Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
File: HzETn4noJZYqfjOAredbVqtbqtU.mft (raw, json)
Hash identifier: PbmEei434cXnvwaqoPylvBcYvON7KasCiQDYjb8lPjA=
Subject key identifier: 75:5F:EB:CF:1B:78:F8:64:ED:74:BC:4A:7A:34:94:AD:20:69:60:D6
Authority key identifier: 1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
Certificate issuer: /CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Certificate serial: 019D28F21A217A84DA6493C4E5FBCA8BFDF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
Manifest number: 1316
Signing time: Thu 26 Mar 2026 07:00:48 +0000
Manifest this update: Thu 26 Mar 2026 07:00:48 +0000
Manifest next update: Fri 27 Mar 2026 07:00:48 +0000
Files and hashes: 1: HzETn4noJZYqfjOAredbVqtbqtU.crl (hash: ElUmEnMi0MAZPN3NmpST6XvgMFkqU4KwF23iXn4fzYc=)
2: Yokz86urLdvI75d8RVRfvOdH7pU.roa (hash: CcLGUunGhInKbjgc7PSmW61GmKmHbMY9TVD9O45TVtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:1a:21:7a:84:da:64:93:c4:e5:fb:ca:8b:fd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f31139f89e825962a7e3380ade75b56ab5baad5
Validity
Not Before: Mar 26 07:00:48 2026 GMT
Not After : Mar 27 07:00:48 2026 GMT
Subject: CN=755febcf1b78f864ed74bc4a7a3494ad206960d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d2:6a:13:be:44:31:b0:70:de:96:f7:45:4d:
43:77:4a:8e:4e:45:08:ef:34:9c:7d:78:76:eb:e1:
d2:a3:c8:9b:05:94:62:ea:32:12:a1:57:9c:8c:da:
3b:56:b5:53:db:e8:cc:26:41:d6:2a:ea:13:c5:16:
fc:1e:79:40:cb:d9:63:46:20:67:8c:a6:f8:ed:37:
46:6b:6a:b8:3a:e1:98:05:25:f2:1c:e7:ae:a1:4a:
29:3b:b8:80:c3:c1:aa:37:55:cb:d9:16:31:62:4c:
43:d3:48:14:c0:58:44:6a:ea:3a:5c:be:e1:37:ca:
21:96:5d:d0:03:cb:92:3b:ce:47:91:d3:8c:4f:c2:
6b:c3:fb:27:80:fa:b5:b2:59:19:ff:d8:b8:36:3e:
48:e6:d1:38:3f:d9:89:2e:e3:c1:42:72:6a:1f:f9:
3f:26:c1:e4:7d:45:03:e5:90:a8:9a:44:44:c5:12:
8b:0e:33:59:3c:4e:d5:f4:87:f5:f4:25:7c:78:20:
d0:1b:d3:4d:1b:28:31:22:56:9a:62:38:ac:11:81:
ef:47:47:19:f1:44:89:33:8e:b6:38:ed:c8:8d:70:
37:7e:89:2b:7d:40:64:43:14:86:e1:67:dd:6c:ed:
81:14:6f:95:e1:9e:61:2e:04:da:e6:3f:f3:0a:2d:
61:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5F:EB:CF:1B:78:F8:64:ED:74:BC:4A:7A:34:94:AD:20:69:60:D6
X509v3 Authority Key Identifier:
keyid:1F:31:13:9F:89:E8:25:96:2A:7E:33:80:AD:E7:5B:56:AB:5B:AA:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzETn4noJZYqfjOAredbVqtbqtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7637a6-5237-4b16-93cf-be17b8aad554/1/HzETn4noJZYqfjOAredbVqtbqtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:19:92:d2:a3:2d:92:b4:e2:ed:c6:99:43:23:86:56:16:03:
