Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
File: HAkzrn59aIUNoxv6gb_KuLGFuMo.mft (raw, json)
Hash identifier: WwxiAawdFEEIrGDPBrb/dr4yGyQJEBdfqHle7/6Jsww=
Subject key identifier: 1B:B8:DA:4C:6D:49:D2:13:48:DB:E8:C2:0F:AE:38:E1:B3:3A:8D:A8
Authority key identifier: 1C:09:33:AE:7E:7D:68:85:0D:A3:1B:FA:81:BF:CA:B8:B1:85:B8:CA
Certificate issuer: /CN=1c0933ae7e7d68850da31bfa81bfcab8b185b8ca
Certificate serial: 019D3A53C9C11F285B50B08560FA0BB28BFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
Manifest number: 0F23
Signing time: Sun 29 Mar 2026 16:01:02 +0000
Manifest this update: Sun 29 Mar 2026 16:01:02 +0000
Manifest next update: Mon 30 Mar 2026 16:01:02 +0000
Files and hashes: 1: HAkzrn59aIUNoxv6gb_KuLGFuMo.crl (hash: iQm9NxgNAaV9b22kAzY2gpUUJotL6us2RnJXXcR59/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:c9:c1:1f:28:5b:50:b0:85:60:fa:0b:b2:8b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0933ae7e7d68850da31bfa81bfcab8b185b8ca
Validity
Not Before: Mar 29 16:01:02 2026 GMT
Not After : Mar 30 16:01:02 2026 GMT
Subject: CN=1bb8da4c6d49d21348dbe8c20fae38e1b33a8da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fe:9b:b0:1e:29:c3:d7:33:bd:40:8a:78:9b:
0f:f7:c2:c5:7a:f9:7a:a5:79:be:e5:50:b1:fd:57:
26:e4:47:30:e4:df:c0:ea:5f:52:32:c8:35:fa:de:
a6:b1:a7:72:a7:92:69:d7:ea:6e:25:08:a3:7b:1a:
63:f3:9d:49:92:47:2e:be:d4:d2:a3:fe:3f:3f:da:
72:df:eb:1c:4e:72:c7:59:e7:d4:e7:5a:ab:1b:40:
43:28:c0:1c:6d:fe:cb:6b:82:6b:f4:e1:22:85:d1:
07:62:f2:aa:f6:d3:0a:f0:54:c8:e6:8b:94:2f:a2:
30:47:2d:ac:66:ac:40:99:47:db:56:83:d5:2a:3d:
8e:60:ba:92:0f:25:9f:8f:33:89:71:e8:ff:ff:d8:
c9:a0:7a:21:27:41:7e:45:70:6b:93:57:e4:14:92:
52:e0:d0:33:f4:98:f1:c0:1a:8e:ed:8e:e5:fc:14:
d2:4f:76:a2:dc:e2:46:cc:23:d5:3b:d3:1e:17:c6:
4f:c9:90:c5:ae:b4:3d:2c:9a:e2:ff:10:8b:e5:45:
77:5c:da:15:ac:f8:64:3e:9b:f7:1f:17:b3:79:f2:
a3:dc:00:5c:07:ab:bd:cc:29:aa:44:69:38:3a:b2:
ef:1c:7a:00:84:46:81:e2:77:b9:dc:62:9d:c2:20:
4b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B8:DA:4C:6D:49:D2:13:48:DB:E8:C2:0F:AE:38:E1:B3:3A:8D:A8
X509v3 Authority Key Identifier:
keyid:1C:09:33:AE:7E:7D:68:85:0D:A3:1B:FA:81:BF:CA:B8:B1:85:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:7c:52:00:a3:52:b4:e7:d1:5c:d7:cf:12:6d:a3:ac:53:99:
ac:b8:08:a1:ad:b9:26:73:da:8b:69:d0:e0:04:6b:3c:b1:aa:
