:00:36 +0000
Manifest next update: Mon 30 Mar 2026 05:00:36 +0000
Files and hashes: 1: HZoJxRB-fkTKeNxy1RlzftPdMRo.crl (hash: 2U+ER/qrx1dzs0OD1IggNqd4xFzrdO7HPm//X3lac1w=)
2: _wGjPopaleb7rolTBZPWY4rLAR0.roa (hash: cxMklFmwljucLQ52IKrbd2Z95wZK3+gwqoZkVO4J3co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:22:ed:35:4f:10:60:61:de:95:ab:b8:4c:e6:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d9a09c5107e7e44ca78dc72d519737ed3dd311a
Validity
Not Before: Mar 29 05:00:36 2026 GMT
Not After : Mar 30 05:00:36 2026 GMT
Subject: CN=3fbc5f7cb15fee098dcd52ce2539b18e066af688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:93:4f:f6:bb:7a:83:c0:bd:2e:5c:f8:66:60:
4f:24:e2:9a:96:e9:1f:09:dc:fd:54:25:01:91:ab:
97:01:7c:cf:47:75:c9:d4:9c:49:bb:bf:d5:d9:ac:
b7:eb:cd:6f:82:5b:98:74:2e:fa:7f:31:1b:d3:e2:
2e:8f:42:93:de:22:db:1a:b1:77:1b:78:36:b4:3f:
87:57:02:71:d8:06:db:8b:d5:c7:ef:6b:51:a5:8b:
9b:71:fc:1f:b8:65:66:f7:93:86:af:90:10:a2:b6:
4b:01:3e:ce:72:e9:bc:55:f5:4f:b7:48:d0:ef:c8:
cf:32:09:24:cf:36:3b:d2:cb:e9:87:61:92:bd:69:
73:40:d2:1f:0a:e7:09:bf:e3:22:bb:5c:b9:00:19:
7e:85:2c:2a:44:95:3d:3c:92:6c:3a:03:5c:94:a8:
fb:e7:89:f5:9b:c5:0f:3e:3b:7d:08:6d:ef:8e:a9:
8e:2f:e8:4a:c9:59:3b:cf:fd:99:e6:f4:41:f6:50:
73:c9:3d:3d:20:08:61:56:29:cb:1a:33:0b:44:82:
90:be:51:f6:37:6f:7b:4c:8c:c2:6c:e7:cd:3a:66:
1c:35:4e:97:1d:78:16:39:a5:81:64:6f:a0:70:87:
03:9e:39:68:a2:d1:fc:a9:08:ed:fd:88:fb:8d:08:
34:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BC:5F:7C:B1:5F:EE:09:8D:CD:52:CE:25:39:B1:8E:06:6A:F6:88
X509v3 Authority Key Identifier:
keyid:1D:9A:09:C5:10:7E:7E:44:CA:78:DC:72:D5:19:73:7E:D3:DD:31:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZoJxRB-fkTKeNxy1RlzftPdMRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1f325e-4de7-477e-8b57-6320a356e434/1/HZoJxRB-fkTKeNxy1RlzftPdMRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:cc:5d:26:05:51:86:43:19:2e:58:42:63:9f:05:c7:c2:fe:
f6:f5:fa:71:db:c6:8b:70:ea:ec:a2:e7:88:1c:08:2c:af:38:
72:15:3d:b1:00:c0:08:68:21:cc:8c:4b:23:e4:c1:37:d0:3e:
7a:bd:de:48:86:fa:58:70:e7:0a:9e:d0:56:9e:60:af:42:e1:
9e:46:1d:b6:a8:1a:b2:d4:63:fe:bc:99:f4:30:9a:7c:ee:9f:
b4:64:b0:af:5b:f6:d1:6d:61:81:73:23:fb:cf:96:fd:d9:1a:
74:ee:25:5f:95:95:1c:c2:c7:18:f0:bc:d0:e8:ca:23:29:76:
ff:e3:b4:1b:ed:b0:03:5a:ed:8c:11:00:4f:d8:84:e2:c9:a5:
bf:ac:53:d6:37:93:50:15:fc:de:84:d5:3f:1f:d4:97:dd:be:
42:12:d2:39:c1:17:0d:67:99:88:7b:70:a0:64:c4:83:b4:68:
65:72:c0:97:88:84:9f:83:af:b5:2f:e5:c2:2b:d8:41:92:a0:
58:42:f5:f3:0b:8b:da:82:c5:b8:b0:08:fc:a5:75:31:0b:f5:
6e:57:ea:d7:c1:2d:84:8a:25:88:c4:f6:a2:b0:cf:e4:4a:d0:
c1:aa:56:6c:e7:72:1d:e2:f0:64:4d:ae:cf:ff:55:16:af:60:
56:b0:6b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:09 2026 by rpki-client