57:67:f8:37:aa:c0:e1:51:4a:16:c4:31:fb:29:3c:b7:2a:1f:
3f:d9:42:81:e4:54:ad:03:74:90:1a:05:3e:f2:5c:5e:a7:14:
bc:62:c3:e7:68:24:b5:16:ab:9b:b2:41:b1:13:4d:3f:2b:47:
af:52:c9:b4:b3:6d:8b:eb:ee:1a:4a:a1:f2:48:97:03:24:b5:
a9:28:68:4a:50:ee:27:67:87:84:cf:1e:27:7c:e5:25:2a:05:
3e:b6:83:95:39:0d:39:e6:48:87:18:b6:18:74:5e:f4:a5:3f:
74:e5:ee:e3:e9:96:e0:7d:5c:ae:43:12:96:40:ee:f1:bd:6b:
07:94:a8:f6:42:45:3d:e0:dc:ef:b5:dd:0b:12:1f:19:6e:86:
20:3f:e5:98:d0:00:a7:06:00:5c:c9:b4:bd:74:2f:6a:a4:64:
d4:e4:f6:91:2a:6a:78:b0:25:02:e6:3d:5b:9f:f4:05:63:d3:
a4:10:92:f2:6a:a1:47:a7:eb:36:98:d0:f0:f5:a1:1e:20:87:
65:ca:ff:bf:67:7d:d6:1c:e6:85:35:3b:34:14:85:37:da:03:
cf:9f:e4:f9:e2:38:13:26:f2:4c:4d:6c:3c:19:c8:fe:77:06:
fd:1d:bd:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8hoheoTaZJPE5fvKi/3xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMzExMzlmODllODI1OTYyYTdlMzM4MGFkZTc1YjU2YWI1
YmFhZDUwHhcNMjYwMzI2MDcwMDQ4WhcNMjYwMzI3MDcwMDQ4WjAzMTEwLwYDVQQD
Eyg3NTVmZWJjZjFiNzhmODY0ZWQ3NGJjNGE3YTM0OTRhZDIwNjk2MGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutJqE75EMbBw3pb3RU1Dd0qOTkUI
7zScfXh26+HSo8ibBZRi6jISoVecjNo7VrVT2+jMJkHWKuoTxRb8HnlAy9ljRiBn
jKb47TdGa2q4OuGYBSXyHOeuoUopO7iAw8GqN1XL2RYxYkxD00gUwFhEauo6XL7h
N8ohll3QA8uSO85HkdOMT8Jrw/sngPq1slkZ/9i4Nj5I5tE4P9mJLuPBQnJqH/k/
JsHkfUUD5ZComkRExRKLDjNZPE7V9If19CV8eCDQG9NNGygxIlaaYjisEYHvR0cZ
8USJM462OO3IjXA3fokrfUBkQxSG4WfdbO2BFG+V4Z5hLgTa5j/zCi1haQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVf688bePhk7XS8Sno0lK0gaWDWMB8GA1UdIwQY
MBaAFB8xE5+J6CWWKn4zgK3nW1arW6rVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHpFVG40bm9KWllxZmpPQXJlZGJWcXRicXRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83NjM3YTYtNTIzNy00YjE2LTkzY2Yt
YmUxN2I4YWFkNTU0LzEvSHpFVG40bm9KWllxZmpPQXJlZGJWcXRicXRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS83NjM3YTYtNTIzNy00YjE2LTkzY2YtYmUxN2I4YWFkNTU0
LzEvSHpFVG40bm9KWllxZmpPQXJlZGJWcXRicXRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgxmS0qMt
krTi7caZQyOGVhYDV2f4N6rA4VFKFsQx+yk8tyofP9lCgeRUrQN0kBoFPvJcXqcU
vGLD52gktRarm7JBsRNNPytHr1LJtLNti+vuGkqh8kiXAyS1qShoSlDuJ2eHhM8e
J3zlJSoFPraDlTkNOeZIhxi2GHRe9KU/dOXu4+mW4H1crkMSlkDu8b1rB5So9kJF
PeDc77XdCxIfGW6GID/lmNAApwYAXMm0vXQvaqRk1OT2kSpqeLAlAuY9W5/0BWPT
pBCS8mqhR6frNpjQ8PWhHiCHZcr/v2d91hzmhTU7NBSFN9oDz5/k+eI4EybyTE1s
PBnI/ncG/R29Qg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:55:40 2026 by rpki-client