Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
File: HzETn4noJZYqfjOAredbVqtbqtU.mft (raw, json)
Hash identifier: IIWmtAWQLRbRXdOT/i/FkyKbsF/iipmpKIIHh6M/Kpg=
Subject key identifier: 9F:89:78:E9:95:58:B4:EE:9D:C9:95:CC:F5:98:5A:F2:01:F9:26:D1
Authority key identifier: 1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
Certificate issuer: /CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Certificate serial: 019D3865B9282A995A36B729072B01E1B595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
Manifest number: 131E
Signing time: Sun 29 Mar 2026 07:01:23 +0000
Manifest this update: Sun 29 Mar 2026 07:01:23 +0000
Manifest next update: Mon 30 Mar 2026 07:01:23 +0000
Files and hashes: 1: HzETn4noJZYqfjOAredbVqtbqtU.crl (hash: 2vbrYqVMDai/WlfLWB2NDzs0WX1bYnJqxDSMdRJ11P8=)
2: Yokz86urLdvI75d8RVRfvOdH7pU.roa (hash: CcLGUunGhInKbjgc7PSmW61GmKmHbMY9TVD9O45TVtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:b9:28:2a:99:5a:36:b7:29:07:2b:01:e1:b5:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Validity
Not Before: Mar 29 07:01:23 2026 GMT
Not After : Mar 30 07:01:23 2026 GMT
Subject: CN=9f8978e99558b4ee9dc995ccf5985af201f926d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b0:2b:dc:e2:7c:76:05:5a:af:a2:01:da:a8:
58:77:f8:61:2d:8c:25:84:37:c7:1a:59:c6:56:1b:
ce:cc:05:69:03:dc:0c:09:d5:28:82:b3:44:28:18:
f1:72:e8:18:8c:fd:51:fb:67:68:86:53:3c:a3:d0:
e7:8a:ef:ea:0c:12:d0:8f:05:1b:7d:e3:0c:52:01:
e0:44:20:ac:b0:2b:b2:4d:2f:a2:93:15:0b:a8:7a:
61:d9:9d:1a:97:e1:b0:45:54:7b:15:7f:47:c4:79:
fa:47:fb:30:1b:cb:59:af:34:31:45:96:43:87:26:
42:7c:fc:f2:34:25:19:59:70:0b:f7:bd:49:f3:9e:
c4:2c:43:49:11:48:0c:23:f8:83:68:d3:af:12:7b:
64:1f:84:5b:07:0c:65:88:d2:6f:e7:81:7e:48:c3:
80:67:c1:de:1a:9f:b2:c5:d2:55:0b:51:c9:6f:65:
df:0c:04:d1:db:f6:b0:06:27:c6:17:da:c7:b2:8d:
20:95:a9:a6:4b:22:7c:f3:28:98:ce:dd:9f:c6:4e:
b9:8f:58:e3:75:52:fa:f7:c4:60:4f:15:46:e9:9e:
48:ea:1f:fd:c1:f7:47:9e:4e:09:01:99:0d:d5:e6:
03:1c:2c:e8:02:65:2a:25:f6:0f:63:8d:2f:b8:14:
b0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:89:78:E9:95:58:B4:EE:9D:C9:95:CC:F5:98:5A:F2:01:F9:26:D1
X509v3 Authority Key Identifier:
keyid:1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:9e:5a:8e:22:e1:24:97:17:f0:dc:ea:a1:e5:d0:4f:c6:7e:
4b:dc:31:1b:56:87:6a:7d:cf:8d:5b:1a:0e:ed:2e:16:04:bc:
58:ef:d1:02:43:2a:f5:d0:a4:b4:68:00:84:bb:dd:83:6d:1f:
66:e4:ed:03:7a:c1:cb:38:49:c6:08:64:3e:e9:6d:47:21:c4:
e0:84:19:2e:4a:8b:6a:f4:b4:e5:a2:3b:ab:22:13:6f:aa:ba:
2d:35:c8:df:a6:74:41:70:b1:23:ed:92:c0:d1:72:24:68:a7:
9f:16:25:7e:8e:68:e3:c5:05:8e:9b:9f:40:23:7f:31:44:86:
de:73:fa:38:0c:d4:84:fa:2b:af:d1:0d:c0:91:16:07:30:9f:
72:bd:68:9b:91:69:c9:1a:31:cb:6c:50:d8:23:e6:5d:f9:89:
2f:a9:39:aa:44:a0:ec:ca:f2:00:6e:91:29:d2:a1:30:16:58:
0d:6a:67:5e:d2:4a:6a:2a:ac:84:e1:35:17:8e:1e:31:3e:4b:
1b:d5:e6:00:8a:65:73:48:00:e5:55:c7:be:33:4b:63:2c:5b:
62:97:80:1e:c2:d6:ee:18:9d:a3:cc:e7:00:ac:7b:aa:67:1b:
fc:e4:42:4f:7c:51:cf:2a:83:a7:74:e2:74:a2:79:33:0a:22:
52:47:4c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:02 2026 by rpki-client