Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
File: HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft (raw, json)
Hash identifier: dMWzkM9Mlu74wWnMFGPqd14aFhrky5jST03cKR5WUGU=
Subject key identifier: CA:02:8E:34:D7:EB:C3:8D:97:F2:9D:BE:D3:AB:F4:0A:FE:87:0F:EE
Authority key identifier: 1F:3B:F2:37:56:C6:E7:D6:4D:68:22:F5:97:B1:D5:80:49:BD:48:F1
Certificate issuer: /CN=1f3bf23756c6e7d64d6822f597b1d58049bd48f1
Certificate serial: 01A08FB305ED5072FE8FD0DB7541D168B6A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
Manifest number: 0695
Signing time: Fri 11 Sep 2026 09:01:09 +0000
Manifest this update: Fri 11 Sep 2026 09:01:09 +0000
Manifest next update: Sat 12 Sep 2026 09:01:09 +0000
Files and hashes: 1: HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl (hash: HVSUcLRv50VZVJUBmaxO2kWevjwQq1L7kzUU74zB9aU=)
2: WU3PqHe7IArJ57SO8_-72jZ4vgQ.roa (hash: kyYbbInYeN/I+hJfjzPW449FfnhjaOMYgCQZcySE4CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:b3:05:ed:50:72:fe:8f:d0:db:75:41:d1:68:b6:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3bf23756c6e7d64d6822f597b1d58049bd48f1
Validity
Not Before: Sep 11 09:01:09 2026 GMT
Not After : Sep 12 09:01:09 2026 GMT
Subject: CN=ca028e34d7ebc38d97f29dbed3abf40afe870fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2a:70:b4:8f:b0:b7:88:d8:22:93:5d:37:99:
b7:13:49:2a:60:42:05:df:5f:a4:a1:a2:64:20:a0:
b0:f9:71:42:87:53:ed:e5:82:1e:d7:ae:c3:a4:81:
5f:de:6c:a4:cd:53:c5:99:d1:fe:58:49:cf:d7:ec:
33:eb:bc:1f:08:f1:d3:ab:94:2c:95:fa:a7:1c:59:
ca:08:0d:10:f6:75:70:3f:b1:8d:32:e9:4e:5f:01:
b0:67:36:12:59:38:0c:a0:48:59:12:38:c2:a6:25:
77:e6:de:d1:24:90:90:80:7b:03:a8:8a:b1:25:1d:
28:ef:de:27:69:9b:0e:9d:9b:7f:17:d8:47:40:a2:
bb:f2:62:cb:51:32:85:f8:19:68:91:e8:d6:de:15:
12:af:27:b2:60:7f:bf:e8:b7:9c:53:3a:34:d7:43:
d5:31:86:4c:2e:b7:5f:23:b4:51:a9:2b:6a:e4:61:
53:a8:21:f7:23:94:5b:dd:79:de:c3:ef:c1:c0:64:
b3:10:f1:97:f2:bc:2e:cf:e8:6f:d8:84:c5:5b:e3:
1e:c9:90:15:0b:d2:47:57:50:d9:70:7e:55:f8:f4:
c1:be:5b:26:24:0e:bd:81:4e:59:e2:a4:58:1f:6a:
27:69:36:67:d9:1a:31:e1:54:46:45:b9:4f:49:2d:
29:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:02:8E:34:D7:EB:C3:8D:97:F2:9D:BE:D3:AB:F4:0A:FE:87:0F:EE
X509v3 Authority Key Identifier:
keyid:1F:3B:F2:37:56:C6:E7:D6:4D:68:22:F5:97:B1:D5:80:49:BD:48:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:cc:0d:04:a4:ff:30:80:68:08:ab:e1:04:4e:d3:c7:de:e9:
bb:c0:51:4c:c1:22:23:5e:2a:24:13:77:d4:de:7e:97:b7:be:
c8:b4:4b:bb:fa:7c:4c:bb:c8:c1:7d:e4:84:f3:7f:8d:e4:9a:
93:1c:cb:95:47:23:b3:cf:06:b7:3d:66:08:d6:e5:f4:87:12:
3c:c8:db:ce:27:d1:71:4b:bb:68:8f:b7:50:f9:a5:aa:38:ec:
37:3b:25:ec:bf:c8:ba:95:64:f2:3b:16:f1:a3:3c:83:4e:52:
8e:93:71:30:ae:e9:c0:9e:8b:90:49:d8:11:5f:f1:90:59:d9:
f0:05:92:32:f2:29:ba:5b:55:18:67:95:fc:96:3e:7b:a3:0b:
85:83:b1:27:ba:f8:97:6e:08:7c:52:d3:46:1c:96:32:28:3c:
04:80:9b:fb:d1:5f:2b:2e:27:f5:62:b6:cb:39:01:37:12:06:
bf:ac:61:f6:0f:fd:2d:60:f4:9c:3f:40:e5:60:35:23:12:1c:
bb:3f:d4:02:9d:92:e2:41:1c:76:af:e7:ce:7b:eb:0d:97:de:
5f:b8:cd:e2:68:bb:da:2d:ac:d1:ca:a7:be:13:8b:9b:4e:ab:
8c:97:97:f4:1f:ba:d0:f2:83:aa:bf:da:0e:eb:d7:68:00:5d:
49:30:3e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:58:34 2026 by rpki-client