Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
File: HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft (raw, json)
Hash identifier: VI/1jpcHdpDZeH0bDuNRd/IqwsGI8ig87G79FTx8ny4=
Subject key identifier: 3F:49:23:EC:F9:18:CA:0E:F4:34:97:43:0F:80:19:0D:57:5F:7F:11
Authority key identifier: 1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3
Certificate issuer: /CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
Certificate serial: 019FA2CDE6A565C0C228ACA7CA504EA3B7D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
Manifest number: 1962
Signing time: Mon 27 Jul 2026 09:00:30 +0000
Manifest this update: Mon 27 Jul 2026 09:00:30 +0000
Manifest next update: Tue 28 Jul 2026 09:00:30 +0000
Files and hashes: 1: HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl (hash: SHd6xWPg9d38bTDpLjuE4eF5ugc7yUp7mRJbXUixSMg=)
2: LtF7nKZF5Eu_SugtCNfVkUGiFHM.roa (hash: DT5yTfPTZI2KTOuvzB4Bd0By5xLBRBjLmkPSrqIV9B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cd:e6:a5:65:c0:c2:28:ac:a7:ca:50:4e:a3:b7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
Validity
Not Before: Jul 27 09:00:30 2026 GMT
Not After : Jul 28 09:00:30 2026 GMT
Subject: CN=3f4923ecf918ca0ef43497430f80190d575f7f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:15:41:4e:9e:b0:ca:1d:cf:8f:07:79:95:fd:
fd:d7:5a:e0:53:14:08:a5:11:e0:c4:10:26:aa:5d:
b3:8f:0b:72:95:5b:26:6d:cf:7e:da:1c:e3:6f:c7:
f0:af:2e:6d:6d:7b:5f:13:50:43:8c:99:74:a3:da:
3f:56:7e:30:86:d8:a8:b1:c8:77:ff:30:98:55:47:
21:6f:4d:3c:ed:e8:16:f8:e7:ff:ce:fa:c7:65:d3:
4b:c6:fd:4d:03:01:ff:66:b6:35:73:a5:c4:2b:40:
c8:29:65:95:ee:73:0f:32:9b:1e:61:4d:e4:fe:4f:
5a:92:cd:7b:7a:c1:22:83:b2:67:c0:ee:61:ac:30:
52:66:9a:e2:1d:44:7f:df:30:7e:10:aa:87:43:31:
7c:6b:e4:8d:9b:d4:77:75:10:bf:ba:aa:90:8e:87:
3f:fa:9d:93:9c:dc:91:dd:ed:94:ad:cf:00:59:ea:
a7:6d:b2:82:be:04:70:26:89:3b:cb:c0:a0:4f:95:
43:5c:23:d8:c1:1e:51:c8:d5:f6:50:d7:c5:63:b1:
6a:f7:1f:ee:a8:08:b3:57:aa:7a:8d:5a:08:88:57:
81:51:46:e1:ee:b5:b2:e7:ee:dd:48:d5:fd:c2:62:
21:5a:2f:d1:c2:48:f1:60:ae:ad:99:5a:38:68:63:
5e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:49:23:EC:F9:18:CA:0E:F4:34:97:43:0F:80:19:0D:57:5F:7F:11
X509v3 Authority Key Identifier:
keyid:1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:bd:66:e4:55:cf:41:d6:6b:49:3a:e1:a1:03:27:2d:1e:96:
18:66:61:30:8d:09:cf:ac:14:76:4e:24:c5:6c:ae:04:85:d6:
