Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft
File: HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft (raw, json)
Hash identifier: Dq21m1DT57oqENUQk/fNJEvgun9l46wrz1zJCBiIuxg=
Subject key identifier: 92:E5:A9:3B:9E:5C:B0:EE:7C:E5:32:4D:7F:BC:BF:2C:8A:CF:52:DE
Authority key identifier: 1D:9C:07:2F:2D:B3:EF:1F:26:05:05:BB:FA:0E:FE:A1:8C:29:70:B1
Certificate issuer: /CN=1d9c072f2db3ef1f260505bbfa0efea18c2970b1
Certificate serial: 01A042738E7484A117A4FCD4BCE840077BB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZwHLy2z7x8mBQW7-g7-oYwpcLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft
Manifest number: 1648
Signing time: Thu 27 Aug 2026 09:01:04 +0000
Manifest this update: Thu 27 Aug 2026 09:01:04 +0000
Manifest next update: Fri 28 Aug 2026 09:01:04 +0000
Files and hashes: 1: HZwHLy2z7x8mBQW7-g7-oYwpcLE.crl (hash: 1Hz409TZKR8R49vcp7f80VgY7UfFugN9gOIFdAzen2M=)
2: c57yC7tB1OJCUcmD7P1hLz2EMFE.roa (hash: ZXukYGaWgtp5a3QMVvyaz5oNdYorD6FVcR+u7jbZN30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HZwHLy2z7x8mBQW7-g7-oYwpcLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:73:8e:74:84:a1:17:a4:fc:d4:bc:e8:40:07:7b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d9c072f2db3ef1f260505bbfa0efea18c2970b1
Validity
Not Before: Aug 27 09:01:04 2026 GMT
Not After : Aug 28 09:01:04 2026 GMT
Subject: CN=92e5a93b9e5cb0ee7ce5324d7fbcbf2c8acf52de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:66:1b:72:59:d3:d9:a4:cd:1c:15:50:09:0e:
9a:43:15:e7:66:a5:a7:1c:1a:44:f2:74:56:eb:e5:
8d:51:47:de:5f:04:69:07:da:7c:a0:7f:ec:60:78:
d8:1a:0a:07:9f:f0:fb:87:f1:ce:36:21:0b:70:de:
3b:8b:06:ea:f7:3b:a2:d8:9b:1a:21:11:41:c6:98:
90:07:80:69:73:fd:5a:ce:fe:3b:7d:6e:e8:8c:61:
3a:df:38:bf:a1:55:c8:52:96:ec:61:bb:67:ad:86:
32:dd:6e:2d:f4:04:f9:ed:0d:76:80:1a:80:6e:46:
a8:59:de:9f:2b:00:f2:ba:1a:0f:c3:aa:82:56:50:
4c:2b:16:d3:b2:f0:04:94:0f:4b:ad:cc:0c:f2:09:
8e:86:76:98:40:e5:a0:ff:31:db:a2:cd:af:b8:9d:
d9:65:af:b7:29:80:77:2b:73:c1:a6:d1:76:7f:72:
12:8a:28:f3:27:6e:27:72:a0:26:3d:03:6f:7d:04:
40:28:d3:94:15:4c:ec:9c:98:be:c1:1e:4c:68:17:
53:c8:eb:05:e4:11:ca:21:97:4b:a8:47:f2:d6:ac:
da:b4:73:44:50:0e:5c:cf:45:8d:90:90:96:67:05:
69:d4:f1:af:4a:9f:84:77:65:8d:b0:00:f1:f9:e3:
2b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E5:A9:3B:9E:5C:B0:EE:7C:E5:32:4D:7F:BC:BF:2C:8A:CF:52:DE
X509v3 Authority Key Identifier:
keyid:1D:9C:07:2F:2D:B3:EF:1F:26:05:05:BB:FA:0E:FE:A1:8C:29:70:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZwHLy2z7x8mBQW7-g7-oYwpcLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:df:4c:86:6e:28:86:b9:97:a6:33:c5:92:98:01:74:5c:f5:
97:25:24:4e:4d:11:ed:e8:fb:98:df:ad:6c:16:1b:71:6c:93:
1d:d2:24:0f:36:22:13:35:81:4a:54:b0:46:b7:32:d8:fb:12:
21:ed:7c:05:e0:75:f3:47:22:d8:16:86:9e:23:cd:64:ba:e4:
3d:09:82:0b:12:3f:da:ec:e0:2f:ed:4a:d2:00:42:da:cb:ad:
98:0c:72:fc:13:af:37:aa:85:54:7e:77:3b:0b:a9:d4:a5:f6:
d2:0c:69:ec:a1:62:51:80:5f:0e:39:56:45:22:23:3a:22:42:
6a:71:1e:7f:d8:cf:d1:3d:b3:78:6d:07:7b:f7:14:6e:b6:3f:
88:41:f0:5d:6f:f7:7f:00:6f:ee:a5:69:0f:29:83:b5:a7:2a:
d9:43:54:1f:43:4f:4c:1c:45:16:d2:fa:32:a7:4c:da:e8:c2:
5e:85:bd:28:ac:fe:5d:9e:79:7f:05:22:3d:d7:6a:07:81:23:
80:99:c0:b1:09:01:e9:72:29:86:c5:68:5a:08:8a:db:f2:c7:
4a:ec:d6:89:7c:d1:c8:2e:ec:19:7f:ff:f2:46:2a:f8:44:ca:
7d:35:81:94:24:82:af:19:95:82:bd:4d:50:59:57:38:cb:cf:
8a:78:1a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 15:59:14 2026 by rpki-client