Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
File: HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft (raw, json)
Hash identifier: HcN/yetAvjxKZqg7l08rQFm/0EYOnLs3TFITVLj5Ryk=
Subject key identifier: F3:51:F8:B1:62:8F:5A:37:D8:8B:03:B9:48:41:32:F1:D4:A3:F3:00
Authority key identifier: 1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3
Certificate issuer: /CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
Certificate serial: 019FA4BC3A0483D961BDBC8982C6D1E1BCFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
Manifest number: 1963
Signing time: Mon 27 Jul 2026 18:00:26 +0000
Manifest this update: Mon 27 Jul 2026 18:00:26 +0000
Manifest next update: Tue 28 Jul 2026 18:00:26 +0000
Files and hashes: 1: HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl (hash: VhHjW+UzhqoJ2v98716JPex1SoJ/BVfBkSnS6lK1EzM=)
2: LtF7nKZF5Eu_SugtCNfVkUGiFHM.roa (hash: DT5yTfPTZI2KTOuvzB4Bd0By5xLBRBjLmkPSrqIV9B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:bc:3a:04:83:d9:61:bd:bc:89:82:c6:d1:e1:bc:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d90344dcaffbd33e68d84895d87d8abf53c74a3
Validity
Not Before: Jul 27 18:00:26 2026 GMT
Not After : Jul 28 18:00:26 2026 GMT
Subject: CN=f351f8b1628f5a37d88b03b9484132f1d4a3f300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e6:e0:ea:c4:9e:93:7d:c9:49:1c:60:92:6e:
68:9a:9b:9a:a9:43:ec:0a:7a:f4:f5:06:a8:f1:d8:
94:75:a1:d5:14:c3:7b:d0:e3:71:29:1b:5f:de:ea:
5a:d8:a8:f8:96:76:2f:89:c4:50:51:1a:ad:f7:4d:
cc:c1:93:19:d4:38:2f:1e:04:47:71:a8:2e:e2:f1:
d0:51:38:4b:25:a7:b0:a1:6e:0a:b1:a3:ee:18:d5:
df:ba:71:59:be:98:f2:07:03:da:e4:c4:d9:86:0a:
0f:a3:f4:f6:65:96:02:c2:c6:5a:81:2a:85:71:ff:
6d:1b:dc:94:81:d0:ee:c4:7f:54:61:63:45:f3:71:
7b:80:84:48:f8:cb:78:84:6d:af:40:9a:d3:a3:73:
db:1b:05:8c:7d:8c:b7:42:fd:ca:0d:c1:fa:87:ae:
9b:e6:bb:43:64:a7:fe:76:0d:06:35:20:63:7c:e6:
f8:58:20:4b:a3:13:35:24:43:74:12:ec:5f:b6:1a:
6a:d1:e7:b9:d4:34:ea:ed:b6:58:b2:a5:5d:ca:93:
13:e9:97:7c:b6:6f:98:b2:8c:7d:a8:da:5d:be:3a:
26:4a:71:a3:f2:75:9f:f0:b7:a4:36:3e:da:a3:b0:
06:71:15:8f:70:0c:82:aa:d4:a9:2e:c0:da:ad:bb:
68:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:51:F8:B1:62:8F:5A:37:D8:8B:03:B9:48:41:32:F1:D4:A3:F3:00
X509v3 Authority Key Identifier:
keyid:1D:90:34:4D:CA:FF:BD:33:E6:8D:84:89:5D:87:D8:AB:F5:3C:74:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9c3d28-05d6-47b0-91ef-e5064db21b20/1/HZA0Tcr_vTPmjYSJXYfYq_U8dKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:52:dc:33:d7:f8:8a:49:86:14:8c:12:5d:e1:06:eb:7b:5a:
