Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
File: HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft (raw, json)
Hash identifier: I+16CgAjiCJzjwmVwtX7AOgpBQxlZfIewPKMMTmAZNc=
Subject key identifier: E6:A7:06:79:61:40:45:2F:AF:6A:40:C7:37:C0:3F:FE:B6:BC:02:16
Authority key identifier: 1F:3B:F2:37:56:C6:E7:D6:4D:68:22:F5:97:B1:D5:80:49:BD:48:F1
Certificate issuer: /CN=1f3bf23756c6e7d64d6822f597b1d58049bd48f1
Certificate serial: 01A18E9DC000DD6589FCEAB919756E23D4FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
Manifest number: 0719
Signing time: Fri 30 Oct 2026 21:01:05 +0000
Manifest this update: Fri 30 Oct 2026 21:01:05 +0000
Manifest next update: Sat 31 Oct 2026 21:01:05 +0000
Files and hashes: 1: HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl (hash: +goDXgj+5ioEmFQG6Jg8020gQio13mEjnlTeCbll62o=)
2: WU3PqHe7IArJ57SO8_-72jZ4vgQ.roa (hash: kyYbbInYeN/I+hJfjzPW449FfnhjaOMYgCQZcySE4CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:9d:c0:00:dd:65:89:fc:ea:b9:19:75:6e:23:d4:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3bf23756c6e7d64d6822f597b1d58049bd48f1
Validity
Not Before: Oct 30 21:01:05 2026 GMT
Not After : Oct 31 21:01:05 2026 GMT
Subject: CN=e6a706796140452faf6a40c737c03ffeb6bc0216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:05:3e:05:45:de:5a:73:1f:f8:ce:70:04:54:
8b:f1:ad:6b:f1:24:ca:16:13:9f:58:3c:df:79:80:
c3:8c:69:50:06:a4:e2:3a:a1:07:54:1c:c6:16:f2:
dc:d9:ef:bd:78:d0:fa:c1:fa:c6:0a:2b:41:eb:99:
49:11:f2:62:5f:5d:65:4a:bc:6e:40:e6:dd:64:38:
b4:f7:2a:e2:5f:ee:f2:4d:62:c7:cd:27:90:a3:46:
64:5e:28:13:87:2c:60:4d:4f:1b:e1:fb:58:27:9a:
3a:d5:80:5e:97:24:93:dd:ea:31:a8:b7:61:77:7b:
51:f8:4c:8f:9d:82:f6:b5:c8:d9:a0:3d:29:70:4d:
4c:1a:bd:90:e8:73:ca:82:40:4f:e0:75:1f:84:c6:
b8:1e:98:46:cc:3f:af:6a:a6:0c:fe:18:ad:ca:66:
23:37:e9:52:04:70:c8:42:5c:66:d9:2f:bb:63:78:
18:63:77:84:0a:36:24:3f:71:65:32:38:7b:2b:9e:
3d:fd:86:5e:69:1f:82:d6:82:0a:af:d2:30:d7:31:
a6:29:1c:44:61:0d:ef:4b:fa:01:c7:73:49:77:c6:
6e:4a:68:ba:6d:f4:de:82:9e:3f:a8:4d:67:98:6c:
9c:bc:e2:92:36:91:62:ce:00:a0:66:b0:f6:e4:87:
f1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A7:06:79:61:40:45:2F:AF:6A:40:C7:37:C0:3F:FE:B6:BC:02:16
X509v3 Authority Key Identifier:
keyid:1F:3B:F2:37:56:C6:E7:D6:4D:68:22:F5:97:B1:D5:80:49:BD:48:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:0d:5f:a8:e5:dc:43:5b:21:e5:a6:79:ed:39:3c:96:ca:dd:
b7:d4:b5:d7:51:0a:8e:ea:f9:30:1e:fa:be:b5:e2:a7:b3:9e:
54:63:6f:b0:6d:65:fd:22:c3:f9:45:75:43:95:87:d4:84:62:
68:20:c6:af:3f:5c:e5:c0:84:ca:1a:55:31:c7:3d:7c:4f:29:
7e:28:a0:c6:8d:a2:5b:6d:86:50:50:29:29:6b:43:cf:1d:8a:
ff:9c:df:53:92:74:0d:60:7b:aa:cc:ba:92:71:3a:04:8d:57:
18:99:43:62:8a:eb:b6:16:61:8d:7f:36:5b:b8:d6:d1:4f:46:
f6:f1:26:9a:6b:c5:61:d6:18:56:f5:1c:08:88:7f:b7:61:59:
b3:48:51:0a:f7:a6:13:67:17:39:74:cc:9a:44:55:68:00:f8:
47:d0:92:31:16:bd:d8:d5:34:10:2e:23:8d:3d:62:f8:10:00:
2e:90:65:8a:3e:71:48:28:11:c4:a8:97:b7:95:40:c0:08:1f:
1f:a7:4c:63:69:0e:88:dd:87:ab:5d:46:76:da:03:8d:1d:82:
20:4a:8c:6a:e9:48:cf:a3:e2:c8:7d:79:dc:c7:c3:2a:35:58:
0e:d1:f5:bc:cb:ed:35:bb:f0:fc:f1:dd:02:62:65:a7:e9:15:
1f:de:2b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:17:58 2026 by rpki-client