39:44:3f:6f:93:ae:31:08:a6:ce:e9:9e:21:80:35:f6:03:9f:
09:90:02:6c:95:89:af:e7:e6:93:94:5c:2d:53:0a:45:25:f5:
9c:53:05:1b:67:33:3b:a6:b2:95:a5:69:41:04:58:fa:54:9b:
8f:d2:64:aa:67:50:0d:99:8e:91:3a:78:3d:38:c1:bb:b7:99:
6a:f8:aa:41:87:72:92:f0:68:fb:4b:f5:7a:fe:e4:f9:93:b9:
0e:70:b6:d7:dc:83:e5:f9:e9:fe:e2:42:81:8e:d4:36:f6:0a:
36:0c:f9:bf:d2:ae:99:c7:88:eb:20:0a:8d:58:6a:41:66:21:
48:e6:f4:32:4b:a1:9e:4f:8a:67:49:df:aa:5f:aa:34:fa:f1:
61:34:e3:14:4c:6c:4a:0f:c1:04:e6:7b:2a:2a:42:bf:4c:ec:
c3:5a:23:aa:0e:09:af:8b:7c:af:e6:79:f4:b3:9b:98:f3:30:
6a:03:fa:e6:89:34:26:b2:32:fc:23:91:c7:4f:83:4e:93:a9:
0e:6c:34:19:45:f0:fc:2f:3f:78:af:59:99:d6:0e:8a:84:ff:
a0:ef:cf:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06U8nBHyhbULCFYPoLsov6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMDkzM2FlN2U3ZDY4ODUwZGEzMWJmYTgxYmZjYWI4YjE4
NWI4Y2EwHhcNMjYwMzI5MTYwMTAyWhcNMjYwMzMwMTYwMTAyWjAzMTEwLwYDVQQD
EygxYmI4ZGE0YzZkNDlkMjEzNDhkYmU4YzIwZmFlMzhlMWIzM2E4ZGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf6bsB4pw9czvUCKeJsP98LFevl6
pXm+5VCx/Vcm5Ecw5N/A6l9SMsg1+t6msadyp5Jp1+puJQijexpj851JkkcuvtTS
o/4/P9py3+scTnLHWefU51qrG0BDKMAcbf7La4Jr9OEihdEHYvKq9tMK8FTI5ouU
L6IwRy2sZqxAmUfbVoPVKj2OYLqSDyWfjzOJcej//9jJoHohJ0F+RXBrk1fkFJJS
4NAz9JjxwBqO7Y7l/BTST3ai3OJGzCPVO9MeF8ZPyZDFrrQ9LJri/xCL5UV3XNoV
rPhkPpv3HxezefKj3ABcB6u9zCmqRGk4OrLvHHoAhEaB4ne53GKdwiBLowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBu42kxtSdITSNvowg+uOOGzOo2oMB8GA1UdIwQY
MBaAFBwJM65+fWiFDaMb+oG/yrixhbjKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEFrenJuNTlhSVVOb3h2NmdiX0t1TEdGdU1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC82YTRjMWQtM2E1Ny00Mzg1LWE0NmEt
MzZkMGQzNTlhMWUwLzEvSEFrenJuNTlhSVVOb3h2NmdiX0t1TEdGdU1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC82YTRjMWQtM2E1Ny00Mzg1LWE0NmEtMzZkMGQzNTlhMWUw
LzEvSEFrenJuNTlhSVVOb3h2NmdiX0t1TEdGdU1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXXxSAKNS
tOfRXNfPEm2jrFOZrLgIoa25JnPai2nQ4ARrPLGqOUQ/b5OuMQimzumeIYA19gOf
CZACbJWJr+fmk5RcLVMKRSX1nFMFG2czO6aylaVpQQRY+lSbj9JkqmdQDZmOkTp4
PTjBu7eZaviqQYdykvBo+0v1ev7k+ZO5DnC219yD5fnp/uJCgY7UNvYKNgz5v9Ku
mceI6yAKjVhqQWYhSOb0Mkuhnk+KZ0nfql+qNPrxYTTjFExsSg/BBOZ7KipCv0zs
w1ojqg4Jr4t8r+Z59LObmPMwagP65ok0JrIy/CORx0+DTpOpDmw0GUXw/C8/eK9Z
mdYOioT/oO/PjA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:48:24 2026 by rpki-client