77:25:8b:96:61:bc:d2:82:e0:8a:52:85:4e:a0:8c:d3:7c:e0:
89:dc:70:f5:a2:22:b5:e6:be:83:e5:41:83:95:cd:ce:99:e7:
36:fd:43:dd:93:27:c6:26:af:44:6a:83:2c:e7:3b:f1:f1:7e:
cd:f8:29:1f:5a:db:60:05:1f:80:59:54:19:55:06:30:74:08:
82:c0:2a:c5:91:b3:58:79:3a:28:d6:df:43:fc:53:78:a9:ee:
0d:43:fb:60:34:20:d6:65:d0:99:9b:fb:06:40:18:b3:1b:7b:
4e:b1:b0:1f:43:f1:16:50:65:50:c6:42:0f:6a:b6:ff:27:1b:
6d:5d:a6:2e:b6:7f:a3:df:84:7b:b3:fb:bf:b9:90:ad:e3:77:
22:c7:38:ab:36:82:4e:37:16:e1:7e:63:4d:e0:bf:de:5f:0b:
8f:33:d4:f6:b2:45:46:07:a3:ce:42:2b:5b:2b:03:52:b8:98:
6d:bb:b9:44:11:02:f0:83:14:e6:e4:b5:67:ea:bd:83:3a:e1:
65:ab:13:5b:ff:41:04:91:d8:6b:d5:a0:52:2c:d4:03:13:6e:
52:1d:22:fb:7a:3e:cb:b0:5c:e1:7f:6e:60:68:66:54:5b:3a:
08:18:b2:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+kvDoEg9lhvbyJgsbR4bz7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkOTAzNDRkY2FmZmJkMzNlNjhkODQ4OTVkODdkOGFiZjUz
Yzc0YTMwHhcNMjYwNzI3MTgwMDI2WhcNMjYwNzI4MTgwMDI2WjAzMTEwLwYDVQQD
EyhmMzUxZjhiMTYyOGY1YTM3ZDg4YjAzYjk0ODQxMzJmMWQ0YTNmMzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsebg6sSek33JSRxgkm5ompuaqUPs
Cnr09Qao8diUdaHVFMN70ONxKRtf3upa2Kj4lnYvicRQURqt903MwZMZ1DgvHgRH
cagu4vHQUThLJaewoW4KsaPuGNXfunFZvpjyBwPa5MTZhgoPo/T2ZZYCwsZagSqF
cf9tG9yUgdDuxH9UYWNF83F7gIRI+Mt4hG2vQJrTo3PbGwWMfYy3Qv3KDcH6h66b
5rtDZKf+dg0GNSBjfOb4WCBLoxM1JEN0Euxfthpq0ee51DTq7bZYsqVdypMT6Zd8
tm+Ysox9qNpdvjomSnGj8nWf8LekNj7ao7AGcRWPcAyCqtSpLsDarbto+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNR+LFij1o32IsDuUhBMvHUo/MAMB8GA1UdIwQY
MBaAFB2QNE3K/70z5o2EiV2H2Kv1PHSjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFpBMFRjcl92VFBtallTSlhZZllxX1U4ZEtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi85YzNkMjgtMDVkNi00N2IwLTkxZWYt
ZTUwNjRkYjIxYjIwLzEvSFpBMFRjcl92VFBtallTSlhZZllxX1U4ZEtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi85YzNkMjgtMDVkNi00N2IwLTkxZWYtZTUwNjRkYjIxYjIw
LzEvSFpBMFRjcl92VFBtallTSlhZZllxX1U4ZEtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFLcM9f4
ikmGFIwSXeEG63tadyWLlmG80oLgilKFTqCM03zgidxw9aIitea+g+VBg5XNzpnn
Nv1D3ZMnxiavRGqDLOc78fF+zfgpH1rbYAUfgFlUGVUGMHQIgsAqxZGzWHk6KNbf
Q/xTeKnuDUP7YDQg1mXQmZv7BkAYsxt7TrGwH0PxFlBlUMZCD2q2/ycbbV2mLrZ/
o9+Ee7P7v7mQreN3Isc4qzaCTjcW4X5jTeC/3l8LjzPU9rJFRgejzkIrWysDUriY
bbu5RBEC8IMU5uS1Z+q9gzrhZasTW/9BBJHYa9WgUizUAxNuUh0i+3o+y7Bc4X9u
YGhmVFs6CBiyJQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 19:34:05 2026 by rpki-client