6f:90:7c:f0:08:3e:a7:39:b5:18:81:91:ff:98:86:d1:e5:08:
81:1b:8c:78:e9:72:c8:bc:ff:70:55:40:7a:6a:53:98:bb:90:
48:a8:9b:cb:ca:82:a1:b3:9e:ba:02:76:11:74:c2:f6:8d:52:
47:7f:3c:be:42:c6:3d:3a:b0:9b:b5:67:f2:ad:21:fb:67:cf:
b9:e9:81:13:4f:22:39:22:e3:c6:60:0d:46:7b:bc:6f:15:06:
af:06:4f:ee:eb:c1:bd:2d:3a:3d:75:97:4f:53:bd:9f:0b:83:
11:f3:ea:d3:a5:39:a9:90:09:12:5d:ab:10:19:0f:cb:40:56:
0f:58:9b:cc:3a:25:99:f4:7d:b9:1a:8c:06:9c:84:4f:67:e5:
2e:8d:8f:1d:f9:4c:51:45:7c:5e:d7:23:df:2a:2b:9d:ed:93:
70:6c:ee:8e:8a:69:3b:0a:4d:e3:7c:95:5a:cc:15:07:51:7a:
42:d7:51:95:c8:a2:5d:93:3b:3c:4e:e0:95:10:4a:a4:e6:33:
47:c1:7d:db:32:b2:45:d3:f0:0b:07:5d:08:23:5a:14:c6:2d:
13:b5:eb:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+izealZcDCKKynylBOo7fQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkOTAzNDRkY2FmZmJkMzNlNjhkODQ4OTVkODdkOGFiZjUz
Yzc0YTMwHhcNMjYwNzI3MDkwMDMwWhcNMjYwNzI4MDkwMDMwWjAzMTEwLwYDVQQD
EygzZjQ5MjNlY2Y5MThjYTBlZjQzNDk3NDMwZjgwMTkwZDU3NWY3ZjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRVBTp6wyh3Pjwd5lf3911rgUxQI
pRHgxBAmql2zjwtylVsmbc9+2hzjb8fwry5tbXtfE1BDjJl0o9o/Vn4whtiosch3
/zCYVUchb0087egW+Of/zvrHZdNLxv1NAwH/ZrY1c6XEK0DIKWWV7nMPMpseYU3k
/k9aks17esEig7JnwO5hrDBSZpriHUR/3zB+EKqHQzF8a+SNm9R3dRC/uqqQjoc/
+p2TnNyR3e2Urc8AWeqnbbKCvgRwJok7y8CgT5VDXCPYwR5RyNX2UNfFY7Fq9x/u
qAizV6p6jVoIiFeBUUbh7rWy5+7dSNX9wmIhWi/RwkjxYK6tmVo4aGNeBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9JI+z5GMoO9DSXQw+AGQ1XX38RMB8GA1UdIwQY
MBaAFB2QNE3K/70z5o2EiV2H2Kv1PHSjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFpBMFRjcl92VFBtallTSlhZZllxX1U4ZEtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi85YzNkMjgtMDVkNi00N2IwLTkxZWYt
ZTUwNjRkYjIxYjIwLzEvSFpBMFRjcl92VFBtallTSlhZZllxX1U4ZEtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi85YzNkMjgtMDVkNi00N2IwLTkxZWYtZTUwNjRkYjIxYjIw
LzEvSFpBMFRjcl92VFBtallTSlhZZllxX1U4ZEtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVb1m5FXP
QdZrSTrhoQMnLR6WGGZhMI0Jz6wUdk4kxWyuBIXWb5B88Ag+pzm1GIGR/5iG0eUI
gRuMeOlyyLz/cFVAempTmLuQSKiby8qCobOeugJ2EXTC9o1SR388vkLGPTqwm7Vn
8q0h+2fPuemBE08iOSLjxmANRnu8bxUGrwZP7uvBvS06PXWXT1O9nwuDEfPq06U5
qZAJEl2rEBkPy0BWD1ibzDolmfR9uRqMBpyET2flLo2PHflMUUV8Xtcj3yorne2T
cGzujoppOwpN43yVWswVB1F6QtdRlciiXZM7PE7glRBKpOYzR8F92zKyRdPwCwdd
CCNaFMYtE7XrDg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 18:35:27 2026 by rpki-client