Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
File: HzETn4noJZYqfjOAredbVqtbqtU.mft (raw, json)
Hash identifier: sDIWoPQnwpdbyFZq1FQyJaH0w6iCVaJXSAKjXXP4TGA=
Subject key identifier: ED:07:EF:48:8F:CF:D2:A7:D8:D2:80:EE:04:C8:A0:69:B2:3B:00:AF
Authority key identifier: 1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
Certificate issuer: /CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Certificate serial: 01A08C0DD46464FBFA789BE21F532182351F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
Manifest number: 14D7
Signing time: Thu 10 Sep 2026 16:01:51 +0000
Manifest this update: Thu 10 Sep 2026 16:01:51 +0000
Manifest next update: Fri 11 Sep 2026 16:01:51 +0000
Files and hashes: 1: HzETn4noJZYqfjOAredbVqtbqtU.crl (hash: SRZ1Qu9dxSIPpC0r09+nEP65ArV5uGczAhds9bGTGZw=)
2: Yokz86urLdvI75d8RVRfvOdH7pU.roa (hash: CcLGUunGhInKbjgc7PSmW61GmKmHbMY9TVD9O45TVtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:d4:64:64:fb:fa:78:9b:e2:1f:53:21:82:35:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Validity
Not Before: Sep 10 16:01:51 2026 GMT
Not After : Sep 11 16:01:51 2026 GMT
Subject: CN=ed07ef488fcfd2a7d8d280ee04c8a069b23b00af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:b2:f9:c2:05:5d:39:53:47:31:9c:d8:d6:
fe:38:af:7c:f2:b6:e0:23:31:9f:35:f5:2d:3f:ef:
68:3e:d3:65:02:21:b5:65:02:a8:8c:bb:5b:ab:0a:
03:10:a7:65:4a:0d:a0:10:c7:e5:85:0c:ed:ca:51:
6e:e5:17:86:42:23:e4:17:9b:e4:e6:3f:09:94:95:
ea:8b:92:85:4e:45:82:32:6f:9f:22:c7:2c:97:af:
53:f8:3b:99:ca:d5:cc:9b:dd:0d:65:68:10:0c:9b:
65:93:41:81:88:23:30:09:d0:9c:18:92:7a:3b:86:
0c:aa:a9:74:ba:b2:23:14:21:d7:69:62:e3:53:01:
02:1a:4f:89:30:08:aa:8d:31:d7:bf:57:b7:3c:86:
92:f3:60:4d:16:b3:e3:48:14:c7:9a:ec:29:6d:92:
1e:b3:49:a6:eb:49:62:75:81:cc:9c:df:08:bc:9f:
d8:3b:74:55:6c:5e:db:69:43:14:58:f2:7e:60:4a:
a7:56:24:09:84:cf:a2:b1:5a:91:e4:85:e0:dc:7d:
63:4d:aa:6c:ab:29:9e:67:cb:82:7e:5e:7e:45:92:
75:a9:ee:6c:9c:27:fb:b6:bd:8c:5d:de:6d:0c:3a:
ab:19:24:fc:c7:07:6d:94:a2:02:5a:31:51:e3:25:
ff:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:07:EF:48:8F:CF:D2:A7:D8:D2:80:EE:04:C8:A0:69:B2:3B:00:AF
X509v3 Authority Key Identifier:
keyid:1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ed:af:65:3c:5e:2b:02:da:de:7b:b1:e9:2a:46:78:cb:a5:
d3:4d:f4:fc:d8:c5:b5:6e:e9:19:cb:2d:5a:c6:89:37:9d:0a:
71:79:e3:cb:a7:f0:24:a5:9c:14:f5:d9:31:44:5a:26:c5:89:
d3:25:13:f9:94:94:a5:b5:59:98:14:9e:e4:89:3b:16:bb:b5:
cd:da:22:1a:07:cf:b3:5d:a8:a5:a7:84:7d:3c:3d:4c:55:60:
6c:51:18:1f:c9:76:20:4e:9b:98:7c:7c:e9:88:12:37:ea:f7:
34:69:81:e2:f5:d3:8d:27:2b:b8:eb:45:80:2d:c3:7e:73:9f:
76:61:a1:ec:d4:cb:d9:b6:78:61:2b:c8:82:d4:1e:9b:63:d8:
ff:9b:39:eb:e2:f5:a8:d4:14:fc:71:ef:32:20:d4:8b:f3:1f:
99:f6:b9:ce:76:f0:d9:91:a1:a7:b4:e9:14:48:c7:d2:29:ac:
ee:03:9f:e9:1b:32:ba:c3:06:22:f7:fe:8b:0f:8b:1b:87:23:
b5:a2:3c:5d:1f:d4:a4:49:6d:98:44:4f:a9:15:57:71:e0:f8:
43:05:c7:57:44:95:f2:8c:6a:de:2e:da:d4:67:0a:63:19:ac:
ae:17:64:6d:5f:05:dc:a6:51:0b:95:42:f7:c5:12:49:76:61:
79:9f:a8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:21:44 2026 by rpki-client