Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
File: HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft (raw, json)
Hash identifier: 9wCXrPZHQOZcNUDiG8YLMLnszadg6X2Jo5IltMpUaJI=
Subject key identifier: 67:92:F2:FD:26:1D:4B:D7:E0:AA:CE:58:16:E9:37:6F:46:1C:77:15
Authority key identifier: 1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3
Certificate issuer: /CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
Certificate serial: 01A17DA9F0516CB4A3710BF067C1ED415BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
Manifest number: 1A58
Signing time: Tue 27 Oct 2026 14:00:51 +0000
Manifest this update: Tue 27 Oct 2026 14:00:51 +0000
Manifest next update: Wed 28 Oct 2026 14:00:51 +0000
Files and hashes: 1: HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl (hash: 2vcYne79XAKSXOmJkb39AadKjOVzzIV7Ee7CTBXiDeA=)
2: yPocXyo0wM15CfpCV2ozbAzCSDw.roa (hash: e4EEGO1LSdmX1fvabs60VDppXi6LDj4Q+m/T6fkVFi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:a9:f0:51:6c:b4:a3:71:0b:f0:67:c1:ed:41:5b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
Validity
Not Before: Oct 27 14:00:51 2026 GMT
Not After : Oct 28 14:00:51 2026 GMT
Subject: CN=6792f2fd261d4bd7e0aace5816e9376f461c7715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4b:70:63:fd:7c:d1:74:6b:5e:ca:07:d2:60:
82:76:8c:e5:b5:ea:50:0b:52:a9:61:5d:b3:7c:a8:
9e:3f:ce:c0:81:17:2d:75:09:39:d9:4b:eb:23:5b:
07:74:64:db:32:18:7d:b6:ae:c4:0c:7f:de:22:c6:
7d:3a:28:a1:60:5f:9c:50:e1:bd:2d:3c:23:2f:23:
56:4c:0a:f5:0c:eb:4e:28:74:a5:00:2d:1c:e0:4d:
1b:c0:48:2a:6c:77:9f:4b:e3:94:ac:af:ef:58:68:
91:90:e5:29:fb:8c:14:32:44:bb:87:74:ca:08:e5:
6d:04:79:6d:cd:13:29:f4:9b:0a:a5:fb:52:2d:85:
fd:24:5a:e5:71:15:42:f9:45:cc:53:23:1a:fb:33:
d5:55:48:ac:24:dc:1c:95:df:01:c4:d3:12:2a:41:
04:c5:3b:a1:b4:68:d4:91:d7:10:87:31:8b:f0:e3:
dd:18:e9:f2:24:db:d9:7f:f5:eb:8a:a9:07:e6:9a:
ed:ff:52:ee:4a:49:34:fc:dc:c0:ad:20:4a:35:5e:
0f:06:37:6c:2a:7b:56:71:52:dd:b0:6b:3f:93:1a:
88:47:86:15:cb:81:95:af:0f:ad:38:e4:b4:cd:ae:
24:9e:e0:59:69:cb:58:25:0f:f0:bd:d0:fd:4f:ee:
63:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:92:F2:FD:26:1D:4B:D7:E0:AA:CE:58:16:E9:37:6F:46:1C:77:15
X509v3 Authority Key Identifier:
keyid:1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:90:d5:e2:aa:ff:30:b0:ab:1e:1f:45:e0:c1:c6:26:a9:00:
41:46:92:ba:91:f8:e5:7e:64:12:58:0c:34:63:d4:79:16:c1:
bb:46:50:4a:98:b5:77:09:dd:61:cb:50:91:6a:ac:ba:a2:ba:
c1:31:78:5a:bb:30:90:6e:a2:b5:79:f9:69:54:53:b3:88:84:
19:97:9d:52:99:f0:98:02:ad:e2:a0:c1:76:98:f3:e5:af:c3:
63:38:a5:d0:b8:6f:b0:38:2d:e5:4a:1b:1d:20:d0:6f:00:73:
32:24:19:ca:fb:76:3f:11:94:65:af:56:12:b3:6d:42:eb:83:
3f:1e:b4:79:f9:86:cc:9b:4d:29:88:b3:06:7c:21:80:e7:48:
d6:51:f3:24:41:5a:90:86:47:08:91:58:4a:01:28:48:8a:73:
45:1a:b3:d2:1d:31:60:70:09:44:0a:29:79:7d:37:43:9a:cb:
05:3b:22:27:98:b2:fd:1a:4e:9a:c5:ad:b2:51:29:e9:7e:a8:
eb:00:a1:41:94:99:d5:de:89:ae:83:b6:b7:43:de:bb:b9:52:
fc:eb:1e:b4:9c:ae:7c:3e:20:8e:a3:4a:66:76:c9:9e:38:84:
96:ec:55:14:4d:33:f1:69:e8:b5:5e:53:80:2f:c9:e7:9b:5f:
9e:a1:8d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:01:23 2026 by rpki-client